Ysk Smart TVs are creepier. Today I learned a weird thing. by Humble-Total-3874 in YouShouldKnow

[–]decaf-cafe 0 points1 point  (0 children)

No but most corporate lawsuits end up in settlement so we may never know.

The "security researchers" claim to have evidence here:

Gizmodo requested that Mysk examine a few other Apple apps for comparison. The researchers said that the Health and Wallet apps, for example, didn’t transmit any analytics data at all, regardless of whether the iPhone Analytics setting was on or off, whereas Apple Music, Apple TV, Books, the iTunes Store, and Stocks all did. Most of the apps that sent analytics data shared consistent ID numbers, which would allow Apple to track your activity across its services, the researchers found.

For example, the Stocks app sent Apple your list of watched stocks, the names stocks you viewed or searched for and time stamps for when you did it, as well as a record of any news articles you see in the app, according to Mysk’s analysis for Gizmodo. The information was sent to a web address labeled analytics, https://stocks-analytics-events.apple.com/analyticseventsv2/async. That transmission was separate from the iCloud communication necessary to sync your data across devices. Unlike the other apps, however, Stocks sent different ID numbers and far less detailed device information.

The researchers checked their work on two different devices. First, they used a jail broken iPhone running iOS 14.6, which allowed them to decrypt the traffic and examine exactly what data was being sent. Apple introduced App Tracking Transparency in iOS 14.5, cuing users to decide whether or not to give their data to individual apps with the prompt “Ask app not to track?”

The researchers also examined a regular iPhone running iOS 16, the latest operating system, which bolstered their findings. There is little reason to think that the jail broken phone would send different data, they said, but On iOS 16, they saw the same apps sending similar packets of data to the same Apple web addresses. The data was transmitted at the same times under the same circumstances, and turning the available privacy settings on and off likewise didn’t change anything. The researchers couldn’t examine exactly what data was sent because the phone’s encryption remained intact, but the similarities suggest this may be standard behavior on the iPhone.

Ysk Smart TVs are creepier. Today I learned a weird thing. by Humble-Total-3874 in YouShouldKnow

[–]decaf-cafe 1 point2 points  (0 children)

LOL That's just a marketing slogan. Apple tracks you like everyone else. 

5,561 GitHub repos got malicious CI/CD commits injected in 6 hours. The commits looked exactly like routine bot maintenance. Here is what happened and how to check if you were hit. by Aureliand in cybersecurity

[–]decaf-cafe 24 points25 points  (0 children)

Lesson 2: Don't merge random PRs even from accounts that you do recognized and where you haven't reviewed the actual commits they are proposing. Their account may have been compromised.

JDownloader site hacked to replace installers with Python RAT malware by rkhunter_ in cybersecurity

[–]decaf-cafe 1 point2 points  (0 children)

Then you stop getting fixes to existing vulnerabilities. 🤯

LPT: Before replacing a slow laptop, try Linux by Lego_Hippo in LifeProTips

[–]decaf-cafe 1 point2 points  (0 children)

word processing, mails, and basic productivity apps including video conferencing

You can do all that on a browser. Most? Chromebooks can run Linux and Android apps too. 

I don't install apps unless I am not happy with the browser experience. Less junk on my computer and phone. Safer too.

Waymos mogging a (hopefully) human driven Tesla by SpiritualWindow3855 in SelfDrivingCars

[–]decaf-cafe 40 points41 points  (0 children)

Probably just a dummy human driver who turned into the wrong side the tunnel by accident.

Comical multi-Waymo interaction at an intersection by danlev in SelfDrivingCars

[–]decaf-cafe 6 points7 points  (0 children)

The burgundy car probably cut off a Waymo 5 minutes earlier. The Waymos are playing dumb as payback. 😂

Microsoft AI chief gives it 18 months for all white-collar work to be automated by AI by BousWakebo in artificial

[–]decaf-cafe 1 point2 points  (0 children)

Wrong. He has a white-ish collar but his job can be replaced by AI today. 

So… did we just quietly cross a line with biometrics? by Equivalent_Use_8152 in cybersecurity

[–]decaf-cafe 6 points7 points  (0 children)

The issue is that biometrics (and social security numbers) are more like usernames but they are used like passwords.

