So basically, youtube?

> "By orders of magnitude, when we find new vulnerabilities, we share them"

I wonder how many ways they've thought of to misclassify freshly discovered vulnerabilities as old.

So I assume all the deliberately introduced vulnerabilities are excluded from the tally because they technically "did not find them" ?

.. same as the old boss

> So, how to accomodate non-smartphone users? Different floors with bluetooth vs card key? Just don't go to that hotel?

They could have a box of 'loaner phones' that they hand out...

Hotel door app requires access to contacts, shared files, camera, microphone, GPS, SMS, internet, dropbox, google drive, online banking, ....

It's VPNs all the way down!

It seems like they are viewing tor as a "free vpn" so people can use facebook without their employer/school/etc knowing what they are doing.

Proprietary? You're ill informed. The code that writes those files is part of systemd. Anyone with a computer can grab a copy and rewrite them.

it's people in general. Anyone remotely famous gets plenty of "internet abuse". It's a side effect of being known. Politicians? check. CEOs? check. Bankers? check. Celebrities? check. Religious leaders? check. Reporters? check. Whistleblowers? check.

I can think of a $12 experiment that would answer that question

That would be because any (competent) backdoor will be encrypted and cryptographically signed with key(s) known only to the TLA. Consider a router -- it passes all packets normally unless it finds one that is properly signed, then it extracts and executes the payload, fully opening up the device to the whims of the TLA. In lieu of someone leaking or determining the key, it would be extremely hard to identify such a backdoor.

... and change all of your passwords today. This is the best way to devalue the 'massive database'. Then sanitize your SQL queries!

Thanks for your insightful contribution that doesn't suck.

> and it may kill some business models that could have brought phones to the poor with no monthly charges

If a potential business model relies on creating a captive market via legislated freedom removal, it's a bad business model, full stop. Cell phone subsidization plans are already protected by contract law. The additional criminalization of unlocking is unnecessary.