Live data from Hacker News

I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

404media.co

41–50 of 132 posts

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#41

Earlier quoted context omitted.

This is not the gotcha you think it is. Imagine how awful the apps we would be forced to sideload would be, if companies like the one that made this dongle were allowed to make them.

Ah yes, the many apps poor Android users are forced to sideload. As an Android user myself, so far I'm up to...zero?

Does Google ban apps that break if location information is denied?

The last time I checked, Apple did and Google did not.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#42

Earlier quoted context omitted.

Ah yes, the many apps poor Android users are forced to sideload. As an Android user myself, so far I'm up to...zero?

You are correct in lampooning the word "force" but don't throw out the baby with the bathwater. The point is still valid. Also, it seems obvious that the danger is in long-term ecosystem implications. "I haven't had to so far" is irrelevant. Android users had/have(?) to side-load Fortnite. Depending on who you are that might feel like being "forced." Is your argument "If you feel like you are forced to use some app y…

> You are correct in lampooning the word "force" but don't throw out the baby with the bathwater. The point is still valid.

I have yet to see one, client, customer, friend, acquaintance, relative (or rando who happened to know I'm an IT guy) sideload an app without knowing what they were doing & having a good reason to do so.

The list of those who sideloaded is small. However, my list of technically hapless folks is much, much larger - and zero of them seem to have sideloaded anything ever. There's a fair chance I'd wind up knowing if they did.

Even my often homeless ex who's down with plugging any connector into any port at any time of day (shapes need not match) doesn't seem to have sideloaded. Certainly her devices are always in a Sideloading=Off state when I check (she is not now a developer!).

From an IT view, unintended sideloading looks like a low priority concern.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#43
post #40

Earlier quoted context omitted.

The 4 outlet water timer I bought came with bluetooth remote functionality. It needs GPS location data for it to work. Nope. Should have known some shit like that would be part of the deal, and could have saved a few bucks by getting the version without remote. People need to just stop with this tracking bullshit.

In fairness, some of those pull precipitation, heat and transpiration info from weather reports. It still shouldn’t require it though. At least on iOS, requiring it should get them banned from the app store. I want side loading to exist for iOS, but I also want bans like the above to apply at my discretion to anything I pay money for.

anyone making a "smart" water timer using today's weather forecasting would be something that could be called "The Plant Killer". my area can say that there's 80% chance of rain, yet not one drop can fall where I am while other areas can say they received .25" of rain. sounds like watering isn't necessary. oops. dead plants. There's other times where no weather is forecast, yet I've received .25" of rain. oops. wasted water. also, your "smart" decision to not water because of rain means all of the plants on my patio didn't get watered while I was on vacation/work trip/etc, which is the primary reason I bought the timer in the first place.

Your smart is dumb. Just turn the water on at the time I said. That's plenty smart for me. If I can update the schedule from my couch, great! But...not at the expense of all of this tracking bullshit

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#44

I have an impression that covid enabled widespread acceptation of QR codes, and now every app is excused to request camera and photo access because "we need to scan a QR code".

It would be nice to have a special way to scan a qr code in which the system reads the QR code for the app without the app being able to see raw camera data.

I think this flow sort of supports that.

https://9to5mac.com/2020/10/07/limit-third-party-iphone-phot...

If I remember right, there’s a way to get a “take picture” option in the chooser. I’m not sure how the qr code would then be recognized, though I’m not sure why you wouldn’t have them get the qr code via the system camera app.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#45
post #38

Earlier quoted context omitted.

Technically, it's still the ccTLD for Colombia, even though anyone can register a .co domain, similar to .io (for British Indian Ocean Territory). https://en.wikipedia.org/wiki/.co

Colombia, not Columbia.

You're right, fixed.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#47
post #15

Given that the device is plugged in, trusted, shows up as a computer, and requires external power, it has all the connections it needs spy on the screen (at minimum) and remote control the victim iPhone without permission in the worst case. (it has video feed, and can emulate USB keyboard and mouse) Yikes!

Integrating everything into USB has been great at physical simplification, but it really opened up the attack surface. First party malware is the worst.

From the photos, this looks like a Lightning cable, not a USB cable.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#49

Earlier quoted context omitted.

Because your location can be inferred by finding which Bluetooth devices are around you, as that article says... > See, back in Android 6 Marshmallow, Google changed things so that apps needed location permissions to scan for Bluetooth devices. At the time, the rationale was that Bluetooth was going to be used for things like interior navigation or location tracking in a more abstract sense, and your location could i…

I have always assumed that is a way for Google to normalize granting the position permission. You could "pair" apps with devices if Bluetooth position spyware was a concern.

Before Android required that permission, there were marketing companies selling malls the ability to see who was around by the ID of their Bluetooth beacon.

Re: I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads

#50
post #7

The saluspa from "bestway" demands your location before allowing you to setup wifi remote control of the portable hot tub on the android app. I wonder how on android I can spoof the location used by an app, or if anyone figured out if you can control it without the app. I set it up away from my house and use a separate wifi network but it pissed me off.

I would have returned it for a refund, personally.
Post reply on HN