This article is really oddly phrased.
From how I read this, you can basically silently substitute arbitrary code or data pages of programs running in memory. Even ones that might say use security hardware like the T2 chip to make itself less vulnerable even to root based attacks.
And from the article, you just have to first execute code on the machine - a feat which with modern browser based and hardware flaw exploits, or even just plain phishing, isn't hard.
And of course, the memory manager/vfs allowing you to swap out in-use disk backed pages is nuts. There seems like there could be a lot of other bugs and exploits there.
If this was a windows flaw it'd be a big deal.
Of course, Apple probably doesn't care, because their long term aim is to get you on a platform where, in theory, you never run software or access information they haven't vetted beforehand anyway.
One run by the Internet Research Agency out of St. Petersberg during office hours, acting in unison with the other 99 accounts being run from the same room.
Or a PR/marketing firm in New York or London or LA.
Hell, most web marketing firms do this. Not to mention personal PR, business marketing agencies, ad companies propping up their own stats for clients, and of course political marketing people.
It's basically par for the course. Common practice. I'd not be surprised if there were more such accounts than real humans on FB. Twitter certainly seems that way.
Nintendo DS? I mean I guess the DS was still around when the Vita was launched... but are you talking about the 3DS? Referring to that console as a DS is a bit like referring to a SNES as a NES.
Given the 3DS is backwards compatible to the DS (mostly), no it's not.
Sadly, it doesn't look like this "Clever Commit" stuff is open source. That's disappointing from Mozilla - partnering with a game publisher with a poor customer relations track record, and using proprietary technology as an integral part of its development like this.
There does seem to be a paper but no actual code. In fact, the way the Mozilla blog is worded (https://blog.mozilla.org/futurereleases/2019/02/12/making-the-building-of-firefox-faster-for-you-with-clever-commit-from-ubisoft/) - it looks like Clever Commit is Ubisoft's technology, not even Mozilla's.
They are allowed to speculate and opine on reasons. And those speculations and opinions can be strategically selected.
Realistically, Apple didn't sell as many iPhones because the industry is beginning to plateau. An iPhone 6 or 7 is "good enough" for most users, and a lot of the apple fans already have the 10, so when the 10R comes out with not a lot of real, practical benefit but an ever-increasing price tag, yeah they'll hold on to what they have, maybe replace the battery, instead of upgrading.
Apple, seeing the whole Right to Repair thing as a threat to their politics and business model in general (for example, jailbreaking and third party app stores are an inevitable consequence) is free to say they think the repairs of devices negatively impacted their sales.
Hm not necessarily.
Remember, derivative work stuff applies to redistribution.
If you distribute something containing none of the original code (but designed to connect to it) then the derivative work doesn't exist until the user combines it with the original code on their computer, and they're entitled to make a derivative work of a copyrighted work, as long as they dont copy or distribute it. I can change words in my copy of a book as much as I want as long as I dont try to print new runs off it. And I can distribute instructions for people who have the same book to be able to deface it *exactly* the same way I did to end up with effectively a duplicate copy of my defaced book
Not familiar with the details of this case but in theory the cheat could have been developed consistent with reverse engineering exemptions and provisions in some jurisdictions.
Also, breaching a ToS is not copyright infringement, it's breach of contract.
Bear in mind this is a *preliminary* injunction. So the case it yet to be made in full and pretty much is reliant on the judge's gut feel at this point (and we know how tech savvy judges are, or aren't)
I'm pretty sure regulation agencies in many countries would have a problem with this. It's effectively a monopoly in one space enforcing a very specific ban on a product in another space via contractural means, something which Google and Microsoft, to name a few, have already been punished and regulated for.
Complain about this to your local competition watchdog agency!
Look, Facebook shouldn't have to make special concessions for the traditional news and media INDUSTRIES. However, they should be treating all comers equally. So they shouldn't have to care about driving traffic back to news sites or worrying about syndication etc. But they should have to allow everyone the same access, be it a corner store or Murdoch's News Corporation. Whether it's Alex Jones or Barack Obama.
