• WhatIsThePointAnyway@lemmy.world
    link
    fedilink
    English
    arrow-up
    107
    ·
    6 months ago

    De-centralization and open source was always the better way. Technology started on this path and the corporate powers have done everything they can to sabotage and destroy open tech.

  • alexc@lemmy.world
    link
    fedilink
    English
    arrow-up
    77
    ·
    6 months ago

    The problem you are describing is not malware or viruses. They’re just the tools.

    The problem is capitalism, which turns everything free into something on which a profit can be made

  • witx@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    64
    ·
    6 months ago

    That’s why Foss will always be better, and we need to support these developers. They also need to protect their software better from capitalist ghouls that will profit from it for free

    • Programmer Belch@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      33
      ·
      6 months ago

      Protecting FOSS is impossible, there will always be a company that uses your codebase, credits you and includes advertisements to your program.

      We need to make using FOSS projects the default and using the corporate options as the backup option.

      • witx@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        16
        ·
        6 months ago

        What I mean is better licenses that make sure you get paid if companies profit from it, and harsher penalties for those that get caught infringing the license

        • nossaquesapao@lemmy.eco.br
          link
          fedilink
          English
          arrow-up
          13
          ·
          edit-2
          6 months ago

          Such a license wouldn’t fit the free software or the open source definitions, but I find it interesting that there has been a small, yet apparently growing, group of people unsatisfied with our current open licensing, for different reasons, and proposing new ideas and concepts that wouldn’t fit these definitions.

  • BananaTrifleViolin@lemmy.world
    link
    fedilink
    English
    arrow-up
    59
    ·
    6 months ago

    Aggressive capitalism coupled with user ignorance is the main issue. The advice still remains don’t install all this shit, but people growing uo with smartphones have bought in to this idea that it’s reasonable for Google to spy on your every move, so why not every other app?

    So many users have no idea how their devices work - even an inkling - now what apps do, how to keep devices secure and private, and what happens with their data. Business has taken advantage of that - people want things to “just work” so business use that as a way to abuse users and make every app a trojan horse for data mining.

    Even Google, Apple etc privacy settings are bullshit - they’re just figleafs of psuedo privacy that enable them as the platform makers to dictate the terms.

    I switched away from Windows to Linux on PC, and I use FOSS alternatives on my Android device (even considering replacing android with FOSS system - difficult with some work essential apps unfortunately). But even if you stay on windows/android there are plenty of things users can do to protect themselves - they just don’t know how or worse can’t be bothered by the whole issue.

  • sudo42@lemmy.world
    link
    fedilink
    English
    arrow-up
    51
    ·
    edit-2
    6 months ago

    If there’s anyone here that cares about their privacy and doesn’t know this already:

    If you have a choice between accessing the website through a browser and installing an app, use the browser. Browsers (typically) at least try to protect the types of information that gets sent, whereas there are much fewer restrictions (again, typically) for apps.

    Everyone wants you to install apps because apps (typically) get access to much more data.

    • ForgotAboutDre@lemmy.world
      link
      fedilink
      English
      arrow-up
      32
      ·
      6 months ago

      The worst is many of these apps are just websites repackaged as apps. They just want the elevated access being an app gives them.

  • SteefLem@lemmy.world
    link
    fedilink
    English
    arrow-up
    48
    ·
    6 months ago

    I think i read somewhere that the cia said they dont install bugs anymore because now ppl do that themselfs.

    • Mostly_Gristle@lemmy.world
      link
      fedilink
      English
      arrow-up
      52
      ·
      6 months ago

      Yeah, I’ve read a bunch of articles over the last few years about how a lot of law enforcement agencies are finding that instead of getting a warrant and doing a bunch of surveillance they can just buy people’s private data from a data broker and get more info than they would have been able, or allowed, to gather if they’d gotten the warrant.

    • T156@lemmy.world
      link
      fedilink
      English
      arrow-up
      15
      ·
      6 months ago

      It’s also a lot easier to do it in software, since you don’t need to splice wires and leave physical traces like you would have had to do in the day.

