* Posts by JohnFen

5648 publicly visible posts • joined 20 Feb 2015

Google to add extra Gmail security … by building a walled garden

JohnFen

Re: "to have an email account that doesn't change"

"Register your domain, most registrar will also offer a service to send your email to a different address, and it won't cost you more than $10-20 per year."

This is what I do, but my registrar does the email forward for free. I also run my own mailserver which is where the email gets forwarded to. These days, there are even prebuilt mailserver images available, so doing it yourself is easy if you're a "power user".

JohnFen

What could go wrong?

"if you pull email into a different email program, you will instead be presented with a link to the Gmail message."

There's certainly no possible way that this requirement could be used as cover for spam or phishing attacks.

JohnFen

Re: How?

Yes, if, for some reason, I really had to use this service to read an "email", I'd absolutely make a copy of it for my records, using whatever mechanism works. I'd probably add it to my existing email server so it would get backed up along with the rest of my correspondence.

JohnFen

Nope

"But if you pull email into a different email program, you will instead be presented with a link to the Gmail message."

Which is the same as not using email. I might respond to such a notification, but it would be to tell the sender "I can't see your message." Or, more likely, I'd just ignore it.

Signal app guru Moxie: Facebook is like Exxon. Everyone needs it, everyone despises it

JohnFen

Re: No, it's not

Facebook is not free. Facebook is very, very expensive.

JohnFen

Re: everyone dispises?

My friends and family know me well enough to know that I don't want to be mentioned or have data about me included in Facebook. When I discover someone has made a mistake (usually because someone tells me), I scold them to remind them.

It's certainly not a solution to everything, but it does at least help.

"It is unrealistic to expect that any Facebook user will have a means to filter their non-Faceboook contact when uploading them"

True. My hope is that people will either not upload their contact list, or they will remove me from their contact list if they can't help themselves.

"and also that they will use a codeword (e.g. notJohnFen) when mentioning you in their posts."

Why would they need a codeword? They can simply not mention me at all.

JohnFen

Re: everyone dispises?

"they just don't care, I don't think it has changed their usage of the system at all."

Which is fine, that's their right. However, I think that those of us who do despise it (and other such surveillance companies) need to start calling those people out as assholes when they share any data about people who aren't on Facebook and who haven't given them permission to share.

This not only includes the obvious (name-checking in posts, photos, etc.), but the things that are often overlooked (sharing phone contact lists, and so forth).

If people want to use these services, I see no reason to stop them. But they absolutely have to stop throwing everyone else under the bus when they do.

JohnFen

No, it's not

"it is this indispensable tool"

It is in no way an indispensable tool. Facebook does nothing for its users that they can't do with other, much less intrusive and data-hungry, services.

Facebook is not only optional, it causes far more harm than good for everybody involved.

Facebook admits it does track non-users, for their own good

JohnFen

For my purposes, uBlock does nothing that I need that NoScript doesn't do, so there's no point in running both.

JohnFen

Re: Under no circumstances am I going to stop blocking tracking for any site

I'm aware of ad nauseum, but prefer to block scripts for a number of reasons -- one of which is that I don't want to reward sites for using ads that include tracking.

JohnFen

Well, in all fairness, if you're the sort who is concerned about privacy and avoiding being spied on, then you should absolutely not be using Win 10 on any machine that has internet access.

JohnFen

Re: RE: As a never-signed up non member....

You and he aren't really having a debate -- the points you're making aren't addressing the points he's making.

His complaint is that as a non-FB user, Facebook is storing data about him without his consent and he has no way to rectify that situation. Nothing you've said indicates that his point is invalid. All you're saying is "that's the way it is," which nobody is disputing -- indeed, his primary complaint is that that's the way it is.

JohnFen

Re: Subscribe and save

"in case you want a fresh one every month!"

Who doesn't? They get pretty filthy after a month.

JohnFen

"for the vast majority of people here and around the world, it's too late to block all things Facebook."

It's never too late. Sure, data you've already given away can't be clawed back -- but that doesn't mean you have to keep giving more data away.

JohnFen

Not scary. Hopeful.

JohnFen

Re: RE: As a never-signed up non member....

But there are not a zillion people who both have your name and are your brother's brother.

JohnFen

Re: Like most El Reg commentards

"unless I deliberately allow some through to reward a favoured site"

Under no circumstances am I going to stop blocking tracking for any site, no matter how much I appreciate it. I'll kick them a few bucks every now and again if they have a means to do so, but not lift the blocks. I figure that it's fair, as any site that exposes me to tracking is a site that is showing me a large measure of disrespect.

JohnFen

I dunno. I don't see many ads, but when I do see them I am comforted when they are clearly things that aren't applicable to me.

JohnFen

Re: Freedom of information?

"LinkedIn are even more annoyingly insidious at this point."

Facebook is the biggest target right now, but your fundamental point is correct. The real problem here is that too much of the tech sector has hitched its wagon to data mining as a means of social control and profit. All companies that behave this way are bad actors and need to be brought down.

