Skip to content

Google hit with $314m fine for collecting data from idle Android phones without permission

Technology
62 49 0
  • YouTube Comment Bots are out of control...

    Technology technology
    3
    52 Stimmen
    3 Beiträge
    3 Aufrufe
    D
    Youtube is just lazy. These bots are laughably easy to detect and block.
  • 128 Stimmen
    5 Beiträge
    9 Aufrufe
    V
    a subtle edit resolving a duplicate reference in a way that removes displays from the list of parts that must be replaceable by a layperson with basic tools That's fucking significant change, considering probably even more smartphones become ewaste from cracked screens than anything else by a long shot...
  • 0 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • 308 Stimmen
    23 Beiträge
    40 Aufrufe
    G
    I spent way too long researching the morning. That industry implies a much greater population that is attracted to children. Things get more nuanced. People are attracted to different stages, like prebubesant, early adolescence, and mid to late adolescence. It seems like an important distinction because this is a common mental disorder. I was ready to write this comment about my fear that there's a bunch of evil pedophiles living among us who are simply deterred by legal or social pressures. It seems more like the extreme stigma of pedophilia has prevented individuals from seeking assistance and has resulted in more child sexual abuse. This sort of disorder can be caused by experiencing this abuse at a younger age. When I was religious, we worked closely with an organization to help victims of trafficking. We had their stories. They entered our lives. I took care of some of these kids. As a victim of sexual abuse when I was kid, I had a hatred for these kinds of people. I feel like my brain is melting seeing how there is a high chance of people in my life being attracted to children. This isn't really to justify the industry. I'm just realizing that general harassing people openly about it might not be helping the situation.
  • 38 Stimmen
    7 Beiträge
    20 Aufrufe
    D
    Not easy but not hard actually really simple if you had the right energy. Just ignore this so I don't scare you.
  • Sunsetting the Ghostery Private Browser

    Technology technology
    8
    1
    33 Stimmen
    8 Beiträge
    13 Aufrufe
    P
    Sunsetting Dawn? Of course
  • 1 Stimmen
    8 Beiträge
    16 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • 48 Stimmen
    14 Beiträge
    16 Aufrufe
    B
    Take a longer text (like 70 pages or so) and try to delete the first 30 pages.