I'd say yes. Only because the iPhone is the most scrutinized (and vilified) device on the web and it hasn't been discovered so far. Also if you RTFA you'd see that the author reported that it's off by default.
Just as a point of fact, this cannot be proven without someone doing the type of analysis that Trevor Eckhart did with Android. It's not enough to assume that turning it off disables all communication, or assuming that someone else would have found it. You need a verifiable negative, that someone specifically looked for it and discovered that it is not transmitting.
carriers and handset makers need the ability to monitor their networks for problem cell sites and areas of low to no signal
First, handset makers don't have networks or cell sites. Second, why do carriers need to use my device to test their network, they don't have their own equipment to do that? And if my device is transmitting diagnostic data, why the hell are they charging me data fees to send them diagnostics? I should be charging them. The point is that they don't need to use my device to test their network. And if they're going to ask me to do that, they sure as hell better tell me and better give me a way to opt out. Neither of those happened when I bought my phone. iOS took the right path with specifically calling it diagnostic mode, and having it disabled by default. Sprint tries to hide it from me. That's not right.
as well diagnostics about the phone and any problem apps
Again, they don't *need* the ability to do that. It would be *nice* if they had it, and frankly if they asked me I might allow them. But since they try to sneak it in the backdoor now I simply don't trust them and it's finally pushed me to the point where I'm ready to install Cyanogenmod and get rid of their software altogether. So now they get nothing.
if you go for tech support it's not like the people magically know everything that is wrong with your phone.
Yeah, you're right, even with all the data my phone has been sending them they still don't know what's wrong with it. So why should I send the data to them?
if you complain of dropped calls its important to know where they are occuring
A diagnostic application specifically for monitoring dropped calls is completely different than the software that is actually being used. Dropped calls are just one aspect that they try to highlight to claim that the software is benevolent, and then they deny the ability to log keystrokes even when proof is shown that they are.
If the company is lying about what their capabilities are and what data they're collecting, then that's a major red flag. That's enough to get me to remove the software.
The issue for me is that these scientists are, making decisions that should be evaluated well before they act, and not just by them, but by a larger audience.
According to the article, the scientist is still doing controlled cage trials. It's his corporate partner, the company who actually developed the mutation, that has already started releasing them in the wild. I'm not sure that science is to blame here.
Oxitec's historic first release of GM mosquitoes in 2009 killed an estimated 80% of the A. aegypti population on the Grand Cayman island in the Carribbean - a geographically isolated area.
More mutant, autocidal mosquitoes have been released in Malaysia, and the technique is reportedly going into large scale production in Brazil.
James sees Oxitec's full-speed-ahead approach as a potential risk to the entire science of genetic modification. "That's the difficulty of working with corporations," he told Scientific American, "I can't control corporate partners."
In an ideal world, that's right, you would whitelist IPs. But in the practical world, that's not how it happens. Web hosts aren't going to whitelist IPs, they just open SSH.
I'm not saying they did, I don't think Apple really cares about the economy as long as it doesn't hurt them. The article talks about the impact of data centers on the economy.
My point was that several servers do use SSH. If I rent a dedicated server, SSH is how I get things done. If an exploit is discovered in httpd, the correct solution is not to block port 80.
It's definitely more complicated. But when Apple has more money than the government, you tend to think that maybe they could help out a little more. They don't need to make the same profits on the devices, they simply don't need to. They can take a revenue cut and still be very profitable, and be able to slap a little "Made In The USA" logo on their products. Consumers tend to be willing to spend a little more if they think they're helping out.
It is not illegal, for you to agree, to the carriers collection of the data, which is why regulation specifically making it illegal, or spelling out your rights, is required to stop it.
Data centers aren't going to solve any economic problems. If Apple wanted to make a positive impact on the US economy then they would move manufacturing jobs to the US. That would mean lower revenue or higher prices, or both, but that's what they would do if they wanted to have a positive impact.
Maybe he's just assuming that's what it is because he's familiar with the satellite calibration patterns that the US used with Corona in the 60s. Or maybe it's just a guess.
