jqubed

She Don’t Use Jelly…

I didn’t care who won but still shouted, “YOU IDIOT!” at the TV when he ran it out of the end zone!

It sounds like there’s a specific clause for members of Club 33. I suspect it goes back to Walt’s old bans on alcohol in the parks.

In this case it seems they actually own their local country club:

“My wife and I are both dead set that this is an absolute wrong, and we will fight this to the death,” Scott, who owns a golf course in Gilbert, Ariz., told The Times. “There is no way we’re letting this go.”

TL;DR: Repairable, but no long-term OS support and not easy to load an alternative OS on.

The specifications pages for the HMD Fusion and HMD Skyline explain the phones are only guaranteed to receive two major Android operating system updates and three years of Android OS security patches. There's no guarantee of a release schedule for security updates on the Skyline, while the Fusion will get two years of monthly updates and quarterly updates for the last year.

I think it’s a valid criticism. I was a longtime Android user (at least a decade) but my last Android was a Pixel 2 that I bought at launch. That was the first Android phone I’d had that I wasn’t dying to replace after 2 years. I made it to 3 years and then the phone stopped getting security updates, a Qualcomm problem as much as a Google problem at the time. Meanwhile I looked at my stepdaughter using my wife’s old iPhone, which was 6 years old at that point and still receiving updates and still easy enough to take to a local shop for repairs when she would break it. That was my largest reason to make the switch.

I’m glad to see Google is now promising much longer support on its phones, 6 to 8 years on more recent Pixels, and it seems fairly easy to put an alternate OS on. Other Android brands should really try to follow that lead.

I’ve been assuming that their user engagement is down. Fifteen years ago when I was fresh out of university I had several hundred friends and could spend hours every day going through posts from dozens of different people. Now it feels like I can spend ten or fifteen minutes to see everything and mostly it’s from the same half-dozen people, and I’ve realized most of them are people I don’t really know as well and frankly am not as interested in seeing. At first I thought it was because they were the most prolific posters and I’d inadvertently trained the algorithm to show me more from them by interacting with them the most.

But over the past year I’ve noticed if I actually click on someone else’s profile, maybe having seen their name on a memory or just randomly think of an old friend, most of them only make a few posts a year or haven’t posted anything at all in years. Their accounts still exist, but they’re not using them.

If your feed was only this, a few posts a day from a few people, you’d have no reason to be on Facebook much. So they fill it in with junk from other places that will hopefully engage you. If it doesn’t they’ll try other posts. Whatever it takes to keep you browsing longer.

Yikes. Are you already in a relationship where that could also cause an issue with your S/O? Making them feel jealous/nervous that you would leave for the attractive nurse if you had the opportunity?

Maybe they can use AI to finally get people the titles for the cars they bought

Reading the article I think most people don’t need to worry about upgrading because of this flaw; this would be a very targeted attack. And I can understand not letting the firmware upgrade; I’m pretty sure I’ve seen examples of nation-state hacks for phones that involve attackers installing an “upgraded firmware” that disables security protections to access otherwise secured info. But yeah, cost is definitely a risk with this design.

It doesn’t affect their newest keys, but you can’t upgrade an older key to fix it:

All YubiKeys running firmware prior to version 5.7—which was released in May and replaces the Infineon cryptolibrary with a custom one—are vulnerable. Updating key firmware on the YubiKey isn’t possible. That leaves all affected YubiKeys permanently vulnerable.

It seems to be largely the same attack that succeeded against Google’s Titan keys a few years ago, according to the article

In fact reading through the article it sounds like they would need to use it to extract the secret. I guess the end goal for this would be to maintain surreptitious access to something after returning the key to the target, either to build a criminal case or for espionage purposes.

Given that the vulnerability may also apply to other secure access card/devices I suppose it could also be used if a nation-state wanted to use an impostor to access secure facilities.