Jump to content


So long Internet... it was nice knowing you


686 replies to this topic

#681 LFC

    Fiscal Conservative

  • Members
  • PipPipPip
  • 39475 posts
  • LocationPennsylvania

Posted 28 October 2020 - 01:14 PM

F***ing Apple. I've generally been happy with them but this is serious bullshit.

My brother group texted me and my wife. No problem. He did it from his personal phone.

My wife had his old, no longer used work iPhone in her contacts under "iPhone" and his personal number (still an iPhone) under "mobile." Still no problem.

When she liked one of his texts Apple decided not to send that to the number the text came from. Instead it decided that the old number under iPhone was the more appropriate place to send it. It send the entire text in quotes and added her like.

Seriously, Apple? WTF?
" 'Individual conscience' means that women only get contraceptives if their employers, their physicians, their pharmacists, their husbands and/or fathers, pastors, and possibly their mayors, Governors, State Secretaries of Health, Congressmen, Senators, and President all agree that in that particular case they're justifiable." --D.C. Sessions

"That's the problem with being implacable foes - no one has any incentive to treat you as anything more than an obstacle to be overcome."

"The 'Road to Serfdom' is really all right turns." --Progressive Whisperer

""The GOP ... where every accusation is also a confession." --Progressive Whisperer

#682 LFC

    Fiscal Conservative

  • Members
  • PipPipPip
  • 39475 posts
  • LocationPennsylvania

Posted 07 December 2020 - 02:59 PM

A professional hacker (as in legal) figured out how to take control of iPhones via WiFi with about $100 worth of hardware.

Quote

Lockdown during the pandemic has been a long slog, but some pretty cool inventions have been created as a result. Some YouTubers created a lightsaber that slices through steel and a 12-year-old physicist created nuclear fusion in his parents’ playroom – clearly, cross-stitching wasn’t enough for some people. But in a slightly darker twist, a member of the hacking team Project Zero, which is backed by Google, has created a homemade antenna that can be pointed at iPhones to immediately take full control of them.

By utilizing an exploit within the iPhone iOS software and around $100 of readily-available equipment, Google security researcher Ian Beer could connect to the device via Wi-Fi and take control of the phones remotely. This feat may come as no surprise to those well-versed in cybersecurity, as Beer is considered one of the best hackers in the world.

Requiring just close proximity to the target device, the exploit uses a single memory corruption vulnerability to remotely execute commands within the memory of the core components of the device. In the video below, Beer uses the exploit to remotely reboot a number of iOS devices almost immediately.

In a blog post explaining the exploit and how he uses it to gain entry into the devices, Beer explains that the takeaway from his work is quite a worrying one.

"[O]ne person, working alone in their bedroom, was able to build a capability which would allow them to seriously compromise iPhone users they'd come into close contact with," states Beer.

Now whilst some may be fearful for their data and their phone safety, there is some good news. This specific exploit was patched and no longer works if your iPhone is updated to the latest iOS 13.5, so make sure to keep up with the regular software updates to fully protect your smartphone, whichever brand, at all times. Beer also explains that he has never seen this exploit used prior to his discovery, so there should be little concern about a breach such as this affecting your data.

However, as pointed out by Ray Redacted on Twitter many smartphones are not regularly updated and could fall prey to exploits such as this. Phones confiscated from inmates entering confinement are an example, and Ray Redacted points out that the exploit could put a huge number of phones in custody at risk.

If you’re looking for exactly how the hacking device works, visit Beer's impressive write-up here. The exploit took 6 months of work to create and although the end result is simple, the process of getting there is quite an undertaking.

Beer has now called on Apple to verify the bug, which would net him the $500,000 reward offered by the company to find a “network attack requiring no user interaction”. Should this be verified by Apple, Beer said the money should be donated to charity.

" 'Individual conscience' means that women only get contraceptives if their employers, their physicians, their pharmacists, their husbands and/or fathers, pastors, and possibly their mayors, Governors, State Secretaries of Health, Congressmen, Senators, and President all agree that in that particular case they're justifiable." --D.C. Sessions

"That's the problem with being implacable foes - no one has any incentive to treat you as anything more than an obstacle to be overcome."

