• SteefLem@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 months ago

    I think i read somewhere that the cia said they dont install bugs anymore because now ppl do that themselfs.

    • T156@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 months ago

      It’s also a lot easier to do it in software, since you don’t need to splice wires and leave physical traces like you would have had to do in the day.

      A well-configured charger or Flash drive can do that job for you, and can spread itself.

        • T156@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          10 months ago

          Yes, since most modern chargers and cables have internal chips to communicate capabilities with for things like fast-charging. It is not difficult to have the chip identify itself as something else, and execute a payload.

          A common attack method is to have it show up as a keyboard, and execute a series of key-sequences when connected to a computer (like opening and executing things through a command prompt).

          It is also why you should try and avoid plugging random USB cables/chargers into your phone/computer when out and about, since you don’t exactly know if the other end is what it appears to be.

    • Mostly_Gristle@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 months ago

      Yeah, I’ve read a bunch of articles over the last few years about how a lot of law enforcement agencies are finding that instead of getting a warrant and doing a bunch of surveillance they can just buy people’s private data from a data broker and get more info than they would have been able, or allowed, to gather if they’d gotten the warrant.

  • BananaTrifleViolin@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 months ago

    Aggressive capitalism coupled with user ignorance is the main issue. The advice still remains don’t install all this shit, but people growing uo with smartphones have bought in to this idea that it’s reasonable for Google to spy on your every move, so why not every other app?

    So many users have no idea how their devices work - even an inkling - now what apps do, how to keep devices secure and private, and what happens with their data. Business has taken advantage of that - people want things to “just work” so business use that as a way to abuse users and make every app a trojan horse for data mining.

    Even Google, Apple etc privacy settings are bullshit - they’re just figleafs of psuedo privacy that enable them as the platform makers to dictate the terms.

    I switched away from Windows to Linux on PC, and I use FOSS alternatives on my Android device (even considering replacing android with FOSS system - difficult with some work essential apps unfortunately). But even if you stay on windows/android there are plenty of things users can do to protect themselves - they just don’t know how or worse can’t be bothered by the whole issue.

  • witx@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 months ago

    That’s why Foss will always be better, and we need to support these developers. They also need to protect their software better from capitalist ghouls that will profit from it for free

    • Programmer Belch@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 months ago

      Protecting FOSS is impossible, there will always be a company that uses your codebase, credits you and includes advertisements to your program.

      We need to make using FOSS projects the default and using the corporate options as the backup option.

      • witx@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 months ago

        What I mean is better licenses that make sure you get paid if companies profit from it, and harsher penalties for those that get caught infringing the license

        • nossaquesapao@lemmy.eco.br
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          10 months ago

          Such a license wouldn’t fit the free software or the open source definitions, but I find it interesting that there has been a small, yet apparently growing, group of people unsatisfied with our current open licensing, for different reasons, and proposing new ideas and concepts that wouldn’t fit these definitions.

  • feedum_sneedson@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    10 months ago

    Yeah, when I was setting up my first smartphone there was a very weird moment where I had to go against a lifetime of training on laptops and desktop PCs and just immediately invite every single app to fuck me up the arse if I wanted it to function as anything more than an expensive telephone with a fancy screen. But invite them up my arse I did.

  • alexc@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 months ago

    The problem you are describing is not malware or viruses. They’re just the tools.

    The problem is capitalism, which turns everything free into something on which a profit can be made