Author: Ryan Bemrose

Categories
podcast

Angry Tech News #83: Thereupon Classified

Podcast: Play in new window | Download (Duration: 39:11 — 35.9MB)

Microsoft’s new Recall feature obsoletes all other spyware,
You are participating in a worldwide wifi tracking network,
and the end of ICQ (yeah, it was still around)

Windows Recall
https://www.bleepingcomputer.com/news/microsoft/microsofts-new-windows-11-recall-is-a-privacy-nightmare/
https://www.theverge.com/2024/5/20/24159258/microsoft-recall-ai-explorer-windows-11-surface-event
https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/05/statement-in-response-to-microsoft-recall-feature/
https://www.thurrott.com/windows/windows-11/302928/windows-11-recall-is-not-a-privacy-concern
https://www.microsoft.com/en-us/windows/copilot-plus-pcs
Wifi is not your friend
https://krebsonsecurity.com/2024/05/why-your-wi-fi-router-doubles-as-an-apple-airtag/
ICQ is shutting down
https://uk.pcmag.com/mobile-apps/152479/icq-one-of-the-oldest-instant-messengers-is-shutting-down
Proof of concept for exfiltrating Recall data
https://www.wired.com/story/total-recall-windows-recall-ai/

Categories
podcast

Angry Tech News #82: Subsystem Derision

Podcast: Play in new window | Download (Duration: 32:58 — 30.2MB)

ATN is back after a small hiatus! Time to clear some tabs and pour sarcasm on some choice stories from the last three months.

Forced updates, Insecure IoT doorbells, The craze to put AI into all the things, Tesla’s safety record, and a rundown of Windows 11 news

Links

Consumer Reports: many smart doorbells have major security problems
https://www.consumerreports.org/home-garden/home-security-cameras/video-doorbells-sold-by-major-retailers-have-security-flaws-a2579288796/
Logitech releases M750 mouse, which is M650 with an AI button
https://arstechnica.com/gadgets/2024/04/ai-marketing-hype-is-coming-for-your-favorite-gadgets/
Speculation: AI could destroy call center industry
https://www.techspot.com/news/102749-generative-ai-could-soon-decimate-call-center-industry.html
NHTSA report on Tesla Autopilot crashes
https://www.cnbc.com/2024/04/26/tesla-autopilot-linked-to-hundreds-of-collisions-has-critical-safety-gap-nhtsa.html
Windows 11 stuff
https://arstechnica.com/gadgets/2024/02/windows-11-24h2-goes-from-unsupported-to-unbootable-on-some-older-pcs/
https://www.tomshardware.com/software/operating-systems/windows-11-will-reportedly-display-a-watermark-if-your-pc-does-not-support-ai-requirements
https://www.neowin.net/news/microsoft-to-warn-if-your-windows-11-pc-doesnt-meet-system-requirements-for-ai-explorer/
https://www.geeky-gadgets.com/windows-11-24h2-update/
https://arstechnica.com/gadgets/2024/03/rip-to-the-windows-subsystem-for-android-which-goes-away-in-2025/
https://www.theverge.com/2024/4/24/24138949/microsoft-windows-11-start-menu-ads-recommendations-setting-disable
https://www.techradar.com/computing/windows/windows-11-is-forcing-users-to-upgrade-mail-app-to-new-outlook-client-which-comes-with-a-nasty-addition-adverts

Categories
podcast

Angry Tech News #81: Subscribe Firstborn

Podcast: Play in new window | Download (Duration: 24:07 — 22.1MB)

Google admits what we all know, Apple faces the music (or at least a few notes), and HP and Ubisoft seek rent

