Slashdot Mirror


User: cfalcon

cfalcon's activity in the archive.

Stories
0
Comments
2,533
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,533

  1. Tor browser defaults to false on Privacy Alert: Your Laptop Or Phone Battery Could Track You Online · · Score: 1

    Just a PSA, TOR browser defaults to false.

  2. Re:exactly this. on Inside the Failure of Google+ · · Score: 1

    Having 9 separate google accounts makes it a helluva lot harder to get doxxed and facefucked by whatever online meta-soldier meme is infecting the angriest of the mobs for the moment.

    Google+ is fine, if that's your thing. The problem was, it wasn't everyone's thing, and suddenly standard functionality became based on it. For awhile it seemed like Google was just trying to trip me up and expose me to all manner of risk.

  3. Re:"there was no acknowledgment that ..." on Inside the Failure of Google+ · · Score: 1

    "Who knows what the next generation will prefer?"

    Also relevantly, who CARES (unless you are planning on selling it to them, of course)?

    The current computer users aren't going offline. It's not a fad. If you can sell something to up-and-coming users, great- but:
    (a)- There's no reason to expect it will remain like that, that group could easily reject it.
    (b)- In the past "what new users want" was of paramount importance, because each successive wave of users dominated the previous ones in userbase. That's NO LONGER THE CASE. Gen X isn't gonna be some footnote of online presence like older generations- the transition happened already.

    Even if what the next wave is doing is both very different and very lucrative to the sellers of that service, it isn't something to try to change the whole of the web into, whatever it is.

  4. Re:"there was no acknowledgment that ..." on Inside the Failure of Google+ · · Score: 1

    The big lesson I learned was, never map your real name and a pseudonym in the same place. You have a pseudonym and you need to provide billing info? That pseudonym is now compromised. All these sites would pull your real name from your billing info, stamp it on your pseudonym, and now you are doxbait across the whole web because that can turn up in a correlative search. Site A's knowledge compromises totally unrelated site B. It's extremely frustrating.

  5. Re:Privacy on Inside the Failure of Google+ · · Score: 1

    Tons of people use it because they have a Facebook, and it is great for them to use that to log in places. That has obvious downsides, but maybe none that they care about? Google's approach was crappier because it suddenly tied your real name to everything.

    By the way, this is odd- at about the same time, we saw this:

    1- Facebook login spreads around. Adds convenience for many folks who would previously have to maintain separate accounts, but also ties it to their real name.
    2- Blizzard launches the "real ID" and announces that your real name will appear on their forums. The "real ID" meant that in order to chat with people across games (or for that matter, even from alternate characters in WoW, which it mostly sprung from), you have to share your real name with them, and usually an ID. The real name was grabbed from your subscription information, which they just assumed was you.
    3- G+ came along deanonymizing tons of stuff except for those who really wanted to keep it that way.

    This was all in the space of a smallish amount of time. It was very odd.

    G+ eventually backtracked. Blizzard eventually let you have "battle net tag" friends, where you communicate under a handle again, across games, and reverted the announced forum announcement under the weight of just SO MANY complaints. Only facebook continues apace like this.

    Did all these guys just look at facebook and decide that this was the way to go? That's annoying as shit!

  6. Re:Real Name Policy on Inside the Failure of Google+ · · Score: 2

    Oh, and the creepy thing- most pseudonyms or handles are chosen to be OBVIOUSLY pseudonyms or handles. This is deliberate- no one is going to think that a name like "cfalcon" is real (it doesn't fit the real name pattern). A name like "sjames" is more likely to be real than not, however, and people will interact with both assuming that fact, that one is partially anonymous and the other is reasonably easy to find in meatspace.

    By having an aggressive algorithm that detected pseudonyms, it forced a lot of people to adopt pseudonyms that LOOKED real, which just fucks up comms from every direction, as everyone assumes a real sounding fake name is probably real, because Google had taken away your ability to telegraph otherwise. That was a really low blow too.

    Again, G+ reversed this drek about a year ago.

  7. Re:Real Name Policy on Inside the Failure of Google+ · · Score: 1

    Absolutely. You click Go on that thing, and suddenly you risked losing all your existing ecosystem. They did reverse that (eventually it would just undo some stuff), but it was very sketchy and risky. Why click it if the policy is changing every month, and all your stuff could go away?

  8. Re:Real Name Policy on Inside the Failure of Google+ · · Score: 1

    Big difference. You didn't suddenly have all your accounts become instantly and magically tied to your facebook.

