Coin is more than just contactless. It has a whole set of (useless) technology behind it. The US also has contactless cards. The wrist thing isn't a real device, just a marketing photo.
You are 100% right. I guess what I meant is why the consumers keep using this stuff. I understand the credit card companies love the idea of frictionless payments. I also think paying with a phone is more of a hassle than paying with a card.
And the other point is why even bother requiring chip and signature if you are going to push people to use insecure smartphones for payment?
I just call it clever programming. After all, your computer is connecting to ME and sending me information that I am requesting. I'm not logging/breaking into your machine and getting the information. There are no laws that state what "information you shouldn't be able to get".
On the other hand in the US we have finally started to require chip (and signature) cards. I never understood this stuff. How hard is it to insert a plastic card in a slot for payment? And given the sorry state of Smart Phone security why do people insist on using their phones for payment? You are just asking for trouble.
There are over 3 billion Internet users. The number that accessed these sites is a small fraction of Internet users. A small fraction of the public are pedophiles, and a significant portion of them probably seek out these sites in order to fulfill their deviant behavior, since it is so easy to obtain via the Internet.
What i don't get it how an adult can find children sexually attractive. There are no normal cues that trigger sexual interest. I just feel sorry for the exploited children.
Right...you would need a flaw in the browser that is going to send you that information. I'm not sure if that is "hacking", or just monitoring. After all, the client machine initiated the connection to the host machine, which then obtained the information. I doubt there is a law against this. If you connect to my machine why can't I obtain as much information about your machine as I can, using any means?
I mean maybe it is hacking, but it isn't clear cut. There are no laws that I know of that says you can't exploit bugs to obtain mac addresses of machines that connect to you.
Right...but is that really hacking? Maybe it is. They are just using a bug to obtain information from a machine that connected to their compromised site. I'm sure lots of companies do that too. If I craft some JavaScript that sends me your MAC address via a bug in the JS implementation when your machine connects to me, is that hacking? Or just clever programming.
If your neighbors computer connected to yours, and you collected information about it, is that against the law? If I understood it, they were gathering information of computers which were accessing the sites.
Maybe I misunderstood, but I thought the NIT was placed on the servers hosting the sites (and maybe the Tor nodes) and used flaws in the connecting client computers browsers to get IP addresses, etc. Probably from the HTTP headers. I didn't think they installed NIT on the client computers themselves. I might we wrong. That is the problem with these sensationalist stories: you never know what they really did. In my opinion if you are just capturing information that the client machine is willing to send (even via a flaw) it isn't really hacking. More like monitoring.
They weren't hacking. They were obtaining the IP address of connected machines who were using Tor to access child porn sites. I just call that good investigation. Your IP address isn't private information, just like your postal address isn't.
Maybe the answer is that there weren't many stars there to start out with. Why assume they have been "stripped" away? We barely know anything about black holes. Since they are so far away we can never get close enough to them to study them effectively. We can only guess. This will be a mystery forever.
Nature is a for profit magazine. You need to subscribe to it to get the content. The PDF money goes to the publisher. However there is a non-paywall link in the Slashdot summary. I'm not seeing the problem here.
And Bluetooth, since there is a privilege escalation issue there too (CVE-2015-6641). In fact, just turn off everything, then you will be completely safe. Maybe. Just to be 100% sure, keep the phone off and pull the battery.
Hello, he THINKS he is not connecting to the Internet (probably because he claims he doesn't use web browser or email). But since MMS is set to autoretrieve by default on Android, he likely IS connecting to the Internet. He just doesn't know it.
Bottom line: if you are worried about security or privacy don't use a Smart Phone (android or not).
The default setting is on for MMS apps including the built in Google ones.
"but so long as one turns off auto-retrieving MMS files, you're in no danger from it"
The vast majority of people aren't going to do this. He is in danger even if he doesn't think he is receiving MMS, because they receive MMS automatically by default.
And yes, Google tracks you server side. You cannot turn off the tracking. You are naiive if you think you can.
A lot. Since he is using text messaging, he can receive a MMS. This MMS can do anything to your phone because of the bugs. You don't even need to open the MMS. You cant prevent getting a MMS if you have text messaging enabled.
Also, Google logs everything you do on your phone, so that is a risk as well. Personally I would avoid smart phones entirely if you are worried about security or privacy. Since he never connects to the Internet and never does MMS a simple flip phone will do for him.
It always seems like there are tons of "research groups" investigating every move the government makes. Who is paying these groups? Follow the money. They aren't doing it for free.
I noticed that it is one of the highest rated apps in the iTunes store. 70 million installs. $11 a month. That is like a billion dollars a month*!
* I don't use Lumosity.
Was this the same event as was reported here two days ago? Or new? The problem here is once your provider has been compromised you have no recourse but to assume that you and your customers who use you have been compromised as well. My guess here is that it is a disgruntled ex-employee of Linode.
It is popular to think of research University folk as lounging around not doing much, sucking up free grant money. That is what they mean by languorous.
I worked there for a time. I didn't see the issues, but I am not aware of everything that went on. I am really proud of the Lab and what it was accomplished for the US and the West in general.
Slashdot Mirror
Unless this is a type of black hole that formed a different way from the way we believe black holes to be formed.
