Gizmodo just published this article about how new cars spy on their users. Supposedly, cars spy on their users and gather info on driving locations and driving habits. And, through cameras and microphones, they gather personal info about the drivers themselves.
My question is HOW the car links to the outside world? And how to defeat it? They mention that some cars now have an accompanying app that goes on your phone. So, okay, there, in that case, I get it.
But what if I never installed the app? The article didn't mention anything about the technology used to connect the car to the outside world. Are the cars sold with a cellular modem? Or do they burst data once in a while to a satellite? My first instinct would be to disable the spying. But if it's integrated into the software, then disable the antenna that connects it to the outside world.
Perhaps I'm underestimating the temptation to integrate one's phone with a new car. Personally, I could easily resist the temptation. But maybe for some people, the benefits outweigh the risks, and they're happy to integrate their phone. In that case, GOD ONLY KNOWS (and Wireshark) what data is being sent back to the Home Office.
Is this even legal? I’ve tried to cancel my account for weeks (EDIT: because the app wasn’t registering my changed password in the deactivate section and only on log in and log out. So, after emailing support) I refuse to upload a photo of my id. Is there no way to get around this and why is this even a thing (EDIT: because of a glitch they can’t apologize for nor fix apparently and work they don’t want to spend the money doing - like finding your password and asking you to confirm it before deleting it on their end. Unsurprising but still. Kind of weird the app knows my password when logging in but not when deactivating.) You can’t prove the account belongs to me even with an id because I didn’t use an id to sign up for it. Can I just upload a random persons id ? Like what even is this
(EDIT : obviously I’m not doing it. I’ve no reason to believe their data storage security is world class and this invented policy is described nowhere and serves only them. That being said, beware of expecting the app to let you deactivate after resetting your password - it may not even register the change [in half the app but not the app as a whole to log in? Idk 😵💫] I tried on the browser and got the same experience)
Admin post: https://www.reddit.com/r/reddit/comments/16tqihd/settings_updateschanges_to_ad_personalization/
Reddit requires very little personal information, and we like it that way. Our advertisers instead rely on on-platform activity—what communities you join, leave, upvotes, downvotes, and other signals—to get an idea of what you might be interested in.
The vast majority of redditors will see no change to their ads on Reddit. For users who previously opted out of personalization based on Reddit activity, this change will not result in seeing more ads or sharing on-platform activity with advertisers. It does enable our models to better predict which ad may be most relevant to you.
I've been looking for a job, and it is very frustrating how many places think an application is a nice time to do some data harvesting. For example at one place I applied to, they use a third-party company to set up and record phone interviews. In order to proceed you have to agree to their aggressive harvesting of your data, and using your responses as part of AI research.
During another companies process, they sent me an email saying they wanted to go to the next step, which included filling out an online form. The form asks some simple yes or no questions like, "are you capable of lifting 25 pounds?" and at the end, asks you to consent to allowing a third-party company to look over your data. The real kicker? As soon as I accepted and submitted my answers, it came back and said the company had no open positions at that location!
A third company had 10 positions open, I applied to 4 and did not hear back for 2 weeks. I call to speak to their hiring manager, and they say they have no open positions, and just leave the openings up on their website, "In case they need to fill a position quickly."
I'm pretty sure some of these companies leave these positions open for no other reason than to collect your data, then deny you.
Firefox version 118.0 was first offered to Release channel users on September 26, 2023
-
Automated translation of web content is now available to Firefox users! Unlike cloud-based alternatives, translation is done locally in Firefox, so that the text being translated does not leave your machine.
-
Web Audio in Firefox now uses the FDLIBM math library on all systems to improve anonymity with Fingerprint Protection.
-
The visibility of fonts to websites has been restricted to system fonts and language pack fonts to mitigate font fingerprinting in Private Browsing windows.
Following AI tool everywhere, companies integrate summarieser and note taker tool for meeting. These services store recorded data has typical "privacy-policy".
I don't know how helpful these services are for them. But, it's not cool to give data of every person they interview to such services and store the data as long as they want.
The company says, we will not turn it off. I choose privacy over these shiny job opportunities.
Edit: Ain't got no luxury to turn down job but I'm going to until I can.
FYI - I am looking for DevOps or Security role in India. Yes. The country where unemployment and under-employment is a major issue for long time.
On Privacy, that is.
Talking to the 'average Joe', they all think I'm insane for my anti-app, anti-loyalty/reward program, anti-"account for everything" stance.
Corporations know all they have to do is give you a 1-2% 'discount' and most people will willingly sign away their rights. It's depressing.
PS: Not only that, I swear I have seen a massive uptick in opt-out dark pattern BS. Buy something at a store and suddenly I'm auto-enrolled in a rewards program or newsletter because Square/Clover find and sell your contact information to companies when you use the POS, etc.
