201–210 of 291 posts
If this is true, it would be a symbolic event marking the disappearance of freedom, a source of pride for the United States.
Earlier quoted context omitted.
Completely agree. This is really unique. Can you imagine if it were standard practice to be open to supply chain attacks like that, by blindly relying on hotlinked or unpinned dependencies?
Why imagine? Let's take a quick look at what's actually happening right now. We can check some widely used libraries and see what their instructions are teaching new developers. Boostrap (code snippet from their quick start instructions): ``` Bootstrap demo https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootst... " rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZq…
Looks like what you might expect in a standard marketing app from a consultancy. They probably hired someone to develop it, that shop used their standard app architecure which includes location tracking code and the other stuff.
"Visit TrumpRx.gov" Holy crap, the grift never ends! Is he even allowed to do that, use a .gov address to peddle dodgy meds?
Earlier quoted context omitted.
There's a specific writing style for globalized English that AI's use. And then this post also had none of the stylistic flourishes that a real author might add. And then simple things like constructing a table of 68 libraries or whatever organized by relatively subjective categories. That is something that nobody is going to do by hand.
There is a new term "load-bearing" which is used a lot in my usage of AI. Has anyone else encountered this term being used a lot in their conversations? Or is it a quirk of personalization?
Earlier quoted context omitted.
An MDM orga cannot install a trusted CA on non-supervised (company owned) devices. By default on BYOD these are untrusted and require manual trust. It also cannot see everything on your device - certainly not your email, notes or files, or app data.
As someone who has an MDM-managed device, I beg to differ. Although, this one uses newer style android MDM, which involves factory resetting and doing special things during OOBE. Even if it used the older style, nothing's stopping the app for requesting file access, notification access, etc. and not working until you grant the permissions.
If anything, one of many MDM purposes is to prevent orgas from enrolling rooted devices in their fleet.
Earlier quoted context omitted.
Perhaps the apparent hallucination they mentioned in their comment?
Apparently just like OP, you didn't read the article either. Just because the app doesn't ask for permission in the manifest doesn't mean it can't be acquired at runtime. It's very publicly documented [0]. So, no. Not a "hallucination". [0] https://documentation.onesignal.com/docs/en/location-opt-in-...
Earlier quoted context omitted.
"If the user chooses to opt-in and grants location-tracking permission, the app is then, and only then, able to track the user's location?"
But that's not true; it could easily fallback to other forms of geolocation like using the current IP.
OneSignal cofounder here. Posting since our service was mentioned in this article. For those concerned or curious about location data collection, we wrote an explanation of how it works: https://onesignal.com/blog/youre-in-control-how-location-act...
Earlier quoted context omitted.
If you go down this path you argue desktop browsing https is broken, which i dont think is a serious argument.
Well yes, CAs and the ICANN model of DNS are intertwined and fundamentally broken in multiple ways. However the system as a whole is largely "good enough" as can be seen from its broad success under highly adversarial conditions in the real world.
And the location… well, if one day they need you, they’ll sure be glad they know your each steps and current location .
It’s not a bug, it’s a feature.