"The 'Road to Serfdom' is really all right turns." --Progressive Whisperer

""The GOP ... where every accusation is also a confession." --Progressive Whisperer

#683 golden_valley

    Advanced Member

  • Members
  • PipPipPip
  • 7923 posts
  • LocationNorthern California

Posted 07 December 2020 - 07:32 PM

Apple is up to iOS 14.2 now.

#684 LFC

    Fiscal Conservative

  • Members
  • PipPipPip
  • 39475 posts
  • LocationPennsylvania

Posted 22 December 2020 - 05:14 PM

Google and Facebook are teaming up to fight antitrust investigations and lawsuits.

Quote

More than three dozen state attorneys general last week filed an antitrust suit against Google, accusing the tech behemoth of a slew of anticompetitive behaviors. Among those behaviors, a new report finds, is an explicit agreement from Google to work with Facebook not only to divide the online advertising marketplace, but also to fend off antitrust investigations.

Facebook and Google agreed in a contract to "cooperate and assist each other in responding to any Antitrust Action" and "promptly and fully inform the Other Party of any Governmental Communication Related to the Agreement," according to an unredacted draft copy of the lawsuit obtained by The Wall Street Journal.

The final version of the suit made public last week (PDF) alleged that Google and Facebook signed a secret agreement in 2018 that "fixes prices and allocates markets between Google and Facebook as competing bidders in the auctions for publishers' Web display and in-app advertising inventory."

In short, the suit claims, Facebook in 2017 figured out a new ad-bidding tactic, called header bidding. Google found this to be an "existential threat" and signed a contract with Facebook: in exchange for Facebook not using header bidding, Google would provide Facebook with certain advantages over other auction participants, as well as a portion of the money generated by the ad auctions.

"Google publicly misrepresents that all bidders in publishers' auctions compete on an equal footing," the suit adds. "Given the scope and extensive nature between the two companies, Google and Facebook were highly aware that their agreement could trigger antitrust violations. The two companies discussed, negotiated, and memorialized how they would cooperate with one another," it continues, before becoming redacted to hide specifically how or on what the companies would cooperate.

According to the unredacted draft suit, the WSJ reports, sections included in the final version include an annual price tag on that deal—Facebook promised to spend at least $500 million per year on Google advertising—and a reference to Facebook chief operating officer Sheryl Sandberg signing the deal with Google herself, telling Facebook CEO Mark Zuckerberg in an email that the agreement "is a big deal strategically."

An internal Facebook document reportedly described the agreement as "relatively cheap" as compared to actually competing against Google, and a Google presentation described the deal as working to "build a moat."

In a statement to the WSJ, a Google spokesperson said the allegations were inaccurate and that the deal with Facebook was not particularly secret, telling the paper, "There's nothing exclusive about [Facebook's] involvement and they don't receive data that is not similarly made available to other buyers."

" 'Individual conscience' means that women only get contraceptives if their employers, their physicians, their pharmacists, their husbands and/or fathers, pastors, and possibly their mayors, Governors, State Secretaries of Health, Congressmen, Senators, and President all agree that in that particular case they're justifiable." --D.C. Sessions

"That's the problem with being implacable foes - no one has any incentive to treat you as anything more than an obstacle to be overcome."

"The 'Road to Serfdom' is really all right turns." --Progressive Whisperer

""The GOP ... where every accusation is also a confession." --Progressive Whisperer

#685 LFC

    Fiscal Conservative

  • Members
  • PipPipPip
  • 39475 posts
  • LocationPennsylvania

Posted 21 January 2021 - 05:29 PM

We're rid of Ajit Pai from the FCC. Good. He was the primary enemy of net neutrality rules.

Quote

President Joe Biden today appointed Democrat Jessica Rosenworcel to be the acting chairwoman of the Federal Communications Commission. Rosenworcel became an FCC commissioner in 2012 and served in a Democratic majority during the Obama years and in a Democratic minority during the Trump years.

"I am honored to be designated as the Acting Chairwoman of the Federal Communications Commission by President Biden," Rosenworcel said in a statement. "I thank the President for the opportunity to lead an agency with such a vital mission and talented staff. It is a privilege to serve the American people and work on their behalf to expand the reach of communications opportunity in the digital age."

