Want to bet that this "personal assistant" doesn't have to upload every and any kind of information you share with it, willingly or otherwise, to Facebook?
Here is a four step plan for every time you plan to create legislation about this magical thing called "the internet".
1. Find out how the internet works 2. Once you realized you're too stupid to understand it, discuss your law idea with someone who isn't. 3. If that someone tells you that it either unenforceable, technically impossible or completely insane, drop the idea. 4. You, and only you, find a way to enforce it and to implement it.
Failure to follow these steps means you accept that you'll be ridiculed. Like this bozo who very obviously wants to create a law about something he doesn't have the first clue about.
The refugees are a problem. Yes. But they are actually, weird as this may sound, a problem separate from the real problem.
Yes, Germany (and Sweden, and Austria, and maybe a few more countries) are dealing now with an influx of people who have a very different social background and a very different outlook on life than what these countries are used to. Three fairly liberal and secular countries are faced with predominantly conservative and religious people. And I mean Southern Baptists conservative and religious meets San Francisco Castro District. Just way more polarized.
Does that mean trouble? You bet. Can it be solved? We'll see.
The underlying problem, and I'm highly surprised nobody bothered to even ask this question yet, is why Germany and Sweden gladly opened up their borders like this. We're also not talking about a "normal" refugee situation. That's very obviously not the case. These people are offered (or forced) to learn the local language, there's courses to teach them the local culture and local values and there are attempts to "integrate" them into the local society. Why would anyone do that with a refugee?
This is something you do with an immigrant. And this is what these people are. And what they are supposed to be. As someone said before in this thread, countries are looking for cheap labour, and the times when Romanians and Poles were cheap are over. But we're importing a lot of social troubles that way. Surprisingly, the problem will even less be the refugees themselves. Because they will find employment, they're cheap. What we will create that way, though, is an increasingly unhappy and increasingly hateful and resentful amount of people who have been losing out by the development of the past years and who will lose even more in the future with more and more of their jobs being either outsourced by shipping the jobs overseas or by shipping their replacement in.
Taking over a device doesn't mean I have to reprogram it. It can be as simple as making it do something it "should" do, but in a way that benefits me as its hacker, not its owner or maker. In your scenario, all I have to find is some way to use it in a way that the maker didn't foresee and I'm in. For the device's lifetime, since there is no way to lock me out, ever.
I could see your point if we were talking about systems with a purpose-built firmware that has minimalist abilities. Sadly, what we're usually looking at in more and more of those IoT gadgets is a full blown OS with all the lovely capabilities and security flaws you can find in one.
That's what ham has degenerated into in the US? That's sad. It's way different over here in Europe. If there's a disaster happening anywhere you can rest assured that people will load up their trucks with their equipment and travel across the continent to be there. There's also little that's more reliable than these guys when it comes to getting information into and out of areas that have been flooded or hit by any other disaster.
Either people have made up their mind about it by now. Then they have taken a side in that "battle". And no kind of evidence, real or fabricated, will sway them. They will believe whatever side they chose and will consider anything offered from the other side as propaganda.
Or they have not made up their mind about it by now. If so, then only because of apathy because they don't give a shit about which side is "right".
Encryption is only useful if you do not trust the communication way but can trust the parts that do the actual encryption. In this case, you cannot do that.
Proven, yes. But more importantly reverse engineered, subverted, then used against its maker.
Security isn't a one way road. If you know your communication is being tapped and your opponent does not know that you know it, it becomes a very useful tool to feed him false information.
If the new definition of terrorist is that anyone is one who dares to disagree with government overstepping the privileges it was granted to better serve its citizens, then yes, I'm a terrorist. Put the label on the pile over there, I'll ignore later.
I dare to disagree. Sure, you can get a ham license easily without knowing the first thing about the inner workings of your toys, but true "ham street cred" is what most ham operators are after. And I can't speak for your country, in mine they are subject to a lot of regulation and it's a favorite pastime of many ham enthusiasts to sidestep it, of course this entails knowing a lot about how to tweak, build and rebuild your tools because simply buying something that boosts your performance is not an option.
Yes. You. You also know that TCP isn't the Chinese equivalent of the NSA. For how many people out there do you think this is true, too?
Most people out there do not even know this is an issue. They don't expect security to be standard, they don't even imagine that this could be something to even consider. Yes, the new fridge connects to the internet, but they don't make the connection "fridge + internet = security problem". And if you bring up the topic, all they do is shrug and say "But why should I care that some hacker in Albania knows that my milk is over its date?"
Explaining how this is a problem to these people is really, really tricky. And even if they believe you (because you'd be surprised how often you get that suspicious eye and a "oh c'mon, that CANNOT happen!"), how many will actually give a shit that their fridge becomes part of a huge DDoS botnet?
Slashdot Mirror
That's US thinking, with your fantasies about "due process" and "admissible evidence". Europe is more like "You steal my stuff, your ass is mine!"
Want to bet that this "personal assistant" doesn't have to upload every and any kind of information you share with it, willingly or otherwise, to Facebook?
In theory, yes. Unfortunately it's about as sensible as putting a screen made of glass in front of the tube of your TV.
So that's why they measure temperature in Fahrenheit, that way they are at least more intelligent than the average cabbage...
You really think politicians would put a stop on the only technology they know how to use to annoy you whenever election time comes?
Here is a four step plan for every time you plan to create legislation about this magical thing called "the internet".