    Google did relent on this FULLY, by the way- while they were way fucking worse about it for awhile, they no longer require real names be used at all. I often wonder if they didn't have this at the start, if that would have made a difference? I mean, it's a pretty big competitive advantage to have a pseudonym (for instance, I'm willing to use the product) versus forced "real" names (where I'll pass, ty).

  9. Re:Why build one on Epic Mega Bridge To Connect America With Russia Gets Closer To Reality · · Score: 1

    Honestly this was never a red flag for me, but now it will be. If I get some cool house thing, I'll often buy one for my mom, but I can't imagine that is so common as to cause all those reviews.

  10. Re:... no one is paying for that on In Windows 10, Ad-Free Solitaire Will Cost You $10 -- Every Year · · Score: 5, Funny

    Take your hexedit, strike Windows down with all of your hatred, and your journey towards Linux will be complete...

  11. Ha, lower rates lol on Will Autonomous Cars Be the Insurance Industry's Napster Moment? · · Score: 1

    https://en.wikipedia.org/wiki/...

    Ok, so this is Traffic deaths as a fraction of total population. We are currently down to less than half of the maximal values that were from the 30s through the 70s. We are back down to 1920 levels of traffic deaths as a fraction of total population.

    Has this dramatic decline since 1980 sent these companies out of business?

  12. Re:I'm surprised they missed "Wi-Fi Sense." on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 1

    > And don't forget, even if you do turn off all those default settings, you can't turn off automatic updates... and Microsoft has a track record of their updates changing settings back to default...

    Home can't turn off auto-update, but Pro can. Updates are heavy enough that there will be other reliable technical workarounds for this issue, but the fact that it can't be disabled trivially on all Windows 10 is very much a big problem. I just think the others are bigger because they don't have any workarounds outside of temporary hacks that still function (or using Enterprise or something).

  13. Re:I'm surprised they missed "Wi-Fi Sense." on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 1

    >1. User enters a password, and the computer hashes it and discards the plaintext. This has is called the PSK (pre-shared key).
    Terminology I guess? It changes nothing. The point is that that the piece that gets sent to your friends is able to grant access to your network. That access piece needs to be reconstructed- not a hash of it, and it needs to be reconstructed bitwise correctly or it will not work. If the point is that the literal password isn't sent, but instead the literal number that grants access, the point is the same- the thing that grants access is accessible in plaintext by anyone granted it, via this new method.

    > You never use the password to authenticate, only the hash.

    Meaning that the "hash" (in this case the PSK) is the "password" from the perspective of security- the thing that "you know" that proves you are you. I guess if you have an embarrassing password, this spares you that embarrassment, but the point about it sending the stuff needed to access your network to your contacts remains the same.

    Note that this is, in my opinion, not really a big deal. It is easy enough to turn off, and you have to actually add the networks to a thing to make this happen. The rest of the OS is the privacy shit-show.

    > You mean the handy options screen that shows up after installation, where you can turn all of sharing off with a few clicks?

    So, I have several problems with this.
    1- This screen is not going to be there on every machine, as several won't have been installed fresh.
    2- This screen needs to be changed for every user, I'm... pretty sure?
    3- The option is like start -> settings -> accounts -> sync settings
    Settings has a zillion things. Why would you guess "accounts" contains the option to "leak all browser everything"? Once you are in accounts, "sync settings" is a pretty odd place to put that. Once you are in there you still aren't done- there's several switches. The one with all your browser history and favorites is called "browser settings". Would you rationally put your browsing history behind that label? This is very tricky! In what universe would you call your history a "setting"? Even "favorites" have a hard time being called this.

    So yes, it's a burden. You have to disable it everywhere all the time, or it gets zipped up to the cloud. Exactly like I said, it's one more burden you have to remember every time you do anything new on a box, one more thing to carry forward, one more stressful thing to remember for here to forever- and that assumes that the menu functions as advertised, and doesn't get all dicked around like everything else with every new version. So this gets added to your list of Things To Learn Anew Yearly. Fuck all that, trashbin this crap!

    > You find it surprising that Microsoft will comply with legal data requests, and they are legally required to do so?
    First, yes, it's a bit odd that they would comply with law enforcement requests. I'd hope that they would comply with subpoenas only- that leaves a paper trail and a judge and has oversight (or at least it is supposed to). Second, you are taking this out of context- the issue isn't that they will hand over data when asked, it's that they will *have all the plaintext data in hand to begin with*. Right now, Microsoft (or anyone) will obviously share information on a suspect- that's only common sense. But there's a big difference when your OS is snooping on you to this degree.

    From Microsoft:
    "Examples of data we may collect include your name, email address, preferences and interests; location, browsing, search and file history; phone call and SMS data; device configuration and sensor data; voice, text and writing input; and application usage."

