fitblipper

Even more than phones, this is the reason our children are being raised stuck indoors, contributing to the ever increasing mental health crisis with our kids. Instead they should be able to discovering the pride and joy that comes from self sufficient, independent exploration of the world around them. The government and society should form a support for parents, not treat them like their kids are already wards of the state and the parents only exist to support the government.

They are claiming that it is privacy preserving, since it uses AI and not humans, and only for catching csam

Assuming those claims are true(I know, that is a big ask, but they claim it) what function do exceptions provide unless they are purposely giving those exceptions for the production and distribution of csam by those groups?

More likely their claims of the privacy and/or purpose are false.

I am thinking of starting a competing product that uses wifi APs for geo location instead of GPS satellites. I want to be a more customer friendly business than google or apple though, it'll only be opt-in. All you have to do to indicate that you have opted-in is to append "_nomap" to your AP name. /s

If I understand correctly, the research was only possible because they were able to leverage the Google and apple APIs against each other. The lesson I get from this is these companies shouldn't behave like they exist in a vacuum and when exposing data or forcing global configuration (like the AP name) they need to be more careful.

Seems like the perfect use case for timelock encryption: https://drand.love/docs/timelock-encryption/

> My interpretation leans more towards NIST making an internal mistake in evaluating the algorithms, rather than NSA pushing its agenda.

Why do you say this? The NSA has done this exact thing in the past[1], so why give them the benefit of the doubt this time?

[1] https://en.m.wikipedia.org/wiki/Dual_EC_DRBG

When Tucson experienced a hazardous chemical spill during evening rush hour[0] officials required everyone to shelter in their homes to avoid the poisonous fumes outside. At the same time they closed tons of roads for miles around the area, even the inbound road access to many residential areas. What could people do who needed to get home to their kids? They had to park their car and trek a few miles to their homes. So much for staying inside.

I don't know my point really except to bring up another instance where local emergency response did not make sense and it is incredibly frustrating when it causes additional harm.

[0]https://www.npr.org/2023/02/15/1157174863/tucson-hazardous-c...

True, but I think that misses the point. I think the comment was an attempt at facilitating empathy for the incarcerated who are in this situation since for most people they don't see themselves as criminals (even those who are in fact criminals) and it is harder to empathize with those who you see as being part of a different tribe/group/class.

The fact is that these are fellow humans who are suffering, not because we decided as a society that this was what justice means, nor because this was the result of some study that figured out this would decrease recidivism, but just because some for profit institution decided they wanted to do something that would directly result in them suffering. That is enough for me to support this lawsuit.

Ring doorbells providing this information to law enforcement quickly and easily is working as intended and is part of the reason it exists at all. Amazon has even used police to sell the doorbells arguing it provides better security [1].

It is great that the people who had their video data provided to law enforcement were notified after the fact in this situation. I wonder how many people never find out due to national security letters not allowing it.

[1]https://www.vice.com/en/article/mb88za/amazon-requires-polic...

I am a paid subscriber but I am not happy with this at all. The mobile phone app is a pretty buggy, when I start typing in 1 place the cursor jumps to another. Copy/paste has also given me problems.

I do like that it encrypts locally on disk like it does in the cloud. Several other apps I've looked at has said at rest encryption isn't worth it, I guess arguing that users could use veracrypt or some other solution.

If I had to write a one sentence summary of Standard Notes it would be "An E2E encryption app first, a note taking app third".

This is horribly frustrating and I'm sorry you are facing this.

The thing I have taken away from these continual Tell HN posts about Google acounts getting locked up because of 2FA is that the "something you have" factor needs redundancy. I now have my phone, and 4 yubikeys on my household's carkeys and a trusted friends and a family member's firesafe. These have also given me enough stress that when I visited home for the holidays I added to my aging parents' Google accounts with a handful of additional security keys to go with their SMS 2FA.

Personally I would rather have accounts which are secure and can be lost if I am not careful with my 2nd factors than one that has vulnerabilities that the whole internet can attempt to exploit, but I realize others do not have that same priority.

The question the article proposes we ask ourself: "Am I fine with a bunch of people I don’t know, all of whom have my phone number and some of whom know where I live, reading all of this?"

Lots of people have in their mind something akin to a medical professional who can see their most intimate details and expect them to treat them with respect. They assume anyone with access to this will act professionally because they assume that is their job, and so the answer to that question is often "Yes".

It is clear to me personally that is not reality, but I'm not sure how to influence peoples perspective here.

There are groups out there measuring the cost related to identity theft. The $56 billion number wasn't pulled out of thin air: https://javelinstrategy.com/content/2021-identity-fraud-repo...

How do propose liability could be demonstrated with something like this? Do you expect hackers and fraudsters to cite their sources when they are defrauding someone?

Has any leak ever resulted in someone saying they could clearly id damages from a specific leak and then get compensation from the company who leaked it?

We aren't even told when a government entity looks at and uses our private information. How in the world would we know when a criminal does, and how would we be able to say they looked at that specific leak instead of one of the other 10 possible sources of my leaked private information?

Maybe it is time to pool the damages of all identity thefts together, (about 56 billion in 2021) and split the bill (+ maintenance and administrative costs for managing the money) across all businesses that have leaked private data. That money could be used as a resource to all identity thefts victims to be made whole.

