Banks in Germany Tell Customers To Take Deposits Elsewhere

Found on Slashdot on Wednesday, 10 March 2021
Browse Various

Germany's biggest lenders, Deutsche Bank and Commerzbank, have told new customers since last year to pay a 0.5% annual rate to keep large sums of money with them. The banks say they can no longer absorb the negative interest rates the European Central Bank charges them.

Banks in Europe resisted passing negative rates on to customers when the ECB first introduced them in 2014, fearing backlash. Some did it only with corporate depositors, who were less likely to complain to local politicians.

Negative interest is a simple and easy way to steal money from people.

Reddit CEO: Platform doesn't plan to ban pornography

Found on Axios on Tuesday, 09 March 2021
Browse Internet

In an interview with "Axios on HBO," Reddit CEO Steve Huffman said the company supports pornography on its platform, as long as it's not exploitative.

Why it matters: Most other social media platforms — such as Facebook, Instagram, YouTube and Tumblr — have banned pornographic content.

Let's be honest: 99.99% of the porn isn't something you really want to see anyway.

This browser extension shows what the Internet would look like without Big Tech

Found on The Verge on Monday, 08 March 2021
Browse Internet

The Economic Security Project is trying to make a point about big tech monopolies by releasing a browser plugin that will block any sites that reach out to IP addresses owned by Google, Facebook, Microsoft, or Amazon.

Big Tech Detective isn’t meant to keep your data private from these companies — it even says when it locks one of the pages that it isn’t actually preventing the resources from loading, or collecting your data if that’s their purpose. It’s really meant as a visualization tool to show you that if you want to use the internet without relying on these companies, you’re not going to have a good time.

Blocking all resources is not the solution, but the current data collection cannot continue.

Flash version distributed in China after EOL is installing adware

Found on ZD Net on Sunday, 07 March 2021
Browse Software

Currently, this Chinese version of the old Flash Player app is available only via flash.cn, a website managed by a company named Zhong Cheng Network, the only entity authorized by Adobe to distribute Flash inside China.

During subsequent analysis, researchers found that the app was indeed installing a valid version of Flash but also downloading and running additional payloads.

Flash has been a security problem. Now after it's official death still is. Nothing seems to have changed.

EV HTTPS cert seller Sectigo questions Chrome's logic in burying EV HTTPS cert info

Found on The Register on Saturday, 06 March 2021
Browse Internet

Google all but hid these extra details in a Chrome update a couple of years ago, arguing that netizens couldn't care less if a site is protected by an EV or a vanilla HTTPS cert – it won't stop them putting in their credit card number or password. Others in the industry have questioned the usefulness of EV certs.

The Chocolate Factory said at the time: "The Chrome Security UX team has determined that the EV UI does not protect users as intended ... users do not appear to make secure choices (such as not entering password or credit card information) when the UI is altered or removed." Thus, we're told, it doesn't matter if the EV info is obvious or hidden away.

So a UX team makes fundamental decisions about security. This is where things go wrong.

Red Hat returns with another peace offering in the wake of the CentOS Stream affair

Found on The Register on Friday, 05 March 2021
Browse Software

The IBM-owned Linux distro giant will offer selected bodies free "RHEL subscriptions for any use within the confines of their infrastructure." By infrastructure, they mean things like build and continuous integration systems, and web and mail servers.

And in case you're wondering, Red Hat said it is going to keep Fedora around, "for driving leading-edge development of Linux operating system improvements and enhancements."

Fool me once...

Why are there seven embedded trackers in the LastPass Android app?

Found on The Register on Thursday, 04 March 2021
Browse Software

The Exodus report on LastPass shows seven trackers in the Android app, including four from Google for the purpose of analytics and crash reporting, as well as others from AppsFlyer, MixPanel, and Segment. Segment, for instance, gathers data for marketing teams, and claims to offer a "single view of the customer", profiling users and connecting their activity across different platforms, presumably for tailored adverts.

Do all password apps contain such trackers? Not according to Exodus. 1Password has none. KeePass has none. The open-source Bitwarden has two for Google Firebase analytics and Microsoft Visual Studio crash reporting. Dashlane has four. LastPass does appear to have more than its rivals.

Anything related to security should never implement tracking/monitoring code from third parties.

A warp drive that doesn't break the laws of physics is possible

Found on New Scientist on Wednesday, 03 March 2021
Browse Science

Previous ideas about how to make these hypothetical devices have required exotic forms of matter and energy that may not exist, but a new idea for a warp drive that doesn’t break the laws of physics may be theoretically possible.

It probably won't be ready anytime soon though.

Enforce ban on plastic exports or it could backfire

Found on Nature on Tuesday, 02 March 2021
Browse Nature

The UN hopes the bans will encourage sustainable disposal, persuade businesses and communities to use more recycled plastic and help countries in the global south to refuse to accept any waste they cannot process.

Environmentalists welcome these bans as a way to reduce pollution, improve recycling facilities and protect the oceans.

Exporting waste should have never been allowed. No matter if it is plastics or electronics.

TikTok breaching users' rights - European Consumer Organisation

Found on BBC News on Monday, 01 March 2021
Browse Legal-Issues

The European Consumer Organisation (BEUC) says the platform "falls foul of multiple breaches of EU consumer rights".

Owned by China's Bytedance, TikTok has faced increasing criticism regarding its privacy and safety policies following a number of incidents.

"Its copyright terms are equally unfair as they give TikTok an irrevocable right to use, distribute and reproduce the videos published by users, without remuneration."

China and consumer rights. Really?