The last option you mention, creating an emulated copy of the phone, is ultimately the most likely scenario the FBI will use in the future.
They can simply copy the contents of the phone, copy any IDs or chip based encryption keys, throw it into a virtualized environment and then send tons of possible combinations at it.
In the end, the fingerprint scanner is probably the easiest method to break. The FBI already has a huge database of fingerprints then can just randomly throw at the virtualized phone, or even generate random fingerprints. The fingerprint software itself is not as accurate as people think, so I doubt the phone would last a day or two of brute force.
Looks like you're talking about the Cortana features. You can turn them off and all those items listed (in the disclose.tv article) and much of the Microsoft list will stop.
No one has actually proven that it records typing into Password boxes, though.
In any case, most of these behaviors are already present in other software, like web browsers, and people do not seem to mind. Prefetching and auto-complete are pretty much the same as the Cortana "telemetry" mentioned.
If you are really paranoid, I am sure someone has produced a hosts file you can use to stop all of them, including Microsoft, Google, etc.
You realize you need to explicitly sign yourself into a Microsoft account using Windows 10 to have the recovery keys transmitted?
You simply can't see the similarities at all? Neither action is required and both lead to privacy endangering outcomes.
On the one hand, you can turn your computer off, pull the hard drive out, store it securely, etc., and the fact you had the recovery keys copied means nothing. Hell, you could even remove the Microsoft Account, force the recovery keys to be recreated and you'll be safe. On the other hand, your account passwords have been sitting on someone's server on the Internet for months, accessed by any number of unknown people/systems, backed up to multiple locations and yet the moment someone grabs them there is nothing you can do to stop them from accessing any said accounts unless you know beforehand.
Just getting tired of all the fearmongering. Medical science told everyone fat was evil, so everyone swapped to using sugar instead and started an obesity epidemic. Decades later, studies find that fat was fine and had no ill effects. Eggs, milk, gluten, all the same trends repeating themselves.
There comes a point when you can't trust any medical study on diets or broad behaviors impacting mortality.
More likely that the Mac version of Chrome is optimized for Intel graphics chipsets (since most Macs have them), whereas the Chrome version for Windows has very little optimizations specific to a video chipset(which is a shame).
I'd be curious to see the benchmark run on Windows 10 using the built-in Intel video chipset instead of the Nvidia and see if Chrome runs faster.
Also, keep in mind Firefox and Unity have collaborated in the past to optimize the engine in the browser.
Seems like a overblown crisis. If it will take decades to be an issue, I am sure someone will work out a gene therapy or countermeasure to the disease by then.
This is not the 1950s. The current state of bioengineering is far more advanced than the 1950s.
No offense, but that is a very naive view. There was a time when organized crime elements rig town elections and get their members elected to office to profit their organizations (and hurt others). Felony disenfranchisement was a big part in combating it.
In modern days, I personally believe many white collar crimes should be considered felonies for disenfranchisement since the type of people we need to worry about the most these days seem to have gone up the food chain.
As far as citation, Supreme court rulings on challenges to disenfranchisement (voting and fire arms) should have some of the explanation. I cannot remember any in particular, have read a lot in my day.
No, people do not stop being US Citizens or human beings simply because they are incarcerated. Some might have their voting rights revoked for felonies (to stop them from supporting the legalization of their crime, which was a serious problem in the distant past), but they are still afforded almost every other right of their fellow citizens.
There's a post talking about him getting his Class B driving license and an image of it redacted. While I know most Californians get a lot of sun, I am pretty sure that guy is not a 20-something. He might have photoshopped someone else's photo on it, though.
Wish I had mod points, but I agree with this sentiment. Tests present a statistical average but real-world terrain and human driving is all but average.
If both phones are using different parts of the hardware, for instance if the Samsung is connected to an 802.11 ac network while the TSMC is only connected to LTE, then the Samsung might be using more power.
Having a UUID on a per Application or Developer basis is in fact better for the attacker. Then they can carefully create a phishing dialog that fits in with the design or behavior of that particular App or package and then associate any information garnered from the user to the particular device and app installation.
