Twitter Removes Privacy Option, and Shows Why We Need Strong Privacy Laws

Found on EFF on Tuesday, 14 April 2020
Browse Internet

Twitter greeted its users with a confusing notification this week. “The control you have over what information Twitter shares with its business partners has changed,” it said.

Previously, anyone in the world could opt out of Twitter’s conversion tracking (type 1), and people in GDPR-compliant regions had to opt in. Now, people outside of Europe have lost that option.

For people protected by GDPR, type-1 data sharing remains opt-in, and type 2—Twitter sharing their data with Google and Facebook—never happens at all.

That's exactly why you need strict privacy laws.

The Qt Company Provides A Brief Comment On Open-Source

Found on Phoronix on Monday, 13 April 2020
Browse Software

A KDE developer who serves on the board of the KDE Free Qt Foundation commented that The Qt Company is evaluating restricting new releases to paying customers for 12 months.

Obviously many are concerned that The Qt Company could be erecting a wall around new Qt releases with this possible year delay before going out cleanly as open-source. This comes months after The Qt Company already shifted to make Qt LTS releases customer-only, among other steps to boost their commercial business at the beginning of the year.

Looks like Qt is heading for a fork.

Fed should pay every American more, let hedge funds and billionaires ‘get wiped out’

Found on MarketWatch on Sunday, 12 April 2020
Browse Various

Appearing Thursday on CNBC’s “Fast Money Halftime Report” Palihapitiya said the U.S. shouldn’t be bailing out billionaires and hedge funds when it’s the people on Main Street who are the ones actually getting hurt.

“Just to be clear on who we are talking about. We’re talking about a hedge fund that serves a bunch of billionaire family offices. Who cares? They don’t get the summer in the Hamptons?” Palihapitiya said. “Who cares? Let them get wiped out.”

Now what should one think about such claims, when the investor Palihapitiya himself became a billionaire, as all of his incomes combined were estimated at $1.1 billion?

New emoji are being delayed by the coronavirus pandemic

Found on Mashable on Saturday, 11 April 2020
Browse Various

“Under the current circumstances we’ve heard that our contributors have a lot on their plates at the moment and decided it was in the best interests of our volunteers and the organizations that depend on the standard to push out our release date,” Mark Davis, President of the Unicode Consortium, said in a statement.

Sure the world is going to end now. How can humanity possible survive without new emojis?

Cloudflare dumps Google's reCAPTCHA, moves to hCaptcha as free ride ends

Found on The Register on Friday, 10 April 2020
Browse Internet

Cloudflare on Wednesday said it is ditching Google's reCAPTCHA bot detector for a similar service called hCaptcha out of concerns about privacy and availability, but mostly cost.

Finally, earlier this year, Google told Cloudflare it plans to begin charging for reCAPTCHA, a service it has previously offered for free because the answers people provide improve its services and machine learning systems.

According to Prince and Isasi, hCaptcha doesn't sell personal data and made commitments to use info collected from Cloudflare only to improve the service. Also, they said the service performs well and has options for the visually impaired and those with other accessibility concerns.

reCaptcha is getting really bad. Long loading times plus countless retries to select all traffic lights, crosswalks, fire hydrants and whatever even though you selected the correct squares.

Zoom banned by Taiwan's government over China security fears

Found on BBC News on Thursday, 09 April 2020
Browse Software

Last week, researchers discovered that some traffic from the video-calling app was being sent through Beijing - even when all participants on the Zoom call were in North America.

It is the latest blow to Zoom, which has exploded in popularity during the coronavirus pandemic, resulting in increased scrutiny.

Hopefully many others take this as an example. Zoom is riddled with problems, and far away from being acceptable. Slowly people realize how bad Zoom really is.

Firefox 75 overhauls the browser’s address bar

Found on Ars Technica on Wednesday, 08 April 2020
Browse Software

The big change is a redesign of the address bar, which comes with some tweaks to how searches work when you're using it.

The drop-down that appears when you click in the search bar will show you multiple options for where to search, like Google or Amazon. That same view will show additional keyword suggestions as you type, with the goal being exposing "additional popular keywords that you might not have thought of to narrow your search even further," according to the blog post announcing the redesign.

At the same time, Firefox is on a steady downhill tour. Mozilla should stop concentrating on UI sugar and deliver a useful browser again.

Microsoft Buys Corp.com So Bad Guys Can’t

Found on Krebs On Security on Tuesday, 07 April 2020
Browse Internet

Domain experts called corp.com dangerous because years of testing showed whoever wields it would have access to an unending stream of passwords, email and other sensitive data from hundreds of thousands of Microsoft Windows PCs at major companies around the globe.

The story went on to describe how years of testing — some of which was subsidized by grants from the U.S. Department of Homeland Security — showed hundreds of thousands of Windows computers were constantly trying to send this domain information it had no business receiving, including attempts to log in to internal corporate networks and access specific file shares on those networks.

The sweet fallout of default values to keep things simple and easy.

A hacker has wiped, defaced more than 15,000 Elasticsearch servers

Found on ZD Net on Monday, 06 April 2020
Browse Internet

The attacks appear to be carried with the help of an automated script that scans the internet for ElasticSearch systems left unprotected, connects to the databases, attempts to wipe their content, and then creates a new empty index called nightlionsecurity.com.

However, these types of destructive attacks were Elasticsearch data is wiped are not the first of their kind. In the spring and summer of 2017, multiple hacker groups engaged in database ransom attacks against multiple types of database technologies, including Elasticsearch.

Three years and ongoing, and people still put unprotected systems online. The pity is limited.

Zoombombing is a crime, not a prank, prosecutors warn

Found on Ars Technica on Sunday, 05 April 2020
Browse Internet

Internet trolls and other troublemakers have responded with "Zoombombing": joining Zoom meetings uninvited and disrupting them.

"Hackers are disrupting conferences and online classrooms with pornographic and/or hate images and threatening language," wrote the US Attorney's Office for the Eastern District of Michigan. "Anyone who hacks into a teleconference can be charged with state or federal crimes."

Those are not even hackers, because security at Zoom is practically non-existant. It's just a poorly designed software, full of holes and lies.