HNHacker News
TopNewBestAskShowJobs

cpv

71 karma · joined November 21, 2016

submissionscomments
cpv··on Who is Facebook's mysterious “Lan Tim 2”?
To be honest, Fb login is one of the least reasons I worry.

I have seen apps sending requests to facebook graph without using the login, or they don't have facebook login at all..

I haven't rated any apps based on this, though.

cpv··on Who is Facebook's mysterious “Lan Tim 2”?
They even have a better version, the Multi Container plugin. You can separate multiple contexts (fb, goog, banking, memes..), and each lives in a separate container. Takes a little time to get used to, and if used with privacy badger, ublock origin, FF built-in anti-tracking, might give good results in reducing your exposure to online tracking.

Yet some mobile apps still use heavy analytics which is sent to some domains, again, you need something like netguard, vpns, to filter your mobile traffic. Privacy becomes a pain https://media.ccc.de/v/35c3chaoswest-32-toll-of-personal-pri...

cpv··on Who is Facebook's mysterious “Lan Tim 2”?
My 0.2$, a previous comment of mine https://news.ycombinator.com/item?id=22180163

"Some chat apps (like Viber and others) have Facebook SDK integrated in them, without any direct Facebook functionality people would use. Discovered after using NetgGuard, and seeing who is calling home, and not only home. (Why viber is making requests to graph.facebook.com anyway?)

Duolingo is a nice app for learning new languages, yet it might be using the same sdk, since it likes to call facebook.com domain.

Netflix is a good streaming service, but it has some option somewhere, which allows them to share data with others, and enabled by default. And yes, it's present in fb activity.

The list can go on...

There are developers who integrate dozens of SDKs, without any specific purpose for users, and not knowing what is happening. We need something like PrivacyBadger/ublockorigin for phones/laptops/routers/homes/cars. It's getting more than creepy.

And why would Facebook allow third-parties/businesses upload into FB info they have on their customers...

PS: analysis of how a simple menstrual tracking app is leaking data about the owner https://media.ccc.de/v/36c3-10693-no_body_s_business_but_min... "

cpv··on ‘People You May Know’ helped Facebook grow exponentially
In the recent events, like https://news.ycombinator.com/item?id=22178917 we have learned that there is a lot of data moving around, including various third-parties.
cpv··on Ask HN: A major USA bank is storing passwords in cleartext – what to do?
"Almost without fail at each engagement multiple C-level folks will approach after my talk, hand me their business cards and say something like, “I hope you never have to use this, but if you do please call me first.”"

https://krebsonsecurity.com/2019/12/ciso-magazine-honors-kre...

cpv··on Off-Facebook activity
Some chat apps (like Viber and others) have Facebook SDK integrated in them, without any direct Facebook functionality people would use. Discovered after using NetgGuard, and seeing who is calling home, and not only home. (Why viber is making requests to graph.facebook.com anyway?)

Duolingo is a nice app for learning new languages, yet it might be using the same sdk, since it likes to call facebook.com domain.

Netflix is a good streaming service, but it has some option somewhere, which allows them to share data with others, and enabled by default. And yes, it's present in fb activity.

The list can go on...

There are developers who integrate dozens of SDKs, without any specific purpose for users, and not knowing what is happening. We need something like PrivacyBadger/ublockorigin for phones/laptops/routers/homes/cars. It's getting more than creepy.

And why would Facebook allow third-parties/businesses upload into FB info they have on their customers...

PS: analysis of how a simple menstrual tracking app is leaking data about the owner https://media.ccc.de/v/36c3-10693-no_body_s_business_but_min...

cpv··on Many games are held together by duct tape
Thanks, will check it out!
cpv··on Many games are held together by duct tape
I'm curious: Are you running it as full-time, or a side project? How much time does it take for maintenance in a month? Can you share a link?
cpv··on Fake “like” factories – how we reverse engineered facebooks user IDs [video]
Such notifications (email, text) can be disabled in the settings.

And you can visit the app/web when you feel like, not when they want.

cpv··on Fake “like” factories – how we reverse engineered facebooks user IDs [video]
I've seen this tracking param when people shared with me some links, which they got from Fb.

There is a Firefox extension ClearURLs, which strips some tracking parameters from the url.

From what I remember, if you click in Fb on a link, it redirects first to an internal tracking url, and then to your final link. This is not limited to Fb only.

cpv··on Update on free software and telemetry
That's a trend going for years.