      A well-configured charger or Flash drive can do that job for you, and can spread itself.

        • T156@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          6 months ago

          Yes, since most modern chargers and cables have internal chips to communicate capabilities with for things like fast-charging. It is not difficult to have the chip identify itself as something else, and execute a payload.

          A common attack method is to have it show up as a keyboard, and execute a series of key-sequences when connected to a computer (like opening and executing things through a command prompt).

          It is also why you should try and avoid plugging random USB cables/chargers into your phone/computer when out and about, since you don’t exactly know if the other end is what it appears to be.

          • Empricorn@feddit.nl
            link
            fedilink
            English
            arrow-up
            2
            ·
            6 months ago

            I don’t know enough about the charger thing to comment on how viable that might be for an attack vector.

            But you’re definitely right about plugging your mobile device into random ports. Either set your phone to by default only charge and not communicate, use a charge-only cable, or only use your own power bank/charger when away from home and you don’t fully trust where you are…

    • Grandwolf319@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      6 months ago

      So I’m pretty averse to getting new apps and giving them location permissions.

      Just cause of this comment I went it and looked at the location permissions, holy shit so many apps had it that shouldn’t have. Like Apple home… wtf does it need location for, it uses wifi…

  • Lojcs@lemm.ee
    link
    fedilink
    English
    arrow-up
    31
    ·
    6 months ago

    It was considered best practice to never install anything

    In what universe? You might as well never turn on your computer.

    • TrickDacy@lemmy.world
      link
      fedilink
      English
      arrow-up
      16
      ·
      6 months ago

      Yeah this post makes a good point but sounds a little like the writer did not experience what they claim to. WeatherBug was buggy slow bullshit and everyone installed it anyway. it was only people who noticed details who saw how sluggish it made your PC. To this day I’ve never heard a single person talk about it getting your location being a problem, until now. That’s a good point I guess but I just don’t think it was on many people’s radars.

      • MeDuViNoX@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        6 months ago

        I installed all kinds of stuff, but the metric was if it slowed down my PC or especially my games. That’d get me to uninstall, run antivirus and/or anti-malware, or even totally reinstall Windows real quick.

        • TrickDacy@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          6 months ago

          Exactly! We weren’t yet used to companies spying on us and computers were on the slow side anyhow

        • Grandwolf319@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          6 months ago

          Yeah, I would install anything that just used 0 resources when it’s not running. But that’s not what malware does

    • Huschke@programming.dev
      link
      fedilink
      English
      arrow-up
      11
      ·
      6 months ago

      It really feels like the OP didn’t have older people in their life with browsers with 3 or more toolbars that you had to service every other month. 😅

      People clicked yes to everything. Just like they do now. Nothing has changed.

      • Grandwolf319@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        6 months ago

        Before clicking yes just meant ruining your sandbox which was your computer. You can’t just have a bad PC today, instead you get your data leaked and become a target for scams.

    • Reucnalts@feddit.de
      link
      fedilink
      English
      arrow-up
      5
      ·
      6 months ago

      In this universe. I didnt want to have 10 fucking different toolbars for my browser. You had to see the correct download button, so that you get your wanted download plus malware/viruses. If you got the wrong you got a lot of malware xD

  • mindbleach@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    26
    ·
    6 months ago

    I got a new phone for the first time in a decade and Android keeps cheerfully telling me I’m opted-in to new horrifying layers of surveillance. ‘We’re gonna look at the first thing you click every time you install anything! Isn’t that great?’ Fuck off and die. ‘But you’ll get less relevant recommendations…’ Don’t recommend anything. ‘Wow, you’re gonna get such generic ads.’ Where else did you hide ads, Google?!

    For context: my previous phone is an LG. LG does not make phones anymore. That’s how long I clung to something I’d largely unfucked. And every time it boots, to this day, it reminds me I need to agree to some licensing horseshit.

    Plainly not.

