WhatIsThePointAnyway ,

De-centralization and open source was always the better way. Technology started on this path and the corporate powers have done everything they can to sabotage and destroy open tech.

CitizenKong ,

Been this way with every new tech I reckon. See also DVD burners and DRM/regional codes.

Aux , (edited )

Yeah, I find it funny that people don't remember DVD DRM. I guess it wasn't noticeable to Americans, but you move from Latvia to the UK and suddenly all your movies are duds. You can at least use a VPN today to circumvent this bull shit in many cases, no such luck back then.

P.S. What was even worse for people living in xUSSR countries is that part of DVDs came from Russia (region 5) and part came from Europe (zone 2, because many xUSSR countries were assigned zone 2). The same was true for DVD players. So it was always a puzzle what to buy. Fuck this shit.

SteefLem ,
@SteefLem@lemmy.world avatar

I think i read somewhere that the cia said they dont install bugs anymore because now ppl do that themselfs.

T156 ,

It's also a lot easier to do it in software, since you don't need to splice wires and leave physical traces like you would have had to do in the day.

A well-configured charger or Flash drive can do that job for you, and can spread itself.

oce ,
@oce@jlai.lu avatar

USB charger ?

T156 ,

Yes, since most modern chargers and cables have internal chips to communicate capabilities with for things like fast-charging. It is not difficult to have the chip identify itself as something else, and execute a payload.

A common attack method is to have it show up as a keyboard, and execute a series of key-sequences when connected to a computer (like opening and executing things through a command prompt).

It is also why you should try and avoid plugging random USB cables/chargers into your phone/computer when out and about, since you don't exactly know if the other end is what it appears to be.

Empricorn ,

I don't know enough about the charger thing to comment on how viable that might be for an attack vector.

But you're definitely right about plugging your mobile device into random ports. Either set your phone to by default only charge and not communicate, use a charge-only cable, or only use your own power bank/charger when away from home and you don't fully trust where you are...

Mostly_Gristle ,

Yeah, I've read a bunch of articles over the last few years about how a lot of law enforcement agencies are finding that instead of getting a warrant and doing a bunch of surveillance they can just buy people's private data from a data broker and get more info than they would have been able, or allowed, to gather if they'd gotten the warrant.

Grandwolf319 ,

So I’m pretty averse to getting new apps and giving them location permissions.

Just cause of this comment I went it and looked at the location permissions, holy shit so many apps had it that shouldn’t have. Like Apple home… wtf does it need location for, it uses wifi…

Lojcs ,

It was considered best practice to never install anything

In what universe? You might as well never turn on your computer.

TrickDacy ,

Yeah this post makes a good point but sounds a little like the writer did not experience what they claim to. WeatherBug was buggy slow bullshit and everyone installed it anyway. it was only people who noticed details who saw how sluggish it made your PC. To this day I've never heard a single person talk about it getting your location being a problem, until now. That's a good point I guess but I just don't think it was on many people's radars.

MeDuViNoX ,
@MeDuViNoX@sh.itjust.works avatar

I installed all kinds of stuff, but the metric was if it slowed down my PC or especially my games. That'd get me to uninstall, run antivirus and/or anti-malware, or even totally reinstall Windows real quick.

TrickDacy ,

Exactly! We weren't yet used to companies spying on us and computers were on the slow side anyhow

Grandwolf319 ,

Yeah, I would install anything that just used 0 resources when it’s not running. But that’s not what malware does

Reucnalts ,

In this universe. I didnt want to have 10 fucking different toolbars for my browser. You had to see the correct download button, so that you get your wanted download plus malware/viruses. If you got the wrong you got a lot of malware xD

Huschke ,

It really feels like the OP didn't have older people in their life with browsers with 3 or more toolbars that you had to service every other month. 😅

People clicked yes to everything. Just like they do now. Nothing has changed.

Grandwolf319 ,

Before clicking yes just meant ruining your sandbox which was your computer. You can’t just have a bad PC today, instead you get your data leaked and become a target for scams.

Aux ,

3? More like 33!

Bigoldmustard ,

I spent 12 hours once downloading a limp bizkit song on dial up and it wasn’t even a limp bizkit song. I feel nostalgic for that kind of deception. It feels so quaint.

