Reality 2.0 around the web:
Site/Blog/Newsletter
FaceBook
Twitter
YouTube
Mastodon

Special Guest: Kyle Rankin.

Support Reality 2.0

Links:

• Defending Against Spyware Like Pegasus – Purism — What’s particularly scary about spyware in general, and is true for Pegasus as well, is that victims have no indication they’ve been compromised. Due to how locked down the iPhone is from the end user, detecting Pegasus in particular requires expert forensics techniques. This has left many at-risk iPhone users wondering whether they too are compromised and if so, what do they do?
• Here’s how to check your phone for Pegasus spyware using Amnesty’s tool - The Verge — Amnesty International — part of the group that helped break the news of journalists and heads of state being targeted by NSO’s government-grade spyware, Pegasus — has released a tool to check if your phone has been affected. Alongside the tool is a great set of instructions, which should help you through the somewhat technical checking process. Using the tool involves backing up your phone to a separate computer and running a check on that backup. Read on if you’ve been side-eyeing your phone since the news broke and are looking for guidance on using Amnesty’s tool.
• Mobile Verification Toolkit — Mobile Verification Toolkit (MVT) is a tool to facilitate the consensual forensic analysis of Android and iOS devices, for the purpose of identifying traces of compromise.
• The FBI Is Locating Cars By Spying On Their WiFi — The FBI is using a controversial technology traditionally used to locate smartphones as a car tracking surveillance tool that spies on vehicles’ on-board WiFi.
• Catholic priest quits after “anonymized” data revealed alleged use of Grindr | Ars Technica — In what appears to be a first, a public figure has been ousted after de-anonymized mobile phone location data was publicly reported, revealing sensitive and previously private details about his life.
• Secure, Fast & Private Web Browser with Adblocker | Brave Browser — Brave stops online surveillance, loads content faster, and uses 35% less battery.1

Subscribe to our newsletter.

Reality 2.0 around the web:
Site/Blog/Newsletter
FaceBook
Twitter
YouTube
Mastodon

Show notes:

Katherine (41s):
The concept of fragmentation as it applies to software development.

Kyle (1m 44s):
[I]f you're an application developer today and you're writing a program, you know, 20 years ago, what you had to do is think about, well, do I want my application to run on windows, Mac, or Linux, or what combination of those? And then depending on your decision, you would pick different frameworks, different languages, maybe, and each individual platform you had, the support basically made you had the fork, the code in many cases.

Kyle (2m 31s):
I mean, depending on what, what graphical libraries you picked, but these days it's way worse. Because with mobile devices, you've added a couple of extra platforms on top of those three. So now it's not just windows, Mac, or Linux, it's also Android or iOS. And so, and then, so what ends up happening is the developer will say, well, do I want to make a mobile application or do I want to make a desktop application? And then they'll start with that standpoint. And they, or they may say, well, I want to do all of the above, but then there's a minimum of like five different platforms. They have to support them. And all of them are often in different languages, you know, different development, methodologies, different frameworks, different tools to test and build all of that stuff.

Kyle (3m 16s):
[W]e decided, well, it makes the most sense to avoid fragmentation and have the same operating system that our laptop runs just instead of sort of making an application, porting an application to the phone, let's just make the existing Linux desktop ecosystem as a whole portable to a small screen

Katherine (10m 1s):
[W]hat's happening now with the new M1 processor the whole idea is that any Mac app can now be, or rather the other way around, any iOS app is now a desktop app, which is interesting because it's sort of the opposite reality.

Katherine (16m 41s):
[I]t's almost ridiculous to me at this point that I can't just plug in my, if, if I were to have a fancy new iPhone, which I don't, but if I did, why shouldn't I just be able to plug it in? You know, it's a powerful device, it has a massive amount of computing power

Kyle (19m 43s):
If at all, you know, depending on the provider, Google has had huge problems with, you know, all of these third parties that create custom versions of Android and they never update them. So they've had to go through all of these engineering efforts to try to avoid just the fragmentation in the Android market, with all of these custom Androids that are out there.

Katherine (31m 28s):
[T]he Amazon halo wearable device because all of the coverage, even, and maybe even, especially in mainstream press outlets has been so bad. I mean, it's, you know, it's not just privacy advocates or, you know, geeks like us who are going really, who thought this was a good idea. The Washington post, which is as they even pointed out owned by Jeff Bezos is just tearing this thing apart.

Doc (31m 60s):
So the headline Amazon's new health band is the most invasive tech we've ever tested. And then the subhead is even better. It says the halo band asks you to strip down and strap on a microphone. So it can make 3d scans of your body fat and monitor your tone of voice after all that. It still isn't very helpful.

Katherine (43m 47s):
An article in Gizmodo about schools, us schools, having access to the same technology that federal law enforcement has for breaking into phones. And they use this technology to conduct warrantless searches of student phones.