Except, I am not a criminal. I am not hiding from another country's legal system, and have not made millions of dollars through dodgy practices.
The problem with this is that the "protecting" legal system can often mistakenly punish the innocent or fail to deal appropriately with the guilty. In this case, the fact that some over-zealous officers of the law got their paperwork wrong does not alter the space-time continuum sufficiently to have prevented his criminal activity from happening in the first place
Except currently he's not a criminal, legally anyway. He's not yet been convicted of anything. Heck, he's only been *accused* of something in a foreign jurisdiction not even in NZ. Until he is convicted then none of that is true, merely alleged.And allegations aren't enough to strip rights.
This.
It's not really a voip exploit as it's just logging into a voip phone with no authentication and initiating a call. The actual exploit is getting control of the users' pc and using it to find and get into the phone.
You could use the same method to get into any other device on the network, or to get the PC itself to use its mic to record stuff.
This is more an indictment on the OS being compromised than the phones
First up, breaking things in order to bill for fixing them is horribly unethical and unacceptable.
That said, in the Parable of the Broken Window, the glazier still benefits. If you're the kind of person to try this you probably don't care about the opportunity cost to the rest of society or the one you're billing since you now have the money in your hot little hands...
How about Genymotion? http://www.genymotion.com/ - uses VirtualBox as the underlying x86 VM layer, instead of AVD + HAXM. Supports a few additional sensors too (either emulated or passed through from real hardware if it has them)
I can't stand cooking for myself or my wife and I. It's the most boring thing I've ever done - I'd literally rather stand facing a blank white wall for an hour than cook. I'll go to great lengths to avoid cooking, and when I was single I just never did, unless I was so broke there was no other option (and I'd go without food for a couple of days before it got to that point)
However, I will cook for my son (about a year and a half old), because he really needs all the good fresh food I can provide him, and his diet is (partly) my responsibility. Somehow I exercise much more care and patience cooking for him than I ever have for myself. I still don't enjoy it but I tolerate it for him in much the same way as I tolerate changing nappies - it needs doing so it just gets done.
Thankfully my wife is an absolute wizard in the kitchen so I don't have to cook often!
Not neccessarily. His access to Tor via the campus wifi matched the timing of the emails enough to get him in a room, and then he confessed. Without the confession there'd be a lot less certainty of conviction, as the presumption of innocence would probably compel a jury, in the absence of any other compelling evidence, to find him not guilty.
Moral of the story: Don't talk to cops.
(also, don't make false bomb threats. They're stupid)
While OSX is "certified UNIX", there's a lot of proprietary APIs and libraries layered on top of that to produce the GUI environment most OSX users interact with.
So the "With some care" you speak of to make "applications [...] easily be made to compilable on multiple Linux distros" includes a working implementation of those proprietary APIs and libraries. GNUStep is that, though it's currently more like OSX ancestor NeXTSTEP than it is like modern OSX
I think the blame on companies is rooted in the idea that big business will spend insane amounts of effort on avoiding taxation, or lobbying to make legal conditions more favorable to them, but then appears to resist very little when government agencies attempt to intrude on their customers (or users') privacy.
Of course, it kinda makes sense. Whilst a government might be actively hostile towards its people, big business tends to view customers/consumers/users more like cattle - dispassionately and as disposable.
In that light, companies that do tend to try to fight for their users (eg, a certain micro-blogging company) seem even more virtuous by comparison.
Slashdot Mirror
Never made sense why a buch of letters amongst early cult cells are held up as equal to or overriding the claimed word of god himself.
Christianity makes no damn sense.
This article is really oddly phrased.
From how I read this, you can basically silently substitute arbitrary code or data pages of programs running in memory. Even ones that might say use security hardware like the T2 chip to make itself less vulnerable even to root based attacks. And from the article, you just have to first execute code on the machine - a feat which with modern browser based and hardware flaw exploits, or even just plain phishing, isn't hard.
