News for hackers. Stuff that matters.

moutarde

Re:How License-Plate Scanners Are Eroding Our Privacy on Friday November 22, 2013 @07:45PM (#6784695)
> Why is that horseshit?

Because historically (and also legally) the bounds between what is private and public have been defined by what was plausible at the time, not by what was hypothetically possible.

We know live in a world were what used to a be a hypothetical dream (or science fiction novel) has now become the mundane. The law can either adapt (via judicial rulings), be changed by voters or become an absurd anachronism that's good for nothing but justifying invasive surveillance.

Re:Mysterious Mac and PC malware that jumps airgaps? on Thursday October 31, 2013 @09:55PM (#6651356)
It's not just four stacks (or more, because the article also mentions Apple Macs and BSD) that you have to "mess up". You also have to mess them up in such a way that you can exploit them without a disk even being mounted. That four/five/six stacks are all exploitable to this extent because of buffer overruns (or similar) seems implausible.
Re:What's new for developers in Android 4.4 KitKat on Thursday October 31, 2013 @06:38PM (#6650523)
They were not "killing babies" they were "monetizing the vast network of uniformed African's who were potential baby killers". If they were technically doing anything wrong then Google wouldn't have partnered with them, because as Eric Schmidt said:

“If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place.”

Re:Mysterious Mac and PC malware that jumps airgaps? on Thursday October 31, 2013 @04:57PM (#6649821)
If this malware is actually real then exploiting a large variety of different USB stacks (whether it's done via the the BIOS or OS stack) seems implausible. Maybe the flashed usb stick either:

1) Hides a bootloader on the devive that runs at reboot (assuming the BIOS allows it).

2) Pretends to be some kind of device (that most OS's have stock drivers for) that allows it to access main memory. Maybe it pretends to be a USB to firewire bridge (or something similar that gives it DMA).

Just run the code through a linter that recognises "use asm" as part of the build/test process.
3. Amazon gives preferential treatment to merchants using their auxiliary services. They already give preferential treatment to merchants using Amazon Fulfilment by writing off (at least some of) the bad merchant feedback caused by fulfilment issues. This effects customers (as well as merchants) because from the customers perspective failed fulfilment is the same no matter who does it.
Re:Attacking Tor: How the NSA targets users' online anonymity on Friday October 04, 2013 @11:11PM (#6499224)
The NSA shouldn't just be an attacker it should also provide defence. If one of their many contractors can leak details to the press for idealogical ends it's pretty safe to assume that much worse secrets have already been leaked to other nation states (China, Russia etc....) for financial gain.

I think it's entirely reasonable to assume that a lot of exploits the NSA has discovered and not revealed (because it thinks they are "secret") have actually been sold to other governments by it's own contractors. By not revealing these exploits to citizens they are actually leaving them open to attack by foreign governments. Large companies trying to defend against industrial espionage are probably most at risk.

Re:Mozilla bug 923590: Pledge never to implement HTML5 DRM on Friday October 04, 2013 @09:56AM (#6495355)
This won't work. Most video cards now have an HDMI output and their are numerous ways to bypass HDCP.
Re:PCBs cause birds to sing a different tune on Saturday September 21, 2013 @01:13PM (#6423619)
This is only tangentially related to the article but where I live there is a lot a wildlife, including many different species of birds. Some of these birds now sing songs that mimic common mobile phone ringtones. This is obviously not as bad as pollutants effecting birds behaviour but I think it's a great example of technology having strange, unintended consequences.
Re:I Am An Object Of Internet Ridicule, Ask Me Anything on Thursday September 19, 2013 @06:34PM (#6414745)
> Hipster hate isn't about being different, it's about a perception of dishonest attention-seeking.

Isn't this the same justification that's used to shame the "pseudo" geek girls?

Re:How To Deconstruct Almost Anything (1993) on Sunday September 15, 2013 @05:51PM (#6390446)
> Deconstructionism itself has some interesting ideas [...] like those pointing out that a work of art can mean two opposing things simultaneously. The problem, however, is that its sillier adherents—who are all over universities—take a misreading of Saussure Deconstruction to mean that nothing means anything [...]

Surely the point is that the meaning of the text is dependant on the context supplied by the reader. So for an analysis of a text to a mean something (rather than nothing) is must not only define the subset of readers it is confined too, but also offer some justification of why it assumes those readers supply a common context (and what that common context is).

Without this context an analysis of a text is a largely a polemic unless the analysis is so absurd (or dissident) that it becomes a satire. Assuming a wide definition of "a text" then the majority of the media have been effectively "saying nothing" for the last 30+ years and academia have been satirising them.

Re:FBI Admits It Controlled Tor Servers Behind Mass Malware Attack on Saturday September 14, 2013 @02:51AM (#6384907)
I think the most troubling aspect of this case is that the FBI modified the computers systems before Ireland seized them as evidence. It seems absurd that law enforcement can effectively tamper with evidence before it is secured, then use that tainted evidence as part of a prosecution.
Re:David Miranda: High Court restricts inspection of data on Thursday August 22, 2013 @12:22PM (#6258097)
> I wonder what crime they believe that Miranda might have committed?

Breach of The Official Secrets Act[1]. Although I think the investigation is probably focused more on Greenwald (and The Guardian) than Miranda.

[1] http://www.yourrights.org.uk/yourrights/right-of-free-expres...

