Recent Comments


Note: new comments may take a few minutes to appear on this page.

April 27, 2024 7:56 AM

Winter on Friday Squid Blogging: Searching for the Colossal Squid :

@ResearcherZero

Since the Impeachment Judgment Clause is not limited to presidents,
could “all civil officers of the United States,” also be immune (?)

App response:

‘https://www.gocomics.com/mattwuerker/2024/04/26

April 27, 2024 6:26 AM

ResearcherZero on Friday Squid Blogging: Searching for the Colossal Squid :

Akin to the act of pleading guilty.

Since the Impeachment Judgment Clause is not limited to presidents,
could “all civil officers of the United States,” also be immune (?)

Arguing that not only can you, but may well have acted – outside the law.

‘https://reason.com/2024/04/24/the-alarming-implications-of-trumps-immunity-claim/

Pseudolaw: The Memeplex and The Sovereign Citizen Community

This variant or dissident set of law-like rules is “pseudolaw”, though the people who attempted to apply pseudolaw claimed that these concepts were the true but concealed law of the nation. The Pseudolaw Memeplex targets institutions and state organs, and their authority...

April 27, 2024 6:09 AM

Jon on Long Article on GM Spying on Its Cars’ Drivers :

Plus, according to a report I heard yesterday, some people had their car insurance rates raised, based on the data that GM supplied to the insurance companies. So, GM’s and dealers’ mendacity directly led to higher costs for customers.

This is a step beyond the data collection of OBD-II systems, rental companies putting trackers and data gathering devices on cars, and other monitoring and reporting. If anything we need an expansion of the conception of 4th Amendment personal and civil rights...

April 27, 2024 3:44 AM

Winter on Dan Solove on Privacy Regulation :

@JonKnowsNothing

There maybe some aspects, but for the most part other countries know our system is FUBAR.

In another millennium, I was told by a law student about an international study where members of the public were given the details of real court cases and asked to predict the outcome. The American public was least able to predict the outcome, much less so than Europeans.

Regretfully, I have never been able to find that study. However, every time I looked at any application of the law in the USA, it has struck me that absolutely no-one will admit to have any idea about the outcome of a court case whatever the material facts and law are...

April 27, 2024 3:21 AM

ResearcherZero on Friday Squid Blogging: Searching for the Colossal Squid :

correction: “firearms and weapons” surrendered

Mr Dreyfus said the events at Wieambilla were a catalyst for progressing the register.

‘https://www.abc.net.au/news/2024-04-27/federal-government-commits-funding-for-firearms-register/103774904

April 27, 2024 3:16 AM

ResearcherZero on Friday Squid Blogging: Searching for the Colossal Squid :

How to reduce gun violence. A working model tested and proven in Australia.

Almost 30,000 firearms surrendered since the latest amnesty began in July 2022.

‘https://www.smh.com.au/politics/federal/government-pledges-160m-for-national-guns-register-20240426-p5fmub.html

April 27, 2024 3:04 AM

ResearcherZero on Friday Squid Blogging: Searching for the Colossal Squid :

Populism is not institutional courage.

‘https://eu.usatoday.com/story/news/politics/2024/04/17/president-biden-moves-to-triple-tariffs-on-chinese-steel-and-aluminum/73346915007/

“Tariffs,” Trump tweeted, “have had a tremendous positive impact on our Steel Industry.”

That was abject nonsense. In reality, the steel tariffs were a costly failure.

China has more steel than it needs…
https://www.marketplace.org/2024/04/17/once-again-who-pays-for-tariffs-on-chinese-steel/...

April 27, 2024 3:01 AM

JonKnowsNothing on Dan Solove on Privacy Regulation :

@Winter, @echo, All

re: US enactment probability: The Devil went down to Georgia (1)

The historical and cultural contexts of the USA and other countries globally make the likelihood of USA adopting legal standards from other countries near NIL.

Our basic laws decent from English laws, but that ended in 1776. After that We Did It Our Way. And that way is not in accordance with anyone else on the planet. No other country sets up their system like we do. There maybe some aspects, but for the most part other countries know our system is FUBAR...

April 27, 2024 2:52 AM

Winter on Friday Squid Blogging: Searching for the Colossal Squid :

@echo

This just dropped on the Russian Orthodox Church.

Head of Russian Orthodox Church ‘was a spy for the KGB’
Patriarch Kirill used posting to Switzerland to collect information for Soviet espionage agency, declassified materials appear to show
‘https://www.telegraph.co.uk/world-news/2023/02/06/head-russian-orthodox-church-spy-kgb/

How Russia’s FSB Embraced Religion in the Face of a Baffling War...

April 27, 2024 2:13 AM

ResearcherZero on Friday Squid Blogging: Searching for the Colossal Squid :

Human rights law is something that exists outside of many courtrooms. Sure there are high profile cases in the High Court, but in reality what you will find, once you enter the court, most of the laws on the book cover the rights of the accused. The victims must establish their rights by fighting for them in the court, while the rest sit and relax.