Without the altered library inside the actual app, they cannot do this because apps are jailed (or whatever Apple calls it).
The use of [[UIDevice currentDevice] name] and [[UIDevice currentDevice] identifierForVendor] (as well as several other pieces of information including App Name, App Version, OS Version, Language, Device Type, Location, etc.) are enough to not only create a generated Unique ID for each device to track on the analytic side but also all of the Apps infected by the malicious code.
The people tracking the smartphones do not need the actual local device UUID if they can get enough information to generate their own.
I agree with other's calls to mod parent down. Does not seem to understand the fact the list of information being digested by the hack and the access being granted is enough to be used for malicious tracking and phishing.
There can only one manufacturer with overpriced, over-hyped, over-marketed smartphones with a simple name even a toddler could remember. All the rest just don't have what it takes to cheat millions out of paying 30-60% more for poorly-designed crap.
Slashdot Mirror
The last option you mention, creating an emulated copy of the phone, is ultimately the most likely scenario the FBI will use in the future.
They can simply copy the contents of the phone, copy any IDs or chip based encryption keys, throw it into a virtualized environment and then send tons of possible combinations at it.
In the end, the fingerprint scanner is probably the easiest method to break. The FBI already has a huge database of fingerprints then can just randomly throw at the virtualized phone, or even generate random fingerprints. The fingerprint software itself is not as accurate as people think, so I doubt the phone would last a day or two of brute force.
Can someone TLDR; this guy's TLDR;? I can't read paragraphs of more than two sentences. KTHXBYE!!:))))))))))))))))
I'm glad it got cleared because this one vaccine might cut cancer rates in our children and their children by an enormous rate.
Looks like you're talking about the Cortana features. You can turn them off and all those items listed (in the disclose.tv article) and much of the Microsoft list will stop.
No one has actually proven that it records typing into Password boxes, though.
In any case, most of these behaviors are already present in other software, like web browsers, and people do not seem to mind. Prefetching and auto-complete are pretty much the same as the Cortana "telemetry" mentioned.
If you are really paranoid, I am sure someone has produced a hosts file you can use to stop all of them, including Microsoft, Google, etc.
You realize you need to explicitly sign yourself into a Microsoft account using Windows 10 to have the recovery keys transmitted?
You simply can't see the similarities at all? Neither action is required and both lead to privacy endangering outcomes.
On the one hand, you can turn your computer off, pull the hard drive out, store it securely, etc., and the fact you had the recovery keys copied means nothing. Hell, you could even remove the Microsoft Account, force the recovery keys to be recreated and you'll be safe. On the other hand, your account passwords have been sitting on someone's server on the Internet for months, accessed by any number of unknown people/systems, backed up to multiple locations and yet the moment someone grabs them there is nothing you can do to stop them from accessing any said accounts unless you know beforehand.
They just recently had a rather large study over 16 years prove sitting has no impact.
http://ije.oxfordjournals.org/...
Just getting tired of all the fearmongering. Medical science told everyone fat was evil, so everyone swapped to using sugar instead and started an obesity epidemic. Decades later, studies find that fat was fine and had no ill effects. Eggs, milk, gluten, all the same trends repeating themselves.
There comes a point when you can't trust any medical study on diets or broad behaviors impacting mortality.
Using a Microsoft account on Windows 8 or 10 is not necessary either.
But I'm willing to bet a lot more people keep themselves logged in to Chrome all the time than use a Microsoft account on Windows 10.
You're forgetting about the Google Update service for Windows and Mac, and the deep integration of Google services into most version of Android.
If anything, Google has had this very ability for years now and Microsoft is playing catch-up.
Do you have any proof of this assertion?
Furthermore, how is this any worse than Google's password manager behavior?
Hasn't really declined much for desktop market share, it's the inclusion of mobile stats that make it seem like it is declining quickly.
And that's mostly because most Android users just use the default Chrome installed and do not know any better or just don't care.
You will notice Safari usage increasing as well during the increase of mobile usage.
More likely that the Mac version of Chrome is optimized for Intel graphics chipsets (since most Macs have them), whereas the Chrome version for Windows has very little optimizations specific to a video chipset(which is a shame).