    • mindbleach@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      11
      ·
      6 months ago

      The damn weather app demands to know my location. Asking makes sense. Demanding is a failure to understand why people check the weather. I don’t need it where I am. I need it where I’m going to be. You have no trouble showing me it’s cloudy in the default location, five thousand miles north. Let me enter a city name and mind your damn business.

      • Vivendi@lemmy.zip
        link
        fedilink
        English
        arrow-up
        5
        ·
        6 months ago

        Weather apps used location even in fucking Symbian and whatever before android, and my 2011 Android Gingerbread bread phone had that as well

        If it’s ONE app that has any legitimate business with my location it’s weather

        • mindbleach@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          8
          ·
          6 months ago

          Weather apps being able to use GPS data is great. Weather apps shitting the bed if you don’t give it permissions, when it fucking knows it has to ask for permissions, are failed products.

          I will give it a location. It can tell me the weather there.

      • TheGalacticVoid@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        ·
        6 months ago

        One counterargument: without your current location, it can’t send any weather alerts that immediately impact your safety.

          • mindbleach@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            ·
            6 months ago

            Not that Florida’s smart enough to limit Amber Alerts to relevant portions of the state. I’m down in the dick-tip. I’ve been rudely awoken by blaring alarms about a kidnapping up in the grundle.

            I hope they send those alerts to people in Nashville, because they’re all closer to Tallahassee than I am.

      • letsgo@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 months ago

        In winter I want to know if it’s going to be good enough to go out on the bike or if it’s going to be cold and wet in which case I’ll drive instead (yeah I know better clothing blah blah). There is a case for knowing the weather forecast for my current location.

        • mindbleach@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          6 months ago

          Yes, of course - some people need very local predictions. But I live in Florida. Snow is not an issue. I want to know if this afternoon’s thunderstorm is going to cross where I’m driving, and I want to know what’s up with cloud formation in the eastern Atlantic. The temperature’s gonna be the same in all three places: Too Damn Hot.

      • AVincentInSpace@pawb.social
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 months ago

        Alternatively, get pretty much any phone and load LineageOS on it, and just live the FOSS-purist Android life.

        It’s an incredibly sucky life, but it’s a free one.

  • KillingTimeItself@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    22
    ·
    6 months ago

    shit like this is why im going to eventually create my own little internet island.

    Dw, i’m going to rule over it like a dictator, no democracy here :)

  • drathvedro@lemm.ee
    link
    fedilink
    English
    arrow-up
    10
    ·
    edit-2
    6 months ago

    In what fucking universe is this even remotely true? I don’t know about you guys, but around those places, in early 2000’s, internet access was extremely fucking expensive, so most software was peer-to-peer shared, not even by torrent, but on CD’s or floppys, or local neighborhood ad-hoc and internal ISP networks. And the way it got there was mostly from shady CD stores around the corner, where owners paid fortune to download shit and made it back selling it, or PC journals with CDs where they were just filled it up to a brim with whatever garbage they had to boost value.

    And there was no access control whatsoever. A literal spyware with full access to your system, that only puts a purple fucking gorilla on your screen, that runs around and does absolutely fucking nothing? Sign me the fuck in. If your virus did something even something remotely useful, like show weather and currency rates, then you could rest assured that it would infect every single computer in the country.

    If you were savvy, though, what you’d do is forever sacrifice 50% of your CPU and RAM to the anti-virus and pray to fucking gods you don’t touch anything newer than the last version of it you have. Because anything uncaught can and will infect absolutely everything and anything the computer has access to. And your only option would be to just nuke the entire system with all of your data because because any backups you make would also get infected.

    Even later, when broadband got cheap and widely available, the internet was for a long time a complete shit show. Remember Flash? Every single ad and every other site used Flash. That shit, along with java applets, was equivalent to automatically downloading and executing any app you see, before you actually even see it. It was also filled with shit like rapidshare and depositfiles, with questionable content and ads on ads over ads, as there was a financial incentive to spam that garbage everywhere and bury anything half-legit under it.