Most everyone else, in the event of a a serious matter such as the popular euphemism “police misconduct”, will run for the hills, despite their former rhetoric and goodwill...

April 27, 2024 1:36 AM

echo on Friday Squid Blogging: Searching for the Colossal Squid :

https://www.youtube.com/watch?v=ko179E4wlM8

FP Wellman chats with Brynne Tannehill. Author and writer Brynne Tannehill. Brynne is a graduate of the U. S. Naval Academy and the Air Force Institute of Technology with degrees in Computer Science and Operations Research. She is a Naval Aviator who did four deployments to locations such as the Adriatic, Middle East, and the North Atlantic. After leaving active duty she has continued to work in defense research, while as an advocate, writer, and researcher on LGBT civil rights issues and policy. Her most recent book is ‘American Fascism.’ She currently works at a think-tank in the Washington D.C. area as a senior analyst, where she lives with her wife and three children...

April 27, 2024 1:21 AM

echo on Friday Squid Blogging: Searching for the Colossal Squid :

@Winter

I agree that CPAC Hungary is a meeting of nutters and radicalised idiots. But I am afraid they are less of a minority than we would like them to be.

PISS in Poland, the Russian Orthodox church, and Orban in Hungary have shown that “wokebusting” is a powerful driver of corruption and violence against “minorities”[1] of all kinds.

[1] Noting that the majority of people are being victims of discrimination and systematic violence of one kind or another...

April 27, 2024 1:16 AM

ResearcherZero on Long Article on GM Spying on Its Cars’ Drivers :

Collect and document the process of evidence gathering when making a claim or complaint.
Having documentation of everything you possibly can get as early as possible is essential.

If you ever have to deal with law enforcement, get everything they say in writing. Do not trust that they have performed the actions that they claim. Always pursue and ensure the documentation of witness statements and evidence collection has in fact taken place...

April 27, 2024 12:54 AM

You again on Friday Squid Blogging: Squid Trackers :

Can’t someone else pay you more somewhere else to ponder what is true or not? Or does it matter? No, it doesn’t. Who cares? You do.

April 27, 2024 12:44 AM

Winter on Dan Solove on Privacy Regulation :

@echo

I just think the US needs to onboard some things from where they are done better.

The US taking an example from others?

The Pope joining the Seventh-day Adventist Church sounds more likely.

April 27, 2024 12:43 AM

ResearcherZero on Friday Squid Blogging: Searching for the Colossal Squid :

An ‘eye for an eye’ makes the whole world blind.

The muqawama demonstrate considerable tactical proficiency in the information space.

“On the surface, little appeared to change after Soleimani and al-Muhandis died…”

‘https://ctc.westpoint.edu/discordance-in-the-iran-threat-network-in-iraq-militia-competition-and-rivalry/

It is a fairly simple concept that often seems lost on decision makers.
https://www.usni.org/magazines/proceedings/2021/march/reality-war-should-define-information-warfare...

April 27, 2024 12:36 AM

Winter on Friday Squid Blogging: Searching for the Colossal Squid :

@echo

Today the risk mostly comes from a minority of nutters and radicalised idiots

I agree that CPAC Hungary is a meeting of nutters and radicalised idiots. But I am afraid they are less of a minority than we would like them to be.

PISS in Poland, the Russian Orthodox church, and Orban in Hungary have shown that “wokebusting” is a powerful driver of corruption and violence against “minorities”[1] of all kinds...

April 27, 2024 12:07 AM

L-A-R-A on Long Article on GM Spying on Its Cars’ Drivers :

Mr.Smith, you can do a search for OnStar fuse. Some people have reported no negative side effects. Some have said the rear-view mirror loses the compass and auto-dimming features, or Bluetooth stops working, etc. One person said it broke “super” cruise control, whatever that is. So, it might be annoying, but it’s not yet crippling.

April 26, 2024 8:38 PM

echo on Dan Solove on Privacy Regulation :

Both approaches fail. The evidence of actual consent is non-existent under the notice-and-choice approach. Individuals are often pressured or manipulated, undermining the validity of their consent. The express consent approach also suffers from these problems ­ people are ill-equipped to decide about their privacy, and even experts cannot fully understand what algorithms will do with personal data. Express consent also is highly impractical; it inundates individuals with consent requests from thousands of organizations. Express consent cannot scale...

April 26, 2024 8:21 PM

echo on The Rise of Large-Language-Model Optimization :

This is an okay article. It’s not a new argument in itself as the “means of production” is humans versus AI but still a “means of production”. Some of the underlying problems which evolved from the 1980’s and 1990’s is the Thatcher-Reagan consensus which A.) Destroyed society and B.) Created an inter-generational wealth management industry for the rich. It destroyed any sense of moral hazard. People increasingly became “fungible” and here we are...