But, if people begin to reject Facebook's use of these techniques, it will make it that much easier to make the rest of such companies either begin to be socially responsible or go out of business.

JohnFen

Re: to say it with that nice song from the South Park movie

"Zucker Fucker's gonna be forgotten in 20 years"

I sure hope so, because if he does something that will make everyone remember him in 20 years, it's very likely that it will be something that has caused lasting damage.

JohnFen

"ask yourself: why am I wasting my time surfing this Web of Shit?"

This. I use NoScript rather than uMatrix, but the same principle applies. If I visit a site that doesn't work with my settings, and there isn't an extreme need to access that particular site, I just move on.

It's the safest and easiest way of handling it, and really, I lose nothing in doing so.

JohnFen

Re: RE: As a never-signed up non member....

"The person who uploaded the photo (presumably one of your "friends" in real life) - and they **didn't** have to ask for your consent "

You're talking legalities here, when I think people are generally more concerned with what's right and wrong.

Personally, I'd be absolutely furious at any of my friends who uploaded a photo of me to any online service -- and especially Facebook or a Facebook company -- without my consent. Because doing so is just wrong.

JohnFen

Re: RE: As a never-signed up non member....

"I'm sorry but the level of your ignorance is really a bigger problem than any "naughty stuff" Facebook are doing."

Bullshit. That non-Facebook users aren't experts in how Facebook works isn't a problem. The problem is that Facebook is a plague, and it's not unreasonable to suspect them of doing what they have consistently shown over years that they are so eager to do: spy on everybody.

JohnFen

Re: Freedom of information?

I deleted mine a year ago, and boy am I glad I did. I don't get bottom-feeder recruiter email anymore!

JohnFen

Dear Facebook

Dear Facebook,

You are a terrible company whose "services" are harming society, the internet, and me personally. I hope that you follow the path of MySpace. Fuck off.

Sincerely,

Me

Google accidentally reveals new swipe-happy Android UI

JohnFen

Re: ..amazingly, one-quarter ... continues to run a version... released in 2014.

"I really don't see how it's Google problem."

It's Google's problem because it's Google that really wants people to be using whatever their latest release is.

JohnFen

Re: Reminder:

"If there's no on-screen clues, then the less technical users will be stuck high and dry."

Not just the less technical users. Being technically knowledgeable does not give you the power to read minds.

JohnFen

Re: How Do You Get a damned update?

"IMHO Google should stop pushing for a new Android every year"

I agree. But I think that's true in the software world generally. This "rapid release" stuff is nothing but trouble.

JohnFen

Re: ..amazingly, one-quarter ... continues to run a version... released in 2014.

"Most of the silent majority can't be bothered to install any app at all"

I never install a new app that I didn't right myself without some serious consideration, research, and weighing of how much I actually need to have the app installed. Given the state of apps these days, to do otherwise is risky.

JohnFen

Re: ..amazingly, one-quarter ... continues to run a version... released in 2014.

"25% of users are either happy running whatever they have"

I'm betting on this. The newer versions of Android haven't actually brought compelling reasons for people to want to upgrade, and upgrades are disruptive.

JohnFen

Re: Please no

"I think its reasonable to have a few platform wide gestures."

Sure, but there needs to be a button-based method available as well. I think gestures are a pain in the ass in many circumstances. I don't mind if they exist, but I mind a lot if they're the only way of accomplishing a task.

JohnFen

Re: Please no

Yes. Gestures may be fine as an optional way of interacting, but they should not be the primary or only way of interacting.

"anything that sounds like it won an award for being clever is going to end up being poor UX."

Well, to be fair, a poor UXes seem to be in fashion these days.

Europe turns nose up at new smartphones: Beancounters predict 7% sales drop

JohnFen

Re: Keep on dreaming

"maybe you're best off getting a headless fag-packet sized computer"

I've been putting a lot of thought into what I'm going to replace my current smartphone with. I think I'll have to within the next year or two.

The problem is this -- I use my smartphone more as a portable computer than a phone, but every new generation of phone in this class is worse than the one that came before (no headphone jack, no replaceable battery, no SD card slot, etc.). Very few of them actually meet my needs anymore, and it doesn't look like this situation is likely to change.

So, I've been seriously considering the exact thing you recommend here -- buying a low-end phone that can serve as a hotspot, and carrying an actual pocket computer to do everything not phone-related.

I find it a bit sad that we're reverting to the days when it was necessary to carry multiple devices. The big win with smartphones was that it eliminated that problem. But, here we are.

France wants you to put lights and beacons on your drone

JohnFen

This sounds reasonable

This sounds eminently reasonable to me. Far better than the sort of thing DJI is doing.

Having ended America's broadband woes, the FCC now looks to space

JohnFen

Re: This is targeted at rogue broadband mini satellites

"isn't going to want to totally lock themselves out of the US market."

The US market is a "nice to have", not a "must have".

JohnFen

Re: @JLV

"If this gets off the ground all the low-speed US broadband and TV networks will be toast."

The only way this would be an existential threat to US broadband would be if Musk solved that pesky problem with end user upload speeds. Has he?

