Anzeige: Microsoft 365 perfekt administrieren – mit Black-Week-Rabatt

Perfekte Administration von Microsoft-365-Umgebungen – mit den Live-Remote-Seminaren der Golem Karrierewelt. In der Black Week mit einem Rabatt von 40 Prozent! (Golem Karrierewelt, Microsoft)

Perfekte Administration von Microsoft-365-Umgebungen - mit den Live-Remote-Seminaren der Golem Karrierewelt. In der Black Week mit einem Rabatt von 40 Prozent! (Golem Karrierewelt, Microsoft)

Nothing’s iMessage app was a security catastrophe, taken down in 24 hours

Nothing promised end-to-end encryption, then stored texts publicly in plain text.

The Nothing Phone 2 all lit up.

Enlarge / The Nothing Phone 2 all lit up. (credit: Ron Amadeo)

It turns out companies that stonewall the media's security questions actually aren't good at security. Last Tuesday, Nothing Chats—a chat app from Android manufacturer "Nothing" and upstart app company Sunbird—brazenly claimed to be able to hack into Apple's iMessage protocol and give Android users blue bubbles. We immediately flagged Sunbird as a company that had been making empty promises for almost a year and seemed negligent about security. The app launched Friday anyway and was immediately ripped to shreds by the Internet for many security issues. It didn't last 24 hours before Nothing pulled the app from the Play Store Saturday morning. The Sunbird app, which Nothing Chat is just a reskin of, has also been put "on pause."

The initial sales pitch for this app—that it would log you into iMessage on Android if you handed over your Apple username and password—was a huge security red flag that meant Sunbird would need an ultra-secure infrastructure to avoid disaster. Instead, the app turned out to be about as unsecure as you could possibly be. Here's Nothing's statement:

Nothing Chat's shut down post.

Nothing Chat's shut down post. (credit: Twitter)

How bad are the security issues? Both 9to5Google and Text.com (which is owned by Automattic, the company behind WordPress) uncovered shockingly bad security practices. Not only was the app not end-to-end encrypted, as claimed numerous times by Nothing and Sunbird, but Sunbird actually logged and stored messages in plain text on both the error reporting software Sentry and in a Firebase store. Authentication tokens were sent over unencrypted HTTP so this token could be intercepted and used to read your messages.

Read 7 remaining paragraphs | Comments

Framework Laptop prices go as low as $639 thanks to refurbs and “factory seconds”

Factory seconds, returned products, and B-stock can all save a bit of money.

The Framework Laptop 13, with Framework's gear logo on the lid.

Enlarge / The Framework Laptop 13, with Framework's gear logo on the lid. (credit: Andrew Cunningham)

Part of Framework’s sales pitch is that the company’s modular laptops are a (somewhat) more sustainable, responsible alternative to buying a hermetically sealed and non-upgradeable model from one of the big PC makers. The company has attempted to encourage reuse and recycling by offering refurbished models and 3D-printable cases for repurposing laptop motherboards as tiny desktop computers.

Earlier this month, the company took another step in that direction, opening up a Framework Outlet section in its online marketplace to sell refurbished products and things that have been returned by their original buyers. The company is also expanding its "factory seconds" offerings—it previously offered some 11th-gen Core i5 Framework Laptop motherboards this way, but that's now expanded to Core i7 motherboards and some complete Framework Laptop models built with bodies and screens that have minor manufacturing defects.

"With the excess displays we received from the factory, we found a subtle cosmetic defect on some of them," wrote Framework CEO Nirav Patel. "There is a wavy pattern and backlight non-uniformity that is visible from certain angles. Because of this, we’re calling these systems “B-Stock” and pricing them even lower than our 11th Gen refurbs. As always, you can upgrade any part of the system including the display using parts from the Framework Marketplace whenever you need to."

Read 5 remaining paragraphs | Comments

A City on Mars: Reality kills space settlement dreams 

Let’s not send a few thousand people to Mars as a big experiment in survival.

Book cover

Enlarge (credit: Penguin Random House)

Let me start with the TLDR for A City on Mars. It is, essentially, 400 pages of "well, actually…," but without the condescension, quite a bit of humor, and many, oh so many, details. Kelly and Zach Weinersmith started from the position of being space settlement enthusiasts. They thought they were going to write a light cheerleading book about how everything was going to be just awesome on Mars or the Moon or on a space station. Unfortunately for the Weinersmiths, they actually asked questions like “how would that work, exactly?” Apart from rocketry (e.g., the getting to space part), the answers were mostly optimistic handwaving combined with a kind of neo-manifest destiny ideology that might have given Andrew Jackson pause.

