News for hackers. Stuff that matters.

Findus23

Re:The Most Backdoor-Looking Bug I’ve Ever Seen on Monday January 11, 2021 @06:40AM (#25727636)
I think Textsecure[1], the predecessor of Signal, is even older (2010)

And Wikipeida also says that the first version of the Signal Protocol is from 2013[2]

[1] https://en.wikipedia.org/wiki/TextSecure [2] https://en.wikipedia.org/wiki/Signal_Protocol

Re:Matomo: Open-source analytics platform on Wednesday January 06, 2021 @07:08AM (#25656977)
While I agree that 1.7k issues are a lot, also keep in mind that there are 9.6k closed issues and they are bugs and feature requests over 11 years that never get closed as there might be someone else coming across some feature request one day who wants to implement it.
for reference, this is the source of the Austrian contact tracking app: https://github.com/austrianredcross/
Re:Google is moving EU citizens’ data to US? on Tuesday February 25, 2020 @02:05PM (#22416153)
Maybe also report it to the Italian data protection authority directly: https://www.garanteprivacy.it/
related to https://news.ycombinator.com/item?id=22180164 [Russia blocks ProtonMail]
Re:Changes to accessing and using Geolite2 databases on Tuesday December 31, 2019 @08:20AM (#21920791)
Thanks for linking, I intentionally saved all files to archive.org as I was sure a lot of people would only notice when it is too late.

You can see all links with their hash here:

https://forum.matomo.org/t/maxmind-is-changing-access-to-fre...

Unfortunately it seems like they are also using this as a chance to change the license from a Creative Commons BY-SA to something else.

And the announcement is really short dated as I am sure a lot of services will have to be updated now over the holidays.

At least the last files before the change will stay under the old license forever.

And speaking of WordPress analytics: There is now a new official WordPress plugin that contains a whole Matomo instance, so you don't need to set it up seperatly.

https://matomo.org/blog/2019/10/matomo-analytics-for-wordpre...

Re:Show HN: BuzMap – Global Unified Transit Map on Monday October 14, 2019 @04:08AM (#21246092)
I want to question the "global" a bit. I zoomed into Vienna and there was just the normal OSM tileset (showing lots of public transport) without any additional data.
Unfortunatly the linked nginx module [1] seems to be unmaintained since 2016. While there is a more maintained fork [2] it seems like neither the Ubuntu [3] nor the Debian team [4] want to package it due to open bugs and security concerns.

It's really surprising considering how widespread Brotli support is, that there isn't a better nginx support for it.

[1] https://github.com/google/ngx_brotli [2] https://github.com/eustas/ngx_brotli [3] https://answers.launchpad.net/ubuntu/+source/nginx/+question... [4] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919320

Re:Google I/O Developer Keynote [video] on Tuesday May 07, 2019 @04:57PM (#19853378)
The on-device Machine Learning sounds pretty amazing. Does anyone know if this will be a part of AOSP or be a closed-source extension (like digital wellbeing)?
Asked by the interviewer if this isn't the same as asking bar owners to check the ID of every visitor just in case a bar fight breaks out, the minister answered:

"Das ist ja ein Blödsinn, was sie da reden" (This is total nonsense you are talking about)

In case anyone wants to know how this should work, this is the explanation by the minister:

There are "technical possibilities where software can run on the backend that can immediately identify: Does the registered mobile phone number match the name and address or not?" - derstandard.at/2000101678440/Minister-Bluemels-Ominous-De-Anonymization-Software (from https://derstandard.at/2000101678440/Minister-Bluemels-Omino...)

Translating it as "backend" is very friendly as he literally said "a software in the rear end".

Older »