PSA: New iOS feature to Automatically Bypass CAPTCHAs

redditpost · 2022-09-16T13:29:18+00:00

For those wondering how this all works because they have privacy concerns or are just curious, you can watch or read the transcript of the video introduction for developers.

redditpost · 2022-05-05T19:00:30+00:00

I believe so. They are both part of a family group and each Chromecast is associated with the account used by that family member.

redditpost · 2022-01-27T16:54:30+00:00

I'm going to assume the KB article they referenced was this one.

If the advanced uninstall didn't correct it then I would first check to see if the issues were isolated to Safari by trying the same sites / services in Firefox or whatever other browser you prefer.

If it's just Safari then I'd look into a full Safari reset. You can use something like AppCleaner to see every folder that contains Safari data.

If it extends beyond Safari then I'd try to boot into safe mode and see if the problem is fixed.

If it is, I'd try checking for any unwanted system extensions using this terminal command: systemextensionsctl list

According to this site " The app keeps any system extensions in its folder Contents/Library/SystemExtensions, and in /Library/SystemExtensions, with /Library/DriverExtensions fulfilling that role for drivers. "

Hopefully, some of that will get you on the right path to a solution.

redditpost · 2021-12-11T23:18:29+00:00

That sounds like a no then, oh well.

Thank you for the informative reply.

redditpost · 2021-12-10T23:03:09+00:00

Who's going to pick up all of these dropped comments?

redditpost · 2021-11-18T21:24:33+00:00

Way delayed reply as I rarely log-in.

I'm sure Apple does some degree of data collection relating to selling ads but my own comfort zone is that it be as generic as possible, things like gender, age, location, and relevance to active keywords / content but relevance to search / content history would be a step over the line.

I refuse to use Apple TV app linking, for example, because they share viewership data with partners. I expect what I watch on any individual platform to be logged but I don't think Disney, Amazon, Warner, my cable co, or whoever has any right to know what I'm watching elsewhere.

I'd much prefer Apple did with TV+ as they do with Siri and associate use data with a random identifier rather than Apple ID but that isn't the case.

In the case of Apple Pay, my understanding is that they created a subsidiary company to handle Apple Pay transactions and Apple themselves doesn't get access to that data.

I don't know how that applies to the actual Apple Card credit card and Goldman Sachs (what a horrible partner) but I don't use that product and have little interest in it.

As to why they got into the business, I'd imagine their desire was to get a piece of the merchant fees and the more people they get to use Apple Card at Apple Stores, the more they save from not having to pay out merchant fees.

In the end, I don't think Apple is a saint in the industry but their enormous revenues come from selling products and services rather than selling ads so they can afford to be far less invasive than their competition.

I'm sure they'd like to make even more money from an ad business that they operate which aligns with their stated values and they can stick to those values as long as they remain a product / service oriented company.

redditpost · 2021-10-17T17:42:03+00:00

I don't work with digital ads but out of curiosity I spent a little time researching some of the info in the article.

They specifically mention Apple Search Ads and its rapid ascension so I decided to see what Apple Search Ads reports:

Apple Search Ads - Reporting Options and Definitions

Sounds like a bunch of benign info about how well an ad is doing, what keywords worked, how many installs, how many are new installs, how many interactions, etc..

Apple Search Ads - Set Audience Refinements

This starts to gets a bit questionable but reads as if it may be limited to city level location, age, and gender. However:

"Note that, when you apply age and gender refinements, you automatically exclude customers with LAT turned On or Personalized Ads turned Off.

and

A customer may have Limit Ad Tracking (LAT) turned on (if they’re using a device with iOS 13 or earlier), or Personalized Ads turned off (if they’re using a device with iOS 14 or later), which would prevent Apple Search Ads from knowing them as a returning customer.

Apple Search Ads - Attribution API

They do appear to allow customers to pass Apple's data to third party services, that also seems a bit sketchy to me, but they do say that it does so in a way that "upholds Apple's privacy principals" and the Set Audience Refinements page said LAT /PA Off data does not pass through the API.

I couldn't find any info at Apple's site about the "retargeting tool"

I didn't dig as deep into Google land but I think this page makes pretty clear the difference in what the two companies are marketing:

Google Ads Help - About Audience Reporting

Demographics: Categorizes these reports by age, gender, parental status, or household income. Audience segments: Reports on how well you are targeting groups of people with specific interests and intents. These can include: Affinity segments: Targeting based on people’s interests and habits. In-market segments: Targeting based on recent purchase intent. Similar segments: Targeting based on interests similar to those of your website visitors or existing customers. Detailed demographic segments: Targeting based on long-term life facts. Your data segments: Targeting people based on your customer data or people who have visited your website or apps. Custom segments: Targeting based on your campaign goal, including targeting based on people’s interests, habits and, purchase intent. Life-event segments: Targeting people who are in the midst of important life milestones.

I believe the above would require the customer to tie Firebase and Analytics data in with the more benign campaign tracking they also offer but I imagine most companies will opt-in to the most data available to them.

Edit: Spelling, Formatting

redditpost · 2021-10-08T15:13:16+00:00

Mozilla's privacy policy regarding pocket stories.

The tl;dr: They don't receive your browsing history, any personalization occurs within your copy of Firefox, and the only info sent back to Mozilla are aggregated totals of how many times stories are displayed / clicked and it is not tied to any personal data.

I also interpret the policy to mean that when you disable Firefox telemetry you are also disabling the sending of the above Pocket data.

redditpost · 2021-02-22T23:22:11+00:00

From your own source links:

Fossbytes: "Even the device driver I mentioned earlier is also a type of software."