Uber hid database hack from FTC while FTC probed Uber for an earlier database hack

JohnFen

"But like most things, it's the price of admission."

You say that as if it justifies anything. All that fact does is help to drive home how corrupt our political system is.

JohnFen

"I suspect the "no admission of guilt" is a practical approach for the US, since it enables the regulator to settle without encouraging the guilty party to contest the decision in court"

I'm sure that's right, but, like with pleas bargains, practicality makes the practice no less corrupt.

JohnFen

You can always count on Uber

You can always count on Uber to make Facebook and company look good in comparison.

Go away, kid, you bother me: Apple, Google, Microsoft, Mozilla kick W3C nerds to the curb

JohnFen

" The irony is that the rights holders still don't understand the technolofgy and are insisting on plugins to implement the DRM despite getting a standard."

The EME standard requires proprietary plugins.

JohnFen

Yes, which is why I am no longer a Netflix customer.

JohnFen

" they can ignore more altruistic standards bodies and dictate their own standards through sheer market power."

Which "more altruistic" standards bodies are being ignored? I don't think the W3C counts as an "altruistic standards body". It's as much a case of corporations dictating standards through corporate power as WHATWG. The only difference is that it involves more corporations, and therefore the standards it comes up with are more problematic.

JohnFen

Re: W3C dead?

"Google and friends are the boss of all web standards in the future?"

They have been for a long time. Meet the new boss, same as the old boss.

After seeing what emerged for the HTML5 spec, I'm not entirely sure that WHATWG could do much worse.

'Well intentioned lawmakers could stifle IoT innovation', warns bug bounty pioneer

JohnFen

Innovation at all costs?

Innovation is a great and wonderful thing, but as a society we seem to have fetishized it to a dangerous degree. Innovation must be balanced against other things, such as security and the impact on society.

The idea that anything that slows down innovation is automatically a bad thing is an erroneous, and dangerous, concept.

Civil war erupts at top of FCC over Sinclair's creepy grasp on US telly

JohnFen

What I believe

Either Pai and his cronies are lying or they are deluded. Either way, they are wrong, and their efforts are harmful to society, the nation as a whole, and the goal of encouraging progress and innovation.

Facebook admits: Apps were given users' permission to go into their inboxes

JohnFen

Re: Any developers in the house?

" there is an alarming number of genuinely useful apps that are legitimately useless if you don't allow them network access. What then?"

If it's an app the requires network access to perform its intended function, then you have to decide for yourself if the utility you get from it is worth the security risk.

If it requires network access just because, then either find a different app that doesn't (it probably exists), don't use it at all, or decide it's worth the security risk. Although in that case, you have an advantage in that you know for certain that it's an app that spies on you.

Plus, you always have the option of just not using an app, no matter how useful it may be. Personally, an app the spies on my is useless to me no matter what it does.

"which "firewalled" app is prevented from launching the system browser at the URL "http://www.shadysite.com/?ScrewNetworkPermissions=true&UsersPhoneNumber=123456"...?"

None, of course, but there are ways of handling that, too. For instance, you can firewall your browsers off and only whitelist them temporarily when you actually intend to use them.

In the end, this is the same old security tradeoff -- security and convenience. How much of each is right for you is a call only you can make. But you can't really have both.

JohnFen

Re: Any developers in the house?

I'll take a stab at this as an Android developer.

First, the answer to any such question that begins with "is it possible" is most likely yes. The real question is how hard is it to subvert the security measures.

The way that Android permissions works is that it should not be possible to bypass the permissions the user sets. However, there are sometime multiple paths to get to the same data (your example of the Accessibility permissions is a good one), so users can be in a situation where they've denied permissions for one thing, but allowed a different permission that unknowingly allows access to the same data they intended to deny.

The Android permissions system is a bit of a mess in multiple ways. Carefully used, it is effective, but there are some gotchas in there that are easily stepped into by ordinary users. Also, the permissions are still too coarse -- you may want to allow an app a specific sort of access, but the app must be granted much broader permissions than just that in order to allow it the narrow access you want.

My general recommendation (this is what I do on my own devices) is to use a firewall to prevent apps from talking to the network at all by default, then whitelist the specific ones that you really need to be able to communicate. That way, errors in permissions-granting are less problematic. It doesn't matter if an app gets access to, say, your address book if that app can't transmit that data out of your phone.

Gmail is secure. Netflix is secure. Together they're a phishing threat

JohnFen

Re: A Simple Solution

"Not making the link directly clickable would then exclude half of the worlds population from being able to complete the task."

Baloney. The email itself could even include instructions for that.

But, at some point, people have to be expected to learn minimal skills for using the internet. The alternative is the nightmare version of the internet that it's slowly transforming into right now.

Nervous Facebook CEO Mark Zuckerberg passes Turing Test in Congress

JohnFen

Dream?

"...set the stage by both celebrating Zuckerberg's accomplishment in building Facebook as the American dream..."

So the congressman is officially declaring that the American dream is a nightmare, then? Good to know.

Get the FTP outta here, says Firefox

JohnFen

Re: Gopher

Yes.