• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle



  • not necessarily, but it can be a good idea to have a distributed, tamper proof ledger of transactions.

    that way anyone can provide proof for basically anything to do with the service: payment, drive, location, etc.

    it might also have advantages from a security perspective for riders and drivers.

    there are advantages, they’re not entirely necessary, but they may well be the best option for a distributed network (i.e.: no central server infrastructure, at least not beyond some simple software repository for downloads/updates)






  • actually, the law leaves remarkably little room for interpretation in this case.

    here’s the law in full, emphasis mine:

    Strafgesetzbuch (StGB) § 202a Ausspähen von Daten (1) Wer unbefugt sich oder einem anderen Zugang zu Daten, die nicht für ihn bestimmt und die gegen unberechtigten Zugang besonders gesichert sind, unter Überwindung der Zugangssicherung verschafft, wird mit Freiheitsstrafe bis zu drei Jahren oder mit Geldstrafe bestraft. (2) Daten im Sinne des Absatzes 1 sind nur solche, die elektronisch, magnetisch oder sonst nicht unmittelbar wahrnehmbar gespeichert sind oder übermittelt werden.

    the text is crystal clear, that security measures need to be “overcome” in order for a crime to have been committed.

    it is also obvious that cleartext passwords are NOT a “security measure” in any sense of the word, but especially in this case, where the law specifically says that the data in question has to have been “specially secured”. this was not the case, as evident by the fact that the defendant had easy access to the data in question.

    this is blatant misuse of the law.

    the data law makes no attempt to take into account the intent of the person, quite differently from when it comes to physical theft, which is immediately and obviously ridiculous.

    you mentioned snooping around in a strangers car, and that’s a good comparison!

    you know what you definitely couldn’t be charged with in the example you gave? breaking and entering!

    because breaking and entering requires (in germany at least) that you gained access through illegal means (i.e.: literally broke in, as opposed to finding the key already in the lock).

    but that’s essentially what is happening in this case, and that is what’s wrong with this case!

    most people agree he shouldn’t have tried to enter the PW.

    what has large parts of the professional IT world up in arms is the way the law was applied, not that there was a violation of the law. (though most in IT, like i am, think this sort of “hacking” shouldn’t be punishable, if it is solely for the purpose of finding and reporting vulnerabilities, which makes a lot of sense)


  • actually, that’s not what the law says.

    the law says that “overcoming” security measures is a crime. nothing was “overcome”.

    plaintext is simply not a “security measure” and the law was applied wrong.

    there may have been some form of infringement in regards to privacy or sensitive data or whatever, but it definitely wasn’t “hacking” of any kind.

    just like it isn’t “hacking” to browse someone’s computer files when they leave a device unlocked and accessible to anyone. invasion of privacy? sure. but not hacking.

    and the law as written (§202a StGB) definitely states that security measures have to be circumvented in order to be applied.

    that’s the problem with the case!

    not that the guy overstepped his bounds, but that the law was applied blatantly wrong and no due diligence was used in determining the outcome of the case.





  • simple explanation: people get used to their monitors’ frame rate.

    if all you’ve been using is a 60Hz display, you won’t notice a difference down to 30-40 fps as much as you would when you’ve been using a 144Hz display.

    our brains notice differences much more easily than absolutes, so a larger difference in refresh rate produces a more negative experience.

    think about it like this:

    The refresh rate influences your cursor movements.

    so if a game runs slower than you’re used to, you’ll miss more of your clicks, and you’ll need to compensate by slowing down your movements until you get used to the new refresh rate.

    this effect becomes very obvious at very low fps (>20fps). it’s when people start doing super slow movements.

    same thing happens when you go from 144Hz down to, say, 40Hz.

    that’s an immediately noticeable difference!




  • that’s not true in the EU.

    the reason those cookie banners are everywhere, for example, is because the EU requires explicit consent for a lot of things that used to be covered by ToS.

    simply putting clauses into your ToS doesn’t shield the company from legal action at all.

    regardless of what’s written in the ToS, final say over what is and isn’t legal lies with local authorities, not YouTube.