Re:White House Had Advance Notice on Heathrow Detention on Monday August 19, 2013 @05:06PM (#6239832)
I think it's like a teacher checking your bag (under the pretence of "finding drugs") in order to confiscate your camera that contains incriminating pictures of them.
Re:The limits of Google’s openness on Thursday August 15, 2013 @09:12PM (#6221638)
> Yes. The API is an HTML5 iframe

YouTube also offers a Flash based API to show videos with adverts. If HTML5 wasn't feasible for Microsoft they could have paid Adobe for a licence to use the Flash runtime in their YouTube app.

Re:The limits of Google’s openness on Thursday August 15, 2013 @08:48PM (#6221553)
Amazon is actually relevant here, because their Kindle Fire browser is partly cloud based. Microsoft may say that HTML5 on the Win Phone isn't feasible, but they own a giant cloud based server farm (Azure) just like Amazon. So if Amazon can make a browser that splits tasks between the cloud and the physical device why can't Microsoft handle HTML5 this way?
Re:The limits of Google’s openness on Thursday August 15, 2013 @06:11PM (#6220921)
Google has obligations (both legal and moral) to both the content providers of YouTube and to the organisations who buy adverts on it. In order to 'not be evil' they have to take actions that respect these obligations.

Microsoft's original version of the app either:

a) deprived YouTube partners of their share of the revenue from adversing

b) caused advertisers to be charged for adverts that were not shown

The download feature also posed a problem to content providers who only hold a streaming licence to their content. If it didn't respect YouTube's no mobile flag (I'm unsure about this but it seems possible) it would also have caused issues for content providers who only held non-mobile streaming rights.

Microsoft now has a new version of the software that supposedly corrects these problems and is whining about openness and anti-trust. But why should Google now trust them? They treated not only Google, but also their partners and advertisers, like dirt. Now they want special treatment. It's like walking into someone's shop, insulting both their sales staff and their customers, then next week coming back and asking for discount.

How is Google being evil by imposing restrictions on a known bad actor in order to protect their partners?

Re:40 Days Without Booze on Wednesday August 14, 2013 @05:45PM (#6214508)
> Their average may be comparable, but frequency * intensity produce wildly differing results.

I think this is largely an academic discussion. Some people drink a glass a wine every day, some people binge drink once/two times a week. If you consider alcoholism to be the point at which you can't withdraw without death resulting then both groups will pass. If you consider regular alcohol consumption as a potential psychiatric problem then both groups are suspect. But both groups still have:

A) People who just drink socially/for fun.

B) People who are alcohol dependant (in terms of a psychological crutch).

Re:Lavabit abruptly shuts down on Thursday August 08, 2013 @10:38PM (#6183387)
The same server(s) also control the JavaScript code run by the client/browser. They could serve special code (to any one the government wanted to spy on) that returned their password to the server.
For anyone curious enough there is a blog [1] that tracks deleted MetaFilter posts.

[1] http://mefideleted.blogspot.co.uk/

> Anyway, I think aggressive moderation is a big part of Metafilter's secret sauce.

It's definitely part of the secret sauce, but I wouldn't call the moderation aggressive - it'd call it targeted to preserve culture. If MetaFilter has a first defence then it is the 5$ account wall, the second is the (almost legendary) snark, the third is the moderation. Moderation is almost always employed as a last resort, and it's rationale is normally documented.

The "secret sauce" of MetaFilter is really the community and everything else works to preserve that. The moderators of MetaFilter are the last resort in that process, but their are neither "aggressive" nor numerous, they are just very well chosen - not by algorithms, but by other existing moderators who actually understand the organisation/community they work in.

MetaFilter has successfully used the "pay $5 for an account" model as a means to balance access against exclusivity. It may not be a tech site but considering it's still basically just an open access group blog (with a few bells and whistles) the model seems to have served it quite well.
Re:Google Details PNaCl Native Client LLVM Bitcode on Thursday August 01, 2013 @06:24AM (#6139426)
Flash and Java applets do have access to the DOM.
I think that Zynga's major problem is a about changing markets: Zynga grew rich making clones of other games and cleverly using web-based-social-promotion via Facebook to advertise them cheaply. But now they face the same problem that Facebook itself faces - that more users are now mobile based than web-based - combined with the fact that much bigger companies are now not only licencing/cloning games but also combining them with their existing IP which has a much bigger draw for users because of the combined marketing clout behind it.

For example:

* Disney/Pixar now have two top free to play apps based on combining Temple Run with their existing IP. These games not only follow a proven winning formula, but they also piggy back on the movies marketing budgets to promote the games (to a much larger extent that Zynga could afford)

* Universal Pictures has cloned Temple Run Zynga style (but with much more original flair) to make their Despicable Me app game. Like Disney their massive film marketing budget drives the games success, and rather than users having to "warm up" to new characters, the lovable minions are already there for instant recognition/gratification.

* Rovio has made great strides making their original IP (Angry Birds) worthy of Disney level acclaim, but they've also heavily co-branded (via advertising and Angry Birds Star Wars) in order to increase profits.

Re:Project Chess: How U.S. Snoops On Your Skype on Thursday June 20, 2013 @02:30PM (#5913905)
Skype supports call forwarding which by necessity negates the end to end encryption. It could be that to tap a Skype users calls they modify the users on-line address book to make it appears to their client that all of their contacts have call forwarding set up. All voice data then gets sent to Skype HQ, decrypted and stored, before being forwarded on to the interned recipient.