Katherine (46m 6s):
[I]t knows everything that you're anxious about. It knows everything that you're curious about. It knows, you know, it knows everything. And yet somehow some school districts and in fact judges, apparently because these, these issues have gone to court, find it perfectly acceptable for a school to be able to hack into somebody’s device. So I, I find this really disturbing. I wonder, Kyle, if you could kind of maybe give us some insight about how, how potentially dangerous this is.

Kyle (46m 40s):
I mean, I've, I see this trend over and over again, where what will happen is someone will come up with a new invasive technology and it's sort of like boiling the frog kind of thing where you could not, you know, throw this against everybody. Like everyone would rise up and say, this is not okay. But so what you do instead is you start with people with the least possible agency. You can normally, if you have some sort of invasive privacy invasive tech, the first step is to either sell it for stopping terrorism or maybe pedophiles. And then after, after you get sort of a proof of concept there, then you have to expand. If you're selling a product, you need to expand your user base.

Doc (54m 21s):
Yeah. The weird thing for me is that almost nobody's worked on starting with giving us agency, you know, I mean, we should be able to say, here's privacy. Here's, here's what I've got. You can't see anything. You're not seeing anything we're doing.

Doc (57m 34s):
That's my message to all of you. We can't do that. And we need to be able to do that, that's why my preference would be for the default to be, you have to default to, I'm not collecting any of your data. Your data is yours. I'm not allowed to do it. I'm only allowed to do it. If you expressly give me informed consent to do it. And then at that point I will do it, but you, but, but if I, if you do nothing, then I can't do it. I can't take any of your data. It's yours. Yeah. Yeah. I mean, it's one of the more quoted things that I've written in the last few years.

Katherine (58m 58s):
But I kind of feel like we are in the wild West. That's how I feel like when digitally, when we start talking about things like, you know, schools being allowed to quite literally digitally strip search your children, you know, people should be outraged by that

Kyle (59m 38s):
Well, but that's also because your average parent given the preference, and many of them already do put spyware on their children's phones to track their children, right. Because they want to be able to see everything that their kid did.

Kyle (1h 0m 18s):
I keep, I keep saying, it's not that people don't care about privacy, as much as they don't understand the implications of what they're giving up, you know? And so I, you know, a lot of parents don't necessarily understand the implications of, of what it normalizes.

Special Guest: Kyle Rankin.

Support Reality 2.0

Links:

• Preventing Fragmentation with the Librem 5 – Purism — Fragmentation is a massive problem in computer software development that has only gotten worse with mobile computers. By fragmentation I’m referring to incompatible platforms that require a developer to maintain separate forks of their code. Twenty years ago if you wanted to write software for an end user, you had to decide whether to support Windows, Macs or Linux. Each of those platforms required you to build, test, and maintain different forks of your software.
• Amazon’s Halo Band wearable tracks your voice and body fat, but isn’t helpful - The Washington Post — The Halo Band asks you to strip down and strap on a microphone so that it can make 3-D scans of your body fat and monitor your tone of voice. After all that, it still isn’t very helpful.
• U.S. Schools Are Buying Cellebrite Phone-Hacking Tech — While companies like Cellebrite have partnered with federal and local police for years, that the controversial equipment is also available for school district employees to search students’ personal devices has gone relatively unnoticed—and serves as a frightening reminder of how technology originally developed for use by the military or intelligence services, ranging from blast-armored trucks designed for use in war zones to invasive surveillance tools, keeps trickling down to domestic police and even the institutions where our kids go to learn.

Reality 2.0 around the web:
Site/Blog/Newsletter
FaceBook
Twitter
YouTube
Mastodon

Special Guest: Kyle Rankin.

Support Reality 2.0

Links:

• Activists Turn Facial Recognition Tools Against the Police - The New York Times — These activists say it has become relatively easy to build facial recognition tools thanks to off-the-shelf image recognition software that has been made available in recent years. In Portland, Mr. Howell used a Google-provided platform, TensorFlow, which helps people build machine-learning models.
• Fawkes — The SAND Lab at University of Chicago has developed Fawkes1, an algorithm and software tool (running locally on your computer) that gives individuals the ability to limit how unknown third parties can track them by building facial recognition models out of their publicly available photos.
• Mass Extraction - Upturn — To search phones, law enforcement agencies use mobile device forensic tools (MDFTs), a powerful technology that allows police to extract a full copy of data from a cellphone — all emails, texts, photos, location, app data, and more — which can then be programmatically searched. As one expert puts it, with the amount of sensitive information stored on smartphones today, the tools provide a “window into the soul.”
• Doc Searls Weblog · About face — We know more than we can tell.
• Vivian Maier Photographer | Official website of Vivian Maier | Vivian Maier Portfolios, Prints, Exhibitions, Books and documentary film
• Welcome to the 21st Century: How To Plan For The Post-Covid Future - O'Reilly Media — So too, when we look back, we will understand that the 21st century truly began this year, when the COVID19 pandemic took hold. We are entering the century of being blindsided by things that we have been warned about for decades but never took seriously enough to prepare for, the century of lurching from crisis to crisis until, at last, we shake ourselves from the illusion that our world will go back to the comfortable way it was and begin the process of rebuilding our society from the ground up.