April 26, 2024 7:18 PM

echo on Friday Squid Blogging: Searching for the Colossal Squid :

https://diva-magazine.com/2024/04/26/lesbian-visibility-week-house-of-commons/
Kate Osborne MP made history with the Lesbian Visibility Week debate in the House of Commons
“As a whole, the debate showcased the distance we’ve travelled since the 1980s, and the central role of lesbians in driving that change. Sadly, it also illustrated powerfully how far we still have to go”

https://badgayspod.com/episode-archive/s7e10-rotha-lintorn-orman...

April 26, 2024 7:11 PM

Jam it on Microsoft and Security Incentives :

Abolishing any form of cyber insurance, and upping penalties for negligence or malfeasance would lift the most boats. As long as any company sees a payout to do nothing (weak compliance/insurance), rather than the payout to hire the most qualified people to just fix the problems they create, the shenanigans will continue to literally no one’s benefit.

April 26, 2024 5:56 PM

echo on Friday Squid Blogging: Searching for the Colossal Squid :

https://www.youtube.com/watch?v=5i-Ic8KX3sI
Ukraine War Live Chat w/ Jake Broe @JakeBroe

https://www.youtube.com/watch?v=HMrBif3VcCM
Ukraine War Live Chat w/ Talaria: Russia Isn’t Even in the United Nations..

https://www.youtube.com/watch?v=PMu2NhK11sI
Putin is a “Small Pathetic Man” Who Needs More Wars to Survive
[…]
Pulling no punches, Browder explains the “psychopathy” and “depravity” that make up the character of Russian dictator Vladimir Putin. What motivates the Russian autocrat? Browder argues that “Putin is a little man, who has stolen too much money, who is terrified of losing power. If he loses power he will go to jail, lose his money, and die. So you’ve this little [man] who is scared of losing his life. So what [does Putin] do?” He creates “a foreign enemy. That is what the Ukrainian invasion is all about.”...

April 26, 2024 5:29 PM

Mr. Peed Off on Friday Squid Blogging: Searching for the Colossal Squid :

Safeguarding Brain Data: Assessing the Privacy Practices of Consumer
Neurotechnology Companies is the first comprehensive report analyzing the data practices and
user rights of consumer neurotechnology products. Neurotechnology refers to devices capable of
recording or altering the activity of the nervous system, including the brain, the spinal cord, and
the peripheral nerves. Traditionally used within medical and research settings, these devices are...

April 26, 2024 5:10 PM

Jerome on Friday Squid Blogging: Squid Trackers :

@Skeptic

Long time no read. Great to receive your response, thanks. I reply as follows.

‘I call Malarkey on the comment you repeat. The kids in Harvard yard should try harder.’

Malarkey! You must be English 🙂
I don’t understand the second sentence though. If I wasn’t giving you the benefit of the doubt I’d say it was designed to convey a superior knowing, that only those ‘in the know’ have access to. But of course you are free to clarify...

April 26, 2024 3:37 PM

Balke Jensen on Publisher’s Weekly Review of A Hacker’s Mind :

My caution to people out there, if you have no idea of what crypto/BTC is, just avoid it completely. I lost a lot of money in a cryptocurrency scam until I found Intel Fox Recovery. I sent him an email at intelfoxrecovery@mail.com , and he promptly replied. I had put down more than $125,855 with an internet investment company after being tricked. When I went to withdraw my money, they only asked for more money before they would process my withdrawal, which made me quite anxious. I emailed Intel Fox Recovery outlining my situation and he responded by accepting to assist. He gave me information and direction nonstop during the recuperation process, which gave me trust in his talents and reassured me. The good news is that he relieved all of my anxiousness during the process; I literally sat and waited for him to finish his job and I received what I lost. I wish every recovery Agent operated with transparency, integrity and trust such as Intel Fox Recovery...

April 26, 2024 12:16 PM

flaps on The Rise of Large-Language-Model Optimization :

As an aside, thanks for saying “misinformation” rather than “hallucination”. I find the latter term to be a peculiar deflection of blame — when a human who says a falsehood is hallucinating rather than lying, we feel sympathy more than anger; but this sympathy is inappropriate for AI-generated falsehoods.

April 26, 2024 12:04 PM

Ardie on Long Article on GM Spying on Its Cars’ Drivers :

Doesn’t require your vehicle to accomplish this.

Your phone sure seems like a whore on its back for speed, acceleration (including high speed cornering, and hard braking), exact location of speeding, failing to stop, holding your phone / texting while driving, distracted by your unrestrained dog…

This can be aggregated over years before they turn you in. Imagine having your vehicle impounded and your driver license taken away because you don’t feel compelled to use a farday bag. This amazon one seems to work for me: ‘…com/dp/B0CNV7YVVB/ref=...

April 26, 2024 11:49 AM

L-A-R-A on Long Article on GM Spying on Its Cars’ Drivers :

noname, be sure to read GM’s statements carefully. They said they’d stop collecting the “driving data”, and would cut ties with two specific brokers. They also said’d they’d “evaluate” the situation or something similarly vague.