Raykin ,

Whoa. I hope it was my fake Limp Bizkit song because a couple friends and I actually did this around 2000.

MeDuViNoX ,
@MeDuViNoX@sh.itjust.works avatar

What was it really?

Raykin ,

A shitty spoof we made about hot pockets. We listed it on Napster or Limewire as a bootleg.

ohlaph ,

Thank you.

rickyrigatoni ,
@rickyrigatoni@lemm.ee avatar

My fellow americans, I would once again like to say I did not have sexual relations with that woman.

Churbleyimyam ,

Lol I remember this kind of thing happening

xePBMg9 ,

FOSS to the rescue!

alexc ,

The problem you are describing is not malware or viruses. They’re just the tools.

The problem is capitalism, which turns everything free into something on which a profit can be made

biscuitswalrus ,

No.... It's malware. It's not a virus, it's malicious. It's malware.

blanketswithsmallpox ,

Thorsquint.jpg

witx ,

That's why Foss will always be better, and we need to support these developers. They also need to protect their software better from capitalist ghouls that will profit from it for free

programmer_belch ,

Protecting FOSS is impossible, there will always be a company that uses your codebase, credits you and includes advertisements to your program.

We need to make using FOSS projects the default and using the corporate options as the backup option.

witx ,

What I mean is better licenses that make sure you get paid if companies profit from it, and harsher penalties for those that get caught infringing the license

nossaquesapao , (edited )

Such a license wouldn't fit the free software or the open source definitions, but I find it interesting that there has been a small, yet apparently growing, group of people unsatisfied with our current open licensing, for different reasons, and proposing new ideas and concepts that wouldn't fit these definitions.

Badeendje ,
@Badeendje@lemmy.world avatar

Bonzi buddy

biscuitswalrus ,

Very articulate. Appreciate the post.

BananaTrifleViolin ,

Aggressive capitalism coupled with user ignorance is the main issue. The advice still remains don't install all this shit, but people growing uo with smartphones have bought in to this idea that it's reasonable for Google to spy on your every move, so why not every other app?

So many users have no idea how their devices work - even an inkling - now what apps do, how to keep devices secure and private, and what happens with their data. Business has taken advantage of that - people want things to "just work" so business use that as a way to abuse users and make every app a trojan horse for data mining.

Even Google, Apple etc privacy settings are bullshit - they're just figleafs of psuedo privacy that enable them as the platform makers to dictate the terms.

I switched away from Windows to Linux on PC, and I use FOSS alternatives on my Android device (even considering replacing android with FOSS system - difficult with some work essential apps unfortunately). But even if you stay on windows/android there are plenty of things users can do to protect themselves - they just don't know how or worse can't be bothered by the whole issue.

feedum_sneedson ,

Yeah, when I was setting up my first smartphone there was a very weird moment where I had to go against a lifetime of training on laptops and desktop PCs and just immediately invite every single app to fuck me up the arse if I wanted it to function as anything more than an expensive telephone with a fancy screen. But invite them up my arse I did.

mindbleach ,

I got a new phone for the first time in a decade and Android keeps cheerfully telling me I'm opted-in to new horrifying layers of surveillance. 'We're gonna look at the first thing you click every time you install anything! Isn't that great?' Fuck off and die. 'But you'll get less relevant recommendations...' Don't recommend anything. 'Wow, you're gonna get such generic ads.' Where else did you hide ads, Google?!

For context: my previous phone is an LG. LG does not make phones anymore. That's how long I clung to something I'd largely unfucked. And every time it boots, to this day, it reminds me I need to agree to some licensing horseshit.

Plainly not.

mindbleach ,

The damn weather app demands to know my location. Asking makes sense. Demanding is a failure to understand why people check the weather. I don't need it where I am. I need it where I'm going to be. You have no trouble showing me it's cloudy in the default location, five thousand miles north. Let me enter a city name and mind your damn business.

letsgo ,

In winter I want to know if it's going to be good enough to go out on the bike or if it's going to be cold and wet in which case I'll drive instead (yeah I know better clothing blah blah). There is a case for knowing the weather forecast for my current location.

mindbleach ,

Yes, of course - some people need very local predictions. But I live in Florida. Snow is not an issue. I want to know if this afternoon's thunderstorm is going to cross where I'm driving, and I want to know what's up with cloud formation in the eastern Atlantic. The temperature's gonna be the same in all three places: Too Damn Hot.

