Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Everyone going to World Cup must have this app, experts are sounding the alarm

nrk.no

Post reply on HN
Print view View original

291–300 of 354 posts

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#291

Post by squarefoot »

AnonCoward42 wrote: post #78

Permissions from Aurora Store (3rd party to Play Store): Hayya: - control vibration - have full network access - prevent phone from sleeping - run at startup - run foreground service - view Wi-Fi connections - view network connections - access sensor data at a high sampling rate - access approximate location only in the foreground - access precise location only the foreground - listen to C2DM messages Etheraz: - acce…

I wonder if any of those permissions could be used to give the app access to raw touch screen data. In theory only system drivers should be able to. If possible, it would pose a huge security risk: raw touch screen data reveal where the user taps before the data is sent to any security layer, so that by simply matching the coordinates to the known shape of the virtual keyboard, a malicious app would easily find text, including all passwords.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#292

Post by secureD »

themitigating wrote: post #135
Asraelite wrote: post #81

Earlier quoted context omitted.

Quoted post unavailable.

Why is arrogant? Because I'm claiming a moral value is objective? I believe certain moral issues are objective. I'm not a philosopher or anything similar so I can't go into depth but moral relativism and subjective morality are debated subjects. Here's a great article on objective morality. https://www.psychologytoday.com/us/blog/excellent-beauty/201...

There must be a standard to morality too as every other thing

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#293

Post by leereeves »

addicted wrote: post #284
leereeves wrote: post #279

Earlier quoted context omitted.

Just a comment on your obfuscating language: lethal injection is also a medical procedure. Abortion is a complex issue that should be discussed honestly, not obfuscated.

Lethal injection is not a medical procedure. If it was a medical procedure it wouldn’t make the recipient’s condition deliberately worse than it was before the procedure. Just because a procedure involves injecting chemicals in someone’s body doesn’t mean it’s medical. And abortion is not a complex issue. The only arguments against it are religious and there are religions which require it, so in a purportedly secular…

By that definition abortion isn't a medical procedure either, because it makes one of "the recipient’s condition deliberately worse than it was before the procedure".

And there are human rights arguments against abortion that have nothing to do with religion. Most people agree that the unborn acquire the right to live at some point, and the argument is mostly about when exactly. (Even Roe set that point well before birth.)

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#294

Post by josephcsible »

kergonath wrote: post #245
josephcsible wrote: post #21

Earlier quoted context omitted.

Doesn't Apple's MDM allow that?

Something close to that, AFAIK. But then, it’s not “go download this app from the store”. More like “we steal your phone, jailbreak it, and now we can see everything”. Not sustainable at scale.

You don't need to jailbreak a phone to set up MDM on it.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#295

Post by culturestate »

krolden wrote: post #285
culturestate wrote: post #233

Earlier quoted context omitted.

> there was nothing specific that the mobile app could do that a simple website couldn’t … I’m sure even a printed QR code would of sufficed. I don’t know about that app specifically, but most of the major ticketing providers are doing dynamic barcodes[1] now that are effectively TOTPs for entry. You can’t do this reliably on the web for a major event because you can’t assume network connectivity, and obviously a pri…

But dont these apps require network access to function?

Not at the venue, no. The relevant tokens are saved locally and the barcodes are rendered on-device once you’ve accessed the ticket, which you can do hours/days in advance.

Some of TicketMaster’s API docs for this are publicly available so you can get an idea of how it works - https://developer.ticketmaster.com/products-and-docs/apis/pa...

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#296

Post by robswc »

bnt wrote: post #174
robswc wrote: post #16

Earlier quoted context omitted.

Are you talking about secret government back door stuff? Not into phones but that sounds interesting, lol

I’m not aware of any government back door access, but carriers that I worked with had access to all sorts of crazy hidden SDKs within iOS. For transparency, last time I worked on those was 5-6 years ago, so things may have changed.

Still really interesting. Thanks for sharing.

I heard of a software called Pegasus but couldn't tell if it was legitimately that powerful.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#297

Post by fizzynut »

brabel wrote: post #155
dillondoyle wrote: post #67

Earlier quoted context omitted.

laws that make simply existing illegal are dangerous by definition. not to mention greater dangers to society

I think laws against being gay are wrong, but I have to disagree with your argument that they are laws against existing. You can be gay "inside" but never act on it. That should suffice for you to not get "punished".

Besides the fact that these are terrible conditions for a population to live under, I'm not sure you realise how gay people can be perceived and persecuted in these countries, for those visiting for the world cup I can imagine a lot of problem scenarios.

A couple might try to stay at a hotel in a room together, but because they are both men it could suddenly become a serious problem. Maybe they aren't even a couple and are two friends trying to get a cheaper room, but they get arrested and have to prove they are not gay.

A couple might want to enjoy dinner together at a restaurant, maybe that becomes a problem.

A couple might have "incriminating" pictures on their phone and be arrested.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#298

Post by kergonath »

josephcsible wrote: post #294
kergonath wrote: post #245

Earlier quoted context omitted.

Something close to that, AFAIK. But then, it’s not “go download this app from the store”. More like “we steal your phone, jailbreak it, and now we can see everything”. Not sustainable at scale.

You don't need to jailbreak a phone to set up MDM on it.

You do if you don’t want to need the cooperation of the people in question.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#299

Post by sofixa »

smcl wrote: post #288
sofixa wrote: post #280

Earlier quoted context omitted.

Clubs are members of their local association, which is a member of and regulated by FIFA.

OK that's both wrong (FIFA isn’t involved in regulating the confederations or the members or the clubs) and not what you originally said. I think you just made a mistake in understanding what FIFA does. Same with this: > Do all the manufacturers of sports clothing, shoes, balls, goal posts, etc. have deals with FIFA? Yes FIFA will have a relationship with sponsors of FIFA events (the dozens of brands you see during t…

I think you're mistaking me for the original person you responded to.

However, this is flat our wrong:

> FIFA isn’t involved in regulating the confederations or the members or the clubs

Of course it is. It makes the rules that are implemented by the federations (stuff like 5 subs, the new loan regulations), and it also is the one providing the main funding for the majority of smaller football association (so even if it didn't have any de jure power over them, and it absolutely does, it would have still had de facto power with financing).

Post reply on HN