GM did not promise never to re-start such collection and/or sale. They didn’t promise never to re-create ties with those brokers, or create ties with others. They haven’t done or promised to do anything at all about the location-data being implicitly shared with the cellular providers via OnStar’s constant not-really-optional connection (if you don’t like it, look online for how to remove the fuse; and note that some of the minor systems, they might go off, but it’s nothing to worry about, it’s just a simple thing)...

April 26, 2024 11:46 AM

Loredo on The Rise of Large-Language-Model Optimization :

LLMs are also very expensive to build, train, and run. Eventually, companies will need to monetize these systems, resulting in LLMs that deliberately cater to this new type of non-traditional “advertiser”.

In addition, governments will want to control what answers LLMs give, so as to control each gov’ts own version of “misinformation”. LLMs are more easily controlled that every possible webpage discussing a particular topic. Putting all one’s answers in very few LLM baskets allows for gov’t control more easily...

April 26, 2024 11:38 AM

noname on Long Article on GM Spying on Its Cars’ Drivers :

Heard about this story on the Clark Howard podcast.

Clark: “And as I predicted, when I talked about it, I said GM is going to stop doing it and GM is going to get sued for it.

Bam, bam, both things have happened already.”

https://www.freep.com/story/money/cars/general-motors/2024/03/29/gm-lawsuit-driver-data-collection-without-consent/73143189007/

Clark also talks about homeowner insurers doing AI-based scans of homes...

April 26, 2024 8:50 AM

yet another bruce on The Rise of Large-Language-Model Optimization :

Nice article, thank you.

Whether it is some version of PageRank, an LLM or a human Journalist, any gatekeeper is going to experience attempts to manipulate their work. I guess we could reframe corporate Public Relations or political Media Strategists both as Journalist Optimizers.

April 26, 2024 3:40 AM

Researcher on X.com Automatically Changing Link Text but Not URLs :

If you sack most employees from your port-a-loo service, be prepared for the outflow.

‘https://arstechnica.com/tech-policy/2024/03/elon-musk-sued-by-former-twitter-ceo-over-refusal-to-pay-57m-severance/

Pay up says judge.
https://arstechnica.com/tech-policy/2023/10/musk-cant-dodge-payments-to-ex-twitter-execs-he-fired-judge-rules/

X owes thousands of workers millions in wages.

‘https://www.nbcnews.com/tech/tech-news/x-formerly-twitter-faces-2200-arbitration-cases-filing-fees-3-million-rcna102308...

April 26, 2024 3:31 AM

John Freeze on The Rise of Large-Language-Model Optimization :

Writers and other creators risk losing the connection they have to their audience, as well as compensation for their work

This pay-per-read model is one of the biggest incentives for everything that’s going wrong in the “current internet”.
Would be nice if writers write because they have something to say.. not only because they want (plenty of) “compensation”

April 26, 2024 3:30 AM

ResearcherZero on Friday Squid Blogging: Squid Trackers :

No substitute for legislation.

non-competition agreements

‘https://www.pressherald.com/2024/04/25/how-u-s-changes-to-noncompete-agreements-overtime-pay-could-affect-workers/

Disclosure of consumers’ sensitive personal health information and other sensitive data to third parties, engaging in unfair and deceptive practices and overcharging customers.

https://www.ftc.gov/news-events/news/press-releases/2024/04/proposed-ftc-order-will-prohibit-telehealth-firm-cerebral-using-or-disclosing-sensitive-data...

April 26, 2024 3:04 AM

Skeptic on Friday Squid Blogging: Squid Trackers :

@Jerome

I should clarify my comment. The piece you cited does not say “free fall”.

You referred to “occupiers”. I think I can tell what side you are on.

I do not think a boycott or sanxtions will stop any state that is serious about its aims.

And I don’t believe anything I read in comments.

Comments are basically blarney. The best ones are written by characters. There are a few around here...

April 26, 2024 2:41 AM

Matthias Urlichs on The Rise of Large-Language-Model Optimization :

Long term, this will be destructive.

There is zero incentive for Google, or any publicly-traded company for that matter, to act in a long-term-ish way.

I have no idea how to fix that.

April 26, 2024 2:35 AM

ResearcherZero on Friday Squid Blogging: Squid Trackers :

Interoperability – the capability to do both (or more) tasks – at once.

(thanks to products or systems that work with other products or systems)

.. / .- — / – . .-.. . –. .-. .- .–. …. .. -. –. / .-. .. –. …. – / -. — .–

Governments could choose to disinfect systems infected by zombie worm.

‘https://arstechnica.com/security/2024/04/zombie-worm-continues-to-infect-millions-of-ips-years-after-it-was-left-for-dead/...

April 25, 2024 8:37 PM

Ardie on The Rise of Large-Language-Model Optimization :

“we need to think about what we want next, how to design and nurture spaces of knowledge creation and communication for a human-centric world.”

How about: Hide our posts under a lily white snow of pre-shared symmetric encryption.

Beyond high-time to, regardless of AI.

Conundrum is, how to get the process off the endpoint onto an air gap.

