111–120 of 236 posts
I hate silent takeovers so much. Chrome developer extensions are another very popular thing for bad actors to buy out and replace with malware, and it sucks.
>I hate silent takeovers so much. This is a great app idea. Monitor the app owner. If the owner changes overnight, alerts to the moon.
As a side note I want to mention that I use Night Shift on mac os and every day!!! I need to switch it back on because there is no option to leave it enabled all day long.
I have it set to a custom schedule that starts at 4am and ends at 3:59am, effectively leaving it enabled all day long.
> The application … makes a lot of connections to [site], a website that sells tickets to live music events This is a common use for residential proxies. Ticket touts buy use of the infected users to make requests to try beat restrictions on access from data-centre hosts or high-volume access from and other hosts, to increase their charge of getting valuable tickets for later resale. A number of backdoored (by the cr…
NordVPN does this as well. Google and Amazon own large blocks of IP ranges for their cloud services, so it’s fairly easy to detect bots built on AWS and Google cloud. On the other hand, Verizon also owns a large block of IP addresses that they give out to their residential customers. NordVPN takes advantage of the fact that people like Netflix and Amazon don’t want to block out Verizon’s ip ranges, and disguise netwo…
> The application … makes a lot of connections to [site], a website that sells tickets to live music events This is a common use for residential proxies. Ticket touts buy use of the infected users to make requests to try beat restrictions on access from data-centre hosts or high-volume access from and other hosts, to increase their charge of getting valuable tickets for later resale. A number of backdoored (by the cr…
NordVPN does this as well. Google and Amazon own large blocks of IP ranges for their cloud services, so it’s fairly easy to detect bots built on AWS and Google cloud. On the other hand, Verizon also owns a large block of IP addresses that they give out to their residential customers. NordVPN takes advantage of the fact that people like Netflix and Amazon don’t want to block out Verizon’s ip ranges, and disguise netwo…
Do they? Last time I looked into this drama, it seems like the botnet accusations were just scurrilous slander.
https://www.comparitech.com/blog/vpn-privacy/nord-vpn-botnet...
There's gotta be some law that could be passed about stuff like this. Software should have an implicit contract that it does what it says and not something wildly different than it, with harsh penalties for violations.
> THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO […] FITNESS FOR A PARTICULAR PURPOSE
…and the GPL has nearly the same text in section 15. [1]
Earlier quoted context omitted.
Couldn't this happen to paid apps just as easily?
If the developer is well paid, probably not? Why would they throw away what they built for a lump sum if they have decent side-business and recurrent revenues?
> sudo zsh -c "rm /Users/*/Library/LaunchAgents/NightOwlUpdater.plist" Why do you need to call out to zsh for this command instead of just running it in the current shell?
Because the expansion of the wildcard needs to happen with the privileges granted by sudo. If you just ran "sudo rm ..." the expansion would be done by the current shell, which doesn't have the required privileges.
Earlier quoted context omitted.
Selling ads is one thing. Selling my Internet connection, which violates the ToS of most ISPs, is a vastly different situation.
How So? I mean, NightOwl doesn't have an arrangement with your ISP, they have an arrangement with you. I'm not sure your ISP is going to delete your account because you didn't know some app was doing something shady. If the standard is every app user has to know what each app does under the hood, then there's going to be a lot of people who won't be able to match that standard.
So yes, they will absolutely suspend your account until they are satisfied the usage is in alignment with their expectations.
I hate silent takeovers so much. Chrome developer extensions are another very popular thing for bad actors to buy out and replace with malware, and it sucks.
What's silent about it? It's right there in the TOS, which you agreed to by using the software. Caveat Emptor, and all that.
Earlier quoted context omitted.
Selling ads is one thing. Selling my Internet connection, which violates the ToS of most ISPs, is a vastly different situation.
How So? I mean, NightOwl doesn't have an arrangement with your ISP, they have an arrangement with you. I'm not sure your ISP is going to delete your account because you didn't know some app was doing something shady. If the standard is every app user has to know what each app does under the hood, then there's going to be a lot of people who won't be able to match that standard.
> NightOwl app cannot be held responsible in any circumstances for Shared traffic fees or any other costs the User may incur in accordance with agreements with their internet service provider. The Application use might be prohibited or restricted by the User's service provider or applicable laws. The Application may not be compatible with all service providers' policies and regulations. The User should confirm the ability to use the Application with their service provider.