Hacker Timesnew | past | comments | ask | show | jobs | submit | nwcs's commentslogin


"Ultrasound can also be used to stimulate neurons. When multiple beams are focused on one spot, the waves change the pressure around the neurons, altering their firing rate."

Reminds me of the Expanse where a magnets were used to inhibit empathy in humans...


Reminds me of these two short stories: - "I Always Do What Teddy Says" by Harry Harrison - "The Veldt" by Ray Bradbury


Here is the technical data of what is really going on - it is not sinister, rather these are files needed by the GPS chipset: https://wwws.nightwatchcybersecurity.com/tag/qualcomm/


It may have a reasonable explanation of benefits it provides, but so does Intel Management Engine and nearly every privacy-invading feature ever.

I know you didn't personally design it so I'm not asking you these questions, more just thinking through this (although anybody knows the answers I'd appreciate hearing them so I can be more informed).

Why does this need to be built in at such a low level that not even flashing a new OS can see it/stop it? Why can't it be something users can opt in to, or at a minimum opt out of? Whether sinister or not, it's a "call home" mechanism built into to the lowest levels of the hardware, an area where users are powerless, even though they "own" the device.


> Why does this need to be built in at such a low level that not even flashing a new OS can see it/stop it? Why can't it be something users can opt in to, or at a minimum opt out of? Whether sinister or not, it's a "call home" mechanism built into to the lowest levels of the hardware, an area where users are powerless, even though they "own" the device.

It's done by the ROM, at the OS level, not the chipset. Some custom ROMs will proxy this request to mask your IP.


> Why does this need to be built in at such a low level that not even flashing a new OS can see it/stop it?

Nobody has shown evidence of that. The article certainly didn't


Leaving aside the opt-in/opt-out possibility.

You can remove the services that download the extra GPS data, nothing stops you from doing that, aside making GPS unusable :)


How?


You have to manually strip the QCOM additions in the vendor side. It's just a matter of removing files, but I wouldn't expect to do it without some knowledge how the whole thing works in Android, without breaking GPS as a whole.


And it isn’t the case that the baseband processor is somehow accessing wifi without the knowledge of the kernel. That was a bizarre accusation.


But it's still sharing personal data over an unencrypted connection. That's pretty much illegal under the GDPR laws.


Key point: “It’s a voluntary program,” Emmett Romine, vice president of customer solutions and innovation at Xcel, told local news station KMGH-TV. “Let’s remember that this is something that customers choose to be a part of based on the incentives.”

This is fairly common with other utilities as well, my local utility did the same thing a few years ago.


Furthering the point, even at the bottom of the "Your Thermostat has Been Disabled" Message, they say that you can re-enable the thermostat by going online and opting out of the program. So if it's getting unbearable you can go online, opt-out and be back in control of your thermostat.

EDIT: I just read that the temp was capped at 78, Colorado has low humidity so 78 here is much more comfortable than 78 in say Florida. Sure the message is culture war outrage fuel, but the underlying policy seems quite reasonable.


Except I have been trying to opt out for more then a year and half. I also tried again when this message popped up.It happened because I clicked enable on the ecobee app, and there is no effective way to cancel it.

- source actually affected by this.


And you've been unsuccessful/unable to opt out?


Yep.

Typical dark pattern, very easy to accidently opt in, impossible to opt out. You have to call, and as you might imagine, could not get through.

It also doesn't help that the opt-in was not done by me, but by the builder, who set the ecobees up in that manner (new build). It's part of the "energy efficiency" that they offered.


Well it is Xcel energy after all....


Actually it's not just them. I have it for my local area hydro company in Canada, it's the same thing. I can't find where to cancel at all.

EDIT: So I did some digging, and it's confusing to say the least. In the app, it points you to the Google store page when you tap more info about the program. A search points to a page that tells you to contact your hydro company. On my hydro company's page, there is ZERO information about this, then a second search that landed me on Google Support page, which finally mentions the program is administered by some company in the US that is "partnered" with my hydro company, hidden deep inside the terms and conditions. And on that page, it says I actually have to call Google to unsubscribe.


> I actually have to call Google to unsubscribe.

I've had zero luck with this ever. They're quite friendly at the Googleplex though and capable of redirecting your request wherever it needs to go.


How do you call Google about this? I've never found a working number.


If 78F is 25C, it is seriously tolerable. In France where we dont have AC, we spend the summer in front of fans and Im sure americans can use those too.


