coffeeClean

joined 8 months ago
 

The technical mechanism:

https://play.google.com/store/apps/details?id=com.google.android.apps.devicelock

update


To be clear, I am not the OP who experienced this problem. I just linked them from here.

 

cross-posted from: https://infosec.pub/post/9936059

I would like to collect the scenarios in which people are forced to enter Google’s #walledGarden (that is, to establish and/or maintain an account).

If someone needs a Google service to access something essential like healthcare or education, that’s what I want to hear about. To inspire a list of things that are “essential” I had a look at human rights law to derive this list:

  • right to life
  • healthcare
  • freedom of expression
  • freedom of assembly and of association
  • right to education
  • right to engage in work and access to placement services
  • fair and just working conditions
  • social security and social assistance
  • consumer protection
  • right to vote
  • right to petition
  • right of access to (government) documents
  • right to a nationality (passport acquisition)
  • right of equal access to public service in his country

Below is what I have encountered personally, which serves as an example of the kind of experiences I want to hear about:

  • Google’s Playstore is a gate-keeper to most Android apps in the world and this includes relatively essential apps, such as:
    • emergency apps (e.g. that dial 112 in Europe or 911 in the US)
    • banking apps
    • apps for public services (e.g. public parking)
    • others?
  • (education) Google docs is used by students in public schools, by force to some extent. Thus gdocs sometimes cannot be escaped in pursuit of education. When groups of students collaborate, sometimes the study groups impose use of gdocs. Some secondary school teachers impose the use of Google accounts for classroom projects.
  • (education) A public university’s wi-fi network involved a captive portal and the only way to gain access was to supply credentials for a Google or Facebook account.

I’ve noticed that when creating an account for a public service I often have the option to supply credentials for Google or Facebook to bypass the verification process. In all cases of this kind of registration shortcut being used for public service, there was an alternative Google-free way to open the account. But in the private sector, I’ve seen this style of registration that absolutely required a proxy login via some shitty walled garden (like the university wi-fi). So I wonder if there are any situations where a government (anywhere in the world) requires a Google account in order to get service.

[–] coffeeClean@infosec.pub 1 points 4 months ago* (last edited 4 months ago)

Right but the marker would cause problems for non-intrusive vending machines which only use a light sensor to set the display intensity. Along the lines of that simplicity, a thin smudge of chapstick would do well.. simple and lightweight. Light could enter but not an image.

[–] coffeeClean@infosec.pub 1 points 4 months ago* (last edited 4 months ago) (2 children)

Ah, right.. so how can @ChicoSuave@lemmy.world’s team of activists limit their destruction to the camera functionality? I wonder if a laser could perhaps burn the CCD enough to ruin image capture but not to the extent that light sensing fails.

I guess the more practical attack would be to superglue a piece of transparent diffusing film over it. Light would still get through but it would just be a blur. Diffusing film can be harvested from LCD screens we often see in dumpsters lately. Or even just that milky type of Scotch tape. Along the same lines, a scribe could be used to scratch up the plastic sheet that protects the CCD.

[–] coffeeClean@infosec.pub 3 points 4 months ago (4 children)

I guess the rub is that a light sensor which determines how bright to make the LCD is probably indistinguishable from a CCD. If that is darkened then it would darken the screen potentially on machines with no CCD. Although you could test it by covering the spot briefly to see if the screen dims.

[–] coffeeClean@infosec.pub 1 points 4 months ago* (last edited 4 months ago)

I do, but it’s too big for my connection. It was produced by a French org iirc. I have images disabled so searching for it is hard for me. But if you search for these terms together you should get good hits: infographic pepsi unilever mars

“infographic” is key.

(edit) note as well there different versions of that image. If you see Kraft, that’s an older one because I think Mondelez bought Kraft. I have 3 versions but they’d all be at least 5 years old, so you might be able to find a more up to date one.

[–] coffeeClean@infosec.pub 50 points 4 months ago* (last edited 4 months ago) (10 children)

Is boycotting mars going to make even the slightest difference? Not in a million years.

Claiming boycotts don’t work is as good as claiming voting doesn’t work. It works in numbers.

Not only does mars probably own more companies than you even realise, including many of the alternatives you’re buying thinking you’re avoiding them,

Have a look at this infographic:

I have been boycotting everything in that graphic except “Associated British Foods plc” for the past 15 years because I pay attention and I have collected copious dirt on those companies. They are rotten to the core. I could probably find dirt on ABF if I searched for it specifically, but they are likely the lesser of evils and patronizing the lesser of evils is what ethical consumers do.

but even the products you do buy that are coming from a different company altogether, suffer from the exact same background problems (exploitation, oppression, unsustainability, lobbying).

This is the classic “they’re all evil” excuse for not doing your duty as an ethical consumer in favor of putting price and value above ethics in the interest of № 1. Corpations are not equals in the slightest. If you do a bit of research, you find that the smaller companies are much less frequently involved in wrongdoing. I keep a list of the scandals of these companies and it’s clear which ones do the lion’s share of harm.

There is good reason for the saying “no ethical consumption under capitalism”,

From that article:

“It is now 2018. People have “gone green”, eaten vegan, shopped “fair-trade”, and recycled for years now. Yet the atrocities that spurned the ethical consumption movement continue unabated. ”

Yikes. That author does not know what was abated because he only looks around at what he sees now. So because there are still problems, Olive Pape concludes “boycotting doesn’t work”, instead of realizing that boycotting works in numbers.

