Facebook's collection and use of data from third-party sources is abusive

Found on Bundeskartellamt on Thursday, 21 December 2017
Browse Legal-Issues

The authority holds the view that Facebook is abusing this dominant position by making the use of its social network conditional on its being allowed to limitlessly amass every kind of data generated by using third-party websites and merge it with the user's Facebook account. These third-party sites include firstly services owned by Facebook such as WhatsApp or Instagram, and secondly websites and apps of other operators with embedded Facebook APIs.

Users cannot expect data which is generated when they use services other than Facebook to be added to their Facebook account to this extent. Data are already transmitted from websites and apps to Facebook when a user calls them up or installs them, provided they have an embedded API.

It's sadly very rare to see that the government takes steps to show companies that they cannot collect everything about users for marketing and sales to increase their profits.

Apple confirms iPhones with older batteries will take hits in performance

Found on The Verge on Wednesday, 20 December 2017
Browse Technology

While many iPhone users have experienced perceived slowdowns due to iOS updates over the years, it appears that there’s now proof Apple is throttling processor speeds when a battery capacity deteriorates over time.

“This fix will also cause users to think, 'my phone is slow so I should replace it' not, 'my phone is slow so I should replace its battery,’” says Geekbench’s John Poole.

It’s also clear that Apple, which makes its devices hard to open and repair, could do a better job helping consumers understand the benefits of battery replacement.

Sales count, not battery replacements. Apple excels at marketing and pulling the cash out of the pockets of their loyal sheep. There is no reason for them to go for the cheaper and more environment-friendly route.

Belgium ends 19th-Century telegram service

Found on BBC News on Tuesday, 19 December 2017
Browse Technology

One hundred and seventy-one years after the first electrical message was transmitted down a line running alongside the railway between Brussels and Antwerp the final dispatch will be sent and received on 29 December.

So the world won't really change when Belgium finally pulls the plug on its telegram system, but it is another milestone in the long, slow death of a method of communication that once changed the world and which, in its glory days 100 years ago, seemed as though it would never stop.

Today's replacements can consider them really lucky if they are still known in one or two decades. Client software will be gone, and so will be the history of your conversations. Not that most of it will be just embarrassing decades later and not important at best.

Twitter begins enforcing new anti-hate speech rules

Found on Ars Technica on Monday, 18 December 2017
Browse Censorship

In particular, the new rules ban violent threats or even "wishing for serious physical harm." For now, the most prominent accounts that have been removed for running afoul of these rules were three affiliated with a far-right United Kingdom group known as "Britain First."

The company went on to explain that its new policy includes any abusive language in the profile information of an account (in addition to applying to language used in tweets).

There is some undeniable doubt that these rules won't be applied by a blind Justitia.

Google Changes Rules to Purge News That Masks Country of Origin

Found on Bloomberg on Sunday, 17 December 2017
Browse Censorship

Google moved to strip from its news search results publications that mask their country of origin or intentionally mislead readers, a further step to curb the spread of fake news that has plagued internet companies this year.

“We update our policies on a regular basis to reflect a constantly changing web and how people look for information online,” a Google spokeswoman wrote in a statement.

Fake or not, it is not the job of a search engine to decide what users are supposed to read.

Mozilla Slipped a ‘Mr. Robot’-Promo Plugin into Firefox and Users Are Pissed [Updated]

Found on Gizmodo on Saturday, 16 December 2017
Browse Software

It was automatically added to Firefox users’ browsers this week with no explanation except the cryptic message, “MY REALITY IS JUST DIFFERENT THAN YOURS,” prompting users to worry on Reddit that they’d been hit with spyware.

It is currently unclear what user-privacy considerations Mozilla management made before deciding to auto-install the Mr. Robot plugin into Firefox.

It feels like Mozilla is deliberately trying to do its best to annoy and alienate its userbase.

FBI appears to have investigated - and considered prosecuting - FOIA requesters

Found on Muckrock on Friday, 15 December 2017
Browse Legal-Issues

A new FOIA release shows the FBI Director’s Office responded to FOIA requests for known files on deceased FBI officials by presenting options that seemingly included a law enforcement investigation/proceeding against the requesters, with one email calling the requests “SUSPICIOUS.”

According to the Bureau, fulfilling the FOIA requests would have prevented the FBI from fulfilling FOIA requests. Their letter stated that the “manner of submission interfered with the FBI’s ability to perform its FOIA and PA statutory responsibilities as an agency.

Agencies don't like the people. No big news.

Fortinet VPN Client Exposes VPN Creds, Palo Alto Firewalls Allow Remote Attacks

Found on Bleeping Computer on Thursday, 14 December 2017
Browse Various

According to researchers, the FortiClient software stores VPN credentials in a local file on each computer, which is encrypted with a key to preventing easy access to the data. SEC Consult says this key is the same for all users and it's stored by default in the FortiClient binary itself. The key can easily be extracted and used to decrypt and access the VPN credentials.

Security researcher Philip Pettersson discovered that by combining three vulnerabilities together, he could run code on a Palo Alto firewall from a remote location with root privileges.

It happens way too often that so-called security products make the situation actually worse for the user. Especially antivirus software is often the source for a wide range of problems and it cannot protect from yet unknown malware which gets pushed out daily by the authors.

Maker of sneaky Mac adware sends security researcher cease-and-desist letters

Found on ZDNet on Wednesday, 13 December 2017
Browse Legal-Issues

The short version is that the adware, built by Israeli ad-tech firm TargetingEdge, poses as a legitimate installer, like a video player or document reader. Like other software, the installer asks for the user's password to install, tricking the user into turning over root privileges to the installer. Once it's hooked into the system, the installer uses a script to download further components from the adware's command and control server.

TargetingEdge sent cease-and-desist letters to try to prevent Serper from publishing his research.

That would make an interesting lawsuit.

We can make plants pass out—with the same drugs that mysteriously knock us out

Found on Ars Technica on Tuesday, 12 December 2017
Browse Nature

Just like humans, plants can succumb to the effects of general anesthetic drugs, researchers report this week in the Annals of Botany. The finding is striking for a variety of reasons—there’s the pesky fact that plants lack a central nervous system, for one thing.

The anesthetics temporarily caused the plants to go still and unresponsive. The Venus flytrap's spikey trap didn’t slam shut when poked. The shy plant was no longer shy; it’s leaves stayed open when gently brushed. Similarly, the sundew plants didn’t bend to capture dead fruit flies and the pea plant’s tendrils drooped and curled up instead of whirling in normal upward fashion.

Actually, that's pretty amazing: who would have thought that plants can be drugged too?