And of course, the memory manager/vfs allowing you to swap out in-use disk backed pages is nuts. There seems like there could be a lot of other bugs and exploits there.
If this was a windows flaw it'd be a big deal.
Of course, Apple probably doesn't care, because their long term aim is to get you on a platform where, in theory, you never run software or access information they haven't vetted beforehand anyway.
What is a "fake" accunt anyway?
One run by the Internet Research Agency out of St. Petersberg during office hours, acting in unison with the other 99 accounts being run from the same room.
Or a PR/marketing firm in New York or London or LA. Hell, most web marketing firms do this. Not to mention personal PR, business marketing agencies, ad companies propping up their own stats for clients, and of course political marketing people. It's basically par for the course. Common practice. I'd not be surprised if there were more such accounts than real humans on FB. Twitter certainly seems that way.
Nintendo DS? I mean I guess the DS was still around when the Vita was launched... but are you talking about the 3DS? Referring to that console as a DS is a bit like referring to a SNES as a NES.
Given the 3DS is backwards compatible to the DS (mostly), no it's not.
Sadly, it doesn't look like this "Clever Commit" stuff is open source. That's disappointing from Mozilla - partnering with a game publisher with a poor customer relations track record, and using proprietary technology as an integral part of its development like this.
There does seem to be a paper but no actual code. In fact, the way the Mozilla blog is worded (https://blog.mozilla.org/futurereleases/2019/02/12/making-the-building-of-firefox-faster-for-you-with-clever-commit-from-ubisoft/) - it looks like Clever Commit is Ubisoft's technology, not even Mozilla's.
Not happy.
They are allowed to speculate and opine on reasons. And those speculations and opinions can be strategically selected. Realistically, Apple didn't sell as many iPhones because the industry is beginning to plateau. An iPhone 6 or 7 is "good enough" for most users, and a lot of the apple fans already have the 10, so when the 10R comes out with not a lot of real, practical benefit but an ever-increasing price tag, yeah they'll hold on to what they have, maybe replace the battery, instead of upgrading.
Apple, seeing the whole Right to Repair thing as a threat to their politics and business model in general (for example, jailbreaking and third party app stores are an inevitable consequence) is free to say they think the repairs of devices negatively impacted their sales.
Nobody is stupid enough to actually strangle the classes that create wealth by not giving them a foot out of the tax door, so to speak.
Nitpick - they don't create wealth, they're merely major redistributors of wealth. They're the pumps, not the sources.
Hm not necessarily. Remember, derivative work stuff applies to redistribution. If you distribute something containing none of the original code (but designed to connect to it) then the derivative work doesn't exist until the user combines it with the original code on their computer, and they're entitled to make a derivative work of a copyrighted work, as long as they dont copy or distribute it. I can change words in my copy of a book as much as I want as long as I dont try to print new runs off it. And I can distribute instructions for people who have the same book to be able to deface it *exactly* the same way I did to end up with effectively a duplicate copy of my defaced book
Not familiar with the details of this case but in theory the cheat could have been developed consistent with reverse engineering exemptions and provisions in some jurisdictions. Also, breaching a ToS is not copyright infringement, it's breach of contract.
Bear in mind this is a *preliminary* injunction. So the case it yet to be made in full and pretty much is reliant on the judge's gut feel at this point (and we know how tech savvy judges are, or aren't)
The rest of the world was laughing at the US long before Trump was elected....
I'm pretty sure regulation agencies in many countries would have a problem with this. It's effectively a monopoly in one space enforcing a very specific ban on a product in another space via contractural means, something which Google and Microsoft, to name a few, have already been punished and regulated for. Complain about this to your local competition watchdog agency!