So... they correspond to something on the ground they want to match, I betcha.
I betcha not. I betcha they send the satellite up with an image of what to look for on the ground and where to find it, the satellite heads above it, and then orients itself until the view on the ground matches the image. The purpose is for the satellite to calibrate its own position and orientation in space. Once that's done then they can just tell the damn thing where to go to look at whatever the hell they want to look at.
You can with CSS animations. The problem is Chrome and Mozilla have their own incompatible implementations.
Unfortunately for us, our animators don't understand browser differences. Because they're animators, not programmers. This is why we need a tool to export our Flash projects to HTML5. Without that this is a non-starter. We already have all of our Flash frameworks and courseware shells developed, we don't have the time right now to redirect all of our programmers to create an entirely new set of frameworks, models, and tools by hand and then train our animation staff how to use them.
Drag and drop, file completation dialog boxes, simulations, and interactions all are part of the HTML 5 standard.
What standard? All I can find is an editor's draft specification dated about 2 weeks ago. Have they already released a candidate recommendation and final standard since then?
Flash will stay around for desktop users of training videos for 3 years.
No, Flash content will continue to be produced until there is a viable HTML5 exporter that does not drop functionality. Once we reach that point, the existing Flash courseware will still be in use for probably another 10 years or so before we see a training environment that does not include any Flash-based courseware. There's no reason to state an arbitrary timeline like 3 years, especially since this is Adobe we're talking about. When Adobe releases something that produces HTML5 content with every feature currently in the Flash IDE supported, then we will start to see training companies producing HTML5 courseware. Note that these are not just "training videos", the courseware is much more than video. If we were producing static videos then we could use HTML5 now.
So I'm suddenly imagining an alternate "steam punk" timeline in which we had mechanisms and gears 2000 years ago. It's always amazing to see what was really known back that far.
Turns out it's actually mechanisms and gears, which means it's not so alternate.
The right tools to create web sites are web standards.
What world do you live in that every piece of content created for online distribution is a "web site". How the hell are we supposed to produce decent and interactive online training courses without Flash? If you look at good vs. bad online training courses, you'll notice that the "bad" ones are basically glorified Powerpoint presentations, just page-turners with minimal interaction and nothing to engage the learner. Guess what technologies are used to produce those courses? If you look at "good" courses you'll find animation, narration, video, software simulations, interactions like games, drag-and-drop or matching, etc, things that are proven to engage learners and increase the information retention rate. Guess which technologies are used to produce those courses?
Flash as a concept is not going to die, not for a long time. The Flash player will only die once a project in the Flash IDE can be exported to HTML5 with no loss of functionality. As it stands, there are many, many things that you can do in the Flash IDE that do not get supported when you export to HTML5.
And what percentage of malware took advantage of flash flaws- it was quite a high percent if I recall.
Today, surprisingly only 16%. Java is the king of malware with 37% of infections, and Acrobat is trying to keep up at 32%. Those three combine for 85% of infections. The IE browser itself and Windows Help make up a big chunk of the remainder.
What better symbol of corporate control is there than Flash?
Well, Apple, for one. Adobe exerts control over but two things: Jack, and Shit, and Jack left town.
Flash isn't going anywhere. It may end up relegated to corporate online training, but it's not dying by any sense of the word. It's just settling into its niche. The Flash player is only going to die when you can author a complete online training course in the Flash IDE and export it to HTML5 with no loss of functionality. That is still years away, at best.
Re:Unfortunate
on
Occupy Flash?
·
· Score: 4, Insightful
What issue is that? That a bunch of idiots are having a street party calling it a 'movement' when all they really need to do is actually fucking vote rather than being whiney little bitches?
Hey, great solution. They can vote for the Republican candidate who has been vetted and funded by Wall Street, or the Democrat candidate who has been vetted and funded by Wall Street. Yeah, that will show them!
b) You are not allowed to use firearm in a crime. Attacking police with a rock will get you arrested and held overnight, then released.