A lot of services, newsletters, promo, telemetry, are by default opt-out. When you install some chat app, it also syncs some data (e.g. contacts maybe?) and then you can go in the settings and opt-out for that sync..

cpv··on Gamers propose punishing Blizzard by flooding it with GDPR requests
Here's a short video with some summary https://www.youtube.com/watch?v=MmkHAlhCvWg

The second part has some interesting reactions from fans, counter reactions from blizzard. This moment has rocked the gaming community, and generated some memes on the internet.

cpv··on Google is investing $3.3B to build clean data centers in Europe
" Think marathon, not sprint."

I've seen this before as "Think long-term, not short-term". Sometimes it can be true.

cpv··on Unity, now valued at $6B, raising up to $525M
Nonetheless, having access to the source gives you insights how things work, build by yourself. With more experience, you can customize it, or suggest PRs. This can be a game changer.
cpv··on Unity, now valued at $6B, raising up to $525M
I would say modifiable and available.

Create Epic account, link to Github, receive access to UE4 repository. Probably can be revoked easily.

Or get it via launcher, after log in into your account.

Also, you cannot post online more than 30 lines of engine code (forums, stackoverflow,etc).

I'm not a lawyer.

Edit: launcher part.

cpv··on Tell HN: Pluralsight and the dark-pattern of auto-renewals
Do you know a similar service outside US?
cpv··on Momentum is building to explore Venus
Here is a book from the soviet era, about Venus

https://www.goodreads.com/book/show/23302599

"Тайна утренней зари"/"The Mystery of the Dawn"/"Taina Luceafărului".

As for their space program, I do believe they had almost similar investment for Venus and Mars, just Venus was more approachable and the missions were more fruitful(?). They canceled some Mars and Venus programs in time. Some wikipedia page about USSR space program:

https://en.wikipedia.org/wiki/Soviet_space_program

cpv··on Let's start using DuckDuckGo more often
Aside from DDG, can anyone say anything about other available alternatives, like startpage.com, lite.qwant.com or searchencrypt.com?
cpv··on Google Fights Back
Some Samsung devices have removable batteries, which if replaced with new ones, can add some more life to it.
cpv··on Improving privacy and security on the web
I was surprised to see how many popular websites rely on things like user agent or referer header to deliver functionality. As soon as you start tinkering with them, they stop working, or say you use an older browser, etc.
cpv··on Flightradar24 – how it works
Good improvement on them. They had interesting articles from time to time, from various domains (security, gamedev, DYI, management, work-life balance, work migration, science, etc). Opening to the international audience can only be beneficial for them, and the audience.
cpv··on VirtualBox 6.0 released
I had to run VB on Mac host, with linux guest. No issues, but every time I need to create a VM, I set different settings than the default ones (more ram, 2 cpu cores instead of one, 3d acceleration + more video memory).
cpv··on The Creepy Line: a documentary about Google, Facebook and user manipulation
Good question. Probably you need to send a data request, so they can provide you with info they have about you. But based on what should they search in their data warehouse? IP? Cookies? Interests? Leaked email?

I guess one way to avoid shadow profiles would be to block FB scripts/cookies on pages you visit, so they won't track you.

cpv··on The Creepy Line: a documentary about Google, Facebook and user manipulation
I don't really know this. Just provided what similar functionality exists in FB.

It's a black box for most of us. You might need to provide fake data to make it relearn. There were comments here and there about people liking various pages/posts not related to them, just to feed it with junk.

cpv··on The Creepy Line: a documentary about Google, Facebook and user manipulation
FB has Activity Log, visible only to you, and shows what you posted, commented, liked, tagged, shared, searched, etc. From there you can manage and delete stuff if you want, by hand.
cpv··on UBlock Origin 1.17.4 released
It might depend, on country, but I know that usually you can mention donations as "donations" in your income papers/form.

Don't know how it would be for an opensource project. Mentioning something like "open source browser extension uBlock Origin" probably...

Interesting how people report their donations, patreons, etc.

cpv··on Google Container for Firefox – Prevent Google from tracking you around the web
FF has an option to configure the Referer (lots of websites might break). Scripts/fonts can be filtered via extensions like Privacy Badger, either by blocking the cookie, or the domain completely.
cpv··on Never connect to ProtonMail using Chrome
why eastern Europe?
cpv··on A critique of Gmail's “smart replies”
LinkedIn also happens to have interesting answers. Which I don't use.

Or skype, I had to disable it, because it looked like complete gibberish (some English suggestions for non english messages).

cpv··on Android Security Auditing: Investigating Unauthorized Screenshots
Firefox Focus has this enabled, and some banking/payment apps (the developers knew about the flag).
← PreviousPage 2 of 3Next →