|
|
| Author |
Message |
| Lord Percy |
This post is not being displayed .
|
Lord Percy
World Chat Champion
Joined: 03 Aug 2012
Karma : 
|
 Posted: 14:24 - 30 May 2014  Post subject: Facebook's new messaging app - shocking terms of service |
 |
|
https://www.huffingtonpost.com/sam-fiorella/the-insidiousness-of-face_b_4365645.html?utm_hp_ref=tw
From the article:
| Quote: | If you're one of those 1,000,000,000 people who have downloaded this app, take a moment to read the following. I've posted, word for word, a few of the most aggressive app permission you've accepted.
- Allows the app to change the state of network connectivity
- Allows the app to call phone numbers without your intervention. This may result in unexpected charges or calls. Malicious apps may cost you money by making calls without your confirmation.
- Allows the app to send SMS messages. This may result in unexpected charges. Malicious apps may cost you money by sending messages without your confirmation.
- Allows the app to record audio with microphone. This permission allows the app to record audio at any time without your confirmation.
- Allows the app to take pictures and videos with the camera. This permission allows the app to use the camera at any time without your confirmation.
- Allows the app to read you phone's call log, including data about incoming and outgoing calls. This permission allows apps to save your call log data, and malicious apps may share call log data without your knowledge.
- Allows the app to read data about your contacts stored on your phone, including the frequency with which you've called, emailed, or communicated in other ways with specific individuals.
- Allows the app to read personal profile information stored on your device, such as your name and contact information. This means the app can identify you and may send your profile information to others.
- Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call.
- Allows the app to get a list of accounts known by the phone. This may include any accounts created by applications you have installed. |
I know people often go on about the T&Cs and privacy concerns of apps and the likes, but this one seems to really be pushing it. |
|
| Back to top |
  |
You must be logged in to rate posts |
|
 |
| Rogerborg |
This post is not being displayed .
|
Rogerborg
nimbA
Joined: 26 Oct 2010
Karma : 
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| GhostRider |
This post is not being displayed .
|
GhostRider
World Chat Champion
Joined: 31 Jan 2008
Karma : 
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| CaNsA |
This post is not being displayed .
|
CaNsA
Super Spammer
Joined: 02 Jan 2008
Karma : 
|
Posted: 14:44 - 30 May 2014  Post subject: Re: Facebook's new messaging app - shocking terms of service |
|
|
- Allows the app to change the state of network connectivity -
For use when placing a call to a contact, assuming you have sync'd your phone contacts with your facebook contacts
- Allows the app to call phone numbers without your intervention. This may result in unexpected charges or calls. Malicious apps may cost you money by making calls without your confirmation. -
See above.
- Allows the app to send SMS messages. This may result in unexpected charges. Malicious apps may cost you money by sending messages without your confirmation.
As above.
- Allows the app to record audio with microphone. This permission allows the app to record audio at any time without your confirmation. -
For use when sending a voice message to a contact.
- Allows the app to take pictures and videos with the camera. This permission allows the app to use the camera at any time without your confirmation. -
Do I have to state the obvious?
- Allows the app to read you phone's call log, including data about incoming and outgoing calls. This permission allows apps to save your call log data, and malicious apps may share call log data without your knowledge. -
The app will need to add the call you make to the call log list and will need to see when the call was placed.
- Allows the app to read data about your contacts stored on your phone, including the frequency with which you've called, emailed, or communicated in other ways with specific individuals. -
"Message sent at xx:xxpm"
- Allows the app to read personal profile information stored on your device, such as your name and contact information. This means the app can identify you and may send your profile information to others. -
OH NOES! Facebook, that thing that i have an account with and has my name on my profile and has a list of all my mates on it wants access to my name and my list of mates
- Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. -
Used for security actually, so you can see the logs of when your facebook account was accessed, and from what device.
- Allows the app to get a list of accounts known by the phone. This may include any accounts created by applications you have installed. -
"Find friends on facebook by importing your contacts from hotmail, gmail, etc etc"
/thread. |
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| GhostRider |
This post is not being displayed .
|
GhostRider
World Chat Champion
Joined: 31 Jan 2008
Karma :
|
Posted: 15:50 - 30 May 2014  Post subject: |
|
|
So why does it need unrestricted access without confirmation? I mean, surely when I'm sending a picture message, then sure, it requires the access then, for a few seconds, why does it get no holds barred access the remainder of the time?