    Kids these days really got it easy. See an app requesting something you don’t think it needs? Just say no. Us, boomers, didn’t have such a luxury. By the time you suspect anything shady going on, it was already too late. There is a downside, though, that manufacturers control what you can and cannot do. It took, like, almost a decade for trivial things like screen recording to even be possible on Android, and things like CheatEngine are straight up impossible. But hey, I’d say that’s a reasonable price to pay for not being completely paranoid.

    • DefederateLemmyMl@feddit.nl
      link
      fedilink
      English
      arrow-up
      12
      ·
      6 months ago

      in early 2000’s, internet access was extremely fucking expensive, so most software was peer-to-peer shared, not even by torrent, but on CD’s or floppys, or local neighborhood ad-hoc and internal ISP networks

      Uh no. I was there. In 1995 or 1996, I may have still used a shareware CD-ROM, or some less-legal compilation CD-ROM, but in the 2000s the most common way to install software by far was to download it over the internet.

      And there was no access control whatsoever. A literal spyware with full access to your system, that only puts a purple fucking gorilla on your screen, that runs around and does absolutely fucking nothing? Sign me the fuck in. If your virus did something even something remotely useful, like show weather and currency rates, then you could rest assured that it would infect every single computer in the country.

      I think the point of the post is that back then people were warned against installing bonzi buddy and such, and we were told to install software only from trustworthy sources. Spyware software rightfully flagged such software as malware too. Nowadays, there are appstores full of banal apps which harvest much more personal information about you than bonzi buddy ever did and we’re not batting an eye about it, and even though we have “Access control” we just happily click accept when our calculator wants to read our emails, and we’ve accepted it as a normal way of doing things.

      • drathvedro@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 months ago

        Uh no. I was there. In 1995 or 1996, I may have still used a shareware CD-ROM, or some less-legal compilation CD-ROM, but in the 2000s the most common way to install software by far was to download it over the internet

        I’ve pulled up some historic data and it looks you’re right and I’ve underestimated how much “my place” lagged behind the world at a time. Of course, if you’ve had unlimited access in 1996 that makes sense. For me, I have an artifact from the past right in front of me - a router manufactured in 2008, still chugging along, which I’ve bought when the first truly unlimited plans hit the market, so it made sense to share a connection rather than having a separate account with ISP for every family member. It was only 64k, though, so not downloading a car movie or a game at those speeds. The gray networks persisted all the way into mid 2010s as far as I know.

        I think the point of the post is that back then people were warned against installing bonzi buddy and such, and we were told to install software only from trustworthy sources. Spyware software rightfully flagged such software as malware too

        Might be another cultural difference, but this is not at all the experience I’ve had. In fact, just the other day I myself had to spin up a VM to launch a some random-ass app from, of all things, a CD that was handed to me, though this is quite a bit out of the ordinary. But I’d say the attitude didn’t change, people are still just as likely and to launch random shit from a USB drive as they were to insert random CD’s. And while AV software has improved, people are now less likely to use it. Defaulting to windows defender, which, in personal experience, is only good at catching pirated copies of microsoft software and nothing more. Or relying on google/apple, which is also problematic.

        Just out of curiosity, by the way, how many people from your circle do you think have the “Allow app installs from Unknown Sources” checked? For me, that’d be at least a third of them.

        Nowadays, there are appstores full of banal apps which harvest much more personal information about you than bonzi buddy ever did and we’re not batting an eye about it, and even though we have “Access control” we just happily click accept when our calculator wants to read our emails, and we’ve accepted it as a normal way of doing things.

        To me it sounded like the initial post was glorifying how good it was then versus how bad it is now, while missing on all of the technical progress that happened. Sure, apps collect much more data than they ever did. But on the other hand, bonzi buddy was more than capable of stealing all of your money and nuking your device. In my eyes, it is more important than people giving away their personal info by being careless.

        As for the carelessness, though, I don’t think that’s a tech nor a new problem. People just never ask “why?” and “what for?” nearly as often as they should. Even if sometimes this is literally a question of life and death, most people don’t even care to ask…

  • simin@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    6 months ago

    by this logic AAVs equivalent for ads will come into existence in a couple years… maybe its already here.