Slashdot Mirror


User: BronsCon

BronsCon's activity in the archive.

Stories
0
Comments
8,054
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 8,054

  1. Re: Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    Because I don't care enough whether you believe me or not to skim through well over 100 pages of comment history to find it. If you do, have at it.

  2. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    Very funny. Removig play services will remove 40% of your phone capabilities.

    Until you realize there are other app stores and *BAM* you've got that all back!

    Want to use Google Wallet app? Nope.

    You don't trust Google not to push malware to your phone, but you want to trust them with your financial credentials? Seems legit.

    Want to install any DRM apps? Forget about it

    Unless you use Amazon's store, or... well, there are others but I'm not familiar with them.

    If you only need phone for calling/receiving calls and web browser app, I guess it's fine.

    Right, then you wouldn't bother installing any of the other stores. But, if you want to do more... and I'm repeating myself here... you can install another store.

    Otherwise wake up and start realizing what kind of walled garden Google is creating with their play services.

    The kind where you can uninstall them and install something else?

    Apple doesn't even come close.

    As a user of both iOS (iPad Pro) and Android, I agree. My Android devices are much more capable; though my iPad Pro wins the tablet war on battery life alone.

    In Apple products core system apps obey the same rules as other apps.

    Or so the settings screens tell you.

    You want to disable GPS for Find My iPhone but leave Find My iPhone on?

    I'm not sure why you'd do that, it would render the feature nearly useless, but sure. No problem.

    Try that with google's shit.

    Found the option. Done. I don't trust it any more or less than the same option in iOS; if either company wants to give a false sense of security, they easily can.

    They think that their core components are allowed to do whatever they want whenever they want

    You haven't looked at Android since Gingerbread, have you? There have been 8 major versions released since then; and iOS was no better back then, either.

    Including stuff that invades your privacy.

    You mean like sending wi-fi locations, visible cell towers, GPS location, and speed? Yes, you can disable that by turning off location services (and, thus, disabling maps functionality); but you can also do the same on Android.

    Again, if you trust the settings screen to do what you tell it to.

  3. Good. on Apple Says It's Already Fixed Many WikiLeaks Security Issues (usatoday.com) · · Score: 3, Interesting

    I'm glad to see positive response across the board, from Apple, Samsung, and I'm sure others. Especially Apple and Samsung, though, as I have many devices from both of them in my home.

  4. Re:I see that... on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    I wasn't attempting to back up the claim that I said it 4 years ago; in fact, I didn't say it here until, if I recall correctly, some time last year when I had an iOS fanboi up my ass with how insecure Android is (but he can't talk about it because NDA) while iOS is supposedly perfectly secure. Of course, as I was (and still am) under NDA, I stayed a bit more tight-lipped than he did about it.

    Beyond that, I honestly don't care if you believe me; at least not enough to be bothered to go through over 100 pages of comment history to look for proof. Page 100 goes as far back as the beginning of February 2016; I may have said it before then, I may have said it after then, and if it really bothers you that much you can look it up yourself.

    I've seen you around and generally respect your positions, but I'm not above telling you when you're wrong, nor am I low enough that I feel the need to bend over backward to prove it. I'm sure you've seen me around, as well, enough to have already foreseen this type of reply.

  5. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    Oh, so you know me, then? Nah, didn't think so. Why with the personal attacks?

  6. Re: Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    You've reviewed a decade and a half of comment history in 3 hours? I need a data analyst as efficient and capable as you, can you please send in your resume?

  7. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    Don't install Play services and use 3rd-party stores (like Amazon's) instead? Yeah, I can do that, actually. And yes, Apple most certainly can push whatever code they want; disclosed in the same NDA-bound document but publicly known enough that I can mention it here.

  8. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    But the cost of physical hardware has everything to do with how much Sony, Microsoft, and Nintendo charge. I was making a comparison... and a joke.

  9. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    Apple fills in a date field. Hell, they don't even have a PERSON fill in the date field, it's done by the same script that processes your $99 payment. The other send out physical hardware and ongoing updates to that hardware and its firmware. Apple collects 30% off the top, which they can use to fund "R&D" associated with the database field that allows you to submit software for review.

    I might be cool with them charging some reasonable amount per submission. You know, to cover the cost of the review and, perhaps, a little profit. $20 per submission should cover that. I can see them actually losing money on the $99/yr license for any software that issues more than a handful of updates in a year; meanwhile, $99/yr might be cost-prohibitive for a one-man shop putting out a free app. It's a win-win for them to lower the fee and charge it per-submission, as the smaller shops can more easily absorb that $20 and the larger shops putting out more updates, and costing more than $99/yr in labor costs alone, would no longer represent a loss.

  10. Re:Kill The Messenger on Federal Criminal Probe Being Opened Into WikiLeaks' Publication of CIA Documents (cnn.com) · · Score: 3, Insightful
    Right. The difference is, we don't tell soldiers "here's where you might get shot; we could give you body armor, but then everyone would have it, so... good luck." Which is exactly what the CIA is doing.

    here's where you might get hacked; we could give you patches for these vulnerabilities, but then everyone would have them, so... good luck.

  11. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 0

    Ask the person who originally asked the question I was answering how their question is relevant. My answer is relevant because the question was asked.

  12. Re: Which is more important? on FBI Dismisses Child Porn Case Rather Than Reveal Their Tor Browser Exploit (arstechnica.com) · · Score: 1

    Anyone who used the word to describe Clinton's activities in any sort of official capacity was very irresponsible.

    Notice how I am not disagreeing. I'm merely pointing out that this is the word that was used. You know, stating facts.

