* Posts by JohnFen

5648 publicly visible posts • joined 20 Feb 2015

Sure, we made your Wi-Fi routers phone home with telemetry, says Ubiquiti. What of it?

JohnFen

Re: This bunch really needs to grow up

"Consumers have no option to give meaningful consent."

It depends on the device and manufacturer, but yes, this is often true. Which is the exact problem that I'm complaining about.

"And what's more, for most of these devices, you would WANT them to call home, if for no other reason, then to get upgraded"

If by "you", you mean the ordinary person, this is probably true. If by "you" you mean me personally, or literally everybody, this is emphatically not true. I don't want any of my devices doing this.

JohnFen

Re: "Only if you enable it"

My position is coherent and consistent -- Android is an OS that uses Linux. Linux is just the kernel, after all.

But my point is that even if we (incorrectly) call Android "Linux", it's still true that the parts that are slurpy are the applications and services that Google layers on top of that. You can absolutely have a non-slurpy Android installation.

JohnFen

Re: Linksys WiFi Router (Retail Product)

Yeah, I recommend against using Linksys products unless you're replacing the firmware with something trustworthy (like dd-wrt or equivalent). Even then, Linksys hardware tends to be pretty bad.

JohnFen

Re: "Only if you enable it"

Don't confuse Google's stuff with Android. I run an phone with Android that doesn't engage in this stuff at all -- because it omits Google's software.

JohnFen

Re: If you're upset at Ubiquiti

"They ALL call home."

This is not true in the sense that you're implying, and even if it were, it's beside the point. A lot of those do, of course, but a lot of them do the right thing and get your informed consent first. Mobile devices aside, very few of them engage in sneaky and mandatory reporting.

"What's more important is what information is being carried"

What's even more important than that is getting informed consent before doing data collection. I don't care if the data collected is actually 100% innocuous, if you're doing it without my informed consent, you deserve to be widely condemned.

JohnFen

Re: A lot of pissed-off people

They're not talking about opt-in, they're talking about opt-out. Opt-out is better than nothing, but it's not wonderful.

Also, El Reg linked to their statement where they said this.

JohnFen

Re: Once more, with feeling

"hopefully they will learn from this"

I was looking at the more general history of the behavior of this company, and it looks like they've long been sketchy. I personally doubt that they will learn the sort of lesson we would all hope they'd learn. Because of that history, more than this particular instance, I have them on my "never do business with" list.

JohnFen

Re: Once more, with feeling

"Unifi hardware doesn't auto install updates."

I never said it did. My comment was addressing the world beyond Ubiquiti.

JohnFen

"It’s a sad indictment of the modern world of technology that I made that assumption"

It's really the only reasonable conclusion, though. There is nothing about WiFi that inherently requires the internet to be involved, so there must be another reason.

JohnFen

Re: I have been removing these for a while now for other reasons

"It is rather odd that the range on these is quite good but the throughput is pants."

I don't know the details of how these devices are implemented, but generally speaking this makes sense. If you reduce the transmission rates, then you increase the ability to deal with radio noise. That means that the radio signal can be usable at lower power levels, which means that the radio signal is usable at a greater distance.

JohnFen

Once more, with feeling

Don't use devices that phone home and/or automatically apply updates. The security risk is simply too great.

Beyond that, specifically don't trust Ubiquiti. They've just proven that they're untrustworthy.

Microsoft's phrase of the week was 'tech intensity' and, no, we're not sure what it means either

JohnFen

I figured it out!

After reading a number of articles and Microsoft's own comments on this, I think I've figured out both what "tech intensity" actually means and why we have a hard time understanding it.

We have a hard time understanding it because we're not the target demographic for that message -- the target demographic is business executives.

What it actually means is: everyone should upgrade all their hardware and software, and use Azure a lot more.

JohnFen

Re: Tech Intensity is nearly always 1

Yes, this equation is rigged. My trust in Microsoft is zero, so a resulting "tech intensity", whatever that means, is 1 -- which seems far too high to me.

Robotics mastermind admits: I pushed over my 1-year-old daughter to understand balance

JohnFen

The automated pushover

She's no fun, she fell right over.

Europe to straggle Japan, China, US and Korea in 5G adoption stakes

JohnFen

Re: I still don't understand

"Technologically 5G is essentially an upgrade of 4G so deployment for the networks should be easier."

Huh? In order for the promised speeds to be delivered, 5G requires a LOT more "towers" (they aren't really towers, but serve the same function), and requires fiber to be installed to them. It isn't an "upgrade" to 4G, but the installation of an entirely new system.

JohnFen

Re: Lag Behind?