TheGalacticVoid ,

One counterargument: without your current location, it can't send any weather alerts that immediately impact your safety.

mindbleach ,

The network sends those.

Because the cell towers are cemented in place.

mindbleach ,

Not that Florida's smart enough to limit Amber Alerts to relevant portions of the state. I'm down in the dick-tip. I've been rudely awoken by blaring alarms about a kidnapping up in the grundle.

I hope they send those alerts to people in Nashville, because they're all closer to Tallahassee than I am.

TheGalacticVoid ,

This isn't always the case.

Vivendi ,
@Vivendi@lemmy.zip avatar

Weather apps used location even in fucking Symbian and whatever before android, and my 2011 Android Gingerbread bread phone had that as well

If it's ONE app that has any legitimate business with my location it's weather

mindbleach ,

Weather apps being able to use GPS data is great. Weather apps shitting the bed if you don't give it permissions, when it fucking knows it has to ask for permissions, are failed products.

I will give it a location. It can tell me the weather there.

iiGxC ,

Get a used pixel and install grapheneos

AVincentInSpace ,

Alternatively, get pretty much any phone and load LineageOS on it, and just live the FOSS-purist Android life.

It's an incredibly sucky life, but it's a free one.

smeg ,

pretty much any phone and load LineageOS on it

Have your looked at the officially supported device list recently? Sadly a lot of manufacturers don't have anything supported for several years.

FiniteBanjo ,

Reminds me of that Futurama clip from over 20 years ago where Fry is on the internet and a literal mob of advertisements surround him.

slumlordthanatos ,

My God...it's full of stars ads!

KillingTimeItself ,

shit like this is why im going to eventually create my own little internet island.

Dw, i'm going to rule over it like a dictator, no democracy here :)

LodeMike ,

Do it. It's so nice.

Use Wireguard to access it remotely.

sgt_hulka ,

I have a theory that this is the next iteration of Internet. A private internet linked by vpn over the public Internet. Probably already exists in some form over Tor or in dusty Pirate communities. All we need is a no-commercial-entities clause and a Yahoo clone and we could rock like it's 1994!

LodeMike ,

Most of the Internet is like that already.

KillingTimeItself ,

i consider i2p to be a form of this ngl.

KillingTimeItself ,

oh i've already got that part setup. I'm talking about exposing it to the wider world so i can create my own little internet cult.

LodeMike ,

Be careful

KillingTimeItself ,

dw, the only rule is that i'm the dictator.

drathvedro , (edited )

In what fucking universe is this even remotely true? I don't know about you guys, but around those places, in early 2000's, internet access was extremely fucking expensive, so most software was peer-to-peer shared, not even by torrent, but on CD's or floppys, or local neighborhood ad-hoc and internal ISP networks. And the way it got there was mostly from shady CD stores around the corner, where owners paid fortune to download shit and made it back selling it, or PC journals with CDs where they were just filled it up to a brim with whatever garbage they had to boost value.

And there was no access control whatsoever. A literal spyware with full access to your system, that only puts a purple fucking gorilla on your screen, that runs around and does absolutely fucking nothing? Sign me the fuck in. If your virus did something even something remotely useful, like show weather and currency rates, then you could rest assured that it would infect every single computer in the country.

If you were savvy, though, what you'd do is forever sacrifice 50% of your CPU and RAM to the anti-virus and pray to fucking gods you don't touch anything newer than the last version of it you have. Because anything uncaught can and will infect absolutely everything and anything the computer has access to. And your only option would be to just nuke the entire system with all of your data because because any backups you make would also get infected.

Even later, when broadband got cheap and widely available, the internet was for a long time a complete shit show. Remember Flash? Every single ad and every other site used Flash. That shit, along with java applets, was equivalent to automatically downloading and executing any app you see, before you actually even see it. It was also filled with shit like rapidshare and depositfiles, with questionable content and ads on ads over ads, as there was a financial incentive to spam that garbage everywhere and bury anything half-legit under it.

