News for hackers. Stuff that matters.

cpv

Re:AMD's Strix Point: Zen 5 Hits Mobile on Sunday August 11, 2024 @12:46PM (#41217442)
Some recent asus ROG/TUF 2022+ models have fine tuning available via "armoury crate" or "g-helper" (non-proprietary, fan/community supported, code on github).

Disabling a dGpu and reducing power can yeld some impressive results for battery life. Allows also defining fan speed curves depending on temperature.

Re:The Naz.API Credential Stuffing List on Wednesday January 17, 2024 @11:31AM (#39029936)
Would be safer to just change your passwords. If they are old, even better to change them right now.
Re:GTA 5 source code leaks online on Monday December 25, 2023 @07:53AM (#38762202)
They did publish the code for World in Conflict online server (initially made by Massive Entertainment), and a few other tools https://github.com/ubisoft
There was a research in 2011 about using the accelerometer to log your keystrokes https://www.extremetech.com/internet/92946-a-wiggly-approach...
Re:Android malware from Amazon straight to your door on Thursday January 12, 2023 @01:34AM (#34349962)
And if someone doubts this, remember the Mirai botnet.
And then Blizzard updated the user agreement (around the Warcraft 3 Reforged), mentioning that all player generated content is owned by the company.

So in case some genius comes with another successful custom map (or whatever), the company has new ideas to work on, for free.

Re:Adobe's 40th anniversary: Its origin story and beyond on Tuesday December 06, 2022 @03:22AM (#33877113)
I wonder if any Adobe users have tried some other options for some programs (Gimp, Inkscape, Krita), and if suits their needs.
Re:Activision’s Faulty Anti-Cheat Software on Monday December 05, 2022 @01:29AM (#33862201)
> I paid for the game and i should be able to do whatever i want with it within the confines of my own computer.

Most of the time you buy a one time license to use the software, which is tied to your account and platform.

> (as Salesforce employees could not access this benefit)

Why not give this benefit as well to Salesforce employees?

There are some apps (like Intra) which allow you to connect to a built-in (cloudflare, google) or custom DoH server (your own or other providers which support DoH).

Nextdns have their own app for this as well.

For android 9 or higher there should be an option in network settings.

Re:When tracking your period lets companies track you on Wednesday January 19, 2022 @10:19AM (#29994692)
github repo with small lite websites https://github.com/mdibaiee/awesome-lite-websites
Tried to lookup some info, but it's not there. Maybe it's from some web scrapper which collected public info, or other means (some ambiguous mobile app which had access to contacts?). Or the leaked files are incomplete.
Re:Qwant: The Search Engine That Respects Your Privacy on Thursday November 12, 2020 @05:17PM (#25075925)
FYI, startpage seems to be owned by an ad company https://news.ycombinator.com/item?id=21371577
I occasionally checked https://tildes.net/
Yep, this has happened when putting it into Sleep mode. Might as well happen in Hybrid Sleep. And in advanced power settings you can disable wake timers, but I'm not sure if it helps.

Tried automating the removal of scheduled tasks (like the Compatibility runner which made the laptop sound like an airplane) and snoozed the updates for a few weeks. In the end, it broke the Scheduler, the task was still launching, and had to reset the OS to a proper state. It's a love and hate relationship with this OS.

To avoid this, I'm using Hibernate mode, and occasionally using shutdown/restart.
NetGuard. Creates a local VPN through which the internet is routed. Shows the domains each app is accessing, can be blocked per app, or forbid internet at system level (breaks things, require fine tuning).

Also you can configure a non standard DNS (like adguard, which can block some things at the DNS level).

EDIT: or NextDNS, since it comes with some additional features.

Re:Video Games Are the Future of Education on Sunday June 21, 2020 @04:23PM (#23595102)
- KSP (orbital mechanics)
Re:Netflix stops charging customers who never watch on Saturday May 23, 2020 @08:39AM (#23282442)
Always makes sense of having a separate card for online stuff (shop, subscriptions, etc). But having to go to the bank and renew, create a new one, the waiting lines.