The Weinersmiths start with human biology and psychology, pass through technology, the law, and population viability and end with a kind of call to action. Under each of these sections, the Weinersmiths pose questions like: Can we thrive in space? reproduce in space? create habitats in space? The tour through all the things that aren’t actually known is shocking. No one has been conceived in low gravity, no fetuses have developed in low gravity, so we simply don’t know if there is a problem. Astronauts experience bone and muscle loss and no one knows how that plays out long term. Most importantly, do we really want to find this out by sending a few thousand people to Mars and hope it all just works out?

Then there are the problems of building a habitation and doing all the recycling. I was shocked to learn that no one really knows how to construct a long-term habitable settlement for either the Moon or Mars. Yes, there are lots of hand-wavy ideas about lava tubes and regolith shielding. But the details are just… not there. It reminds me of Europe’s dark days of depositing colonies on other people’s land. The stories of how unprepared the settlers were are sad, hilarious, and repetitive. And, now we learn that we are planning for at least one more sequel.

Read 6 remaining paragraphs | Comments

Black Friday smartphone sales make (some) foldables seem affordable

Smartphones with foldable AMOLED displays have been around for a few years, but the technology is still rare enough that foldable phones tend to cost a lot more than models with more traditional displays. But things are starting to change… a lit…

Smartphones with foldable AMOLED displays have been around for a few years, but the technology is still rare enough that foldable phones tend to cost a lot more than models with more traditional displays. But things are starting to change… a little. Last month Motorola launched the most affordable foldable to date, with prices starting at $699. […]

The post Black Friday smartphone sales make (some) foldables seem affordable appeared first on Liliputing.

Star Trek Fan Blog Triggers New Entry in Automattic’s DMCA “Hall of Shame”

For Star Trek fans, ‘La Sirena’ refers to the Kaplan F17 Speed Freighter that was prominently featured in the ‘Picard’ series. For people more interested in adult content, ‘La Sirena’ (69) is associated with a Venezuelan actress. The differences are clear but takedown company DMCA Piracy Prevention has trouble distinguishing between the two, which motivated Tumblr’s parent company Automattic to add the outfit to its DMCA “Hall of Shame”.

From: TF, for the latest news on copyright battles, piracy and more.

facepalmAs one of the leading niche blog platforms, Tumblr receives thousands of DMCA takedown requests every year. Many of these point to copyright-infringing material, but not all.

Tumblr’s parent company Automattic is known to inspect all takedown notices carefully and has a track record of defending its users, whether abuse is intentional or not.

To set an example, the company occasionally highlights the worst offenders in its “Hall of Shame.” This overview of the worst offenders welcomed a new entry last week; triggered by the unlikely confusion between a Star Trek fandom blog and an adult entertainment actress.

La Sirena

The recent Hall of Fame entry centers around “La Sirena,” which is Spanish for The Mermaid. Aside from being a dictionary term, Star Trek fans will know La Sirena as the Kaplan F17 Speed Freighter featured in the Picard series.

This starship is more than just another prop for die-hard Trekkies. The person behind the Tumblr blog “Mapping La Sirena” has spent countless hours and dedicated dozens of posts to the iconic Speed Freighter.

la sirena

The term “La Sirena” isn’t exclusive to the starship, however. Others have adopted it too, including Venezuelan adult actress Antonella Alonso who picked La Sirena 69 as her stage name.

la sirena

In theory, such diverse uses of “La Sirena” should never cross paths. According to Tumblr’s parent company Automattic, third-party takedown service ‘DMCA Piracy Prevention Inc’ has trouble distinguishing between the two, earning it a spot in the company’s ‘Hall of Shame’.

Hall of Shame

DMCA Piracy Prevention began sending takedown notices to Tumblr at the beginning of the year and has since submitted over 300 complaints. While Tumblr users occasionally post copyrighted content without permission, in this case many of the reported blogs were not infringing at all.

Instead, DMCA Piracy Prevention appears to confuse the ‘La Sirena’ fandom blog with their client ‘La Sirena 69’ based on little else than the similarity between the names. This resulted in a flurry of inaccurate takedown requests.

