• 0 Posts
  • 19 Comments
Joined 8 months ago
cake
Cake day: February 16th, 2024

help-circle









  • What if Alice has told you their preferred pronouns are they/them? Would you still call them ‘her’ in spite of their wishes?

    If Geoff is happy with being called ‘he’, then sure, he went to the match.

    I think it only sounds clunky because we’re not so used to it. Imagine a child today being brought up knowing “they” is a perfectly normal individual or group pronoun alongside he and she. In ten years, it won’t sound weird to them (hah) at all.



  • I want to use my main mail address everywhere, even public places.

    No you don’t. It’s not quite as simple, but buy your own domain, get an email provider such as Fastmail that will let you use a catch-all, then use a unique address for every site you visit.

    Then if one starts receiving spam, you can block that specific address and voila, no more spam. Plus you know what sites have either poor customer detail hygiene or are actively selling your details.



  • We started doing that literally as the first Covid lockdown hit. We always worked 36 hour weeks, but we just compressed them into four 9-hour days instead of five 7.2-hour days (which isn’t quite what these trials were doing, but it’s close enough that we’re not complaining).

    Honestly, it’s amazing. It really doesn’t feel much longer to be working, and having a three day weekend seems to be making everyone happy.

    Bonus for me is that there’s a handful of people that want to stick with a five hour day, and so as part of a support team, one of us had to be available on Fridays for them, so I actually get Wednesday off instead. So a two day week, a one day ‘weekend’, a two day week, then Saturday and Sunday.

    It’s been great for mental health as well as scheduling holidays or just getting stuff done. Work life balance has never been better.

    The only downside is that job hunting is now really hard, as anyone that wants me in an office five days a week can jog on.




  • Ok, so not great, but not terrible.

    Firstly you had to fall for social engineering to get the dodgy app via TestFlight. Later on, you had to fall for social engineering to get the dodgy app via you installing an MDM profile on your own device. In the future, you’ll doubtless be able to get socially engineered to sideload it.

    Currently, in the UK (I don’t know what this is like in other countries), we get regular prompts from our banks not to share one-time codes with anyone, not even bank employees. And not to transfer money to ‘safe’ accounts, even if someone claiming to be the bank or the police tell you to. They’ll just need to update those to also say “We at Bank will never ask you to install test or special versions of our app, or update them anywhere other than the official Apple/Google app store”.

    This is a social engineering problem, not really an iOS (or Android) technical one.

    EDIT: The article is suspiciously vague one one point:

    Once installed on either an iPhone or an Android phone, GoldPickaxe can collect facial recognition data, identity documents and intercepted text messages, all to make it easier to siphon off funds from banking and other financial apps. To make matters worse, this biometric data is then used to create AI deepfakes to impersonate victims and access their bank accounts.

    What ‘facial recognition data’ is it gathering, and how? As I understand it, FaceID is processed in a secure enclave, and regular apps don’t have access to that - they send a ‘verify this person’ request, the phone itself triggers a FaceID scan, does the verification itself and sends back a ‘yes, all good’ reply to the app - the app itself does not get FaceID or biometric data. So unless it’s just doing something like using the camera to take some photos or videos of the user, I’d like to know what the article is talking about there…