Links

Google admits it collects user data in incognito mode
https://www.engadget.com/google-now-admits-it-could-collect-data-in-chromes-incognito-mode-103807146.html
Apple concedes almost an inch
https://www.engadget.com/apple-updates-us-app-store-guidelines-allowing-developers-to-link-to-third-party-payments-235836357.html
HP: “Our long-term objective is to make printing a subscription”
https://www.pcgamer.com/our-long-term-objective-is-to-make-printing-a-subscription-says-hp-ceo-gunning-for-2024s-worst-person-of-the-year-award/
Ubisoft says gamers should just accept not owning their games
https://www.techspot.com/news/101534-ubisoft-wishes-gamers-would-accept-not-owning-their.html

Categories
podcast

Angry Tech News #80: Artist Proxy

Podcast: Play in new window | Download (Duration: 24:19 — 22.3MB)

Apple wants to control your digital life, Google wants to control the entire internet, and artists finally get a weapon in the war against AI

Links

AI data poisoning tool “Nightshade”
https://www.zdnet.com/article/data-poisoning-tool-lets-artists-fight-back-against-ai-scraping-heres-how/

Apple makes biometrics authoritative with “Stolen Device Protection” feature
https://www.macrumors.com/2023/12/12/ios-17-3-stolen-device-protection-feature/

Google’s latest move to control the whole world-wide-web
https://www.bleepingcomputer.com/news/google/google-chromes-new-ip-protection-will-hide-users-ip-addresses/

Categories
podcast

Angry Tech News #79: Plan Malvertise

Podcast: Play in new window | Download (Duration: 17:42 — 16.2MB)

Right to Repair in California, T-Mobile gets greedy, Google gets paid to install malware, and a WinRAR vulnerability

Links

CA Right to Repair SB 244 passed
https://www.ifixit.com/News/84491/california-right-to-repair-signed-into-law

T-Mobile migrates customers to new more expensive plans
https://tmo.report/2023/10/breaking-t-mobile-will-force-customers-onto-newer-plans-unless-you-opt-out/

Search malvertising
https://www.bleepingcomputer.com/news/security/malicious-notepad-plus-plus-google-ads-evade-detection-for-months/
https://www.malwarebytes.com/blog/threat-intelligence/2023/10/clever-malvertising-attack-uses-punycode-to-look-like-legitimate-website

Youtube starting to block users who use ad-blocker
https://www.techspot.com/news/100524-youtube-intensifies-fight-against-ad-blockers-users-frustrated.html

WinRAR vulnerability
https://www.techspot.com/news/100553-if-you-havent-downloaded-or-updated-winrar-since.html

Categories
podcast

Angry Tech News #78: Houston Reactive

Podcast: Play in new window | Download (Duration: 21:28 — 19.6MB)

T-Mobile failed update, Microsoft closes a loophole no one was using, Cruise cars meet Houston weather, and software developers hate diversity

Links:

Libwebp vulnerability assigned new maximum severity
https://www.bleepingcomputer.com/news/security/google-assigns-new-maximum-rated-cve-to-libwebp-bug-exploited-in-attacks/

Libvpx vulnerability
https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/

Exim vulnerabilities disclosed
https://arstechnica.com/security/2023/09/critical-vulnerabilities-in-exim-threaten-over-250k-email-servers-worldwide/

T-Mobile faulty update exposes user info
https://arstechnica.com/tech-policy/2023/09/t-mobile-screwup-caused-customers-to-see-other-users-billing-information/

Win7/8 upgrade to Win10 finally disabled
https://www.zdnet.com/article/its-official-no-more-free-windows-10-upgrades/

Houston Cruise vehicles hit streets with expected results
https://www.chron.com/news/houston-texas/transportation/article/houston-cruise-self-driving-cars-18390306.php

Categories
podcast

Angry Tech News #77: Whiz Factor

Podcast: Play in new window | Download (Duration: 18:04 — 16.5MB)

Google defeats multifactor authentication, Pixel Watch is unrepairable, Ring sells a pet collar, Toyota learns the value of IT, and yet another vulnerability in the Internet