“In one recent copyright claim, the monitoring service targeted over 90 Tumblr posts that matched a keyword search of “la sirena,” Automattic’s Emily Fowler writes.

“But instead of alerting our team to La Sirena 69’s allegedly infringed content, the company reported a wide array of mappinglasirena.tumblr.com’s original posts—like a short essay about a new La Sirena booklet, an article analysis of the starship’s design, and even the blog owner’s thoughts on the fourth trailer for Picard season two.”

None of the reported links from the fandom blog contained anything that would even remotely violate the rights of the adult performer. As such, Tumblr’s takedown team rejected the notices and kept all the posts online, adding DMCA Piracy Protection to its “Hall of Shame” instead.

Prevent DMCA Abuse

The Trust and Safety team at Automattic hopes that by calling out these overbroad takedown campaigns, companies will review their processes and do better going forward. In this instance, there is plenty of room for improvement.

“Copyright monitoring services should not flippantly report content entirely irrelevant to their clients’ content; that is an abuse of the DMCA. These companies have a responsibility to verify that the content targeted in their takedown notices is actually owned by their client.”

Automattic’s team reviews DMCA notices meticulously and spotted that “La Sirena 69” is not “La Sirena” but that’s a difference takedown companies should notice, before sending their takedown requests. If not, independent creators such as “Mapping La Sirena” are at risk of being needlessly censored.

“Whether it’s an improved algorithm or more human eyes on every notice that they’re submitting, guardrails must be implemented to prevent DMCA abuse—otherwise, these monitoring services risk unnecessarily burdening innocent content creators, or removing innocuous content,” Emily continues.

“Tumblr is a special place—not only for Trekkies, but for anyone who writes prose, creates artwork, constructs moodboards, or expresses themselves in their own unique way. This mission is why we do what we do, and we will never stop fighting for users to champion this right in our little pocket of cyberspace.”

From: TF, for the latest news on copyright battles, piracy and more.

Judge rejects Elon Musk’s attempt to kill Twitter/FTC privacy settlement

Court cannot grant X Corp.’s flawed legal motion, magistrate judge rules.

Illustration of a stamp that prints the word

Enlarge (credit: Getty Images | Bet_Noire)

Elon Musk lost an attempt to avoid a deposition and terminate a privacy settlement that Twitter agreed to before he bought the company.

Musk's X Corp. in July asked a federal judge for "a protective order staying the notice of deposition of Elon Musk," and an order to terminate or modify the company's 2022 settlement with the Federal Trade Commission. US Magistrate Judge Thomas Hixson denied both requests in an order issued Thursday in US District Court for the Northern District of California.

The May 2022 settlement with the FTC came in response to Twitter targeting ads at users with phone numbers and email addresses collected from those users when they enabled two-factor authentication. US authorities are investigating whether the Musk-owned social network, now officially called X, is complying with the settlement's privacy and security requirements.

Read 10 remaining paragraphs | Comments

Hate speech group calls Musk “thin-skinned tyrant” amid X advertiser fallout

Brands claim ad controls don’t work, urge X CEO to quit over antisemitism.

Hate speech group calls Musk “thin-skinned tyrant” amid X advertiser fallout

Enlarge (credit: Leon Neal / Staff | Getty Images Europe)

Advertisers with zero-tolerance policies for antisemitism spent the weekend urging the CEO of X (formerly Twitter), Linda Yaccarino, to follow their lead, save her reputation, and ditch Elon Musk's toxic social media platform, according to a pair of reports.

Advertising industry insiders told the Financial Times and Forbes that Yaccarino got bombarded all weekend by industry friends advising her to resign, or else face a "credibility crisis" as major brands—including Apple, Disney, IBM, Lionsgate, Paramount Global, Sony, and Warner Bros.—have stopped advertising on X.

This latest X advertiser scare followed two Media Matters reports of ads appearing next to antisemitic content. But the backlash goes beyond stemming just from those reports and is also connected to an antisemitic X post from Musk. In the post, Musk explicitly endorses as "the actual truth" the great replacement theory. That theory, as The New York Times explained, claims that "Jews have organized nonwhite immigrants to replace the white race" and "was embraced by Robert Bowers, who killed 11 worshipers at the Tree of Life synagogue in Pittsburgh in 2018."

Read 41 remaining paragraphs | Comments