April 25, 2024 7:44 PM

BCS on Dan Solove on Privacy Regulation :

My concern with accomplish privacy via government regulation is that it will be functionally impossible to enforce those regulations without giving the regulators access to the data and I’d rather a business that wants me to continue to work with them have access to that date then a government which can require me to cooperate with them via force of arms.

What is like to see is for my personal data to be seen as a somewhat toxic asset. Something that people won’t want to keep around unless they have a specific compelling use case for. Maybe make civil damages rather harsh if I’m harmed as a result of actions a 2nd or 3rd party take with data that 2nd party collected about me unless they can show a compelling benefit to me that results from them keep that date...

April 25, 2024 7:30 PM

Jerome on Friday Squid Blogging: Squid Trackers :

Regarding the geographical area presently referred to as ‘Israel’

Naked Capitalism recently posted a piece describing how the economy of the occupiers is in free fall. For reasons including rapid migration, brain drain, workers conscripted.
Pertinent to readers here is the following comment beneath said piece.
*

We have a portfolio company providing specialised cybersecurity to a global critical industry. Their major competitor is an Israeli start-up. Our phone is ringing off the hook because the Israeli company is not seen as safe to deal with (I cannot say if this fear of attack on or by the Israelis, I suspect a bit of both). Third parties who work with both companies confirm this customer shift is not restricted to Muslim countries but throughout the West...

April 25, 2024 4:57 PM

Sm on The Rise of Large-Language-Model Optimization :

Many thanks for the article.

I feel like we are going backwards, there is only going to be few that are going to have human created content, as a luxury item.

Possibly, most of the white collar jobs are going to be replaced by a bad imitation that solves the companies needs most of the times.

April 25, 2024 8:33 AM

blackt0wer on The Rise of Large-Language-Model Optimization :

@fib

“Ban algorithmic mediation in human interaction”

Would eliminate all human interaction. All interaction follows an algorithm of some nature, whether you’re aware of it or not.

The larger, unmentioned issue of AI is it’s a further degree of separation between the normal person and their creative or critical thinking faculty. As of mid-2023, IQ scores have plateaued and may actually be generally declining. I do not see “AI” assistance as improving human cognitive ability...

April 25, 2024 12:42 AM

Erdem Memisyazici on Dan Solove on Privacy Regulation :

I think it’s important to distinguish between subjective privacy and objective privacy when we discuss the subject. Simply including the distinction in your publications can sincerely help outline the issues at hand.

April 24, 2024 9:39 PM

ResearcherZero on Friday Squid Blogging: Squid Trackers :

Parliamentary researcher caught carrying out espionage work.

“Cash’s colleagues included Alicia Kearns, who now heads the powerful Foreign Affairs Committee, and her predecessor in that role, Tom Tugendhat, who is now security minister.”

‘https://apnews.com/article/uk-britain-china-spying-883477e073cc8e2b5623385c3a118d64

Separately, Germany on Monday said it had arrested three people on suspicion of working with the Chinese secret service (MSS) to hand over technology that could be used for military purposes. They are also suspected of violating German export laws by exporting a special laser without permission...

April 24, 2024 9:18 PM

ResearcherZero on Friday Squid Blogging: Squid Trackers :

Global campaign used firewalls as beachheads to penetrate multiple government networks.

‘https://www.cyber.gc.ca/en/news-events/cyber-activity-impacting-cisco-asa-vpns

The campaign appears to be aligned with China’s state interests.

“The actor overrides the pointer to the default host-scan-reply code to instead point to the Line Dancer shellcode interpreter. This allows the actor to use POST requests to interact with the device without having to authenticate and interact directly through any traditional management interfaces.”...

April 24, 2024 6:38 PM

starfall on Using Legitimate GitHub URLs for Malware :

Who in their right mind would install something from a source code repository that isn’t produced by the source code?

Well… Red Hat, Debian, Kali, openSUSE, and Arch all pulled down the xz builds, so at least them.

April 24, 2024 4:19 PM

Lucinda on Dan Solove on Privacy Regulation :

“Privacy” is basically ‘data’ about you that you wish to ‘control’ and limit its communication to others.

in concept its similar to a personal “property right” of tangible things, like your toothbrush, bed, or car.
Common law firmly protects your right to control your ‘tangible’ physical property, BUT NOT intangible non-physical ‘data’.

Patent & Copyright Laws are exceptions, and do establish an ‘intellectual-property-right’ to some intangible data...

April 24, 2024 1:03 PM

lurker on Dan Solove on Privacy Regulation :

“Murky consent should be subject to extensive regulatory oversight”

The gummint imposing “duty” on people? It’ll never work in ‘Murrica …

April 24, 2024 12:53 PM

Winter on Dan Solove on Privacy Regulation :

Express consent cannot scale.

In a certain sense, this is intentional. Under the GDPR, if express consent is not feasible for your thousands of downstream users, then you have no consent, and are not allowed to do what you want to do. Your business model is simply wrong, or rather, illegal.

