Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
China

Apple 'Suddenly Catches TikTok Secretly Spying On Millions Of iPhone Users', Claims Forbes (forbes.com) 61

In February, Reddit's CEO called TikTok "fundamentally parasitic," according to a report on TechCrunch, adding "it's always listening, the fingerprinting technology they use is truly terrifying, and I could not bring myself to install an app like that on my phone... I actively tell people, 'Don't install that spyware on your phone.'"

TikTok called his remarks "baseless accusations made without a shred of evidence."

But now Apple "has fixed a serious problem in iOS 14, due in the fall, where apps can secretly access the clipboard on users' devices..." reports Forbes cybersecurity contributor Zak Doffman, noting that one of the biggest offenders it revealed still turns out to be TikTok: Worryingly, one of the apps caught snooping [in March] by security researchers Talal Haj Bakry and Tommy Mysk was China's TikTok. Given other security concerns raised about the app, as well as broader worries given its Chinese origins, this became a headline issue. At the time, TikTok owner Bytedance told me the problem related to the use of an outdated Google advertising SDK that was being replaced.

Well, maybe not. With the release of the new clipboard warning in the beta version of iOS 14, now with developers, TikTok seems to have been caught abusing the clipboard in a quite extraordinary way. So it seems that TikTok didn't stop this invasive practice back in April as promised after all. Worse, the excuse has now changed. According to TikTok, the issue is now "triggered by a feature designed to identify repetitive, spammy behavior," and has told me that it has "already submitted an updated version of the app to the App Store removing the anti-spam feature to eliminate any potential confusion." In other words: We've been caught doing something we shouldn't, we've rushed out a fix...

iOS users can relax, knowing that Apple's latest safeguard will force TikTok to make the change, which in itself shows how critical a fix this has been. For Android users, though, there is no word yet as to whether this is an issue for them as well.

Long-time Slashdot reader schwit1 also shares an online rumor from an anonymous Redditor (with a 7-year-old account) who claims to be a software engineer who's reverse engineered TikTok's software and learned more scary things, concluding that TikTok is a "data collection service that is thinly-veiled as a social network."

So far the most reputable news outlets that have repeated his allegations are Bored Panda, Stuff, Hot Hardware, and Illinois radio station WBNQ.

Comment Re:Lock picking tools are not illegal per (Score 1) 36

Indeed, I've bought 2 separate sets of lock picks on Amazon. Prime eligible, even. Perfectly legal to own and use in my state, so long as I don't have criminal intent. I've even used them on a fire safe a coworker lost the key to years ago.

I've also toyed with the idea of learning at least basic gunsmithing, to do more than just basic maintenance on my perfectly legal collection of guns (and finally fix one that keeps misfeeding).

Comment This isn't new... (Score 1) 86

Uh, yeah, I did this in the 80s and 90s as a pre-teen and teen, during the summer months. Hell, even into college it wasn't unusual. It's a little harder now, though weekends are a wildcard (this Memorial Day weekend, I think the earliest I went to sleep was about 6am). It's a bit easier these days, with the internet, but between dialup and writing code back then (with whatever stations didn't go off the air at night), it was certainly possible to keep occupied.

Comment Beltway bandit for 25 years (Score 4, Interesting) 203

I lived and died, and lived again over 25 years of enduring the thunderdromes that are the Washington DC beltway and Rt. 267 in northern Virginia. It got so bad that, at one point, I took a hiatus from work for 2 years to enjoy life outside of 2 hour-each-way commutes that covered distances that in no traffic at 3am on a Sunday morning would take 25 minutes to do, tops - just to spend my time in an open office floor plan with two monitors in front me displaying stuff that the two monitors that I already had at home could do just as well. Since then, I've committed to be a remote work-from-home type and, on the balance, I much prefer it. There is no commute to dread and the stress and frustration it breeds, my car insurance is much lower, my car will last longer and costs less to gas up and maintain, and I'm home to have dinner with my wife and kids every. single. day.

Yeah, sometimes I do miss the social interaction that the office brings and, up until COVID19 hit the landscape, I was seriously considering trying out a nearby low-key co-working space once a week to see if that brought any benefits in that category of life. But you know, that's also what weekends are for, or nights out. This Microsoftie seems to errantly think that work IS life, which is kind of the #1 reason people are waking up and don't want to put up with that bullsh*t anymore.

Comment Re:More accurate headline (Score 1) 73

I hate to break this to you, but... Linksys has been owned by Belkin since 2013... Somewhat coincidentally, I stopped recommending or buying Linksys gear sometime around 2013... Mostly went with TP-Link gear supported by OpenWRT, but eventually grew tired of trying to find the stuff that was supported, whether or not I had to first downgrade the firmware, install DD-WRT, and *then* install OpenWRT, with somewhat flaky radios.

