37 Followers
77 Following
30 Posts
Location~Huntsville, AL
TWiT.community@JTW
TeamRoll Tide

@richb @leo He’s wrong on that, and shutting down the thread is not it, as the emoji shows.

I know that the only times I’ve found Mastodon interesting enough to hang around and interact with people I’d like to get to know are when I browsed the local timelines on, eg. InfoSec.Exchange.

IMHO perhaps @Gargron is too focused on his Mastodon.social to see that the local timeline of other instances can be both great and essential to finding people to follow.

@leo The biggest issue with deciding where to join Mastodon is access to the local timeline - the server/instance firehouse.

Currently, there is no method by which one can look at the local timelines for other instances (servers), but since each instance is formed around common interests, those timelines can provide a nice source of curated content… which on Mastodon, might be the only content you have to look at while looking for others to follow.

It’s a huge “growth” feature that’s missing.

@twitnews This is such consumer hostile behavior. It’s not the consumer’s fault that these manufactures embraced a false economy of really cheap devices and really, really expensive ink.

In my opinion, this sort of hostile behavior should be met with more than a civil fine. This should also be met with consumers starving the company of income by choosing brands that don’t behave this way.

Anyone choosing Canon after this is like someone going back to an abusive ex. May it never be.

@twitnews I remember “we need a word other than subscribe” all the way back to 2004. Having to emphasize “subscribe FOR FREE.”

But I suppose after a decade and a half we finally decided Subscribe will never lose its negative/costly connotations. 🤷‍♂️

“Follow” is ok, but podcasts are different from social media feeds and I feel like “➕ADD” (cf Netflix) might have been better.

It’s a shame we couldn’t use this 16yr issue as excuse to create a whole new word. eg. “Derf us in your podcast app!” 🤲💵

@leo @tokyotony I vaguely remembered @Gargron talking about stripping GPS. Checking GitHub it appears that GPS stripping first appeared in 1.1, fix # 87. And they've refined it since then to address re-encoding issues. I'll test this out when I can to confirm, but I think uploading JPEGs (ie. actual photos) should be safe to not leak any location data.

PS. Thanks for getting twit.social back on the radar and spam-free. I hope beyond hope for a new 2008 style Twitter to emerge.

@leo There was the case of cryptolocker #malware that managed to get into a *signed* (ie. bypasses Gatekeeper) distribution of popular #bittorrent client #Transmission, twice.

There is a case to be made for anti-malware on MacOS, but it’s mostly based on fear and uncertainty, rather that current evidence.

However, tell that to the people who updated their legal and legit copy of Transmission and found their system crypto-locked...

Like so many things in life, it’s a percentage game.

While a lot of us are talking about #Samsung phones today, can we also discuss whether or not we trust their built-in cloud services?

I actually like Samsung's approach to photos and device backup better than #Google's, but I don't trust their #cloud #security.

I like Samsung's browser better too, but like #Bixbi, they try very hard to push you into their "Customization Service," aka sending everything you do to Samsung. That's a fatal flaw.

What do you think?

#infosec #cybersecurity #S20

After 40 minutes talking to Apple Support, they quoted me up to a $549 charge to service my two year old iPhone, because the charging port wasn’t working reliably.

Instead, I left the chat and found a suggestion from iFixit… using a toothpick to check for and clear hidden “lint” debris from the port. It looked perfectly clean, but to my surprise I got some out. My #iPhone now charges again.

$550 to #Apple, after I’ve already paid them $1200, to fix what a toothpick could do.

#RightToRepair

This link was posted over on #TWiT.community and I thought I’d share it to the #fediverse.

The #EFF (impressively) used #mitm and #Frida code injection to inspect #Amazon Ring’s *pinned* certificate traffic to previously undisclosed trackers/analytics providers. Turns out #Ring’s apps are sending Pii, like your name and email address, to their partners, and telling them things like your unique device fingerprints. Not cool Amazon.

https://www.eff.org/deeplinks/2020/01/ring-doorbell-app-packed-third-party-trackers

#tech #security #infosec #news

Ring Doorbell App Packed with Third-Party Trackers

Ring isn't just a product that allows users to surveil their neighbors. The company also uses it to surveil its customers.An investigation by EFF of the Ring doorbell app for Android found it to be packed with third-party trackers sending out a plethora of customers’ personally identifiable...

Electronic Frontier Foundation

@SamGreenwood It could, but it's not designed to. TOR is designed for total "trust no one" privacy, with enough layers of obfuscation so that the "entrance" doesn't know the exit, and the "exit" doesn't know the entrance, and the "middle" doesn't know either end-point.

Likewise, selecting the geographic location of the exit point is counter to that design.

If your question is "Can I use TOR to watch __?" then the answer is likely "no". Geo-block aside, the speed alone would make it unbearable.