Without Facebook, how would we ever know that our high-school acquaintance's neighbor's ex-husband has commented on something?
544 posts • joined 23 Sep 2009
Re: "Like I say, there’s no user guide to tell you what all the icons means."
When was the last time you bought any tech product that came with more than a "getting started" card? Sucks, but that's been the industry norm for over a decade now.
“If we move to a state of pervasive surveillance we lose that mobility.”
If?!? Dude, that train left the station years ago...
Re: Of course they don't use it
Plus, giving Google (or any tech company) your mobile number provides them with yet another way to cross-correlate you with other online and offline data that they have gathered.
IMO the only useful 2FA method that addresses the lost-device problem is to use an app like Authy, that allows you to back up your code generator settings and access them on another device. Of course, that means the backup mechanism itself becomes an attack target...
Dang. Security is hard...
Re: That's not an erection...THIS is an erection...
Erection? That sir is clearly a paintbrush!
If the phone in the image is an iPhone 7, it might be his dongle.
Re: Android privacy? Is that new?
Where do you get this idea that Google are doing something different to what apple, FS ebook, Microsoft, Yahoo and pretty much everyone else is doing?
Um, that's all you, my anonymous friend. My post didn't say that at all...
Android privacy? Is that new?
...leading some to fear their copy-paste actions were being snooped on and question the privacy protections on their OnePlus handsets.
Meanwhile, the phone is sending Google their GPS coordinates (or cell tower triangulations if location is off), all of their passwords, the contents of their email, all of their contacts, etc etc etc.
Bros before LEOs
"When it comes to government investigations, it's our policy to cooperate with all valid searches and requests for data."
And of course, by "cooperate with" they mean "actively subvert."
Rule of thumb
When any part of the US government gives something a name or acronym that purports to guarantee, provide, or restore freedom / liberty / democracy / etc., you can be sure that it is in fact designed to do the opposite.
c.f. USA Patriot Act (Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism); USA Freedom Act (which codifies indefinite detention, secret searches based on secret "warrants" that are rubber-stamped by a secret kangaroo court, secret and gag-ordered warrantless electronic searches via National Security Letter, etc.).
Now add the "restoring internet freedom order" to that list; except in this case, it's expanding the censorship and taxation powers of private companies instead of the government.
What about "optional" do you people not understand?
You are NOT REQUIRED to use Face ID (or Touch ID) at all. It has an off switch. You don't even have to train it.
If it doesn't work for some reason, you can still unlock the device with a PIN or password -- which you have to set up before you can even enable and train the biometric.
On restart, the biometric login is disabled until the password or PIN has been entered.
Apple stores all of the credentials -- bio and otherwise -- in an encrypted secure enclave, and said data never leaves the device.
This stuff is all well documented. Read more, harrumph less.
Re: Worse than no headphone jack?
I still don't know how those phones sell.
The same way that Pixel 2s (also with no headphone jack) sell: briskly, as it turns out.
Re: Smart Lock rulez
The courts have ruled very consistently that police can compel you to unlock a phone or computer if it's locked using biometrics. [...] This is just Apple's way of putting in a backdoor for Law Enforcement without having to call it one.
How is this argument specific to Apple? Samsung, Google, Moto, and many other devices also have fingerprint scanners, and/or more easily fooled facial recognition.
No one is forcing you to use biometrics, or any other convenience login. Delete the training and turn off the feature. Problem solved.
"all self-inflicted therefore warranty on our beautiful $15m system was void"
...but look at all the money we saved!
Yet another bowl of toxic hellstew.
Re: As time goes on
I'm starting to hate Google more and more...They're getting more like the government every day.
Don't waste all your hate on Google. Microsoft, Amazon, Facebook, credit card processors, cable companies, credit bureaus, and many more are all in the tracking business, and most are more opaque and aggressive than Google.
Re government -- private companies' surveillance systems are far less constrained than those of most any democratic government, because we click away our rights. It's probably just a matter of time before .govs adopt the same model. Before you can get a driver's license, passport, police or fire response, board a plane, pay your taxes, etc. you'll have to agree to a Google-style 30-page TOS that waives all of those pesky "rights" and "freedoms" that prevent Big Bro from keeping us
under control safe from terrorists.
mis-identifying celebrities and missing prominent logos
They've turned it into my grandmother?!?!?