In Oregon, assaulting a police officer will get you a minimum of 14 days, and since it's a class C felony there's a max of 5 years and $125,000 fine.
Taking a firearm into a confrontational situation is a dangerous game.
I see. And these guys are just out there to have fun. They don't think much is at stake.
I especially like the part in the post I replied to where he refers to the people thinking about forming an "angry mob". Make no mistake, no one in Portland is talking about forming a happy mob. The focus of the mob-building community in Portland currently concerns the area of angry mobs. I just love the authority of this line:
I heard people starting to talk about forming an angry mob with their own sticks and rocks
People aren't talking about forming an angry mob. They're starting to talk. They aren't actually talking yet, but they're starting to. They haven't formed the angry mob yet though, at the present "people" can only be heard starting to talk about forming said angry mob. Therefore, something has to be done.
The last straw was the elements in the camp seeking confrontation stock piling shields and weapons including molatov cocktails, rocks, sticks and homemade frag grenades made with glass and fireworks. I heard people starting to talk about forming an angry mob with their own sticks and rocks to go down and confront the camps if the police didn't do anything.
Seriously, rocks and sticks? What, did they outlaw knives in Portland? You realize that you can carry guns there, right, even a concealed pistol? But you're going to go with angry mobs assaulting each other with rocks and sticks. Wait, are they the kind of sticks that have a big square with words on it on one end?
iPhone 4S ships with an 800MHz dual core processor, on a server you might have a little more
I think you're on to something there, I think that Apple may in fact be using servers that are powered by a little more than the hardware that powers the phone. They may even have more than one server.
Slashdot Mirror
Zeus is spread mainly through drive-by downloads and phishing schemes.
Drive-by downloads have been the primary infection vector for a while now.
How long as CarrierIQ been part of iOS?
CarrierIQ is relatively new, and Apple is rather conservative.
CarrierIQ is 2 years older than iOS.
As surprised as I am that they have it in the first place, it's unlikely that it's in anything pre-dating iOS 5.
Oh, it's *unlikely*. Well, call off the search then, nothing to see here.
I'd say yes. Only because the iPhone is the most scrutinized (and vilified) device on the web and it hasn't been discovered so far. Also if you RTFA you'd see that the author reported that it's off by default.
Just as a point of fact, this cannot be proven without someone doing the type of analysis that Trevor Eckhart did with Android. It's not enough to assume that turning it off disables all communication, or assuming that someone else would have found it. You need a verifiable negative, that someone specifically looked for it and discovered that it is not transmitting.
carriers and handset makers need the ability to monitor their networks for problem cell sites and areas of low to no signal
First, handset makers don't have networks or cell sites. Second, why do carriers need to use my device to test their network, they don't have their own equipment to do that? And if my device is transmitting diagnostic data, why the hell are they charging me data fees to send them diagnostics? I should be charging them. The point is that they don't need to use my device to test their network. And if they're going to ask me to do that, they sure as hell better tell me and better give me a way to opt out. Neither of those happened when I bought my phone. iOS took the right path with specifically calling it diagnostic mode, and having it disabled by default. Sprint tries to hide it from me. That's not right.
as well diagnostics about the phone and any problem apps
Again, they don't *need* the ability to do that. It would be *nice* if they had it, and frankly if they asked me I might allow them. But since they try to sneak it in the backdoor now I simply don't trust them and it's finally pushed me to the point where I'm ready to install Cyanogenmod and get rid of their software altogether. So now they get nothing.
if you go for tech support it's not like the people magically know everything that is wrong with your phone.
Yeah, you're right, even with all the data my phone has been sending them they still don't know what's wrong with it. So why should I send the data to them?
if you complain of dropped calls its important to know where they are occuring
A diagnostic application specifically for monitoring dropped calls is completely different than the software that is actually being used. Dropped calls are just one aspect that they try to highlight to claim that the software is benevolent, and then they deny the ability to log keystrokes even when proof is shown that they are.