"So what is 5G going to give me that a decent 4G signal wold give. Please don't say downloading a movie in seconds. "

In your home? You won't even be able to download a movie in seconds. That speed requires using the millimeter band, which won't penetrate most walls, thick foliage, rain, etc. If you haven't set up a suitable antenna for it outside your home, you're going to be using the Khz frequencies, which aren't substantially faster than what 4G gives you.

JohnFen

Re: I still don't understand

Yeah, of all the ridiculous "benefits" of 5G that I see around, enabling driverless cars is perhaps the most transparently ridiculous. The existence of 5G will neither hinder nor help that development.

Well, it might hinder it if it encourages people to think that the cloud is necessary for driverless cars, because making them dependent on the cloud in any core sense is a safety disaster waiting to happen.

JohnFen

I still don't understand

I still don't understand why this is being posed as some kind of race. Why does it matter who has 5G first, second, third, or whatever?

What do you get when you allegedly mix Wireshark, a gumshoe child molester, and a court PC? A judge facing hacking charges

JohnFen

Nuance

Regarding the network intrusion claim, I'd think it would depend on how Wireshark was used. If it was putting the network adapters into promiscuous mode, then yes, there is meat to the charge. If not, then WIreshark would only be seeing the packets that are going to and from that particular machine. It would be hard to argue that's actually intruding into the network at large.

Need a special something on which to spank $3,500? HoloLens 2 is finally shipping

JohnFen

Re: Not a hologram.

Perhaps so, but that doesn't excuse Microsoft for using the term.

NPM today stands for Now Pay Me: JavaScript packaging biz debuts conduit for funding open-source coders

JohnFen

That's certainly an ad by any reasonable definition. But I don't know if it's an ad by NPM's definition.

JohnFen

That's funny -- I've been doing exactly what karlkarl describes for decades, and am no worse for wear because of it despite being well beyond 40.

JohnFen

Just a little nitpick here -- the overwhelming majority of open source software is not in the public domain. It remains under copyright and is issued under a license.

JohnFen

Re: Is there someplace I can go ...

"Is there someplace I can go to donate to a fund to eliminate the menace of website scripting -- not just Javascript, but ALL web scripting -- from humanity's future?"

Oh, how I wish!

JohnFen

"If a developer feels that donations are a form of "compensation", then they are not open-source developers."

What? Whether or not something is open source is unrelated to whether or not compensation is involved.

California’s Attorney General joins the long list of people who have had it with Facebook

JohnFen

Re: How do they get away with not complying with legal orders

How would what he's saying result in innocent people going to jail? He's specifically talking about people who break the law, not the people who happen to sit next to them.

JohnFen

Re: How do they get away with not complying with legal orders

" but the people in it are all but immune unless they commit a real crime"

This is overstating things a bit. The "corporate veil" is a real thing, but it's not exactly impenetrable. Here's a reasonable, although brief and simplified, discussion of this: https://corpgov.law.harvard.edu/2014/03/27/the-three-justifications-for-piercing-the-corporate-veil/

JohnFen

Re: Not All Bad

It's not that it's a bad thing. The issue is that it's not the most urgent thing, and Facebook is using it as a distraction for what actually is the most urgent thing -- Facebook's own data collection.

NSA to Congress: Our spy programs don’t work, aren’t used, or have gone wrong – now can you permanently reauthorize them?

JohnFen

Yes, for the most part. Constitutionally, Congress has the sole power to decide how much money is to be spent on what. The reality is more complicated than that -- but Congress absolutely has the power to make it simple if they choose, and they do so when they feel strongly about something.

In this case, though, even doing that isn't necessary -- Congress is to decide whether or not to reauthorize the law that grants the spy agencies these powers. They certainly can, and might, decide not to do so, which puts an end to it (legally, anyway). The "power of the purse string" is not necessary here.

Chrome OS: Yo dawg, I heard you like desktops so we put a workspace in your workspace

JohnFen

Re: Linux for the win

I'm not quite sure what you're asking here... are you asking if there are any DEs that work like Android? If so, I'm afraid that I can't be of much help. I know that if the system is using X, you could configure it to behave mostly like that, but I'm unaware of any ready-to-go configurations.

I have to assume that there are specific DEs that would work as you want, just because there's such a large variety of them. Perhaps someone else can be more helpful here.

JohnFen

Re: Linux for the win

I agree. Given the direction that the offerings from Microsoft, Google, and Apple have gone or are going, I'd go with one of the unices (using the generic because I've begun transitioning from Linux to BSD) even if they weren't otherwise the best fit for my needs.

Fortunately, they are the best fit for my needs anyway!

Tech and mobile companies want to monetise your data ... but are scared of GDPR

JohnFen

Re: Quite...

Maybe you have a little selection bias going on?

I know that I dislike it when people wear perfume or cologne, and I'd be unlikely to date a woman who had a perfume habit for long enough to end up marrying her!

JohnFen

Re: Quite...