Kids these days really got it easy. See an app requesting something you don't think it needs? Just say no. Us, boomers, didn't have such a luxury. By the time you suspect anything shady going on, it was already too late. There is a downside, though, that manufacturers control what you can and cannot do. It took, like, almost a decade for trivial things like screen recording to even be possible on Android, and things like CheatEngine are straight up impossible. But hey, I'd say that's a reasonable price to pay for not being completely paranoid.

SpaceCadet ,
@SpaceCadet@feddit.nl avatar

in early 2000’s, internet access was extremely fucking expensive, so most software was peer-to-peer shared, not even by torrent, but on CD’s or floppys, or local neighborhood ad-hoc and internal ISP networks

Uh no. I was there. In 1995 or 1996, I may have still used a shareware CD-ROM, or some less-legal compilation CD-ROM, but in the 2000s the most common way to install software by far was to download it over the internet.

And there was no access control whatsoever. A literal spyware with full access to your system, that only puts a purple fucking gorilla on your screen, that runs around and does absolutely fucking nothing? Sign me the fuck in. If your virus did something even something remotely useful, like show weather and currency rates, then you could rest assured that it would infect every single computer in the country.

I think the point of the post is that back then people were warned against installing bonzi buddy and such, and we were told to install software only from trustworthy sources. Spyware software rightfully flagged such software as malware too. Nowadays, there are appstores full of banal apps which harvest much more personal information about you than bonzi buddy ever did and we're not batting an eye about it, and even though we have "Access control" we just happily click accept when our calculator wants to read our emails, and we've accepted it as a normal way of doing things.

drathvedro ,

Uh no. I was there. In 1995 or 1996, I may have still used a shareware CD-ROM, or some less-legal compilation CD-ROM, but in the 2000s the most common way to install software by far was to download it over the internet

I've pulled up some historic data and it looks you're right and I've underestimated how much "my place" lagged behind the world at a time. Of course, if you've had unlimited access in 1996 that makes sense. For me, I have an artifact from the past right in front of me - a router manufactured in 2008, still chugging along, which I've bought when the first truly unlimited plans hit the market, so it made sense to share a connection rather than having a separate account with ISP for every family member. It was only 64k, though, so not downloading a car movie or a game at those speeds. The gray networks persisted all the way into mid 2010s as far as I know.

I think the point of the post is that back then people were warned against installing bonzi buddy and such, and we were told to install software only from trustworthy sources. Spyware software rightfully flagged such software as malware too

Might be another cultural difference, but this is not at all the experience I've had. In fact, just the other day I myself had to spin up a VM to launch a some random-ass app from, of all things, a CD that was handed to me, though this is quite a bit out of the ordinary. But I'd say the attitude didn't change, people are still just as likely and to launch random shit from a USB drive as they were to insert random CD's. And while AV software has improved, people are now less likely to use it. Defaulting to windows defender, which, in personal experience, is only good at catching pirated copies of microsoft software and nothing more. Or relying on google/apple, which is also problematic.

Just out of curiosity, by the way, how many people from your circle do you think have the "Allow app installs from Unknown Sources" checked? For me, that'd be at least a third of them.

Nowadays, there are appstores full of banal apps which harvest much more personal information about you than bonzi buddy ever did and we’re not batting an eye about it, and even though we have “Access control” we just happily click accept when our calculator wants to read our emails, and we’ve accepted it as a normal way of doing things.

To me it sounded like the initial post was glorifying how good it was then versus how bad it is now, while missing on all of the technical progress that happened. Sure, apps collect much more data than they ever did. But on the other hand, bonzi buddy was more than capable of stealing all of your money and nuking your device. In my eyes, it is more important than people giving away their personal info by being careless.

As for the carelessness, though, I don't think that's a tech nor a new problem. People just never ask "why?" and "what for?" nearly as often as they should. Even if sometimes this is literally a question of life and death, most people don't even care to ask...

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • curatedtumblr@sh.itjust.works
  • test
  • worldmews
  • mews
  • All magazines