Live data from Hacker News

I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

404media.co

31–40 of 132 posts

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#31
post #15

Given that the device is plugged in, trusted, shows up as a computer, and requires external power, it has all the connections it needs spy on the screen (at minimum) and remote control the victim iPhone without permission in the worst case. (it has video feed, and can emulate USB keyboard and mouse) Yikes!

Integrating everything into USB has been great at physical simplification, but it really opened up the attack surface.

First party malware is the worst.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#32
post #17

It's odd that 404 Media chose a .co (Colombia) TLD.

Not really, lots of companies use .co instead of .com because there's different availability. It's been a second tier alternative to .com for years.

Technically, it's still the ccTLD for Colombia, even though anyone can register a .co domain, similar to .io (for British Indian Ocean Territory).

https://en.wikipedia.org/wiki/.co

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#34
post #17

Earlier quoted context omitted.

Not really, lots of companies use .co instead of .com because there's different availability. It's been a second tier alternative to .com for years.

Technically, it's still the ccTLD for Colombia, even though anyone can register a .co domain, similar to .io (for British Indian Ocean Territory). https://en.wikipedia.org/wiki/.co

That is true, but no one is disputing that.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#35
post #7

The saluspa from "bestway" demands your location before allowing you to setup wifi remote control of the portable hot tub on the android app. I wonder how on android I can spoof the location used by an app, or if anyone figured out if you can control it without the app. I set it up away from my house and use a separate wifi network but it pissed me off.

I tried to use Fanduel last night to place some bets for my friend in prison. It requires your location. You have to install some horrible app that installs a Windows Service and has no UI. It still won't work. After a lot of digging around, I discovered you cannot use Fanduel if you have a wired device. The app _requires_ you to connect to your router by Wifi or it will not work. WTF.

I wonder if their terms of service states claims to give them permission to distribute malware or if they think they won't get caught.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#36

Earlier quoted context omitted.

This is not the gotcha you think it is. Imagine how awful the apps we would be forced to sideload would be, if companies like the one that made this dongle were allowed to make them.

Ah yes, the many apps poor Android users are forced to sideload. As an Android user myself, so far I'm up to...zero?

[deleted]

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#38
post #17

Earlier quoted context omitted.

Not really, lots of companies use .co instead of .com because there's different availability. It's been a second tier alternative to .com for years.

Technically, it's still the ccTLD for Colombia, even though anyone can register a .co domain, similar to .io (for British Indian Ocean Territory). https://en.wikipedia.org/wiki/.co

Colombia, not Columbia.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#39
post #10

Earlier quoted context omitted.

Android apps used to need "location" access for bluetooth discovery. https://www.androidpolice.com/2021/05/19/android-12-apps-won...

Because your location can be inferred by finding which Bluetooth devices are around you, as that article says... > See, back in Android 6 Marshmallow, Google changed things so that apps needed location permissions to scan for Bluetooth devices. At the time, the rationale was that Bluetooth was going to be used for things like interior navigation or location tracking in a more abstract sense, and your location could i…

I have always assumed that is a way for Google to normalize granting the position permission.

You could "pair" apps with devices if Bluetooth position spyware was a concern.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#40
post #7

The saluspa from "bestway" demands your location before allowing you to setup wifi remote control of the portable hot tub on the android app. I wonder how on android I can spoof the location used by an app, or if anyone figured out if you can control it without the app. I set it up away from my house and use a separate wifi network but it pissed me off.

The 4 outlet water timer I bought came with bluetooth remote functionality. It needs GPS location data for it to work. Nope. Should have known some shit like that would be part of the deal, and could have saved a few bucks by getting the version without remote. People need to just stop with this tracking bullshit.

In fairness, some of those pull precipitation, heat and transpiration info from weather reports.

It still shouldn’t require it though. At least on iOS, requiring it should get them banned from the app store.

I want side loading to exist for iOS, but I also want bans like the above to apply at my discretion to anything I pay money for.

Post reply on HN