Rather than provide extensive legitimacy and power, murky consent should authorize only a very restricted and weak license to use data. ...

April 24, 2024 12:51 PM

lurker on Friday Squid Blogging: Squid Trackers :

@ResearcherZero, @ALL

Thanks for the link on Chinese IMEs. Ineresting points I noted,

1) Pinyin must have increased in popularity over the past ten years. When I was in China I regularly astonished people by my ability to input characters using pinyin which they did not understand, and was abviously not their favoured Canjie or Wubi.

2} Despite all the hooha

Among the nine vendors whose apps we analyzed, we found that there was only one vendor, Huawei, in whose apps we could not find any security issues regarding the transmission of users’ keystrokes...

April 24, 2024 10:34 AM

Marko on Dan Solove on Privacy Regulation :

Consent. If I say no to a sex with a stranger at a bar, all I lose is the sex. If I say no to sex with my sugar daddy, I lose my allowance. Everyone’s a sugar baby to surveillance capitalism.

April 24, 2024 10:29 AM

TimH on Dan Solove on Privacy Regulation :

I take issue with “(4) duty to avoid unreasonable risk” for 2 reasons:
1. “Unreasonable” is too vague. Tmobile would argue that it is unreasonable to run their business with no risk of employees being able to sim swap for criminals, for example
2. There needs to be an executive level mandatory custodial penalty for unecessarily held PII being leaked. Need to prove a new customer’s identity, Mr Bank? Sure, but retaining that passport image beyond that validation is unecessary...

April 24, 2024 10:14 AM

Morley on Microsoft and Security Incentives :

Breaking up one would be a windfall for the others. I wonder if we can break them all up at roughly the same time.

April 24, 2024 9:14 AM

Winter on Dan Solove on Privacy Regulation :

@JonKnowsNothing

Can someone explain:

“goal should be to ensure that what people are consenting to is good”

It is called Consumer Protection Law [1]

Is a well developed area of law and works quite well. I understand it is not well developed in the USA. The result of the difference seems to be that US customers get a much worse deal than, eg, EU customers.

[1] ‘https://en.wikipedia.org/wiki/Consumer_protection...

April 24, 2024 9:03 AM

JonKnowsNothing on Dan Solove on Privacy Regulation :

All

re:


* Because the law pretends people are consenting, the law’s goal should be to ensure that what people are consenting to is good.

* The law can’t make the tale of privacy consent less fictional, but with these duties, the law can ensure the story ends well.

Can someone explain:

  • “goal should be to ensure that what people are consenting to is good”

How’s that gonna work when the entire planet cannot define “good”?...

April 24, 2024 8:55 AM

adrien on Dan Solove on Privacy Regulation :

That sounds a lot like legitimate interest to me. The issue with it being that companies have been calling everything legitimate interest, including e.g. showing you targetted ads. Companies have been tzlikg advantage of this without any actual risk.

I can maybe see murky consent work but everything should be made very strict from the beginning.

April 24, 2024 8:55 AM

Andrew Duane on Dan Solove on Privacy Regulation :

Isn’t #3 similar to what they had in the UK? I once heard it referred to as “Duty of Care”, similar to a fiduciary duty. They were required to “take care” of data and not allow untoward or unexpected things to happen to it.

As with many such nuanced proposals, I’m sure there are many devils lurking in the details. And of course those companies who make billions from our wild west frontier of data regulations will fight tooth and nail against it. I’ve come to grips with the fact that pretty much everything I’ve ever done, said, written, or visited is out there for people to use. Luckily I’m old enough that I really don’t give a damn any more, but I do have kids and grandkids…...

April 24, 2024 8:51 AM

Ron Helwig on Dan Solove on Privacy Regulation :

I don’t like it.
Start with why data even gets collected in the first place. I see two main reasons to collect data that isn’t absolutely directly necessary: advertising revenue and government control. Both are poor reasons to collect data.
Privacy should be the default, period. If anyone wants to collect more data than is strictly necessary they should have to show why it is needed and the users should have to explicitly accept it...

April 24, 2024 1:26 AM

Winter on Microsoft and Security Incentives :

@JonKnowsNothing

All insurance is a gamble. It’s legal gambling and accepted practice in business.

All investment is a gamble. etc.

The whole point of investing is risk diversification. Insurance is distributing risks from those who cannot bear it to enough others that each can bear their portion for a price.

Not really different from other investments.

The problem with software/hacking insurance is that the probabilities cannot be quantified as the field changes too fast. This is compounded by the fact that a successful attack can have almost unlimited damages as it will ravage whole industries like a wildfire. [1]...

April 24, 2024 12:37 AM

dean on Microsoft and Security Incentives :

@JonKnowsNothing

the company (IBM, M$) can make changes legally to make the entire suit moot. (which is the point of anti-trust)

It’s one purpose of anti-trust actions. I presume another purpose is to disincentivize other companies from behaving badly. If they can get away with it for years, then escape consequences by playing nicely when the lawyers show up, it won’t have that effect. (Kind of like all those times we see the FTC catch a company breaking a law, and the punishment is that they agree to stop breaking the law for 10 years.)...

