> Are you really complaining that you won't be able to block ads in those crappy free apps
No because on my Android I AM able to block them. First, there is a hosts file with ad server blocking. Second, most apps that require no internet permission are blocked in my firewall. If it does need internet I can block the Google ads services activity with Lucky Patcher, or have it patch the app itself to remove ads. Xprivacy can block some calls that threaten my privacy and allow ads to be personalized. Very few ads survive all that combined.
Fortunately XPrivacy is finally becoming usefull on Android 5.x (mainly due to Xposed on ART being worked on). Android 6 is said to have a rights management system built-in (finally!) but it won't be as fine-grained and complete as XPrivacy offers.
Yes, and indeed ONLY to Safari. iAds in apps are not affected.
I prefer the rooted Android solution where ads are blocked in the hosts file. They are blocked then for ALL apps, not only the browser (and disabeling the Google add service with Lucky Patcher kills the remaining few).
If I have to choose I would prefer China spying on me than the US. China doesn't care wether I download movies and music, or if I want to smoke something else than tobacco. The US can have me extradicted and put me in jail for made up charges, China much, much less likely.
However, with the right protocols like perfect forward secrecy they can't even do that. They can use the $5 wrench but you will be unable to produce any usefull data whatever they do.
Escrow is soo 1990's. With perfect forward secrecy, there is no single key to escrow. Even if I would cooperate, there is no way I would be able to help someone decrypt my intercepted old TextSecure messages or Redphone calls.
Why doing so complicated and tricky as to build your own crypto? The source code of GnuPG, TextSecure, TrueCrypt and other well-known crypto programs are widely available. One only has to take the old version without the backdoor, or rip out the backdoor. There will be underground developers enough who will do that.
Hi Folks! You may have already read the recent news about Sourceforge.net hijacking the GIMP project account to distribute adware/malware. Previously GIMP used this Sourceforge account to distribute their Windows installer, but they quit after Sourceforge started tricking users with fake download buttons which lead to malware rather than GIMP. Then Sourceforge took over GIMP's account and began distributing a trojan installer which tries to trick users into installing various malware and adware before actually installing GIMP. Of course this goes directly against Sourceforge CEO Michael Schumacher's promise less than two years ago:
"we want to reassure you that we will NEVER bundle offers with any project without the developers consent" --http://sourceforge.net/blog/advertising-bundling-community-and-criticism/
So much for that promise! Anyway, the bad news is that Sourceforge has also hijacked the Nmap account from me. The old Nmap project page is now blank:
You can see at the top that the owners of the Nmap page are now 'sf-editor1', and 'sf-editor3'. You can click on those to see other projects they have hijacked.
So far they seem to be providing just the official Nmap files (as long as you don't click on the fake download buttons) and we haven't caught them trojaning Nmap the way they did with GIMP. But we certainly don't trust them one bit! Sourceforge is pulling the same scheme that CNet Download.com tried back when they started circling the drain:
We will ask Sourceforge to remove the hijacked Nmap page, but more importantly we want to reiterate that you should only download Nmap from our official SSL Nmap site:
With Android smartphones, you get much more value for money when you don't buy today's middle model but yesterday's top model. By that time, you also know if you can root it (if not, buy another model) and reclaim your freedom.
Yes, we could take our own DEfence. But I see no reason for offence, like the US uses to do (they have obviously learned from Pearl Harbor that a pre-emptive strike can be effective). hy should we bother Serbia? RThey didn't attack any EU member state (at the time).
Poland tries to drag us into a new cold war with Russia together with the US and the fascist Kiev coup junta.No thanks, let the poles first grow up and get over their grudges.
The economy of the UK isn't that strong. And they don't support that much anyway, they negotioated special tarifs for them in the past under the threat of leaving. Now they will try that again, but I think it won't work anymore. The others will simply say "you want to leave? Fine, then leave".
After all, we're not the American Empire that declares war on parts that want to leave and then calls it a civil war.
Indeed. I'd say some other countries filed some criminal charges against the GCHQ about their spying for the US to give them some more incentive to leave. Some BND officials should have that comming too.
"There are so many decisions from the early days we're stuck with now, why are these so special?"
This one is special because some organizations (those that didn't learn those lessons in the 90's) are pushing to make the same mistakes again. Only this time the results could be different: people not buying US-made software anymore. And with open source crypto generaly available now this won't work anyway.
I just thought they were really desperate to get everybody on the tilke-OS crap in the hope that desktop users would care for crappy "apps" on a big screen.
> Are you really complaining that you won't be able to block ads in those crappy free apps
No because on my Android I AM able to block them. First, there is a hosts file with ad server blocking. Second, most apps that require no internet permission are blocked in my firewall. If it does need internet I can block the Google ads services activity with Lucky Patcher, or have it patch the app itself to remove ads. Xprivacy can block some calls that threaten my privacy and allow ads to be personalized. Very few ads survive all that combined.
Fortunately XPrivacy is finally becoming usefull on Android 5.x (mainly due to Xposed on ART being worked on). Android 6 is said to have a rights management system built-in (finally!) but it won't be as fine-grained and complete as XPrivacy offers.
Yes, and indeed ONLY to Safari. iAds in apps are not affected.
I prefer the rooted Android solution where ads are blocked in the hosts file. They are blocked then for ALL apps, not only the browser (and disabeling the Google add service with Lucky Patcher kills the remaining few).