    Who you are, everything you've typed including passwords, everything you've said, who you've said it to, and which local files you have accessed? That sound like a reasonable set of data for Microsoft to hand out?
    Nothing implies that they will ONLY do this in r

  14. Re:I'm surprised they missed "Wi-Fi Sense." on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 1

    Honestly, if only the "home" version was like this, I wouldn't care as much as I do. It would be a big deal, but the solution would be obvious- buy Pro.

    But- everything I said applies to pro. The only thing pro offers is the ability to turn off windows updates without strange hacks.

    No, I'm pretty sure your privacy is forfeit unless you are a corporation, no matter the price you pony up in dollars.

    Note: I could be mistaken. Maybe an extra 50 bucks buys you the non-awful version, I'm not sure- but the line is certainly not "when you pay money".

  15. Re:Executing in an invalid environment! on Japanese Scientists Fire the Most Powerful Laser On the Planet · · Score: 1

    It means you either supplied an invalid user for the environmental execution in question, or you supplied an invalid user for the execution environment. You should see to that. I hear there is a pill.

  16. Re:I'm surprised they missed "Wi-Fi Sense." on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 1

    In this dystopian future, we are all crazy HOSTS guy.

    "We don't know who struck first, the users or Microsoft. But we know it was the users who scorched domain name resolution..."

    Seriously- it's unknown how aggressive Microsoft will be about pushing their shit-stacks around, at least at first. But the fact that this level of nonsense is going to happen is absolutely a looming poop front. At the point where we're all trying to root out all the hidden local places this stuff is cached so we can get security patches without uploading everything, we are definitely dealing with the Worst OS Ever.

    Good info for sure though.

  17. Windows 10 privacy statement on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 1

    Here we go:

    http://windows.microsoft.com/e...

    Lets do a little walking here:

    ----
    Data We Collect

    Microsoft collects many kinds of information in a variety of ways to operate effectively and provide you the best products, services and experiences. We may combine this data with information that is linked to your user ID, such as information associated with your Microsoft account.

    When you acquire, install and use the Program software and services, Microsoft collects information about your use of the software and services as well as about the devices and networks on which they operate. Examples of data we may collect include your name, email address, preferences and interests; location, browsing, search and file history; phone call and SMS data; device configuration and sensor data; voice, text and writing input; and application usage.
    ----

    Is literally anyone here ok with this? "name, location, every file you access, every search you do, every call you make, every text you send, everything you say, anything you type into any application, and every executable you run, correlated with your MAC address, IP address, and timestamp".

    That's LUDICROUS. Am I missing something here? Who cares about a wifi password that you have to opt into, when sharing EVERYTHING YOU EVER DO AT ANY TIME IN MELEE OR DETECTION RANGE OF YOUR COMPUTER, is something you just legally agreed to share with Microsoft?

    It then gives examples, right below, that make it sound like this is about performance monitoring. But those are examples, not what you just agreed to share.

    Am I missing something? Shouldn't this be the story?

  18. Re:I'm surprised they missed "Wi-Fi Sense." on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 4, Informative

    > It is only enabled when you optionally check it for a specific Wi-Fi network.

    True.

    > It shares a *hash* of your password

    False.

    > (Slashdot of old would know the difference)

    Depends. If you were on it, at least you wouldn't know the difference.

    It shares an ENCRYPTED version. Not a hash. If it shared a hash, it wouldn't let them access it, now would it?

    Hashes normally throw away data. So if you have a local /etc/shadow file with hashed passwords, you can't unscramble / unhash / decrypt them, because there's a many-to-one mapping involved. The encrypted data, on the other hand, is one to one. This is because the people you share it with have to decrypt it locally and use it. This means that it is available in plaintext on their boxes (and how that key is managed I don't know- if they screwed up anything about that, it could be decryptable in transit too).

    There's a lot to complain about in Windows 10. Enough that I will never use it personally, and I was planning on upgrading to Pro before I read their absolute nightmare combo of dick-kicking bullshit.

    Here's the scoop:

    1) By default, this OS will leak your local data. You can opt out of this, but good luck constantly finding that setting, and having one more horrendous weight to lug around every time you have to reinstall, or use a new machine. This goes up to some microsoft account, and it includes all your favorites, any active websites at any time, etc. Again, you can opt out of this crap, but why on earth would you need to opt out of this?