If the company is lying about what their capabilities are and what data they're collecting, then that's a major red flag. That's enough to get me to remove the software.
The issue for me is that these scientists are, making decisions that should be evaluated well before they act, and not just by them, but by a larger audience.
According to the article, the scientist is still doing controlled cage trials. It's his corporate partner, the company who actually developed the mutation, that has already started releasing them in the wild. I'm not sure that science is to blame here.
Oxitec's historic first release of GM mosquitoes in 2009 killed an estimated 80% of the A. aegypti population on the Grand Cayman island in the Carribbean - a geographically isolated area.
More mutant, autocidal mosquitoes have been released in Malaysia, and the technique is reportedly going into large scale production in Brazil.
James sees Oxitec's full-speed-ahead approach as a potential risk to the entire science of genetic modification. "That's the difficulty of working with corporations," he told Scientific American, "I can't control corporate partners."
In an ideal world, that's right, you would whitelist IPs. But in the practical world, that's not how it happens. Web hosts aren't going to whitelist IPs, they just open SSH.
I'm not saying they did, I don't think Apple really cares about the economy as long as it doesn't hurt them. The article talks about the impact of data centers on the economy.
My point was that several servers do use SSH. If I rent a dedicated server, SSH is how I get things done. If an exploit is discovered in httpd, the correct solution is not to block port 80.
they can't attach a zero day SSH exploit if the only hole is port 80 to Apache.
What about the edge cases where you're running something other than a vanilla web server?
It's definitely more complicated. But when Apple has more money than the government, you tend to think that maybe they could help out a little more. They don't need to make the same profits on the devices, they simply don't need to. They can take a revenue cut and still be very profitable, and be able to slap a little "Made In The USA" logo on their products. Consumers tend to be willing to spend a little more if they think they're helping out.
It is not illegal, for you to agree, to the carriers collection of the data, which is why regulation specifically making it illegal, or spelling out your rights, is required to stop it.
Shatner, is, that, you?
Data centers aren't going to solve any economic problems. If Apple wanted to make a positive impact on the US economy then they would move manufacturing jobs to the US. That would mean lower revenue or higher prices, or both, but that's what they would do if they wanted to have a positive impact.
Maybe he's just assuming that's what it is because he's familiar with the satellite calibration patterns that the US used with Corona in the 60s. Or maybe it's just a guess.
So... they correspond to something on the ground they want to match, I betcha.
I betcha not. I betcha they send the satellite up with an image of what to look for on the ground and where to find it, the satellite heads above it, and then orients itself until the view on the ground matches the image. The purpose is for the satellite to calibrate its own position and orientation in space. Once that's done then they can just tell the damn thing where to go to look at whatever the hell they want to look at.
You can with CSS animations. The problem is Chrome and Mozilla have their own incompatible implementations.
Unfortunately for us, our animators don't understand browser differences. Because they're animators, not programmers. This is why we need a tool to export our Flash projects to HTML5. Without that this is a non-starter. We already have all of our Flash frameworks and courseware shells developed, we don't have the time right now to redirect all of our programmers to create an entirely new set of frameworks, models, and tools by hand and then train our animation staff how to use them.
Drag and drop, file completation dialog boxes, simulations, and interactions all are part of the HTML 5 standard.
What standard? All I can find is an editor's draft specification dated about 2 weeks ago. Have they already released a candidate recommendation and final standard since then?
Flash will stay around for desktop users of training videos for 3 years.
No, Flash content will continue to be produced until there is a viable HTML5 exporter that does not drop functionality. Once we reach that point, the existing Flash courseware will still be in use for probably another 10 years or so before we see a training environment that does not include any Flash-based courseware. There's no reason to state an arbitrary timeline like 3 years, especially since this is Adobe we're talking about. When Adobe releases something that produces HTML5 content with every feature currently in the Flash IDE supported, then we will start to see training companies producing HTML5 courseware. Note that these are not just "training videos", the courseware is much more than video. If we were producing static videos then we could use HTML5 now.