I was wondering what the IT angle was on this story. Then I realized that duh, it's right there in the masthead:
Biting the hand that feeds IT
Re: How do I check if my password's been compromised
What someone needs to do now is to set up an search tool so people can submit their password & account info to check whether it's been compromised
Send them to me. I'll check for you...
Re: Such an enigma...
Internet banking when I can buy a 64 gigaqubit quantum computer and there's a way to encrypt the communications, storage and credentials that's been mathematically proved uncrackable
FTFY. Unless your bank is already using some kind of mythic "uncrackable" security, your account can still be pwned by many other methods: attacks on the bank's systems, ATM skimmers, spear-phishing bank execs and sysadmins, social engineering the call center, finding one of your checks in a dumpster after it was scanned by whoever you sent it to, etc.
Internet banking is an attack vector, but it's far from the only one.
So much easier if they do it themselves
...urging volunteers to come forward to toss themselves on the redundancy heap...
Reminds me of a Star Trek: TOS episode. "The computer says that
management Vendikar has scored a direct hit on your business unit city. Please report to a disintegration booth within 24 hours."
This sounds like Google's "everything is untrusted" network security model, scaled and adapted to the OS component level.
It makes sense to explore this approach at the network level, since perimeter defense and assumed-trust for anything inside the firewall are routinely exploited to devastating effect.
At the machine level, though, the benefits are less clear to me since so many of the best exploits operate in the wetware layer...
Re: US Consumer Protection
The cognitive dissonance required to remain in denial of this obvious fact and maintain the delusion that the system is democratic is frankly astonishing.
That's where the divisive, scorched-earth tribal politics come in. It's the classic magician's trick: "Pay close attention to the cards in my right hand," while the real action is taking place elsewhere.
In the US, the cards in the right hand are red-meat issues that pander to the biases and prejudices of the party bases: gay marriage, abortion, the myriad evils of "the other," libtards versus Trumpkins, etc. ad nauseam.
Meanwhile, the left hands of both parties are doing the real magic of pocketing the
bribes campaign contributions that ensure that the interests of the super-rich are fully represented at the expense of everyone else.
It's kind of like bread and circuses, except the wealthy get all the bread and the rest only get the circus.
Re: US Consumer Protection
The problem with US consumer protection laws is they
tend to slow the upward flow of wealth which in turn offends the wealthy who happen to play a large role in whether a politician can afford to run for public office piss off the people who make money by screwing over consumers, so they bribe politicians with so-called "campaign contributions" to get the irritant removed.
[Edited for clarity]
The queen is dead
Long live King Neri.
Or something like that.
What do you make of it, Johnny?
It could be a bug! It could be a feature! Or a hat! Or a pteradactyl!
Re: What's in it for me?
It's nice to be able to up the heat on a cold morning before you get out of bed.
A $50 programmable thermostat can do that quite nicely. As an added benefit, it will not track you like a dairy cow with an ear tag, or participate in DDOS attacks.
If the typical consumer can't get a new IoToy to work out of the box in 60 seconds -- without reading, or even looking at pictograms -- then they will return it. Returns cost money. Hence, the market consists of shedloads of web-enabled crapware with no encryption and a hard coded admin password of 1234, that's easy for the average bear to set up.
It's hard to fix that problem with government.
True in general
After about 10 minutes of this I managed to get it working, but it doesn't need to be that hard.
That is to say, vehicle charging station interfaces have received the same attention to detail as most other tech products.
Re: since their entire business model is based on continuous end-to-end user surveillance
You don't have to track people to advertise to them.
Of course not, but it has become a fetish.
Recall the old joke, "half of my advertising spend is wasted, but I don't know which half." In the early days of the web, banner ads were cheaper than dirt because no one knew if they drove actual purchase behavior. Now, Big Data holds out the promise of actually tracking an advert from impression to purchase, but only if the ad slingers can gather and correlate enough surveillance data. Anything that gets in their way will be crushed.
without having to repeatedly solve internet challenge-response tests like CAPTCHAs
...then how will Google train its self-driving cars to recognize cars, road signs, and storefronts?
Idealism, meet business model
For example, we envisage that it could be used as an alternative method for signing into services without having to use authenticators that do not preserve privacy, such as cookies.
This is a nifty technical solution to something that content providers -- who, obviously, would have to be the ones to implement it -- do not see as a problem. Quite the opposite, really. Content is funded largely by advertisers, who view things things like Privacy Pass as an existential threat since their entire business model is based on continuous end-to-end user surveillance.
