16,699 karma · joined February 20, 2007
https://social.goodanser.com/@zak (Mastodon)
Sometimes the market rejects making products worse to lower costs or discourage user error. I wish that was the case here.
AI maximalists like to compare the technology to electricity. Imagine if in the early days of electrification, a CEO had rewarded staff for increasing the amount of electricity they consumed rather than finding ways to use it for business impact. Institutionalizing people who showed signs of mental illness was popular in those days, and I suspect that would have been the outcome.
None. The first rule of network security is you can't trust the client.
All attempts at remote attestation of consumer devices are someone wanting to break this rule. It's always a mistake; the OS being on the blessed list raises the difficulty level for fraud a little, but serious fraudsters have already perfected workarounds.
https://upload.wikimedia.org/wikipedia/commons/e/ec/1969_Pon...
The real problem is that prior to verification, Google can't ban ICE tracking apps (or whatever the next problematic government doesn't like) from Android, and after verification they will be able to for most users.
They say they won't do that. I might even believe the people currently running things won't do that, but they will be incentivized to do that in the future, and incentives are much better at predicting outcomes than intent.
More sysadmin-as-a-service type stuff is fine as long as the opt-out is easy. This isn't. I'm upset about the rug pull.
Google has stated that it will only withhold such permission from developers who distribute malware. I imagine they'll stick to that promise at first, but long-term I think they won't. Once it's possible for them to impose partial bans on developers, governments have every incentive to pressure them to do it.
Does it, and if it does, does it need to be addressed by an OS vendor creating a mechanism to ban developers for most users? I'm not convinced of the former, and I'm certain the latter is bad. I predict within ten years, we will see this used against something that is not malware.
I don't think OS vendors should be expected to keep people from doing dangerous things. A warning label saying "hey that's dangerous because..." is reasonable, but anything more and they're trying to be my sysadmin against my will.
I would advise anyone tracking medical data with an app to use something open source and local-only or network-optional if at all possible. I know there are open source cycle tracking apps, but I do not know if they're any good.
It's similarly reasonable to drop a tool that's unreliable, though I don't think that's a reasonable description here. Instead, they used a tool which is generally known to be unpredictable and failed to sandbox it adequately.
A part of this is that consumers usually don't have very good information about products like that. I would almost always pay twice as much for an appliance that's going to last three times as long, but I usually can't find a review that's based on a teardown and rebuild or testing to destruction.
Aircraft engines are subjected to both.
Options to get around that problem include regulating Apple and Google or mandating that essential services not require accounts with third-party providers.
Instead, Jones repeatedly failed to comply with court orders and attempted to delay the trial. He lied under oath, broadcast lies about the plaintiffs, and mocked the plaintiffs on his show after losing a case. He additionally broadcast his intent to continue spreading disinformation about the Sandy Hook shooting.
The long-term pattern of treating the court with contempt and clear intent to continue his illegal behavior are an extreme level of noncompliance for a defendant in a lawsuit, and they added up to an extreme penalty.
https://en.wikipedia.org/wiki/Alex_Jones#Sandy_Hook_Elementa...
A Firebase Cloud Messaging push notification contains what the app developer's server puts in it. That could include the message body or it could just be an instruction to the app to poll the server for new messages. It has nothing to do with the notification that's displayd on an Android device. Those are entirely local.
An app that cares about privacy wouldn't send anything more than a poll instruction over FCM.
Fourth was probably a makeshift bridge over a creek collapsing while crossing it as a passenger on an ATV. I was pretty young when that happened.
LEDs with higher luminous efficacy than the XM-L2 exist now, but for a large increase, they usually have a larger light emitting surface. That means a less focused hotspot and less useful beam distance with the same power input. On the other hand, it's possible to achieve a more focused hotspot and more beam distance without giving up more output with some newer LEDs optimized for high output from a smaller surface. It's also possible to greatly improve color rendering.