April 24, 2024 12:24 AM

ResearcherZero on Microsoft and Security Incentives :

There are also ‘fit and proper’ tests that could be applied, in addition to breaking up monopolies. The concentration within a market apportions too much power in the hands of a few and stifles competition. This is inevitable, as power eventually corrupts any person.

A check on power, and a wake up call, is good practice for the benefit of all.

So a choice could be offered, to be broken up, removal of license, or clean up one’s act...

April 23, 2024 11:48 PM

ResearcherZero on X.com Automatically Changing Link Text but Not URLs :

The development of critical thinking and the mind.

“How do people acquire a sense of justice, and how early does it emerge?”

‘https://www.scientificamerican.com/article/the-science-of-reducing-prejudice-in-kids/

“The entertainment media is dramatic, taps into emotions, and places a strong impression upon the mind. It shapes our unconscious attitudes, which then guide our behaviour.”

https://www.dukece.com/insights/posaganda-how-media-can-help-foster-tolerance/...

April 23, 2024 10:58 PM

ResearcherZero on Friday Squid Blogging: Squid Trackers :

Spyware company was operating outside export regime.

hXXps://www.msn.com/he-il/news/other/israel-tried-to-keep-sensitive-spy-tech-under-wraps-it-leaked-abroad/ar-BB1lqoy6

Method of hiding information through innovative use of path conversions.

hXXps://www.darkreading.com/vulnerabilities-threats/magicdot-windows-weakness-unprivileged-rootkit

April 23, 2024 10:33 PM

JonKnowsNothing on Microsoft and Security Incentives :

@lurker, @dean, All

re: would have thought insurance companies would have an incentive

All insurance is a gamble. It’s legal gambling and accepted practice in business.

You bet against your self. The insurance company picks up the bet. If you lose if the event happens, then the insurance company pays out. If you do not lose, they get to keep the bet.

It takes a bit of sideways looking to catch the idea...

April 23, 2024 10:23 PM

ResearcherZero on Friday Squid Blogging: Squid Trackers :

@lurker

Social media companies laying off their moderation and support staff certainly didn’t help.
Even when they did have staff, FB was not great at responding to complaints from business.

The issue of protecting sensitive data from network eavesdroppers.

IMEs offer a variety of approaches to inputting Chinese characters.
IMEs often offer “cloud-based” prediction services over the network...

April 23, 2024 9:55 PM

JonKnowsNothing on Microsoft and Security Incentives :

@dean, @lurker, All

re: anti-trust is a long row to hoe

Anti-trust takes years or decades to even make a dent. During that period the company (IBM, M$) can make changes legally to make the entire suit moot. (which is the point of anti-trust)

It’s also only good in the USA. The Tiktok snarl is an example of US limited scope.

re: Regarding the Bell breakup, I think the regional phone providers (RBOCs) were mostly a side show. ...

April 23, 2024 8:39 PM

dean on Microsoft and Security Incentives :

insurance companies would have an incentive to reduce malware, and thus increase their profits

It doesn’t really work that way. Reducing malware would increase the profits of all insurance companies, but only briefly; they’d be making their product (“cyber” insurance) less valuable, and some competitor would notice this and undercut them. Insurance companies, after all, are devoted to quantifying risk; if any business can declare they want profit margin X, and then achieve it, it’s them...

April 23, 2024 8:20 PM

Andy on Microsoft and Security Incentives :

I am sorry, but the person who wrote the article is greatly deluded. The US is a corporate oligarchy. Corporations run government, not the other way around.

April 23, 2024 6:49 PM

Lavinia Frank on The Doghouse: Sentex Keypads :

How do you erase a Sentex 9831?

I can’t add another phone number to the entry system, even after deleting the number of the old tenant. I think I need to delete everything and reprogram everyone–thankfully there are only 7 units!

April 23, 2024 6:23 PM

lurker on Friday Squid Blogging: Squid Trackers :

@ResearcherZero
re the Meta 5h1tshow

I occasionally deal with a couple of small firms via e-commerce. Both have good products, good reputations, seemed to know what they are doing. But both have post-pandemic abandoned their functional utilitarian websites as stubs, and now conduct their business via FB.

It must be time to get out my Oxford St sandwich board

The End Is Nigh

April 23, 2024 6:09 PM

lurker on Microsoft and Security Incentives :

@JonKnowsNothing, @ALL

Showing my simple mind again, I would have thought insurance companies would have an incentive to reduce malware, and thus increase their profits. Or have they defined it as one of those Too Hard problems where they choose not to do business?

April 23, 2024 6:03 PM

lurker on Microsoft and Security Incentives :

@cybershow
“Microsoft as a threat to national security is nothing new.”

Then why oh why does the US Govt continue to shovel it onto their desktops and into their servers like it was the only dogfood in the store?