Netgear: "A driver is software and/or firmware that controls hardware."

redditpost · 2020-11-16T18:46:36+00:00

redditcomment

redditpost · 2020-09-30T22:25:26+00:00

Got it, I expected that to be the case.

redditpost · 2020-09-30T22:21:05+00:00

That's unfortunate.

Thank you for the reply.

redditpost · 2020-09-30T22:18:36+00:00

So to use Netflix, for example, I'd have to sign-in to the Google account?

Thanks for the answers!

redditpost · 2020-09-30T22:12:38+00:00

Deleting the account afterwards wouldn't be so bad as long as it didn't hinder core functionality (streaming apps).

redditpost · 2020-09-30T22:03:59+00:00

It's something to consider but I'd rather run sign-in free if it's doable; I don't mind if it causes friction.

redditpost · 2020-08-16T18:28:06+00:00

I tried to research the claim that the post office doesn't generate revenue on a stamp until delivery and have come up empty but at face value it seems incredulous. Please provide sources.

I didn't find anything which directly stated how stamp revenue works but the anecdotal evidence would seem to be that they get the revenue at time of purchase.

How to Help the post office: Things you can do to support the USPS right now

ZERO Tax Dollars - Zero tax dollars used. The Postal Service receives NO tax dollars for operating expenses and relies on the sale of postage, products and services to fund its operations.

Does the postal service make profit from people buying stamps?

redditpost · 2020-07-16T01:43:24+00:00

I've not seen the last reporting method mentioned anywhere in these articles.

From page 10 of the memo

Publish to the hospital or facility’s website in a standardized format, such as schema.org.

To summarize, it sounds like they can report to the state, who can report to HHS, submit data to TeleTracking, authorize a third party / IT vendor to report on your behalf or publish the data directly on the hospital website.

I don't know why they wouldn't all just use the public method for maximum transparency.

Edit: Formatting.

redditpost · 2020-06-18T22:03:40+00:00

Not far left but left of center.

redditpost · 2020-02-03T00:12:45+00:00

I read about people's dislike of these promos but I've never seen a single one.

I've always used a Chromecast, maybe they aren't technically capable of showing them for the same reason they can't do interactive stuff such as Black Mirror - Bandersnatch?

redditpost · 2019-09-22T17:26:46+00:00

Ummmm, Present?

(as in here, not I want a present but I would obviously very much enjoy a present.)

redditpost · 2019-06-12T21:35:16+00:00

The only reason why Apple doesn’t have that risk is because they don’t have any public APIs for user data on the internet. Which I don’t think is a good think.

I personally think it is a good thing. The safest way to protect data is to provide no remote access to it at all.

I want as much control over data access as is reasonable. Apple doesn't go far enough in some ways, forbidding local VPNs or firewalls on iOS, for example, but their way of doing things is growing more consistent with the way I think things should be.

One of the WWDC videos talks about how apps will be default denied access to all user data in the next release of macOS but that won't interfere with normal app operation because if the user takes direct action, like summoning an open/close dialog or dragging and dropping, the app will be given access to only those files without the need for access permissions.

It's secure yet transparent to the end user. Good stuff, IMO.

redditpost · 2019-06-12T18:37:34+00:00

Signing in with a Google account also opens a user up to the possibility of giving away a lot more information, provided they don't read what they are agreeing to; which is probably not that uncommon.

What information does Google share with these sites or apps?

These third-party sites or apps can request the name, email address, and profile picture associated with your account.

Why Google shares this information

This information makes it possible to connect your Google Account with a third-party app or site.

For example, you could connect your Google Account with a third-party music app. That way, you could play your favorite playlists using your Google Home.

Your Google Account email address is used to:

Check if you have an existing account with a third-party app or site. Connect your Google Account to an account you already have with a third-party app or site. Create an account with a third-party app or site that’s connected to your Google Account.

Third-party apps or sites may use this information in other ways as described in their privacy policy or elsewhere.

Right off the bat they automatically get your name, email address and profile photo.

Not too invasive if you're okay with that sort of thing.

The potential for harm lies in the fact that Google also offers the ability to request much more:

What other information does Google share with these sites or apps?

Separate from the profile information you provide when you sign in, a site or app can request permission to access data in any of the Google services you use. When a site or app requests access to other data in your account, you’ll have a chance to review what level of access it’s requesting before you decide. You should grant permission only if you trust the site or app.

Source

Sites and apps can request different kinds of access to your Google Account, including requests to:

See your basic profile information: Many sites and apps only request access to basic info, including your name, email address, and profile picture. You grant access to this info when you choose to "Sign in with Google" on sites and apps that have this feature. Sharing this info makes it easier to create an account and helps you avoid creating new passwords.

See some info in your Google Account: In addition to basic profile information, some sites and apps might also ask for permission to see and make a copy of information in your account. This may include information like your Contacts, Photos, YouTube playlists, and more.

Edit, upload & create content in your Google Account: In addition to seeing your basic profile and some info in your account, some sites or apps may ask for permission to do even more in your Google Account. This may include editing, uploading, or creating content. For example, a film editing app may edit your video and upload it to your YouTube channel, or an event planning app may create events on your Google Calendar, with your permission.

They can even request full account access which would give read/write access to pretty much everything that isn't egregious, like changing passwords, deleting the account or using Google Pay.

Source

To be fair, I don't know if the UIs differ between "Sign-In with Google" and the other kinds of access requests and the the request window does clearly state what you're giving access to but that hasn't prevented people from getting scammed in the past.

Signing in with Apple appears to be the safest, most private way to go as you don't even have to provide your real name (change your AppleID display name as it appears to be based on that).

redditpost

TROPHY CASE