GhostRider
____________________
I have all the characteristics of a human being: blood, flesh, skin, hair; but not a single, clear, identifiable emotion, except for greed and disgust. Something horrible is happening inside of me and I don't know why. My nightly bloodlust has overflown into my days. I feel lethal, on the verge of frenzy. I think my mask of sanity is about to slip. |
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| CaNsA |
This post is not being displayed .
|
CaNsA
Super Spammer
Joined: 02 Jan 2008
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
|
| Back to top |
 |
You must be logged in to rate posts |
|
|
| daemonoid |
This post is not being displayed .
|
daemonoid
World Chat Champion
Joined: 27 Jun 2008
Karma :
|
|
| Back to top |
 |
You must be logged in to rate posts |
|
|
| smegballs |
This post is not being displayed .
|
smegballs
World Chat Champion
Joined: 28 Oct 2007
Karma :  
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| CaNsA |
This post is not being displayed .
|
CaNsA
Super Spammer
Joined: 02 Jan 2008
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Lord Percy |
This post is not being displayed .
|
Lord Percy
World Chat Champion
Joined: 03 Aug 2012
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Lord Percy |
This post is not being displayed .
|
Lord Percy
World Chat Champion
Joined: 03 Aug 2012
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
| Posted: 16:59 - 31 May 2014 Post subject: |
|
|
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Lord Percy |
This post is not being displayed .
|
Lord Percy
World Chat Champion
Joined: 03 Aug 2012
Karma :
|
| Posted: 17:51 - 31 May 2014 Post subject: |
|
|
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
| Posted: 18:17 - 31 May 2014 Post subject: |
|
|
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| CaNsA |
This post is not being displayed .
|
CaNsA
Super Spammer
Joined: 02 Jan 2008
Karma :
|
| Posted: 18:19 - 31 May 2014 Post subject: |
|
|
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Rogerborg |
This post is not being displayed .
|
Rogerborg
nimbA
Joined: 26 Oct 2010
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Lord Percy |
This post is not being displayed .
|
Lord Percy
World Chat Champion
Joined: 03 Aug 2012
Karma :
|
| Posted: 19:37 - 31 May 2014 Post subject: |
|
|
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| ScaredyCat |
This post is not being displayed .
|
ScaredyCat
World Chat Champion
Joined: 19 May 2012
Karma : 
|
| Posted: 13:59 - 01 Jun 2014 Post subject: |
|
|
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
| Posted: 15:39 - 01 Jun 2014 Post subject: |
|
|
The chart is correct. Your links describe the weaknesses of choosing a password that is not pseudo-random because it is in a dictionary or is a close relation of something in a dictionary. Your hashing links wont work against this kind of password
_4G#gb1{y|VXAV{}7p=z&SeZ14$0]@Ci5]LfYQk|.9aH`K1fzrbKRZ.)rD8N{F2 |
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| dydey90 |
This post is not being displayed .
|
dydey90
World Chat Champion
Joined: 01 Oct 2013
Karma : 
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
| Posted: 15:41 - 02 Jun 2014 Post subject: |
|
|
An interesting new development. Truecrypt development has been stopped and the project axed. Potential causes:
1. Something is going to came up in the audit which caused them to ditch the project
2. Internal developer infighting, they CBA to do it anymore
3. The NSA issued them a notice to backdoor the software and they would rather axe the project than do so
They say it is because XP has EOL'd but that makes little sense as TC provides a very different feature set to Bitlocker, not least that Bitlocker is only available for enterprise. They also give instructions to use Mac encryption with the encryption setting set to "none" which is obviously ridiculous.
If you want to use Truecrypt you need a copy of 7.1 or 7.1a, NOT 7.2. Alternatively, freeOTFE does a similar thing.
| dydey90 wrote: | | Im-a-Ridah wrote: | https://www.inetsolution.com/turnleft/image.axd?picture=password-cracking-table_thumb.png |
I really wish I'd had this two weeks ago when I was trying to explain to my missus why I changed her wifi password from the standard 8 digit pass that's impossible to remember (although, 10 days to crack is long enough to put off anybody interested in domestic wifi), to a short sentence that's 20 characters long. It might all be lower case but I don't think it's at any risk!
...However this doesn't give me much confidence in PIN codes.
On topic:
If you already have Facebook on your phone, have you not already agreed to these terms and conditions? Until last week the messages were part of the main app, so it must require all these permissions too. |
A sentence is potentially very weak as a password, even compared to an 8 character password, especially if it is all lower case. The chart does not apply to sentences, it applies to strings of pseuorandom characters. Once you have whole words in a password, or close relatives of whole words such as "b1ke" or "f0rvm5" then dictionary attacks can be used to dramatically reduce the search space. Any logical relations between characters can also be used to reduce the search space.
This is a pseudorandom string
JFxh_0d- |
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| dydey90 |
This post is not being displayed .
|
dydey90
World Chat Champion
Joined: 01 Oct 2013
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
|
| Im-a-Ridah |
This post is not being displayed .
|
Im-a-Ridah
World Chat Champion
Joined: 20 Oct 2006
Karma :
|
|
| Back to top |
| |
You must be logged in to rate posts |
|
 |
Old Thread Alert!
The last post was made 12 years, 164 days ago. Instead of replying here, would creating a new thread be more useful? |
 |
|
|
Help & FAQs
Search BCF
Members
Groups
Events Calendar
Shit, maybe I did get drawn in a bit by this one.
rating
rating