Look, Facebook shouldn't have to make special concessions for the traditional news and media INDUSTRIES. However, they should be treating all comers equally. So they shouldn't have to care about driving traffic back to news sites or worrying about syndication etc. But they should have to allow everyone the same access, be it a corner store or Murdoch's News Corporation. Whether it's Alex Jones or Barack Obama.
Thats not how it works though. They have to do it legally. NZ and AU aren't the US yet, thank goodness.
won't this guarantee his extradition to the U.S.?
How?
Except, I am not a criminal. I am not hiding from another country's legal system, and have not made millions of dollars through dodgy practices.
The problem with this is that the "protecting" legal system can often mistakenly punish the innocent or fail to deal appropriately with the guilty. In this case, the fact that some over-zealous officers of the law got their paperwork wrong does not alter the space-time continuum sufficiently to have prevented his criminal activity from happening in the first place
Except currently he's not a criminal, legally anyway. He's not yet been convicted of anything. Heck, he's only been *accused* of something in a foreign jurisdiction not even in NZ. Until he is convicted then none of that is true, merely alleged.And allegations aren't enough to strip rights.
This. It's not really a voip exploit as it's just logging into a voip phone with no authentication and initiating a call. The actual exploit is getting control of the users' pc and using it to find and get into the phone. You could use the same method to get into any other device on the network, or to get the PC itself to use its mic to record stuff. This is more an indictment on the OS being compromised than the phones
This explains the decline of the station wagon then.
First up, breaking things in order to bill for fixing them is horribly unethical and unacceptable.
That said, in the Parable of the Broken Window, the glazier still benefits. If you're the kind of person to try this you probably don't care about the opportunity cost to the rest of society or the one you're billing since you now have the money in your hot little hands...
How about Genymotion? http://www.genymotion.com/ - uses VirtualBox as the underlying x86 VM layer, instead of AVD + HAXM. Supports a few additional sensors too (either emulated or passed through from real hardware if it has them)
SeaMonkey is still going strong too, with a slightly smoothed version of the old Communicator interface - http://www.seamonkey-project.o...
Fun is subjective.
I can't stand cooking for myself or my wife and I. It's the most boring thing I've ever done - I'd literally rather stand facing a blank white wall for an hour than cook. I'll go to great lengths to avoid cooking, and when I was single I just never did, unless I was so broke there was no other option (and I'd go without food for a couple of days before it got to that point)
However, I will cook for my son (about a year and a half old), because he really needs all the good fresh food I can provide him, and his diet is (partly) my responsibility. Somehow I exercise much more care and patience cooking for him than I ever have for myself. I still don't enjoy it but I tolerate it for him in much the same way as I tolerate changing nappies - it needs doing so it just gets done.
Thankfully my wife is an absolute wizard in the kitchen so I don't have to cook often!
Not neccessarily. His access to Tor via the campus wifi matched the timing of the emails enough to get him in a room, and then he confessed. Without the confession there'd be a lot less certainty of conviction, as the presumption of innocence would probably compel a jury, in the absence of any other compelling evidence, to find him not guilty.
Moral of the story: Don't talk to cops.
(also, don't make false bomb threats. They're stupid)
While OSX is "certified UNIX", there's a lot of proprietary APIs and libraries layered on top of that to produce the GUI environment most OSX users interact with.
So the "With some care" you speak of to make "applications [...] easily be made to compilable on multiple Linux distros" includes a working implementation of those proprietary APIs and libraries. GNUStep is that, though it's currently more like OSX ancestor NeXTSTEP than it is like modern OSX
Hence the kickstarter
I think the blame on companies is rooted in the idea that big business will spend insane amounts of effort on avoiding taxation, or lobbying to make legal conditions more favorable to them, but then appears to resist very little when government agencies attempt to intrude on their customers (or users') privacy.
Of course, it kinda makes sense. Whilst a government might be actively hostile towards its people, big business tends to view customers/consumers/users more like cattle - dispassionately and as disposable.
In that light, companies that do tend to try to fight for their users (eg, a certain micro-blogging company) seem even more virtuous by comparison.