  13. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 0

    I hadn't considered the expiration, thanks for pointing that out. We'll assume an 8-byte field, since I'm sure Apple plans on being around past 2038, in which case I estimated Apple's storage costs 64x higher than I should have. Still, they must pay a lot more for it than I do! ;-)

  14. Re: Which is more important? on FBI Dismisses Child Porn Case Rather Than Reveal Their Tor Browser Exploit (arstechnica.com) · · Score: 1

    He is the Homeland Security Chairman. If the FBI was investigating Hillary after his remarks (hint: they were), they were doing so under his direction. If they were investigating Hillary under his direction, they were investigating her for his reasons. His reasons were as stated: Treason.

    Again, he may have been using the word incorrectly; but it follows that, by investigating Hillary under the direction of McCaul, who suspected her of Treason, the FBI was investigating Hillary for Treason.

  15. Re:I see that... on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    Whoever modded this interesting, thank you for countering the troll mod. No trolling going on here. Maybe a little flamebait at that link, though, if complete honesty about something people don't want to hear can be considered flamebait.

  16. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 0

    Also, $99 is a pittance - how much do dev kits from Nintendo, Sony and Microsoft cost?

    The value of the hardware and R&D time that went into them and will continue going into them to keep them up to date.

    How much does the binary field in your Apple account record cost, again? $99? If that's the price Apple pays for a bit, I see why they have to charge so much for their hardware.

  17. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    typo... I meant to write "sue my ass", but we're talking about Apple, so I guess it works either way.

  18. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1, Interesting

    at least I'm not at the mercy of several parties to keep my security and features up to date

    No, you're at the mercy of one who left an attack vector you could drive a damn dump truck through open for years. What do you think "hot code push" is? It's a way to push any code you want past Apple's app review process. Submit the code without your malware, then hot-push it after approval.

    I've been telling you guys it was possible for years, as well, I just couldn't discuss the details until it was public. Though, on the old slashdot, I never would have had to spell out something so simple and obvious.

    The security company I reported it to (you didn't think I would go straight to Apple so they could use my ass, right?) showed me a page from a rather lengthy document they had already compiled regarding the issue and used the promise of seeing the rest of said document to coax me into signing an NDA. Of course, I obliged as I had no intent of making it public myself anyway... and I really wanted to see what apps they had found doing just this (with malware, I mean).

    That's still not public yet so, while I can't list specific apps, the fact that it's a non-zero number is obvious enough that I can share it. It's not only non-zero, it's non-trivial, and the average iOS user is bound to have one or more of them installed.

    Yes, Apple is going to stop allowing them through the app review process now, but they're not taking down existing apps that use the functionality. If those apps never release an update (or you don't install that update), you remain vulnerable. Again, this is a hole you could drive a truck through; once the truck is there, it's not leaving until it's good and ready to leave.

    For the record, I've known of this for four years. The security consultants I spoke with had taken it to Apple two years before I figured it out; which, by the way, took me all of two minutes once I had an iPhone on my hand and started looking into various libraries that exist for iOS development.

    The combination of huge and obvious just screams intentional. That Apple already has the ability to push whatever code they want screams state-sponsored. I'm not saying Google is any better with regard to Android, but I also don't have any illusions that they are.

    Enjoy your "security".

  19. Re:Pray I don't change it again on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 1

    I hope you're being sarcastic... Jailbreak = iOS. On Android, we call it rooting, because the OS allows it (though some manufacturers put in measures to attempt to prevent it). If your phone isn't made by one of those manufacturers, you don't need a different firmware; hell, even if it is, there's a good chance you might not.

    Aside from that, my Android phone cost more than my wife's iPhone 6 Plus (does more, too). I paid for both. I've paid for a few hundred dollars in apps and more than that in in-app purchases, she uses free apps and doesn't make in-app purchases. Android users spend money; moreso than iOS users in some cases.

    Though, I guess my iPad Pro makes me an iOS user, too. Though, I use mostly free apps on that. Again, the iOS user in me spends less than the Android user.

  20. I see that... on Apple Begins Rejecting Apps With 'Hot Code Push' Feature (apple.com) · · Score: 2, Interesting

    Apple is finally closing the back door that allowed malware to get passed the app review process, though they won't admit that's why. I can talk about it now that it's finally being fixed, I'm just astonished that it's taken them this long!

    And all of you thought I was crazy for saying it was possible.

  21. "i cant wait to apply this filter to a million audio tracks." ... said no one ever

    Communications network (e.g. phone) surveillance, seeking keywords. Yup, it gets done. A lot.

  22. Re:Lol "RadioShack" on RadioShack Is Preparing to File For Bankruptcy Again (bloomberg.com) · · Score: 1

    $20 + $5 =.... just how much sales tax are you paying?! 112%?

  23. Re:Go ahead, get rid of the 'phone jack... on Sorry, Apple, the Headphone Jack Isn't Going Anywhere (yahoo.com) · · Score: 1
  24. Re: What is Facebook thinking? on Facebook Reports BBC To Police Following Publication's 'Sexualized Images' Investigation (bbc.com) · · Score: 1

    It's a dumb law, but THINK OF THE CHILDREN!!!!!!!!!!!!!!!

    Isn't that what landed the child pornographers in prison in the first place? Hell no I'm not gonna do that!

  25. One core is comprised of billions of transistors. If one of those billions of transistors is bad, the core is defective. 1 transistor out of BILLIONS! If Intel and AMD can guarantee against that, Nintendo can guarantee the quality of 921,600 pixels.