rinze

joined 1 year ago
[–] rinze@infosec.pub 50 points 6 months ago (2 children)

The only question here is: why do European police chiefs want to help Russia and China intercept our communications?

[–] rinze@infosec.pub 9 points 7 months ago (2 children)

You're right, I completely misinterpreted the comment. The thing is that "voice" is a very specific term within IRC, and I got confused :D

[–] rinze@infosec.pub 15 points 7 months ago (6 children)

If you mean that in some channels only some people can actually "talk", I think it depends on the configuration of the channel, but it's a possibility.

I thought people used Discord because you could have video / audio chats (not sure about this, I've used it very sparsely.)

And then there are Open Source projects that use Discord as the documentation repository. Hell is a place on the Internet, apparently.

[–] rinze@infosec.pub 50 points 7 months ago (13 children)

IRC still rules. No ads in my irssi.

[–] rinze@infosec.pub 13 points 7 months ago (6 children)

It's not yet proven that it was the US, no? I mean, I wouldn't be surprised at all, but I still don't know that's a fact.

[–] rinze@infosec.pub 33 points 7 months ago

The situation in Malaga is going to be a shitshow pretty soon. There's basically no water there anymore. This summer, hotels will be able to fill their swimming pools, but residential buildings will be banned from doing so. There are talks of bringing water in boats from Murcia. People that got rich planting avocados and mangos saw their crops fall 85 % last year. And of course there are already water consumption restrictions, with water flows restricted at night.

But at the same time there are talks of beating all previous tourism records. This is insanity.

[–] rinze@infosec.pub 7 points 7 months ago (1 children)

Damn, I was used to work around shitty stuff on Teams. Are you telling me they're going to push another, different set of bugs on me now?

[–] rinze@infosec.pub 5 points 7 months ago (5 children)

What has been your involvement with Reddit as a user so far? I'm trying to understand what users are getting those offers.

[–] rinze@infosec.pub 4 points 8 months ago

I was listening to a podcast the other day (could have been "Rachman review", which is typically very good) and the interviewee said that yes, there might be interest in this, but companies want to see long-term orders before committing. There's currently no capacity, so they have to build it on their side, but they don't want to do it if they think the orders are going to dry in a few months / years.

[–] rinze@infosec.pub 4 points 8 months ago

Some people have already commented how to find it.

However, on a tangential note: last I heard, they stopped adding new papers due to a trial in India, but I never found out the outcome of that. Anyone has news about this, or did I dream it?

[–] rinze@infosec.pub 14 points 8 months ago (1 children)

With the new EU's interconnection laws I hope I can WhatsApp from Pidgin, or even from irssi!

But no, I don't use pidgin anymore. irssi, yes.

[–] rinze@infosec.pub 11 points 8 months ago

We can't have nice things.

The full text describes clusterfuck after clusterfuck. It's worth registering (it's free to read) even just for this one.

 

Reddit said in a filing to the Securities and Exchange Commission that its users’ posts are “a valuable source of conversation data and knowledge” that has been and will continue to be an important mechanism for training AI and large language models. The filing also states that the company believes “we are in the early stages of monetizing our user base,” and proceeds to say that it will continue to sell users’ content to companies that want to train LLMs and that it will also begin “increased use of artificial intelligence in our advertising solutions.”

The long-awaited S-1 filing reveals much of what Reddit users knew and feared: That many of the changes the company has made over the last year in the leadup to an IPO are focused on exerting control over the site, sanitizing parts of the platform, and monetizing user data.

Posting here because of the privacy implications of all this, but I wonder if at some point there should be an "Enshittification" community :-)

 

Hi,

In Spain (and probably other places in Europe) we've recently seen a deluge of cookie banners that offer you the option to reject tracking cookies for a fee. The regular GDPR forms are therefore slightly broken, as you get several options: accept, reject (which doesn't work in most cases), and buy a subscription to reject. Consent-O-Matic, for example, is having a hard time. I don't doubt it'll get corrected in time, but I want to talk about something tangential.

Cookie consent has (at least) two layers: the browser layer (where we might delete cookies, reject third party cookies, etc) and the site UI layer (where we're presented with an option when we load the page). This means we can reject third-party cookies at the browser layer and then accept whatever form at the site UI layer.

With the set up mentioned above, is there really any difference between accepting cookies and rejecting cookies? No tracking cookie are going to get installed in my computer anyway. This, combined with an ad blocker, makes the browsing experience exactly the same whether I accept or reject the cookie form. Is there anything I'm missing here?

23
submitted 11 months ago* (last edited 11 months ago) by rinze@infosec.pub to c/privacy@lemmy.ml
 

Real-Time Bidding (RTB) allows foreign states and non-state actors to obtain compromising sensitive personal data about key European personnel and leaders.

Key insights:

  • Our investigation highlights a widespread trade in data about sensitive European personnel and leaders that exposes them to blackmail, hacking and compromise, and undermines the security of their organisations and institutions.

  • These data flow from Real-Time Bidding (RTB), an advertising technology that is active on almost all websites and apps. RTB involves the broadcasting of sensitive data about people using those websites and apps to large numbers of other entities, without security measures to protect the data. This occurs billions of times a day.

  • Our examination of tens of thousands of pages of RTB data reveals that EU military personnel and political decision makers are targeted using RTB.

  • This report also reveals that Google and other RTB firms send RTB data about people in the U.S. to Russia and China, where national laws enable security agencies to access the data. RTB data are also broadcast widely within the EU in a free-for-all, which means that foreign and non-state actors can indirectly obtain them, too.

  • RTB data often include location data or time-stamps or other identifiers that make it relatively easy for bad actors to link them to specific individuals. Foreign states and non-state actors can use RTB to spy on target individuals’ financial problems, mental state, and compromising intimate secrets. Even if target individuals use secure devices, data about them will still flow via RTB from personal devices, their friends, family, and compromising personal contacts.

  • In addition, private surveillance companies in foreign countries deploy RTB data for surreptitious surveillance. We reveal “Patternz”, a previously unreported surveillance tool that uses RTB to profile 5 billion people, including the children of their targets.

  • Our examination of RTB data reveals Cambridge Analytica style psychological profiling of target individuals’ movements, financial problems, mental health problems and vulnerabilities, including if they are likely survivors of sexual abuse.

  • Real-Time Bidding's security flaw is a national security problem

 

Gift link, read freely :-)

view more: ‹ prev next ›