You do? I never have when I've placed the stands -- I just slide them in from the side. Very little of my body is under the car doing that, and only for a second.

JohnFen

Re: And there you have it...

"I see two solutions"

Neither of those solves the problem I have with all of this: consent. If I don't consent to having my data slurped, it should not be slurped. End of story.

JohnFen

Re: @AC - Businesses worried about getting in trouble

As A.P. Veening said much more succinctly...

It doesn't matter even a little how much your data is actually worth to companies. What matters is how much it's worth to you.

JohnFen

Re: Hmm

We don't all choose to give them data. I don't choose to do that -- they just take it.

"while a lot of what they do might be useless or a minor irritant it is the good that makes the difference."

I don't really agree, but I'm not going to make that argument here. Instead, I'll just point out that whether or not the good outweighs the bad is up to us each to decide individually. What needs to happen is that there is an effective way that people can stop the spying if they choose.

The GDPR is a good first step in that direction, and that companies are limiting their collection/use of data as a result confirms that.

JohnFen

Good, then it's working

They should be terrified. If they weren't, that would be evidence that the GDPR isn't working.

I read several martech and marketing sites (know your enemy!), and there are a few things that happen daily in them that are horrifying. One of which is the sheer amount of effort that these companies are putting into finding ways to evade the clear intent of consumer data protection laws and be able to legally continue to abuse people.

This industry is rotten to the core.

Open wide, very wide: Xerox considers buying HP. Yes, the HP that is more than three times its market cap

JohnFen

What's that sound?

I think it's dinosaurs eating each other.

AT&T: We did nothing wrong in promising unlimited data that wasn't. We're just giving the FTC $60m for fun

JohnFen

Re: Why are you still an AT&T customer?

"When you contract is up, switch providers."

Switch to who? Please name a US carrier that is any better.

JohnFen

Re: Money can't buy you love

Or make the fines large enough that they actually hurt the company and its shareholders.

JohnFen

Re: Money can't buy you love

I love your optimism. I wish I could share in it.

From where I sit, this looks like AT&T pretty much got off the hook with little more than a stern scolding.

Cambridge boffins and Google unveil open-source OpenTitan chip – because you never know who you can trust

JohnFen

Re: I don't know

"The thing to worry about is "who chooses which CAs to trust", not secure boot itself."

True, if by "CA" you mean root cert. I don't actually trust any commercial CAs, and any cert I'd want to use for boot would be one that has been signed by the CA I personally run.

But I agree, if we can't use our own certs, this is a terrible thing -- but the secure boot installations that have come before haven't allowed for this, so I don't see why we can expect any differently moving forward. This is why being able to disable secure boot is one of my nonnegotiable requirements when buying a system.

I don't see how the implementation being open source affects this issue. Can you explain?

JohnFen

I don't know

"But can you trust the RoT itself?"

I don't know, but the fact that Google's on board with it doesn't bode well.

The mention of "secure boot" sends shivers down my spine, too.

Phew! All that competition in the US mobile industry was exhausting. Thank God for the FCC, am I right?

JohnFen

Re: Draining one swamp to fill another

"Of course the incoming administration has only interrupted the old elites from lining their pockets in order to get in on the action."

I don't actually think that's true. It looks to me like the "old elites" are lining their pockets more thickly than ever.

JohnFen

Re: Doom and gloom and somewhat slanted

True, the article didn't mention that, but I don't think that the DISH involvement "gets in the way" of the criticism of the FCC around this.

Judging by the commentaries I've seen from the various analysts, the ones who think the DISH involvement is a real mitigating factor are the ones who have been in favor of the merger anyway, and the ones who have been against the merger don't think the DISH involvement really matters.

I'm no expert, so I can't really determine who is more likely to be right. But I do know that the FCC has been making a lot of decisions that harm the citizenry, so it seems justified to look at this decision with an extreme degree of skepticism.

JohnFen

Pai's corrupt crusade continues

Pai's FCC will do anything and everything to ensure that the large telcos will be able to maintain their oligopoly and soak the citizenry for as much as they can, for as long as they can.

Socket to the energy bill: 5-bed home with stupid number of power outlets leaves us asking... why?

JohnFen

Re: Seems fine to me

Enough to line the walls!

JohnFen

Re: Seems fine to me

"I have never found a property which has sockets where one would actually like them."

My mother once completely renovated her house, and while the walls were all opened, she had an electrical outlet installed on literally every stud along the walls. As she put it -- once the walls are open, it's cheap and easy to install the things, so why not ensure that you always have enough?

JohnFen

I made a room like that once

I used to throw rather large and elaborate annual parties, and installed multiple outlets not so different from that picture in the room I used for music and dancing, to allow the easy installation/rearranging/removal of the various lighting and special effects.