April 23, 2024 5:42 PM

JonKnowsNothing on Microsoft and Security Incentives :

@Winter, @cybershow, All

re: MS is is a threat global security. Their failings in security are a threat to any nation in the world.

The underlying problem with MS is a 1:Many condition.

  • It only takes 1 agency or actor, anywhere in the world, to exploit it.

However, the current level of exploit is Many:Many.

  • Many agencies and many actors all over the globe exploit it.

Rules and prohibitions do not apply outside of a geographic area. Even international rules are not enforceable. Only rules that are self-beneficial are sustained...

April 23, 2024 5:25 PM

Karl on Microsoft and Security Incentives :

Federal Government politicians & their regulatory bureaucrats always have much superior ethics, technical expertise, and selfless concern for the public good … versus typical greedy private business entities.

Therefore, close government supervision of all U.S. economic sectors is imperative, especially for hi-tech.

Free Enterprise & Free Markets are dangerous 18th Century political superstitions...

April 23, 2024 4:36 PM

vas pup on Using Legitimate GitHub URLs for Malware :

https://cyberguy.com/future-tech/how-this-new-invisibility-technology-can-literally-make-you-disappear/

“What would you think if I told you that there is technology available today that could make you vanish? It’s true. Thanks to optical engineering, it’s possible to become invisible to the naked eye. This isn’t just a fantasy—it’s a reality crafted by the UK’s Invisibility Shield Co., which has introduced the impressive Invisibility Shield. This 6-foot-tall shield offers a new dimension to the concept of invisibility...

April 23, 2024 4:28 PM

Winter on Microsoft and Security Incentives :

@cybershow

Microsoft as a threat to national security is nothing new.

You take the frog in the well view of MS.

MS is is a threat global security. Their failings in security are a threat to any nation in the world.

April 23, 2024 4:05 PM

cybershow on Microsoft and Security Incentives :

@K.S.

“logging capabilities” might be a euphemism for something else,
something similar to “lawful interception”.

Good catch.

That’s why a richer and more explicit definition of “National
Security” is essential. Some of the links above strengthen the case
for civic cybersecurity as we call it here. In that definition
‘national security’ is literally no more than the sum total of
individual securities, schools, hospitals, small businesses (I’ve...

April 23, 2024 2:57 PM

cybershow on Microsoft and Security Incentives :

Microsoft as a threat to national security is nothing new. Prominent
figures in the US army, navy and defence research have been saying so
for years. Here are a few links:

hxxp://techrights.org/o/2021/07/19/microsoft-national-security/

hxxps://obamawhitehouse.archives.gov/files/documents/cyber/IEEE%20-%20IT%20Monoculture.pdf

hxxps://www.networkworld.com/article/895510/software-retiring-exec-tells-microsoft-to-embrace-open-source.html...

April 23, 2024 2:52 PM

JonKnowsNothing on Microsoft and Security Incentives :

@Policy Proposal, All

re: There will be push backs on multiple fronts

No licensing or certification or degree program can guarantee that the person is competent and will write reliable code. It’s the same issue as MDs, Dentists, Lawyers. They got certs but they may not be good at their jobs. Plenty of RL anecdotes of encounters with the ones that are licensed but are not competent.

  • The MDs, RNs and Psychologists (US UK maybe FR) who designed and implement the CIA Gitmo Torture program are working somewhere near you. You have no way of knowing who they are. Gives you comfort doesn’t it?...

April 23, 2024 1:02 PM

Policy Proposal on Microsoft and Security Incentives :

Market incentives do not directly reward security investment because the costs are (a) rare and (b) distributed. Customers, whether they are businesses or consumers, have no way of knowing what security is associated with their purchases or how much of the cost is security investment.

Maybe there is a way to change this.

Require all tech products (smart things/cars/etc, IoT, software, services) to get insurance to cover events that are (a) rare and (b) distributed. The insurance must pay for damages and recovery for both the business and its customers...

April 23, 2024 12:18 PM

Who? on Using Legitimate GitHub URLs for Malware :

@ Erdem Memisyazici

Who in their right mind would install something from a source code repository that isn’t produced by the source code?

This is called “social engineering” and it works. Just publish a link on a forum that looks genuine and people will download from it, not to say in case official files have been available for downloaded directly from GitHub/GitLab for years.

April 23, 2024 12:13 PM

Who? on Using Legitimate GitHub URLs for Malware :

@ Erdem Memisyazici

Not a huge deal in my opinion. If you are on GitHub you are probably there to look at source code. If it’s not linked by the project chances are it’s not part of the project and should not be trusted. The target audience appears to be what we used to call script-kiddies who seem to be looking for cheating software online.

Not exactly, lots of projects on GitHub have a “Files” tab where bootable ISO images can be downloaded, and this one is the way these images are downloaded from the project’s main web page...

April 23, 2024 10:20 AM

Why online privacy matters. The strong case for encryption. on The Value of Privacy :

[…] The value of privacy […]

Sidebar photo of Bruce Schneier by Joe MacInnis.