Links

Retool MFA defeated by Google convenience
https://retool.com/blog/mfa-isnt-mfa/

Pixel Watches are unrepairable
https://www.theverge.com/23874281/google-pixel-watch-cracks-no-repairs-warranty

Ring Pet Tag
https://www.yahoo.com/lifestyle/ring-launches-brand-pet-tag-141824261.html

Toyota manufacturing goes down. Dude named Ben about to get fired.
https://www.techspot.com/news/100067-toyota-insufficient-disk-space-blunder-brings-car-manufacturing.html

Critical WebP vulnerability
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/

Categories
podcast

Angry Tech News #76: Snappy Spyware

Podcast: Play in new window | Download (Duration: 26:55 — 24.7MB)

Spyware hacked for good, Apple OS hacked for bad, Windows hacked, but it makes things better, OpenAI confirms AI detectors are crap, and Automobiles are now officially the worst product category for privacy

Links

WebDetetive spyware hacked
https://techcrunch.com/2023/08/26/brazil-webdetetive-spyware-deleted/

Windows bug improves performance
https://www.tomshardware.com/news/windows-file-explorer-bug-ironically-boosts-browsing-performance

Blastpass vuln in Apple OS’s
https://arstechnica.com/gadgets/2023/09/apple-patches-clickless-0-day-image-processing-vulnerability-in-ios-macos/
https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/

OpenAI: “Do AI Detectors Work?”
https://help.openai.com/en/articles/8313351-how-can-educators-respond-to-students-presenting-ai-generated-content-as-their-own

Mozilla reviews automakers for privacy practices
https://foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/

Categories
podcast

Angry Tech News #75: Plonked Stratum

Podcast: Play in new window | Download (Duration: 19:38 — 18.0MB)

Breaches, breaches, breaches! Google solves meetings. And a Microsoft service becomes a liability in time

Links

UMich attack
https://www.detroitnews.com/story/news/local/michigan/2023/08/30/um/70716806007/

Forever 21 breach
https://techcrunch.com/2023/08/31/forever-21-data-breach-half-million/

Callaway breach
https://www.bleepingcomputer.com/news/security/golf-gear-giant-callaway-data-breach-exposes-info-of-11-million/

Google Duet AI vs meetings
https://metro.co.uk/2023/08/31/googles-ai-will-go-to-your-boring-meetings-for-you-19423340/

Windows Secure Time feature
https://arstechnica.com/security/2023/08/windows-feature-that-resets-system-clocks-based-on-random-data-is-wreaking-havoc/

Categories
podcast

Angry Tech News #74: Terabyte Windmills

Podcast: Play in new window | Download (Duration: 22:28 — 20.6MB)

Western Digital and Hewlett Packard facing lawsuits, Dropbox ends unlimited storage, Microsoft uses the word “python” a lot, and IoT devices continue to be a security nightmare

Links

NPR listens to ATN (maybe)
https://www.npr.org/2023/08/26/1195695051/driverless-cars-san-francisco-waymo-cruise
https://techcrunch.com/2023/08/18/cruise-told-by-regulators-to-immediately-reduce-robotaxi-fleet-50-following-crash/

Western Digital faces lawsuits over crappy SSD products
https://www.techspot.com/news/99831-western-digital-faces-class-action-lawsuit-over-failing.html

HP faces lawsuits over shady ink drivers
https://www.theregister.com/2023/08/11/judge_denies_hps_request_to/

Cloud “Python” coming to Excel
https://techcommunity.microsoft.com/t5/microsoft-365-blog/introducing-python-in-excel-the-best-of-both-worlds-for-data/ba-p/3905482

Dropbox dumps unlimited storage
https://blog.dropbox.com/topics/product/updates-to-our-storage-policy-on-dropbox-advanced
https://www.chia.net/chia-farming/

TP-Link smartbulb vulnerability
https://www.bleepingcomputer.com/news/security/tp-link-smart-bulbs-can-let-hackers-steal-your-wifi-password/