First you have to find them. Fortunately there is software for that: on a rooted Android, use https://github.com/SecUpwN/And... and https://opensource.srlabs.de/p...
And then the US complains that FIFA officials are corrupt.
If I have to choose I would prefer China spying on me than the US. China doesn't care wether I download movies and music, or if I want to smoke something else than tobacco. The US can have me extradicted and put me in jail for made up charges, China much, much less likely.
Well, they can still interbreed with humans, so the separation between humans and africans didn't take place that long agoo.
No, he didn't. The idea that true science obeys strict Popperian laws is false.
And don't forget
3) These changes are shown to cause more harm than good.
Yes, otherwise I can't stand the stench. :-)
However, with the right protocols like perfect forward secrecy they can't even do that. They can use the $5 wrench but you will be unable to produce any usefull data whatever they do.
Escrow is soo 1990's. With perfect forward secrecy, there is no single key to escrow. Even if I would cooperate, there is no way I would be able to help someone decrypt my intercepted old TextSecure messages or Redphone calls.
Why doing so complicated and tricky as to build your own crypto? The source code of GnuPG, TextSecure, TrueCrypt and other well-known crypto programs are widely available. One only has to take the old version without the backdoor, or rip out the backdoor. There will be underground developers enough who will do that.
If the bundled malware is closed source it may be a GPL violation too...
Because /. editors seem to have inconvenient hollidays I'll just spam this topic with the bahaviour of their mother company:
From http://seclists.org/nmap-dev/2...:
From: Fyodor
Date: Wed, 3 Jun 2015 00:56:23 -0700
Hi Folks! You may have already read the recent news about Sourceforge.net
hijacking the GIMP project account to distribute adware/malware.
Previously GIMP used this Sourceforge account to distribute their Windows
installer, but they quit after Sourceforge started tricking users with fake
download buttons which lead to malware rather than GIMP. Then Sourceforge
took over GIMP's account and began distributing a trojan installer which
tries to trick users into installing various malware and adware before
actually installing GIMP. Of course this goes directly against Sourceforge
CEO Michael Schumacher's promise less than two years ago:
"we want to reassure you that we will NEVER bundle offers with any project
without the developers consent"
--http://sourceforge.net/blog/advertising-bundling-community-and-criticism/
So much for that promise! Anyway, the bad news is that Sourceforge has
also hijacked the Nmap account from me. The old Nmap project page is now
blank:
http://sourceforge.net/project...
Meanwhile they have moved all the Nmap content to their new page which only
they control:
http://sourceforge.net/project...
You can see at the top that the owners of the Nmap page are now
'sf-editor1', and 'sf-editor3'. You can click on those to see other
projects they have hijacked.
So far they seem to be providing just the official Nmap files (as long as
you don't click on the fake download buttons) and we haven't caught them
trojaning Nmap the way they did with GIMP. But we certainly don't trust
them one bit! Sourceforge is pulling the same scheme that CNet
Download.com tried back when they started circling the drain:
http://insecure.org/news/downl...
We will ask Sourceforge to remove the hijacked Nmap page, but more
importantly we want to reiterate that you should only download Nmap from
our official SSL Nmap site:
https://nmap.org/download.html
If you don't trust SSL by itself (and we don't blame you), you can also
check the GPG signatures: https://nmap.org/book/install....
Cheers,
Fyodor
PS: Ars Technica has a good article about the Sourceforge/GIMP fiasco:
http://arstechnica.com/?p=6734...
PPS: Sourceforge now claims they will stop trojaning software without the
developer's permission, but they've broken that exact promise before.
Yes, Kim Dotcom is right in absolutely refusing to do buisiness with any company that has a presence in the US. More should follow this example.
With Android smartphones, you get much more value for money when you don't buy today's middle model but yesterday's top model. By that time, you also know if you can root it (if not, buy another model) and reclaim your freedom.
Yes, we could take our own DEfence. But I see no reason for offence, like the US uses to do (they have obviously learned from Pearl Harbor that a pre-emptive strike can be effective). hy should we bother Serbia? RThey didn't attack any EU member state (at the time).
But who is its true master? And where are they seated, Berlin or Washington?
Poland tries to drag us into a new cold war with Russia together with the US and the fascist Kiev coup junta.No thanks, let the poles first grow up and get over their grudges.
The economy of the UK isn't that strong. And they don't support that much anyway, they negotioated special tarifs for them in the past under the threat of leaving. Now they will try that again, but I think it won't work anymore. The others will simply say "you want to leave? Fine, then leave".
After all, we're not the American Empire that declares war on parts that want to leave and then calls it a civil war.
Indeed. I'd say some other countries filed some criminal charges against the GCHQ about their spying for the US to give them some more incentive to leave. Some BND officials should have that comming too.
"There are so many decisions from the early days we're stuck with now, why are these so special?"
This one is special because some organizations (those that didn't learn those lessons in the 90's) are pushing to make the same mistakes again. Only this time the results could be different: people not buying US-made software anymore. And with open source crypto generaly available now this won't work anyway.
If get rid of the tiles is not an option I'll pass.
I just thought they were really desperate to get everybody on the tilke-OS crap in the hope that desktop users would care for crappy "apps" on a big screen.