With ex-Chairman Ajit Pai having left the FCC yesterday, there is a 2-2 split between Democrats and Republicans. To form a 3-2 Democratic majority, Biden will have to nominate a new commissioner and secure confirmation from the Senate—which shouldn't be too difficult now that Democrats control the chamber. Biden's decision to promote Rosenworcel from commissioner to acting chairwoman does not require Senate approval.


Quote

Four years ago, President Donald Trump promoted Pai to the chairman's spot without any "acting" designation. The last acting chair was Democrat Mignon Clyburn, who held the role for six months in 2013 before the Senate confirmation of Obama nominee Tom Wheeler. Wheeler, Clyburn, and Rosenworcel formed the Democratic majority that enacted the net neutrality rules that were later repealed by Pai's Republican majority.

Even with a 2-2 deadlock, Rosenworcel can take some actions that don't require a full commission vote, as we've previously written. For example, she could change the FCC's positions in ongoing lawsuits, such as the one the Trump administration filed to block California's state net neutrality law. Reinstating FCC net neutrality rules and common-carrier regulation of ISPs will require a majority.

" 'Individual conscience' means that women only get contraceptives if their employers, their physicians, their pharmacists, their husbands and/or fathers, pastors, and possibly their mayors, Governors, State Secretaries of Health, Congressmen, Senators, and President all agree that in that particular case they're justifiable." --D.C. Sessions

"That's the problem with being implacable foes - no one has any incentive to treat you as anything more than an obstacle to be overcome."

"The 'Road to Serfdom' is really all right turns." --Progressive Whisperer

""The GOP ... where every accusation is also a confession." --Progressive Whisperer

#686 LFC

    Fiscal Conservative

  • Members
  • PipPipPip
  • 39475 posts
  • LocationPennsylvania

Posted 11 February 2021 - 10:18 AM

A researcher found a way to hack into 35 major companies including Microsoft, Apple, and PayPal. I am too long out of the software realm to understand the details of the attack but it sounds like it could been catastrophic. Here's the opener.

Quote

A researcher managed to breach over 35 major companies' internal systems, including Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, in a novel software supply chain attack.

The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into the company's internal applications.

Unlike traditional typosquatting attacks that rely on social engineering tactics or the victim misspelling a package name, this particular supply chain attack is more sophisticated as it needed no action by the victim, who automatically received the malicious packages.

This is because the attack leveraged a unique design flaw of the open-source ecosystems called dependency confusion.

For his ethical research efforts, the researcher has earned well over $130,000 in bug bounties.

" 'Individual conscience' means that women only get contraceptives if their employers, their physicians, their pharmacists, their husbands and/or fathers, pastors, and possibly their mayors, Governors, State Secretaries of Health, Congressmen, Senators, and President all agree that in that particular case they're justifiable." --D.C. Sessions

"That's the problem with being implacable foes - no one has any incentive to treat you as anything more than an obstacle to be overcome."

"The 'Road to Serfdom' is really all right turns." --Progressive Whisperer

""The GOP ... where every accusation is also a confession." --Progressive Whisperer

#687 LFC

    Fiscal Conservative

  • Members
  • PipPipPip
  • 39475 posts
  • LocationPennsylvania

Posted 22 February 2021 - 04:48 PM

The trackers have escalated their war on your privacy.

Quote

The prospect of Web users being tracked by the sites they visit has prompted several countermeasures over the years, including using Privacy Badger or an alternate anti-tracking extension, enabling private or incognito browsing sessions, or clearing cookies. Now, websites have a new way to defeat all three.

The technique leverages the use of favicons, the tiny icons that websites display in users’ browser tabs and bookmark lists. Researchers from the University of Illinois, Chicago said in a new paper that most browsers cache the images in a location that’s separate from the ones used to store site data, browsing history, and cookies. Websites can abuse this arrangement by loading a series of favicons on visitors’ browsers that uniquely identify them over an extended period of time.

" 'Individual conscience' means that women only get contraceptives if their employers, their physicians, their pharmacists, their husbands and/or fathers, pastors, and possibly their mayors, Governors, State Secretaries of Health, Congressmen, Senators, and President all agree that in that particular case they're justifiable." --D.C. Sessions

"That's the problem with being implacable foes - no one has any incentive to treat you as anything more than an obstacle to be overcome."

"The 'Road to Serfdom' is really all right turns." --Progressive Whisperer

""The GOP ... where every accusation is also a confession." --Progressive Whisperer





2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users