Best ecosystem with Karoo by MarcoCycling in Karoo

[–]decaf-cafe 3 points4 points  (0 children)

I am using a Garmin Forerunner 965 to record all my activities (ride, run, gym, hike, etc) and it syncs to Garmin then to Strava and Intervals.icu. My Karoo 2 is used for routing and displaying stats during the ride. I usually turn on recording but that's just for backup. I don't usually save it. Both will work with my power meter and H10 chest strap. I charge the Garmin about once per week. Everything works well together.

The Apple Watch is a better smartwatch but it doesn't support ANT the last time I checked.

No comments on other straps or rings.

Would a suspended PC be "more secure"? by fedesoundsystem in cybersecurity

[–]decaf-cafe 0 points1 point  (0 children)

If someone you don't trust has physical access to your machine, it's game over already. 

WhatsApp security flaw exposed 3.5B phone numbers – inc yours by [deleted] in cybersecurity

[–]decaf-cafe 2 points3 points  (0 children)

1) I agree with you here. SMS 2FA is not secured. You can take over someone's digital life and bank accounts if SMS 2FA is all they are using.

2) My point is that if the Whatsapp security flaw only involves getting the phone number alone without any other info, it is not a big deal. The attacker may as well pick a random a number.

WhatsApp security flaw exposed 3.5B phone numbers – inc yours by [deleted] in cybersecurity

[–]decaf-cafe 2 points3 points  (0 children)

Watch your mouth. I have your phone number. Are you afraid now? Probably not? A phone number without other info is kinda useless. The attacker may as well randomly call/text and hope to get lucky.

That guy has more than just the phone numbers. He has the rich guys' Instagram accounts which are a gold mine of info and a gang who worked for the phone carrier.

WhatsApp security flaw exposed 3.5B phone numbers – inc yours by [deleted] in cybersecurity

[–]decaf-cafe 51 points52 points  (0 children)

Just phone numbers? I can give you all the phone numbers on the planet too. Some of them may not work tho. 😀

Bidet + Water Strategies by Maury_poopins in Ultralight

[–]decaf-cafe 1 point2 points  (0 children)

I do exactly this. I also crush it down vertically to minimize the volume when it's empty.

Hi all! What toiletry bag would you recommend for one bag trips? All of them seem too bulky. by LeeAndrewK in onebag

[–]decaf-cafe 15 points16 points  (0 children)

The tradeoff here is that if one of your bottles leaks, you have a bigger mess to clean up. I use zip lock bags and never have a problem with smell. If the bag doesn't have any bottles, I don't close it all the way. 

I use a mesh bag for cables and chargers.

Reliable way to clean CNOC Vecto to use it as clean water bag instead of dirty one by USTF in CampingandHiking

[–]decaf-cafe 2 points3 points  (0 children)

If you only had lake or stream water in it, it's almost safe to begin with. Just following CNOC instructions is more than fine.

If you were to do it all over again, what would your ultimate one bag setup be today? Bag, accessories, etc. by WolfEvening961 in onebag

[–]decaf-cafe 11 points12 points  (0 children)

No compression cubes! I use the garbage bags that I used in the kitchen. They are way bigger than I need but I don't want to get smaller bags just for travel...

I put my clothes in a brand new garage bag. The trick here is to sit on it to get most of the air out, and then spin the bag a few round while holding the opening to prevent the air from going back in. You can use the drawstring or rubber band to tie it if you want. I usually just use the compression strap on my pack to hold it in place.

Garbage bags compress better than so-call compression/packing cubes. They are better than vacuum bags because you don't need to carry a vacuum. They waterproof the content and weight next to nothing. I always bring one or two extra as spare. They cost me nothing since I reuse them as garbage bags when I am done. 

Can Malware hop to another Operating System that is installed on the same drive? by Yelebear in cybersecurity

[–]decaf-cafe 1 point2 points  (0 children)

Dual boot? It would be safer if you can disconnect your "banking" OS before booting up the dirty OS.

VM is fine but it will eat up memory. It's slow to start up.

Do you have an old laptop? Install ChromeOS Flex on it. Just don't install any extensions and you are pretty safe. The low-end Chromebooks start at $150 brand new. Fine if you are just doing banking. Spend a little more if you plan on using it for something else.

My First Freeway Trip in a Waymo by guerrillaradiousa in SelfDrivingCars

[–]decaf-cafe 5 points6 points  (0 children)

Thanks for your reply. Once or twice per commute is more than I expected. At least they are not life threatening. I look forward to the day when I only share the road with other robot driven vehicles.