I'd be curious to see the benchmark run on Windows 10 using the built-in Intel video chipset instead of the Nvidia and see if Chrome runs faster.
Also, keep in mind Firefox and Unity have collaborated in the past to optimize the engine in the browser.
https://blog.mozilla.org/blog/...
Dude, I told you... you can't wear an afro and expect people to think you're half-jewish.
It doesn't work that way.
Seems like a overblown crisis. If it will take decades to be an issue, I am sure someone will work out a gene therapy or countermeasure to the disease by then.
This is not the 1950s. The current state of bioengineering is far more advanced than the 1950s.
I think many people need to realize that religions are not specifically theistic. You can hold atheistic beliefs and still be a religious fanatic.
Religions are a core set of beliefs, dogma and sometimes cultural symbols. They do not require a God or supernatural aspect to be consider a religion.
No offense, but that is a very naive view. There was a time when organized crime elements rig town elections and get their members elected to office to profit their organizations (and hurt others). Felony disenfranchisement was a big part in combating it.
In modern days, I personally believe many white collar crimes should be considered felonies for disenfranchisement since the type of people we need to worry about the most these days seem to have gone up the food chain.
As far as citation, Supreme court rulings on challenges to disenfranchisement (voting and fire arms) should have some of the explanation. I cannot remember any in particular, have read a lot in my day.
No, people do not stop being US Citizens or human beings simply because they are incarcerated. Some might have their voting rights revoked for felonies (to stop them from supporting the legalization of their crime, which was a serious problem in the distant past), but they are still afforded almost every other right of their fellow citizens.
The only bug I have run into so far has been the Stuck Terminal bug, where you cannot move after exiting a terminal.
And based off what I am reading elsewhere online, the bug only affects people with refresh rates over 100 hz and Gsync.
So I turned my refresh rate down and have not seen the bug since...
I am a bit concerned about content, though. Has been kinda boring so far but have not reached Diamond City yet.
There's a post talking about him getting his Class B driving license and an image of it redacted. While I know most Californians get a lot of sun, I am pretty sure that guy is not a 20-something. He might have photoshopped someone else's photo on it, though.
http://frominsidethebox.com/vi...
Wish I had mod points, but I agree with this sentiment. Tests present a statistical average but real-world terrain and human driving is all but average.
I wish I could up-mod but this is very important.
If both phones are using different parts of the hardware, for instance if the Samsung is connected to an 802.11 ac network while the TSMC is only connected to LTE, then the Samsung might be using more power.
The phones should be compared in Airplane mode.
Having a UUID on a per Application or Developer basis is in fact better for the attacker. Then they can carefully create a phishing dialog that fits in with the design or behavior of that particular App or package and then associate any information garnered from the user to the particular device and app installation.
Without the altered library inside the actual app, they cannot do this because apps are jailed (or whatever Apple calls it).
The use of [[UIDevice currentDevice] name] and [[UIDevice currentDevice] identifierForVendor] (as well as several other pieces of information including App Name, App Version, OS Version, Language, Device Type, Location, etc.) are enough to not only create a generated Unique ID for each device to track on the analytic side but also all of the Apps infected by the malicious code.
The people tracking the smartphones do not need the actual local device UUID if they can get enough information to generate their own.
I agree with other's calls to mod parent down. Does not seem to understand the fact the list of information being digested by the hack and the access being granted is enough to be used for malicious tracking and phishing.
To have a fairly powerful OpenCL GPU and tons of eDRAM on chip, it could have been a pretty powerful parallel computing platform to pair with GPGPU.
There can only one manufacturer with overpriced, over-hyped, over-marketed smartphones with a simple name even a toddler could remember. All the rest just don't have what it takes to cheat millions out of paying 30-60% more for poorly-designed crap.
Ditch the VMware for Proxmox, all web-based even the VNC to the guests. Only $100 a year per virtual host.
Get rid of the Fiber channel switch and SAN, move to Ceph (also web-based admin). Complete free and far more resilient than a centralized SAN.
Modernize and free yourself.