Firefox armagg-add-on: Lapsed security cert kills all browser extensions

Found on The Register on Monday, 06 May 2019
Browse Internet

Every single web extension, theme, search engine plugin, and language pack had been nuked from netizens' Firefox installations, stripping any data and settings associated with them as they were removed.

For those using the Netflix add-on, there would be no video. For those using HTTPS Everywhere, there would be no enforced privacy. And the situation was similar for users of password management add-ons, content blocking add-ons, and the like.

It's not like monitoring expiration times of certificates is impossible. Any decent monitoring agent can do that.

A hacker is wiping Git repositories and asking for a ransom

Found on ZD Net on Sunday, 05 May 2019
Browse Internet

Hundreds of developers have had had Git source code repositories wiped and replaced with a ransom demand.

The hacker claims all source code has been downloaded and stored on one of their servers, and gives the victim ten days to pay the ransom; otherwise, they'll make the code public.

However, all evidence suggests that the hacker has scanned the entire internet for Git config files, extracted credentials, and then used these logins to access and ransom accounts at Git hosting services.

Now your super-clud solution for storing the codebase of your company that should be kept secret does no sound so amazing anymore. If you go into the cloud, you eventually will be rained on.

Facebook gives social scientists unprecedented access to its user data

Found on Nature on Saturday, 04 May 2019
Browse Internet

Facebook is giving social scientists unprecedented access to its data so that they can investigate how social media platforms influence elections and alter democracies.

The scientists will have access to reams of Facebook data such as the URLs that users have shared and demographic information including gender and approximate age.

Remember, a few days ago Zuckerberg pointed out how important the privacy of its users will be in the future. Today, more data sharing.

BMW for the People! German Coalition Politician Revives Marxism

Found on Bloomberg on Friday, 03 May 2019
Browse Politics

A leading politician from Chancellor Angela Merkel’s junior coalition partner took a page straight out of Karl Marx’s playbook, calling for the people to take control of large companies in the battle against profit-hungry capitalists.

“The distribution of profits must be democratically controlled,” Kevin Kuehnert, the leader of the youth wing of the Social Democratic Party, told Die Zeit newspaper in an interview published on international labor day. “That excludes that there is a capitalist owner at this business,” he said, using luxury-car maker BMW AG as an example.

Marxism and Communism has failed so very hard every single time it had been tried; and where it is still offically in place you do not want to live. At some point you just have to learn from history.

Google to 'auto-delete' web tracking history

Found on BBC News on Thursday, 02 May 2019
Browse Internet

Google is to offer users the option of automatically deleting their search and location history after three months.

The search giant has faced scrutiny over the personal data it collects. In November, it was accused of tracking where people went even when they had switched off location history.

And earlier this month, to the surprise of many people, Google said human reviewers sometimes listened to voice recordings from its Home speaker and Assistant app.

Now you only need to trust Google to really do that.

Deputies Destroy House, Lives To Recover $50 Of Marijuana And A Single, Unbottled Pill

Found on Techdirt on Wednesday, 01 May 2019
Browse Legal-Issues

The total haul in contraband from the drug raid was less than $50-worth of marijuana. In addition, an officer claimed he found a loose pill containing a controlled substance.

The Almonds were directed to open the safes. Inside the safes, the members of the drug task force claim to have found ONE LUNESTA PILL outside of the bottle in which it had been prescribed.

Using that one pill, the department charged the couple with felony drug possession, on top of the misdemeanor marijuana charge.

Everything that was in the safes disappeared into the Department's hands. So did a bunch of other stuff around the house, along with the cash Greg Almond had in his wallet. The warrant inventory contains far less then the Almonds claim the deputies took. The full list includes the firearms from the safes, $8,000 in cash, wedding rings, medications, antique guitars, a coin collection… pretty much anything the officers felt might have resale value.

"Land of the free". Sounds more like organized crime.

Hacker Finds He Can Remotely Kill Car Engines After Breaking Into GPS Tracking Apps

Found on Motherboard on Tuesday, 30 April 2019
Browse Various

The hacker, who goes by the name L&M, told Motherboard he hacked into more than 7,000 iTrack accounts and more than 20,000 ProTrack accounts, two apps that companies use to monitor and manage fleets of vehicles through GPS tracking devices.

On some cars, the software has the capability of remotely turning off the engines of vehicles that are stopped or are traveling 12 miles per hour or slower, according to the manufacturer of certain GPS tracking devices.

“My target was the company, not the customers. Customers are at risk because of the company,” L&M told Motherboard in an online chat. “They need to make money, and don't want to secure their customers.”

What a fun time when all cars world-wide are driving autonomously, connected via 5G.

About Our Galaxy Fold Teardown

Found on iFixit on Monday, 29 April 2019
Browse Hardware

After two days of intense public interest, iFixit has removed our teardown of Samsung’s Galaxy Fold.

We were provided our Galaxy Fold unit by a trusted partner. Samsung has requested, through that partner, that iFixit remove its teardown. We are under no obligation to remove our analysis, legal or otherwise. But out of respect for this partner, whom we consider an ally in making devices more repairable, we are choosing to withdraw our story until we can purchase a Galaxy Fold at retail.

Samsung has successfully censored a 3rd party article by abusing its power. Only if it was not for an archive.

If Facebook Wants Our Trust, Mark Zuckerberg Must Resign

Found on Tom's Guide on Sunday, 28 April 2019
Browse Internet

If Zuckerberg wants to prove just how serious Facebook is about guarding user privacy, though, he should it prove it by announcing he's quitting.

Incidents where Facebook was too cavalier with user data stretch back years, and while the particulars change from scandal to scandal, the one constant is the guy sitting in the CEO chair.

Zuckerberg also promised a Clear History feature that would let you easily delete information about apps and websites you've interacted with, sort of like erasing your browser history.

Well, the Clear History feature never launched — it's coming later in 2019, Facebook now says.

Facebook cannot have a serious interest in more privacy or deleting features; and even if Clear History arrives at some day, there is still the question if "clear" just means "hide from user".

Ok Google, please ignore this free tax filing code so we can keep on screwing America

Found on The Register on Saturday, 27 April 2019
Browse Various

The United States' tax-filing software industry actively prevents search engines from discovering their free-filing versions, it has been discovered, adding further criticism to an industry that drives Americans toward unnecessary paid-for products.

It is, of course the robots.txt file that is used by webmasters to indicate where it doesn't want search engine robots to look. Typically this is used to stop search engines from accidentally gathering confidential information.

If you use the robots.txt to protect confidential information, you should be fired on the spot.