New research from Mozilla finds that the auto industry are not only data vampires, but also they re sloppy and they huge amounts of data they are collecting are poorly protected. And of them their study says Tesla is the worst in a bad industry.
https://assets.mofoprod.net/network/images/car-PNI-Final-Graphics_English1.original.png
So many times when I ask on Reddit or on the forums if an app is private or not, the sententious little man pops up and says "What do you have to hide?". I'm more afraid of puritanical people who always have the finger pointing. Jesus Christ, the boss of bosses said, when you point one finger at someone, three more fingers are pointed at yourself. People have a snotty nose even on social media where there is no privacy. If you are on facebook they say “He has something to hide”. If you are NOT on facebook or instagram, they say “He has something to hide”. Whatever you say or do, the comm-unist privacy Pharisees say, "You have something to hide." Let's always take Facebook as an example. Recently a function called "anonymous post" came out and if you post anonymously on a group, you are offended, attacked, humiliated, treated like a criminal when people don't even know that the administrators can decide whether to publish, or in any case they see the name of the publisher. But I wonder. But do people really believe this? In 2023, in the era of widespread surveillance, in the era where 6 billion people are registered on social networks with name, surname, eating and intestinal habits, where you go out, what you drink, who you go out with, where you live, and much more. Do people really believe that someone who has something to hide uses the cloud, uses social media, play store and much more? In Italy they say "Sometimes we are all bad in a badly told story". Isn't it my right, as a paranoid persone, to have total peace of mind in a society where everyone knows me? And you can rest assured that everyone knows you, no man is an island said a poet. There are no more Robinson Crusoes and geniuses who isolate themselves at the top of the mountain. We live in a hyperconnected world. And I also wanted to make this post for all the false respectables who point the finger and then maybe who knows, who knows what they are up to, as Jesus said. You are pathetic, privacy in 2023, especially in 2023, still a Taboo. And I've heard many, Enduro is not a crime, Pitbull is not a crime, Abarth is not a crime, Poker is not a crime, this and that, but why does no one ever say this phrase "Privacy is not a crime?"
If you are already aware of how fragile "domain privacy" is and are already secure, then this post isn't for you.
UDRP
For anyone who is unfamiliar with UDRP, the Uniform Domain-Name Dispute-Resolution Policy is a crucial legal framework designed to resolve disputes related to domain names. It plays a pivotal role in protecting trademark owners from domain name abuse, such as cybersquatting.
The primary purpose of the UDRP is to provide a streamlined and cost-effective mechanism for resolving domain name disputes. Instead of going through lengthy and expensive court proceedings, trademark owners can use the UDRP to initiate a complaint against the registrant of a domain they believe infringes upon their trademark rights.
On the surface, this sounds great since you can kick off domain squatters, people who register yournameisathisorthat.com for the purpose of harassment, or people who register yourcompanyname2.com to defraud.
The Forum
To submit a UDRP claim, you use the ADR Forum, an ICANN authorized neutral third-party panel system that judges on your claim based on the information provided and in many cases defaults to transferring the domain to you if the respondent (domain registrant) doesn't respond (make sure you always provide a real email and respond to official emails about your domain or you will lose it!).
The claim
As part of the UDRP process, upon submitting the initial claim and paying the $1,330 USD fee, the ADR Forum will compell the registrar to disclose the registrant's contact information, including their name, email address, and physical address. The registrar will then oblige this official request with the domain registrants provided information on their account, not the WHOIS information they provide (successfully doxxing them). If the information differs (e.g. they used a domain WHOIS privacy service/option), the ADR Forum will ask that you modify your original claim form to include this new relevant information. If you fail to respond in 5 days to this request, the UDRP claim is automatically withdrawn and the claim ends. That's it.
The problem
While this isn't advice to abuse the process, unfortunately there is nothing stopping anyone from issuing such claim, grabbing the true registration information, then just simply not continuing with the claim process once they obtain the true identity of the domain holder.
The solution
Provide information in your WHOIS that is minimal enough the receive contact but not enough to make your life miserable by a malicious party. Use a PO box if allowed. Use an LLC in Delaware for the address. Use a pen name. Just make sure the email address you're using is one that you can read and respond to an email within 5 days.
I'm pretty sure that I used the permanent delete option when I deleted my Facebook some years ago. However, if I attempt to "recover" the account, using my old credentials, Facebook still shows my old phone and email (with asterisks). Why? Is there something I can do?
-
Meta has disrupted a Chinese disinformation campaign linked to law enforcement that spread positive news about China and criticized journalists, activists, and the U.S.
-
The campaign generated positive posts about China's Xinjiang province and spread negative commentary about the U.S. and disinformation about the origins of Covid-19.
-
Meta took down over 7,700 accounts and 930 pages on Facebook.
-
The network was present on multiple social media platforms, including Medium, Reddit, Tumblr, YouTube, and X (formerly known as Twitter).
-
Meta researchers linked the network to a prior influence campaign in 2019, code named Spamouflage, and found links to individuals associated with Chinese law enforcement.