Security

Hackers Breach LineageOS Servers Via Unpatched Vulnerability (zdnet.com) 9

An anonymous reader writes: Hackers have gained access to the core infrastructure of LineageOS, a mobile operating system based on Android, used for smartphones, tablets, and set-top boxes. The intrusion took place on Saturday night at around 8 pm (US Pacific coast), and was detected before the attackers could do any harm, the LineageOS team said in a statement published less than three hours after the incident. The LineageOS team said the operating system's source code was unaffected, and so were any operating system builds, which had been already paused since April 30, because of an unrelated issue. Signing keys, used to authenticate official OS distributions, were also unaffected, as these hosts were stored separately from the LineageOS main infrastructure. LineageOS developers said the hack took place after the attacker used an unpatched vulnerability to breach its Salt installation.
Science

Not a Fermion, Not a Boson. Scientists Find New Evidence of Two-Dimensional 'Anyons' (sciencenews.org) 51

Slashdot reader Nostalgia4Infinity shared this report from Science News: In the three-dimensional world we live in, there are two classes of elementary particles: bosons and fermions. But in two dimensions, theoretical physicists predict, there's another option: anyons. Now, scientists report new evidence that anyons exist and that they behave unlike any known particle. Using a tiny "collider," researchers flung presumed anyons at one another to help confirm their identities, physicists report in the April 10 Science...

Braiding some types of anyons may be a useful technique for building better quantum computers. Current versions of those computers are highly susceptible to mistakes slipping into calculations. Like a neat plait that keeps unruly hair in line, braided anyons could store information in a manner that is resistant to such errors.

Although the new study hasn't demonstrated braiding, it gets scientists a step closer to understanding anyons. "It's a beautiful experiment. It is definitely going beyond what was done in the past," Nayak says.

Comment Re:Don't fall for Chinese propaganda (Score 1) 576

And I think we're there.

You think we're there? What cringeworthy, random, flailing act on the part of this administration can you possibly point to to make that claim? Contact tracing depends upon one very important datum - knowing exactly where the disease is and is not at any given point in time. Given that the goal thus far has been to block access to testing in order to keep the confirmed case count down, how could you possibly assert that it's even possible to know this?

And even if you managed to get that far, all you'd do is meaningfully establish where the starting blocks are. To characterize anything Trump has done as an effort comparable to the Apollo or Mahatten(sic) projects is an exaggeration on par with Caligula claiming to have conquered England after some legionaries whacked some reeds with their swords.

Comment Re:Got to Love Elon (Score 4, Insightful) 203

We will know if GM built a bettter car battery in 8 years or so. I am sort of dubious, because it's more like your cell phone battery than a lithium car battery. It uses cobalt. GM brags that their EV battery uses less cobalt "than other EV batteries", but Tesla uses none. We know that Tesla batteries last. It will take a while to know that about GM batteries.

Musk is great. He took a lot of things that everyone knew about and nobody would dare to do, and made them work from a business perspective. We need lots more people like that.

Comment Re: Explode? (Score 1) 96

Interesting reference:

Blast wind: At the explosion site, a vacuum is created by the rapid outward movement of the blast. This vacuum will almost immediately refill itself with the surrounding atmosphere. This creates a very strong pull on any nearby person or structural surface after the initial push effect of the blast has been delivered. As this void is refilled, it creates a high-intensity wind that causes fragmented objects, glass and debris to be drawn back in toward the source of the explosion.

Here. I found several on the web with a single search.

Comment Re:Yikes (Score 2) 96

The problem is getting people to build it exactly as the computer models it :-)

I would think that welds are quite chaotic in nature. The heat changes the crystal structure of the steel, the welds are not uniform, etc.

Steel is really complicated stuff. It's a matrix of iron alloy and hard nonmetallic crystals like carbides. The iron alloy can have five different crystal structures, and can transition between them through heating - which welding does. There is also thermal stress from welding, which you can relax by annealing, but annealing the entire vehicle is not practical.

Comment Re:Cryogenic temperatures required!! (Score 2) 96

The cryogenic nitrogen used in the test is very cold, as you can see by the frost on the vehicle. Atmospheric pressure is only 14 pounds, so if you pressurize to 14 pounds greater than you intend in space, you get equivalent stress on the vehicle. The final test is to actually send it to space.

Slashdot Top Deals

The best laid plans of mice and men are held up in the legal department.

Working...