Some banks have web/mobile banking where you can restrict actions/limits/transactions, so it's a good option too.

Others have virtual cards for this purpose, but these are not offered in a lot of countries (revolut, privacy, yandex money, etc).

Re:Netflix stops charging customers who never watch on Saturday May 23, 2020 @06:02AM (#23281660)
I don't know the situation in US, or other places, but companies don't have time to deal with legal issues, regarding user debt, so they delegate this process to collector agencies.

And those agencies are very happy to assist, since they get a % for their work, and when the money is big. Most of they time it's very productive. Letters and calls are just the first step. A debt of 300$ can get to x000 pretty fast (debt, fees, lawyers). And then they go to court, put financial blocking on your assets, there is a judiciary person in charge of evaluating your assets, bank accounts, they can even freeze your debt from your bank accounts if you are refusing to pay a legal debt.

If you are abroad they will happily wait for you when you will get back, or get in touch via one of their foreign agency and let you know they are near.

If they would really want to get you in trouble they can inform the foreign local authorities about your problems, so depending on the case they can create problems for you.

Re:Netflix stops charging customers who never watch on Saturday May 23, 2020 @05:30AM (#23281505)
One reason I try to never give my card to lots of websites. If they have paypal, good. Or playstore subscription, sure. A one time/non recurring payment via a platform/provider/bank, ok.

But never the card. Reading such user horror stories, or Terms & Conditions, makes me turn around and never come back.

There's also this http://moveordiegame.com/

Not affiliated, seen the talk from GDC about it.

Re:The unattributable “db8151dd” data breach on Friday May 15, 2020 @06:25AM (#23190611)
> Email addresses, Job titles, Names, Phone numbers, Physical addresses, Social media profiles

Probably these can have a different impact if your threat model is a bit different (money, status, living area, position held, etc).

Reminds me the story about an investigative reporter known in these parts, who was swatted: https://krebsonsecurity.com/2013/03/the-world-has-no-room-fo...

or received a drug package from an investigated person, basically it was a trap: https://krebsonsecurity.com/2015/10/hacker-who-sent-me-heroi...

The journalist knew about this and informed the police beforehand. Happy end.

To add a little more, I have seen people posting on social media answers to posts like "your favorite car, your place of birth, name of mother, name of pet". Guess who uses those words for similar secret questions?

Some personal identifiable information can be used to fabricate fake IDs, for various purposes.

And if we have a linked graph with all the personal, job, address, interacted people, geo-places, etc, it can get creepy (sounds like Facebook, but much more open).

Not saying we all should get paranoid, but leaked data could be used in different ways.

You can get NetGuard on Android and see how often and what is called (facebook.com, graph.facebook.com, other vendors, platforms, IPs, etc). You can choose to block what is not needed. Kind of uBlockOrigin for Android. Sometimes stuff breaks.

And a lot of stuff is not related to FB Login.

Facebook launched Facebook Off Activity a while ago https://news.ycombinator.com/item?id=22178917

You can go to your profile, and check which third parties, or advertisers uploaded contact data of you, download backup data to see in json files which apps what sent about you ("App activated", "Made some purchase").

Maybe this will motivate product owners, developers, marketers, to start thinking before implementing a dozen of SDKs in a mobile app (or website). It's understandable when you need some analytics/crash reporting, but it becomes a privacy and ethics question when a lot of data is wandering around, and even better, crashes your app. And the users will blame you, they don't even know how many SDKs are there and what they are doing.
There is also Mozilla's Send.firefox.com, which could be self-hosted https://github.com/mozilla/send
Re:Apple acquires Dark Sky on Wednesday April 01, 2020 @03:08AM (#22746424)
Have you found good alternatives? I'm looking at meteoblue at the moment.
Apps like netguard open the eyes.

And it was sad to see in facebook offline activity how much data was linked to me, from apps which have the sdk. And you don't even need to log in via facebook or like/share. The sdk being present and working is enough.

Imagine if one day we find that a comet is headed directly to us. That would test and push humanity at its extremes.

Older »