    2) It mentions giving law enforcement all your data if asked, which, I mean, we JUST saw that exact thing become both automated, and globally used against all Americans. Like JUST saw it. Importantly, even if somehow this isn't used for massive and warrantless data collection the next time anything bad happens anywhere, it still means that whatever this back-orifice negafeature is, will be installed in all Windows 10 systems by default, with no opt out (only a bad guy would opt out, right?), and that it will sit there waiting patiently for some black hat to hack it. Even if you are still ok with this massive overreach, just ask yourself- wouldn't it be smarter to use a product that doesn't have this built in?

    3)- Many new features require you to opt in to wholesale uploading of your activities. Cortana is a huge feature of this OS, but everything from your location to *lists of played media files* is uploaded when you use this feature. You can opt out, but this disables Cortana.

    4)- You can't turn off a lot of the telemetry.

    The only safe way to use Windows 10 is on a fully airgapped machine. If you are interested in turning off Windows Update, auto-telemetry, and whatever that amazing law enforcement backdoor is, you'll need some rather intelligent application firewall to make that happen.

    Windows 10 will be an absolute nightmare. This should have been obvious the moment that they told you that you can't turn off Windows Update- that means that they will use Windows update to turn your destkop into an X-Box load screen, with everything full of advertisements and assorted diseases. Taking out your opt-out from that was never about security, it's about ensuring that the coming advertisements hit as many eyes as possible. You'll be downloading AdBlock Desktop soon enough.

    Oh, and most of this shit (especially the wholesale user monitoring) isn't enabled on the corporate boxes. Businesses, after all, have a right to privacy. Because they are more human than human, now?

  19. Re:Really? on A Naysayer's Take On Windows 10: Potential Privacy Mess, and Worse · · Score: 1

    Psh, no TRUE Linuxman values boot time. The boot time is when you install Linux. It's all UPTIME after that! A good boot time is January 1st, 1970. Your uptime should be equal to the Unix epoch!

  20. Re:Applications? on Scientists Identify Possible New Substance With Highest Melting Point · · Score: 1

    Some engineers are also invisible and intangible.

    I mean, until proven otherwise.

  21. Re:bad content on DHI Group Inc. Announces Plans to Sell Slashdot Media · · Score: 1

    I suggest flash block or whatever you have to do to prevent flash loading by default in general. Terrible sites require flash- slashdot just offers it, and works fine without.

  22. LOL wow! on DHI Group Inc. Announces Plans to Sell Slashdot Media · · Score: 1

    "We couldn't destroy the forum because the users complained, so we've gotta sell!"

  23. Re:Just in time to phase it out on Newegg Beats Patent Troll Over SSL and RC4 Encryption · · Score: 1

    It took them a decade to remove the patent some asshat snuck in on fucking XOR, no way the patent trolls are out of ammo. The system is literally made to provide them with an endless amount of it.

  24. Re: Seriously! on Hacker Set To Demonstrate 60 Second Brinks Safe Hack At DEFCON · · Score: 1

    Malware in Windows is bad because Windows only has one "distro" at a time, so Windows is the whole OS. That means, there's no group of people elsewhere doing it correctly that you could have used instead, and much more importantly, *it's almost impossible to replace any part of the Windows OS anyway".

    The complainers are correct. Since every Windows comes "stamped and sealed", it either fails or works entirely holistically. Since Linux has so many more pieces, it's not nearly as interesting if a single Distro, or a replaceable piece thereof, has an issue- and it won't hit the whole ecosystem.

    I also think that the "stamped and sealed" concept encourages Microsoft to underengineer certain parts. "Ok, well, the ONLY guy that interacts with this dude is X, and X never gives us that input" is a valid thought when trying to implement Y, but in Linux world, you end up needing development to handle the other cases from the start.

    Windows is not fundamentally broken or anything like that, but it certainly seems to be entirely exploitable and ludicrous to use in any fixed hardware / embedded cases. And yet, it is. A safe should not be running XP, or 7, or 10, or anything else by Microsoft- it should be running a real time OS, or, *worst case*, a stripped down / locked down BSD or Linux. Windows is a consumer OS, a gaming OS, and a creativity, development, and productivity OS. Microsoft intends it to be a server OS and you can make a solid case for that (I wouldn't), but for use in a fixed platform hardware device? It's a sitting duck.

  25. Re:Seriously! on Hacker Set To Demonstrate 60 Second Brinks Safe Hack At DEFCON · · Score: 1

    > The article says it's nothing to do with the OS, but any excuse, eh?

    That is not what it says. What it says is:

    '
    "Even if the CompuSafe were running Windows 10, it wouldn't have changed the exploit that we will be demonstrating," Salazar said.
    '

    That's not "nothing to do with the OS". That's "any version of Windows".