I boycott the worst of the worst with no expectation that my drop in the ocean makes a significant difference (just like my drop in the ocean vote makes no significant difference in an election). I do it to ensure that I am not part of the problem.

Stop being a part of the problem and favor the lesser of evils in the marketplace instead of taking the best deal that benefits you personally.

it’s to abolish capitalism because it requires and encourages all of the unethical practices you’re looking to avoid, in order to exist.

That kind of unhinged stance may be accurate, but we don’t live in an abolished capitalism world. Abolition of capitalism is a separate action entirely that’s not mutually exclusive to ethical consumption. You can dream about anarchy all you want but those dreams are actually not “going to make even the slightest difference… Not in a million years.” So in the meantime, please consume ethically.

[–] coffeeClean@infosec.pub 10 points 4 months ago (1 children)

If they want my face that bad they should at least give me a free M&M for it. They need to add a button “push this for a free M&M if you consent to giving us your face”.

 

“Only because of that official investigation did Canadians learn that ‘over 5 million nonconsenting Canadians’ were scanned into Cadillac Fairview's database”. Wow.

This Wired article is contradictory. The spokesperson says:

“an individual person cannot be identified using the technology in the machines. The technology acts as a motion sensor that detects faces, so the machine knows when to activate the purchasing interface”

I suppose it’s possible that a sloppy developer would name an executable Invenda.Vending.FacialRecognitionApp.exe which merely senses the presence of a face. But it seems like a baldfaced lie when you consider that:

“Invenda sales brochures that promised ‘the machines are capable of sending estimated ages and genders’ of every person who used the machines—without ever requesting consent.”

Boycott Mars


I already boycott Mars because they are a GMA member and they spent ~$500k lobbying against #GMO labeling -- and they have been blackballed for using child slave labor -- and Mars supports Russia. This is another good reason to #boycottMars.

Update


Apparently a LemmyBug replaced the article URL with a picture URL. The article is here:

https://www.wired.com/story/facial-recognition-vending-machine-error-investigation/

The vending machine pic is here:

https://infosec.pub/pictrs/image/2041d717-7cd7-4393-94f3-96aa87817aa7.jpeg

[–] coffeeClean@infosec.pub 22 points 5 months ago* (last edited 5 months ago)

it would be more usable if the left column were locked so you don’t lose it when scrolling horizontally. Same for the top row.

“Email / Phone required for signup” ← these are on two very different levels of intrusiveness.. really needs to split into two rows. And from there, it’s interesting to know whether a phone must be a mobile phone or not. With email, it’s interesting to know if disposable addresses are blocked or not.

Also, for “decentralized network” for #Signal, you simply have “no”. I would change that to “No (Amazon)” to inform people they are feeding Amazon by using Signal.

In fact I suggest also adding a row: “feeds a tech giant” because privacy from tech giants is not the only factor -- some of us trying to live ethically do not want to even feed privacy offending tech giants, such as:

  • Amazon
  • Microsoft
  • Google
  • Cloudflare
  • Apple
  • Facebook

And as someone else pointed out, Delta Chat is missing.

[–] coffeeClean@infosec.pub 1 points 5 months ago* (last edited 5 months ago)

It’s the other way around -- childishly selfish to partake in reckless consumerism, buying goods needlessly with total disregard for ethics of the supply chains and ethics of excessive production and consequential waste. Naïve to then advocate for products that are actually anti-consumer. And disgusting to see someone encouraging others to behave like children in the same way while at the same time calling adults in the room “childish”. Shame on you.

[–] coffeeClean@infosec.pub 1 points 6 months ago (1 children)

I’ve never seen a clear CMOS button.. is that what modern boards have now?

[–] coffeeClean@infosec.pub 1 points 6 months ago

Yeah indeed a USB3→PATA and/or SATA cable was what I was actually looking for at the flee market - but found the IDE card (which would also work for me if a cable were easy to come by)

[–] coffeeClean@infosec.pub 0 points 6 months ago* (last edited 6 months ago) (2 children)

Cost might be negligible.. probably $/€ 1-5 for the card and probably $/€ 1 for the cable if i find one. I’m happy with the 15 y.o. laptop. I think I’ll get at least another 5-10 years out of it. I’m not gaming or anything heavy, so I believe I will never again have to buy a PC or laptop. I keep finding functional PCs in the trash that are faster than what I need. I expect that pattern to continue as long as MS continues to bloat out Windows and leverage designed obsolescence against a majority of the population. Even LCDs and scanners I pull from the trash have no issues. I’ve accumulated HDDs from the trash that are useful for temporary operations, like having an extra backup or two while migrating to a new Debian release.

I just love the fact that I do not need to support bad players in the marketplace. I have never had to buy a post-2008 intel cpu or a post-2013 AMD CPU (which means I have never had to contribute to chip makers who produce anti-noncorp-consumer management engines). IIUC, the only modern spy-free chip is the ibm power11. If I ever see the day that I need to buy new gear it would have to be that. Not sure if they put the power11 in laptops yet, or if there will be a mobile variant.

[–] coffeeClean@infosec.pub 3 points 6 months ago (2 children)

thanks for the tip but that’s not either. I tried each ram stick independently as well as with no ram and it was the same every time.

view more: next ›