In the idealistic pre-commercial view of the web as a tool of empowerment and knowledge, Privacy Pass a great step forward. In the web that we have, though, I suspect that it will meet the same ignominious fate as Do Not Track.
We do not share customer identifiable information to third party skills without the customer's consent.
I'm sure they "value customers' privacy," too.
Re: It's all about Purpose
The problem is that fingerprints and face-id are not only not the same as PIN, they are actually for different purposes [...] Long, random PIN/passcode, well implemented on an properly encrypted device that does not allow repeated rapid brute-forcing, is the only truly secure system if you really need secrecy.
Right. And face unlock, fingerprint unlock, etc. are optional features. If you don't enroll your face / fingerprints / whatever, then those systems are effectively disabled.
Re: You may be right
Or are they so sensitive that if you cut yourself shaving you can't pay for your morning coffee. Or if you are bashed up after a car accident you can't unlock the phone to call 911.
No, it doesn't mean that at all. You can always just enter your PIN or passcode. Face scanners, fingerprint readers, etc. are a convenience feature. They work in tandem with a "something you know" factor, they do not supplant or supersede it.
Christmas is coming, the goose is getting fat, look out for must-have toys that are 'easily hacked' ♪
♪ "It's the most hack - a - ble time of the year...." ♫
Big P, small p
They might be Presidential, in the sense that are emitted by the holder of the office of President; but they are not presidential.
if you can only get 1 day worth of life when you've first taken it out of the box, how much life will the watch have a year or two from now?
I recently replaced the original battery in my $25 ca. 2007 Timex Iron Man.
It has alarms, timers, and a more sophisticated stop watch than any phone app I've ever tried. It is waterproof. It keeps perfect time on its always-on display, with battery life measured in years.
It has survived significant (accidental) abuse from smacking into door frames and various other immovable objects, with only minor cosmetic damage and no noticeable loss of performance.
It does not require software updates or cell service. It has had zero compatibility or pairing issues with any phone I've had, from flips to Androids to iPhones, because it does not give a shit about phones; it is a watch. And IMHO, a pretty damn smart one...
Re: "When it's political, technology cannot do anything."
It's all about the pork.
Indeed. If open-source advocates want to compete for government contracts, they need to embed BribeCoin miners in all of the distros, then use the money to
bribe political hacks fund campaign contributions.
"The best minds of my generation are thinking about how to make people click ads," he says.
Oh, but they've grown since then. Now they also think about how to trick people into mining cryptocurrency, or how to hold people's data for ransom. The ultimate goal is to find a way to make people do all three at the same time, while also coughing up the password to their online banking account.
The best solution would be if abusive scumbags could stop being so awful.
This must be your first day using the internet.
The only reason Concorde wasn't certified to fly over the mainland United States is because it wasn't built by an American company
WTF? Many US airlines fly planes from Airbus, Embraer, Bombardier, etc.
Re: The next stage in AI:
No, the next stage is when one of them succeeds...
The first rule of robotic fight club is that robots do not talk about fight club.
Re: Um, car bomb? Yet, no "link to terrorism"? Yeah, sure.
I heard he was really offended by the VW emissions thing and that Passat had it coming.
I have felt that way about a Passat...
Supply and demand
The global economy is based on people buying stuff. If we are all replaced by machines, leaving us with no jobs and therefore no money, the economy will collapse, thus eliminating the economic case for machines that make things. Problem solved -- at least, for those who survive the global depression.
Re: Windows or Android?
I assume that most (non-Apple) tablets are Android but this doesn't seem to be called out in the figures.
Sammy and Lenovo make both make Android and W10 tablets, so it seems likely that their figures contain a mix of the two.
Re: Typical hipsters
It had to be something like "guacamole"
No indication in the article as to whether the guac is an extra charge. Journalism is dead...
Burning coal was good enough for the 19th century, so it should be good enough for us.
Rob Goldman, vice president of ads products at Facebook, recently felt obliged to deny via Twitter that Facebook does not eavesdrop on users through smartphone microphones
So, by denying that they do not eavesdrop, he confirmed that they do?
An editing glitch, no doubt; but it doesn't really matter. Since FB Messenger users blithely type in their intimate conversations, desires, thoughts, hopes and fears of their own free will, there's probably no need for the mother ship to listen in and transcribe through voice recognition.
Re: Apple Pay?
The large display in the smaller form factor is probably the driving factor for most people.
...the utility of which is seriously undermined by that stupid 'notch' in the top of the display, and by the onscreen machinations that are needed to compensate for the lack of a physical Home button.