IE11 is still there. But IE11 is being end-of-lifed ("discontinued")
Coin is more than just contactless. It has a whole set of (useless) technology behind it. The US also has contactless cards. The wrist thing isn't a real device, just a marketing photo.
You are 100% right. I guess what I meant is why the consumers keep using this stuff. I understand the credit card companies love the idea of frictionless payments. I also think paying with a phone is more of a hassle than paying with a card. And the other point is why even bother requiring chip and signature if you are going to push people to use insecure smartphones for payment?
I just call it clever programming. After all, your computer is connecting to ME and sending me information that I am requesting. I'm not logging/breaking into your machine and getting the information. There are no laws that state what "information you shouldn't be able to get".
On the other hand in the US we have finally started to require chip (and signature) cards. I never understood this stuff. How hard is it to insert a plastic card in a slot for payment? And given the sorry state of Smart Phone security why do people insist on using their phones for payment? You are just asking for trouble.
There are over 3 billion Internet users. The number that accessed these sites is a small fraction of Internet users. A small fraction of the public are pedophiles, and a significant portion of them probably seek out these sites in order to fulfill their deviant behavior, since it is so easy to obtain via the Internet. What i don't get it how an adult can find children sexually attractive. There are no normal cues that trigger sexual interest. I just feel sorry for the exploited children.
Right...you would need a flaw in the browser that is going to send you that information. I'm not sure if that is "hacking", or just monitoring. After all, the client machine initiated the connection to the host machine, which then obtained the information. I doubt there is a law against this. If you connect to my machine why can't I obtain as much information about your machine as I can, using any means? I mean maybe it is hacking, but it isn't clear cut. There are no laws that I know of that says you can't exploit bugs to obtain mac addresses of machines that connect to you.
Right...but is that really hacking? Maybe it is. They are just using a bug to obtain information from a machine that connected to their compromised site. I'm sure lots of companies do that too. If I craft some JavaScript that sends me your MAC address via a bug in the JS implementation when your machine connects to me, is that hacking? Or just clever programming.
If your neighbors computer connected to yours, and you collected information about it, is that against the law? If I understood it, they were gathering information of computers which were accessing the sites.
Maybe I misunderstood, but I thought the NIT was placed on the servers hosting the sites (and maybe the Tor nodes) and used flaws in the connecting client computers browsers to get IP addresses, etc. Probably from the HTTP headers. I didn't think they installed NIT on the client computers themselves. I might we wrong. That is the problem with these sensationalist stories: you never know what they really did. In my opinion if you are just capturing information that the client machine is willing to send (even via a flaw) it isn't really hacking. More like monitoring.
They weren't hacking. They were obtaining the IP address of connected machines who were using Tor to access child porn sites. I just call that good investigation. Your IP address isn't private information, just like your postal address isn't.
Maybe the answer is that there weren't many stars there to start out with. Why assume they have been "stripped" away? We barely know anything about black holes. Since they are so far away we can never get close enough to them to study them effectively. We can only guess. This will be a mystery forever.
Nature is a for profit magazine. You need to subscribe to it to get the content. The PDF money goes to the publisher. However there is a non-paywall link in the Slashdot summary. I'm not seeing the problem here.
And Bluetooth, since there is a privilege escalation issue there too (CVE-2015-6641). In fact, just turn off everything, then you will be completely safe. Maybe. Just to be 100% sure, keep the phone off and pull the battery.
They don't. But that guy isn't using CM. Even with CM the carrier is watching you.
Hello, he THINKS he is not connecting to the Internet (probably because he claims he doesn't use web browser or email). But since MMS is set to autoretrieve by default on Android, he likely IS connecting to the Internet. He just doesn't know it. Bottom line: if you are worried about security or privacy don't use a Smart Phone (android or not).
The default setting is on for MMS apps including the built in Google ones. "but so long as one turns off auto-retrieving MMS files, you're in no danger from it" The vast majority of people aren't going to do this. He is in danger even if he doesn't think he is receiving MMS, because they receive MMS automatically by default. And yes, Google tracks you server side. You cannot turn off the tracking. You are naiive if you think you can.
A lot. Since he is using text messaging, he can receive a MMS. This MMS can do anything to your phone because of the bugs. You don't even need to open the MMS. You cant prevent getting a MMS if you have text messaging enabled. Also, Google logs everything you do on your phone, so that is a risk as well. Personally I would avoid smart phones entirely if you are worried about security or privacy. Since he never connects to the Internet and never does MMS a simple flip phone will do for him.
It always seems like there are tons of "research groups" investigating every move the government makes. Who is paying these groups? Follow the money. They aren't doing it for free.
I noticed that it is one of the highest rated apps in the iTunes store. 70 million installs. $11 a month. That is like a billion dollars a month*! * I don't use Lumosity.
Was this the same event as was reported here two days ago? Or new? The problem here is once your provider has been compromised you have no recourse but to assume that you and your customers who use you have been compromised as well. My guess here is that it is a disgruntled ex-employee of Linode.
It is popular to think of research University folk as lounging around not doing much, sucking up free grant money. That is what they mean by languorous.
I worked there for a time. I didn't see the issues, but I am not aware of everything that went on. I am really proud of the Lab and what it was accomplished for the US and the West in general.
Think of it as payment for the millions of dead Americans, killed over the two European World Wars. No need to thank us.