So I'm suddenly imagining an alternate "steam punk" timeline in which we had mechanisms and gears 2000 years ago. It's always amazing to see what was really known back that far.
Turns out it's actually mechanisms and gears, which means it's not so alternate.
The right tools to create web sites are web standards.
What world do you live in that every piece of content created for online distribution is a "web site". How the hell are we supposed to produce decent and interactive online training courses without Flash? If you look at good vs. bad online training courses, you'll notice that the "bad" ones are basically glorified Powerpoint presentations, just page-turners with minimal interaction and nothing to engage the learner. Guess what technologies are used to produce those courses? If you look at "good" courses you'll find animation, narration, video, software simulations, interactions like games, drag-and-drop or matching, etc, things that are proven to engage learners and increase the information retention rate. Guess which technologies are used to produce those courses?
Flash as a concept is not going to die, not for a long time. The Flash player will only die once a project in the Flash IDE can be exported to HTML5 with no loss of functionality. As it stands, there are many, many things that you can do in the Flash IDE that do not get supported when you export to HTML5.
And what percentage of malware took advantage of flash flaws- it was quite a high percent if I recall.
Today, surprisingly only 16%. Java is the king of malware with 37% of infections, and Acrobat is trying to keep up at 32%. Those three combine for 85% of infections. The IE browser itself and Windows Help make up a big chunk of the remainder.
Really? What is OWS's stated goal?
Try to keep up. For one, a major goal is to highlight and reduce the influence that corporations have in our government.
What better symbol of corporate control is there than Flash?
Well, Apple, for one. Adobe exerts control over but two things: Jack, and Shit, and Jack left town.
Flash isn't going anywhere. It may end up relegated to corporate online training, but it's not dying by any sense of the word. It's just settling into its niche. The Flash player is only going to die when you can author a complete online training course in the Flash IDE and export it to HTML5 with no loss of functionality. That is still years away, at best.
What issue is that? That a bunch of idiots are having a street party calling it a 'movement' when all they really need to do is actually fucking vote rather than being whiney little bitches?
Hey, great solution. They can vote for the Republican candidate who has been vetted and funded by Wall Street, or the Democrat candidate who has been vetted and funded by Wall Street. Yeah, that will show them!
a) Felons can't own firearms or ammo.
They're felons all of a sudden?
b) You are not allowed to use firearm in a crime. Attacking police with a rock will get you arrested and held overnight, then released.
In Oregon, assaulting a police officer will get you a minimum of 14 days, and since it's a class C felony there's a max of 5 years and $125,000 fine.
Taking a firearm into a confrontational situation is a dangerous game.
I see. And these guys are just out there to have fun. They don't think much is at stake.
I especially like the part in the post I replied to where he refers to the people thinking about forming an "angry mob". Make no mistake, no one in Portland is talking about forming a happy mob. The focus of the mob-building community in Portland currently concerns the area of angry mobs. I just love the authority of this line:
I heard people starting to talk about forming an angry mob with their own sticks and rocks
People aren't talking about forming an angry mob. They're starting to talk. They aren't actually talking yet, but they're starting to. They haven't formed the angry mob yet though, at the present "people" can only be heard starting to talk about forming said angry mob. Therefore, something has to be done.
The last straw was the elements in the camp seeking confrontation stock piling shields and weapons including molatov cocktails, rocks, sticks and homemade frag grenades made with glass and fireworks. I heard people starting to talk about forming an angry mob with their own sticks and rocks to go down and confront the camps if the police didn't do anything.
Seriously, rocks and sticks? What, did they outlaw knives in Portland? You realize that you can carry guns there, right, even a concealed pistol? But you're going to go with angry mobs assaulting each other with rocks and sticks. Wait, are they the kind of sticks that have a big square with words on it on one end?
iPhone 4S ships with an 800MHz dual core processor, on a server you might have a little more
I think you're on to something there, I think that Apple may in fact be using servers that are powered by a little more than the hardware that powers the phone. They may even have more than one server.