IreneW

About

Username
IreneW
Joined
Visits
75
Last Active
Roles
member
Points
786
Badges
1
Posts
319
  • Security of Quebec vaccine passport app's QR codes questioned

    hexclock said:
    DAalseth said:
    DAalseth said:
    That is disconcerting. They are implementing a Vaccine Passport here in BC next month. I hope they use a more secure system. It's sad thought that there are people that will work hard to make themselves a fake VP, or buy one from someone, rather than just getting the shot for free. Reminds me of the people that spend a hundred dollars worth of time and hassle to build a system to save thirty dollars on their taxes. 
    I live in Quebec and what is sad is the implementation of a vaccine passport that will create two classes of citizens. Call it segregation, apartheid. This is 1938 Nazi Germany nothing less. BC and Ontario will follow. Canada is now known as Chinada. Shame.


    That's one of the dumbest comparisons I've ever run across. Sadly you're not the only one to make it. Read a book. Find out what TRUE oppression and victimization is. This is not Naziism or apartheid or segregation or China. You are just flat out wrong on that.
    What about people who can’t get the vaccine, for medical reasons? Are they just shit out of luck? 
    If you can't get the vaccine due to allergy or something else, it sounds like a super-bad idea to go to a concert or other big event -- even more so if you don't know whether the others are vaccinated. Or, what do you think should be the solution?
    darkvaderbaconstangyoyo2222
  • Apple has been testing in-screen Touch ID, but it won't be in 'iPhone 13'

    iOS_Guy80 said:
    M68000 said:
    iOS_Guy80 said:
    Wow. How did the subject of Covid become part of this article???????
    Because Touch ID does not care if somebody has a mask on or not
    And the point is?
    ...that TouchID works, e.g. when paying in a store, while FaceID does not.
    applguygatorguyargonaut
  • Researchers who built rudimentary CSAM system say Apple's is a danger

    robaba said:
    rcfa said:
    The silly exculpatory listing of differences in the systems is useless.

    1Did Apple leave the Russian market when Russia demanded the installation of Russian government approved apps? 2Did Apple leave the Russian and Chinese markets, when Russia and China demanded that iCloud servers be located in their countries where government has physical access? 3Did Apple leave the Chinese market, when VPN apps were requested to be removed from the Chinese AppStore? 4Did Apple comply when Russia demanded that Telegram be removed from the Russian AppStore? 5Did Apple leave the UAE when VoIP apps were outlawed there?

    NO, NO, NO, NO, NO, and NO!

    And NO will be the answer if these countries require additional databases, direct notification (instead of Apple reviewing the cases), etc.

    Once this is baked into the OS, Apple has no leg to stand on, once “lawful” requests from governments are coming.
    1-Apple did not end up preloading the software that Russia demanded, only allowed for users to selectively load programs upon start up if they chose to.
    2-Apple is quickly moving to end-to-end encryption with an independent, third party go between which would completely eliminate the threat of Chinese (or Russian, or UAE) access to encrypted files on servers.
    3-New security system will be a built in VPN on steroids (end to end encryption, intermediate, independent 3rd part server shielding ID from Webhosts and sniffers, while preventing ISPs from knowing sites visited)
    4-don’t know
    5-see 3

    THIS IS WHY THEY ARE TAKING THE STEP TO SINGLE OUT CSAM NOW—SO THEY CAN STAMP IT OUT, WITHOUT PROVIDING A GATEWAY TO BAD ACTORS, STATE OR PRIVATE ENTERPRISE, WHILE ALLOWING AN UNPRECEDENTED LEVEL OF SECURITY / PRIVACY.
    Do you have a source / link to support the claim that Apple is "quickly moving to end-to-end encryption" of files on servers (including China and Russian servers)? With E2E encrypted meaning that neither Apple nor China/Russia or any third party that can be forced to reveal it, has the key.

    This would be great news, and explain why Apple is implementing on-device CSAM scanning, but has as far as I'm aware never been announced or even hinted at.
    Pascalxxmuthuk_vanalingam
  • Detect Pegasus malware on iOS for free using admin app iMazing

    lkrupp said:
    So we have a bunch of obsessive, compulsive, irrational users scared to death of Pegasus malware when every security expert says the only people who need to worry about it are those whom a government might want to track. No, your 16 year old nephew isn’t going to use Pegasus to hack your iPhone. 
    Well, isn't that reason enough to worry? You know, in a lot of countries the government sees a lot of reasons to track a lot of people.
    The world _is_ larger than the US, and not even democratic countries are safe from populist regimes running amok...

    The last days debate about Apple's image scanning really surprised me, with so many Americans saying "if you haven't done anything wrong, you don't have anything to worry about". While in Europe, where people traditionally have more trust in institutions and government, there is a huge movement and public pressure to keep data private.
    maltz
  • What you need to know: Apple's iCloud Photos and Messages child safety initiatives

    elijahg said:
    elijahg said:
    Remember that 1 in 1 trillion isn't 1 false positive per 1 trillion iCloud accounts - it's 1 per 1 trillion photos. I have 20,000 photos, that brings the chances I have a falsely flagged photo to 1 in 50 million. Not quite such spectacular odds then.
    One in a trillion over 20,000 photos is not 1 in 50 million. It's one in a trillion, 20,000 times. The odds do not decrease per photo, as your photo library increases in size. There is not a 1:1 guarantee of a falsely flagged photo in a trillion-strong photo library.

    And even if it was, one in 50 million is still pretty spectacularly against.
    Unfortunately it is - 1 in 1 trillion becomes 2 in 1 trillion with two photos. Or 1 in 500 billion. That then halves again with 4 photos, 1 in 250 billion and so on. It's little more than simplified fractions. Punch 1,000,000,000,000/20,000 into a scientific calculator and it'll be simplified to 50,000,000/1. The odds do decrease because there is a more likelihood you have a matching photo with 2 photos than 1 photo. And yes, statistically speaking 1 in 1 trillion means that in a trillion-strong library there will be one false match.

    Also, it's massively more likely someone will get their password phished than a hash collision occurring - probably 15-20% of people I know have been "hacked" through phishing. All it takes is a couple of photos to be planted, with a date a few years ago so they aren't at the forefront of someone's library and someone's in very hot water. You claim someone could defend against this in court, but I fail to understand how? "I don't know how they got there" isn't going to wash with too many people. And unfortunately, "good security practices" are practised only by the likes of us anyway, most people use the same password with their date of birth or something equally insecure for everything. 
    1 in 50 million is not the same statistically as one in a trillion tried 20,000 times, no matter how much you want it to be so, I'm afraid. Regardless, your 1 in 50 million is still a very large number.

    One in a trillion tried a trillion times does not guarantee a match, although it is likely. as you're saying. There may even be two or three. You're welcome to believe what you want, and you can research it with statisticians if you are so inclined. This is the last I will address this point here.

    And, in regards to the false positive, somebody will look at the image, and say something like: Oh, this is a palm tree. It just coincidentally collides with the hash. All good. Story over.

    In regards to your latter point, this is addressed in the article.
    Sorry, but you _really_ need to brush up your statistics knowledge... @elijahg is absolutely correct (and stating that you refuse to comment on the topic any further doesn't help your case).
    elijahgRayz2016