Tiny tiny rss on docker desktop with tailscale so I can access it anywhere.

"Some metadata and usage information stored in iCloud remains under standard data protection, even when Advanced Data Protection is enabled. For example, dates and times when a file or object was modified are used to sort your information, and checksums of file and photo data are used to help Apple de-duplicate and optimize your iCloud and device storage..."

Photo checksums can't be e2e encrypted huh? They reported today they abandoned their plans to do CSAM scanning on people's devices[1] and connecting the dots it seems like they wont need to since they can just do it in the cloud.

[1] https://www.wired.com/story/apple-photo-scanning-csam-commun...

I was surprised at how much I enjoyed the Queen's Thief series by Megan Turner. I went into it not expecting much but came away from it surprised in a number of ways.

Thank you for pointing that out. I did not mean for my comment to be interpreted as being about this single instance. My intent was to comment on the general sentiment I was seeing in the comments that the US culture has turned to be an overly protective and restrictive environment for our children. I'm sorry I didn't make that clear.

The problem is CPS/DCS. They are a lawless organization that can take your child at based solely on their feelings at the moment and not from "probable cause", "reasonable suspicion" or any of the other standards that police are generally held to. In practice that means any neighbor can report anything they don't like about your parenting and it will be acted on just because a child is involved. This leads to the parents with the most strict and overly protective and cautious parenting strategy having their methods enforced by law since they can report anything they are a little uncomfortable with in other's parenting.

Why have we decided that the legal protections granted to us are only sometimes good? Why have we built in this loophole where if an accuser says the magic word "child" to the authorities they can remove our rights? When a kid is involved simply asking for a lawyer to help you understand your rights can be seen as trying to restrict access to the kid and can result in them being taken by CPS.

In reality I enter my phone passcode very infrequently because I use a fingerprint reader. I have set a long PIN since I don't want it to be brute forced. Because of the horror stories I hear of law enforcement and abuse of power, if I have a run in with a cop, turning off my phone is one of the first things I do. In a stressful situation where I am facing potential harm to my body or my family I can very easily see myself forgetting what that long, infrequently typed PIN is.

I was worried about sharing broadly and leaking info from 1 contact to another, but it seems like the Signal team did all the right things here.

When you create a story you can make it a group story or not.

If you do not make it a group story, reactions and replies to stories get sent to you over your 1:1 chats and not shared across other recipients of the story.

If you make it a group story, and share it with multiple groups each group receives their own copy of the story and replies and reactions can only be viewed by others in the same group.

After having been burned SO OFTEN by other social platforms embarrassingly notifying others when I did something I thought was a passive post, or leaking information from 1 of my subgroups with another I was very worried that would happen here, but great job signal team!

The only awkward part that I've noticed so far is if I have a contact in 2 groups that I create 2 group stories with, they now have 2 identical stories show up on their story board. It makes sense and I think the UI clearly indicates for which group replies and reactions to each story it would go to which is probably the safest (best?) solution, but I could see that getting a little annoying if I share multiple groups with a frequent story poster.

They are enabling the ability to export SMS from signal now: https://community.signalusers.org/t/beta-feedback-for-the-up...

Bad HOA stories are more common than bad wisdom teeth stories. If I'm at a party and somehow bring up some silly complaint my HOA has filed I am sure to get several other people chiming in about their HOAs. It is common.

It is because CPS is an over reaching and lawless organization that can be weaponized against a neighbor that raises their kids in a way you don't agree with. If you don't want your children kidnapped legally by this entity you better raise your kids in the safest possible way or you risk giving them the line item they put in their paperwork to put your kids in foster.

The problem is the 3rd party doctrine. The data should not be treated as if it is Facebook's to give away. Instead it should be the defendant that receives the request for their data using the proper warrant process. Instead governments incentivize companies like facebook, google, and amazon to collect all the private data on citizens that the people need to live in the society and then they claim it is no longer the people's data so they have an easy path to obtain it without a balance in place to apply the proper amount of friction to getting that data.

For android use Keepass2Android which is compatible with KeePassXC.

If I had to pick between LastPass and BitWarden, I would go with Bitwarden.

I personally use KeePassXC and Keepass2Android with the pw files synced across 3 phones and 3 laptop/desktops using syncthings and have had no problems.

I think the point is, since the numbers don't show an uptick in property crime while others are reporting an increase, the only explanation for that is for the reporting of property crime to decrease at the exact same time as the actual crime increases. Why would that happen?

I've been happily using syncthing for 2 years now. Syncs my password files between 3 computers and 2 phones.

I guess its good to know how to avoid getting pulled into yet another UI refresh that I do not want. Google's new chat system doesn't appeal to me even a little bit.

Because, it's a massive centralized decrypted data repository, law enforcement can simply ask for the data and the company will hand it over. It's not their data so they don't care to defend it but because of the third party doctrine it's legally their data to hand off w/o your permission.

Peer to peer or end to end encryption removes this trivially easy access, which is why they don't like it.

This has been a continual discussion between me and my coworkers. Do you know of any reading we can look at to better understand the tradeoffs of when it is appropriate to put constraints on the data?