1. Find out how the internet works
2. Once you realized you're too stupid to understand it, discuss your law idea with someone who isn't.
3. If that someone tells you that it either unenforceable, technically impossible or completely insane, drop the idea.
4. You, and only you, find a way to enforce it and to implement it.
Failure to follow these steps means you accept that you'll be ridiculed. Like this bozo who very obviously wants to create a law about something he doesn't have the first clue about.
You still want that wannabe dictator to join? Seriously, if that asshat is getting in, I'll find a way to get out!
I'm pretty sure all the Viagra in the world could not make that miracle happen.
By trying to circumvent the law. You could not have become a convenient target by playing by the rules.
Could you PLEASE stop pouring salt into that open, festering wound?
The refugees are a problem. Yes. But they are actually, weird as this may sound, a problem separate from the real problem.
Yes, Germany (and Sweden, and Austria, and maybe a few more countries) are dealing now with an influx of people who have a very different social background and a very different outlook on life than what these countries are used to. Three fairly liberal and secular countries are faced with predominantly conservative and religious people. And I mean Southern Baptists conservative and religious meets San Francisco Castro District. Just way more polarized.
Does that mean trouble? You bet. Can it be solved? We'll see.
The underlying problem, and I'm highly surprised nobody bothered to even ask this question yet, is why Germany and Sweden gladly opened up their borders like this. We're also not talking about a "normal" refugee situation. That's very obviously not the case. These people are offered (or forced) to learn the local language, there's courses to teach them the local culture and local values and there are attempts to "integrate" them into the local society. Why would anyone do that with a refugee?
This is something you do with an immigrant. And this is what these people are. And what they are supposed to be. As someone said before in this thread, countries are looking for cheap labour, and the times when Romanians and Poles were cheap are over. But we're importing a lot of social troubles that way. Surprisingly, the problem will even less be the refugees themselves. Because they will find employment, they're cheap. What we will create that way, though, is an increasingly unhappy and increasingly hateful and resentful amount of people who have been losing out by the development of the past years and who will lose even more in the future with more and more of their jobs being either outsourced by shipping the jobs overseas or by shipping their replacement in.
And this is going to blow sooner or later.
Taking over a device doesn't mean I have to reprogram it. It can be as simple as making it do something it "should" do, but in a way that benefits me as its hacker, not its owner or maker. In your scenario, all I have to find is some way to use it in a way that the maker didn't foresee and I'm in. For the device's lifetime, since there is no way to lock me out, ever.
I could see your point if we were talking about systems with a purpose-built firmware that has minimalist abilities. Sadly, what we're usually looking at in more and more of those IoT gadgets is a full blown OS with all the lovely capabilities and security flaws you can find in one.
That's what ham has degenerated into in the US? That's sad. It's way different over here in Europe. If there's a disaster happening anywhere you can rest assured that people will load up their trucks with their equipment and travel across the continent to be there. There's also little that's more reliable than these guys when it comes to getting information into and out of areas that have been flooded or hit by any other disaster.
Folks? Nobody, really, NOBODY gives a shit.
Either people have made up their mind about it by now. Then they have taken a side in that "battle". And no kind of evidence, real or fabricated, will sway them. They will believe whatever side they chose and will consider anything offered from the other side as propaganda.
Or they have not made up their mind about it by now. If so, then only because of apathy because they don't give a shit about which side is "right".
Sources? What's that "sources" you're talking about, get the news out while it's hot, nobody gives a shit about "sources".
Holy...! This runs so much deeper than anyone thought.
Gotta retweet it instantly! We have confirmation!
Encryption is only useful if you do not trust the communication way but can trust the parts that do the actual encryption. In this case, you cannot do that.
Proven, yes. But more importantly reverse engineered, subverted, then used against its maker.
Security isn't a one way road. If you know your communication is being tapped and your opponent does not know that you know it, it becomes a very useful tool to feed him false information.
If the new definition of terrorist is that anyone is one who dares to disagree with government overstepping the privileges it was granted to better serve its citizens, then yes, I'm a terrorist. Put the label on the pile over there, I'll ignore later.
I dare to disagree. Sure, you can get a ham license easily without knowing the first thing about the inner workings of your toys, but true "ham street cred" is what most ham operators are after. And I can't speak for your country, in mine they are subject to a lot of regulation and it's a favorite pastime of many ham enthusiasts to sidestep it, of course this entails knowing a lot about how to tweak, build and rebuild your tools because simply buying something that boosts your performance is not an option.
Nah, they just jumped off the cliff. That does cure depression, actually. Side effects include death, though.
You can try to cure me by throwing money at me any time you like.
> Making auto-updates work correctly is HARD.
> - It require advanced knowledge in cryptography
I think making a proper IoT device is hard, and it also requires knowledge in cryptography.
Logically your statements demand that making auto-updates work correctly equals making a proper IoT device.
Yes. You. You also know that TCP isn't the Chinese equivalent of the NSA. For how many people out there do you think this is true, too?
Most people out there do not even know this is an issue. They don't expect security to be standard, they don't even imagine that this could be something to even consider. Yes, the new fridge connects to the internet, but they don't make the connection "fridge + internet = security problem". And if you bring up the topic, all they do is shrug and say "But why should I care that some hacker in Albania knows that my milk is over its date?"
Explaining how this is a problem to these people is really, really tricky. And even if they believe you (because you'd be surprised how often you get that suspicious eye and a "oh c'mon, that CANNOT happen!"), how many will actually give a shit that their fridge becomes part of a huge DDoS botnet?
That will sell.
As soon as customers buying a fridge or a stove even know about this being an issue.