It all depends on humidity. I used to live in the US South where humidity would be >90% and 78F is unbearable. I live in Colorado now and the humidity here barely goes above 10-15% and the same temp is way more comfortable.


I live in Buenos Aires and 25°C is with air conditioner is perfectly tolerable. The official recommendation here is 24°(75°F), but at my home we keep the thermostat at 26°C (79°F) and sometimes more.

The air conditioner acts as a dehumidifier, so 26°C is nice, but you must change the water deposit of the AC quite frequently.


Dude the humidity is definitely over 10-15%. That would be seriously dehydrating and also unbearable. I think you mean the humidity is around 40%


It can vary depending on where in the state you are. The average humidity in Denver is 37% year-round, but in Boulder it apparently averages 0%.

[0] https://weatherspark.com/y/3561/Average-Weather-in-Boulder-C...


That has to be an error. Even in deep winter ice rapidly sublimates when the vapor pressure of water is low


I think you must be right - currently, they are experiencing 13% humidity. Compared to Denver, that is still kind of suprising. https://www.wunderground.com/weather/us/co/boulder/80301


It's easy enough to confirm. You can go to weather.gov and get current conditions anywhere in the US.

https://forecast.weather.gov/MapClick.php?textField1=40.02&t...

Currently 14% humidity in Boulder, CO.


While I grew up in the US South, in a house without A/C. >90% and 78F sounds like a cool summer evening.

Hah, I'm right! In Tallahassee right now it's 82°F and 81% humidity, with a dew point of 76°F. At 5am tomorrow morning the temp will be down to 78°F. If you're out that early there will likely be fog in the low spots.


ngl this is a large part of why I migrated from Atlanta -> Denver a few years ago.


I opted out of this program, but did the energy saver AC program with little affect on the cooling. I didn’t want the power company to have control of my home comfort.


Imagine a program where by signing up, you'd be given a million dollars today, but then a year from now, you'd be sold into slavery for the next ten years. Should we allow that just because it's voluntary?


Imagine a program where a person can sell a kidney for a transplant to keep a willing buyer alive.

Imagine a program where we ramp up the price of college by making college debt non-dischargeable in bankruptcy, then create fluff degrees which won't help the person earn enough to pay off the debt over the next couple decades.

Optionality and choices.


The SHA-256 hashes don't match up - the hash of the CDN-hosted socket.io JS files is different than the ones in the blog post here.

The results the author is seeing are artifacts of the hybrid-analysis.com service - you can see the same results on a text file with "Hello, World!": https://www.hybrid-analysis.com/sample/c98c24b677eff44860afe...


In other words, there is nothing to see here


For context, the author is a known antivaxer, and the journal this article was published in, isn't entirely legit.

See: https://en.wikipedia.org/wiki/J._Bart_Classen

This article addresses the actual science: https://sciencebasedmedicine.org/can-mrna-based-covid-19-vac...


Both comments being ad hominem of course. When the "good" journals are plagued with a "replication crisis" aka fraud the appeal to authority of what publication the paper appears in falls flat

For reference, here is the track record of the "good" medical journals https://en.m.wikipedia.org/wiki/Replication_crisis#In_medici...



(One of the authors here)

Make sure you read through the actual latest draft (especially section 6): https://tools.ietf.org/html/draft-foudil-securitytxt-11

Also, we are in the end stages of the IETF approval process so this should be official later this year (if all goes well): https://datatracker.ietf.org/doc/draft-foudil-securitytxt/


why is there no expires field on https://securitytxt.org/.well-known/security.txt


Strangely, the draft just shows up as an empty page for me in Firefox, but Chromium works fine.


It's likely some kind of caching issue. tools.ietf.org at 4.31.198.62 responds with the draft, but 64.170.98.42 404s



Yes, it's throwing a 404 for me on firefox as well.


It did that for me at first, but it was due to my impatience.

I tried again and waited, and after 10 or 15 seconds, the page finally loaded.


That's not impatience, the page is broken, unless your network is super slow.


Same here, but the it started working once I opened Developer Tools and refreshed the page.


This quote from the "The Expanse / Caliban's War" comes to mind:

https://www.goodreads.com/work/quotes/17606541-caliban-s-war...

"The binder for what we do if something comes up from Venus? It’s three pages long, and it begins Step One: Find God.”"


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: