Resident of the world, traveling the road of life
64112 stories
·
21 followers

RELEASE THE BATS

jwz
1 Share
Bats Can No Longer Haunt Apple VR Headsets Via Web Exploit:

[The exploit] fills a user's area with screeching bats after visiting a malicious website. Even better, closing the browser doesn't get rid of them! Better still? Doesn't need to be bats, it could be spiders. Fun! [...]

Leveraging this old feature is what lets an untrusted website launch an arbitrary number of animated 3D objects -- complete with sound -- into a user's virtual space without any interaction from the user whatsoever.

Previously, previously, previously, previously, previously, previously.

Read the whole story
mkalus
2 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

‘The New Norm Show’ and Why Anti-Woke Comedy Isn’t Funny

1 Share
Read the whole story
mkalus
3 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Das Berliner Funkhaus-Ost: Das Spotify der DDR

1 Share

Ich war dort in der Nalepastraße vor vielen Jahren mal auf einer Goa-Party und ziemlich beeindruckt von dem Bau. Vor allem aber von der altehrwürdigen Atmosphäre, die er ausstrahlt. Artes Flick Flack hat sich die einst größte Radiostation der DDR mal genauer angesehen.

Unendliche Gänge und Aufnahmestudios mit der besten Akustik der Welt: Das Berliner Funkhaus-Ost war die größte Radiostation der DDR. Die damalige Musikredakteurin Elisabeth Heller führt durch diesen Ort, den langsam wieder neues Leben erfüllt.


(Direktlink)

Read the whole story
mkalus
4 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Ich habe die Zukunft gesehen und sie ist schrecklich.Palo ...

1 Share
Ich habe die Zukunft gesehen und sie ist schrecklich.

Palo Alto setzt die Firma auf "KI". Wundert nicht angesichts der Schrottigkeit ihrer sonstigen Produkte. Das würde ich auch alles wegschmeißen anderen Stelle.

Aber die Hirnlosigkeit der Slogans da ist selbst für einen abgebrühten Industrie-Insider wie mich kaum zu ertragen.

AI accelerates your attackers.

Fight AI with AI.

Outsmart them with Precision AI.

Keine Sorge. "KI" beschleunigt die Angreifer nicht. Die Angreifer sind ja nicht so blöde wie ihr und fallt auf derartigen Bullshit rein.

"Precision AI" ist eine Satire seiner selbst.

Built on a rich security dataset.
Noch nie habe ich von einer "KI" gehört, die nicht angeblich auf einem "rich dataset" trainiert worden sein soll. Trotzdem hat noch keine was getaugt.
Embedding Precision AI Across our Portfolio
Kennt ihr jemanden, die da arbeiten? Könnt ihr die mal fragen, ob die sich nicht schämen für solchen Scheiß?
Securing AI by Design
Ihr Sprallos habt ja noch nicht mal eure Nicht-KI-Produkte by design sicher machen können! Und "KI" wird nicht designed sondern trainiert, da ist nichts by design, ihr Deppen!

Wir sind alle so gut wie tot.

Read the whole story
mkalus
4 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Zur Abrundung der Debatte über Kulturförderung hier ...

1 Share
Zur Abrundung der Debatte über Kulturförderung hier noch ein Leserbrief eines befreundeten Museumsdirektors aus Berlin:
Ich bin ja seit zehn Jahren Museumsdirektor. Null Cent Förderung jemals. Als guter Fefe Leser habe ich keine Consultants, keine komplizierten IT Produkte, keine überteuerten Audioguides. Ich nutze, was ich verstehe. Ich mache die Ausstellungen, wie ich welche sehen möchte. Den ganzen Museumsexperten nach ist das alles komplett falsch. Kann nicht gehen. Laut Berlin.de bin ich das zehnt beste besuchte Museum der Stadt.

Nur zwei Beispiele: Audioguide Anbieter (früher nannte man sie MP3 player Verkäufer) nehmen gerne mal 500-1.000€ pro Gerät. Dazu kommt die Erstellung der Texte, das Einsprechen, das Übersetzen. Wenn man 250 Audioguides haben will, liegt ein klassisches Museum bei einer Sechsstelligen Summe. Die Service Mitarbeiter kommen oft von einer Zeitarbeitsfirma. Ich habe mir aus Interesse mal Angebote kommen lassen von einer Firma, deren Mitarbeiter in nem großen Berliner Museum stehen: 7.500€ im Monat pro Mitarbeiter, der Audioguides ausgibt.

Ich habe Audioguides selber gesourced für 50€ das Stück, Texte, übersetzen und einsprechen machen wir selber bzw der Roboter.

Zweites Beispiel Monitore, die automatisch ein Video los spielen. Im Museumszubehör 32" für mehr als 1.000€, 55" (weil größer!) 2.500€. Ich nehme den billigsten Monitor (hängt eh nicht am Internet) mit nem 20€ Player. Monitor bekommt Strom -> Player am USB Port bekommt Strom und geht an -> CEC macht den Monitor an. Rund 80% gespart.

So in der Art geht das mit jedem einzelnen Teil weiter.

Und dann hast du staatliche Museen mit eine riesigen Verwaltung - oder sogar noch einer Verwaltung der Verwaltung und DIE brauchen dann Förderung. Die privaten Museen zahlen also Steuern um den staatlichen ihren Overhead zu bezahlen.

Die Aussage Museen bräuchten Förderung kommt also nicht hin. Schlechtes Management braucht Förderung. Aber egal ob in Museen, Rüstung oder sonstwo.

Read the whole story
mkalus
4 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Pluralistic: Cleantech has an enshittification problem (26 Jun 2024)

1 Share


Today's links



A firebombed cityscape under a smoky red sky. In the foreground is a gigantic brick, most of the length of a city block, with a set of solar panels atop it.

Cleantech has an enshittification problem (permalink)

EVs won't save the planet. Ultimately, the material bill for billions of individual vehicles and the unavoidable geometry of more cars-more traffic-more roads-greater distances-more cars dictate that the future of our cities and planet requires public transit – lots of it.

But no matter how much public transit we install, there's always going to be some personal vehicles on the road, and not just bikes, ebikes and scooters. Between deliveries, accessibility, and stubbornly low-density regions, there's going to be a lot of cars, vans and trucks on the road for the foreseeable future, and these should be electric.

Beyond that irreducible minimum of personal vehicles, there's the fact that individuals can't install their own public transit system; in places that lack the political will or means to create working transit, EVs are a way for people to significantly reduce their personal emissions.

In policy circles, EV adoption is treated as a logistical and financial issue, so governments have focused on making EVs affordable and increasing the density of charging stations. As an EV owner, I can affirm that affordability and logistics were important concerns when we were shopping for a car.

But there's a third EV problem that is almost entirely off policy radar: enshittification.

An EV is a rolling computer in a fancy case with a squishy person inside of it. While this can sound scary, there are lots of cool implications for this. For example, your EV could download your local power company's tariff schedule and preferentially charge itself when the rates are lowest; they could also coordinate with the utility to reduce charging when loads are peaking. You can start them with your phone. Your repair technician can run extensive remote diagnostics on them and help you solve many problems from the road. New features can be delivered over the air.

That's just for starters, but there's so much more in the future. After all, the signal virtue of a digital computer is its flexibility. The only computer we know how to make is the Turing complete, universal, Von Neumann machine, which can run every valid program. If a feature is computationally tractable – from automated parallel parking to advanced collision prevention – it can run on a car.

The problem is that this digital flexibility presents a moral hazard to EV manufacturers. EVs are designed to make any kind of unauthorized, owner-selected modification into an IP rights violation ("IP" in this case is "any law that lets me control the conduct of my customers or competitors"):

https://locusmag.com/2020/09/cory-doctorow-ip/

EVs are also designed so that the manufacturer can unilaterally exert control over them or alter their operation. EVs – even more than conventional vehicles – are designed to be remotely killswitched in order to help manufacturers and dealers pressure people into paying their car notes on time:

https://pluralistic.net/2023/07/24/rent-to-pwn/#kitt-is-a-demon

Manufacturers can reach into your car and change how much of your battery you can access:

https://pluralistic.net/2023/07/28/edison-not-tesla/#demon-haunted-world

They can lock your car and have it send its location to a repo man, then greet him by blinking its lights, honking its horn, and pulling out of its parking space:

https://tiremeetsroad.com/2021/03/18/tesla-allegedly-remotely-unlocks-model-3-owners-car-uses-smart-summon-to-help-repo-agent/

And of course, they can detect when you've asked independent mechanic to service your car and then punish you by degrading its functionality:

https://www.repairerdrivennews.com/2024/06/26/two-of-eight-claims-in-tesla-anti-trust-lawsuit-will-move-forward/

This is "twiddling" – unilaterally and irreversibly altering the functionality of a product or service, secure in the knowledge that IP law will prevent anyone from twiddling back by restoring the gadget to a preferred configuration:

https://pluralistic.net/2023/02/19/twiddler/

The thing is, for an EV, twiddling is the best case scenario. As bad as it is for the company that made your EV to change how it works whenever they feel like picking your pocket, that's infinitely preferable to the manufacturer going bankrupt and bricking your car.

That's what just happened to owners of Fisker EVs, cars that cost $40-70k. Cars are long-term purchases. An EV should last 12-20 years, or even longer if you pay to swap the battery pack. Fisker was founded in 2016 and shipped its first Ocean SUV in 2023. The company is now bankrupt:

https://insideevs.com/news/723669/fisker-inc-bankruptcy-chapter-11-official/

Fisker called its vehicles "software-based cars" and they weren't kidding. Without continuous software updates and server access, those Fisker Ocean SUVs are turning into bricks. What's more, the company designed the car from the ground up to make any kind of independent service and support into a felony, by wrapping the whole thing in overlapping layers of IP. That means that no one can step in with a module that jailbreaks the Fisker and drops in an alternative firmware that will keep the fleet rolling.

This is the third EV risk – not just finance, not just charger infrastructure, but the possibility that any whizzy, cool new EV company will go bust and brick your $70k cleantech investment, irreversibly transforming your car into 5,500 lb worth of e-waste.

This confers a huge advantage onto the big automakers like VW, Kia, Ford, etc. Tesla gets a pass, too, because it achieved critical mass before people started to wise up to the risk of twiddling and bricking. If you're making a serious investment in a product you expect to use for 20 years, are you really gonna buy it from a two-year old startup with six months' capital in the bank?

The incumbency advantage here means that the big automakers won't have any reason to sink a lot of money into R&D, because they won't have to worry about hungry startups with cool new ideas eating their lunches. They can maintain the cozy cartel that has seen cars stagnate for decades, with the majority of "innovation" taking the form of shitty, extractive and ill-starred ideas like touchscreen controls and an accelerator pedal that you have to rent by the month:

https://www.theverge.com/2022/11/23/23474969/mercedes-car-subscription-faster-acceleration-feature-price

Put that way, it's clear that this isn't an EV problem, it's a cleantech problem. Cleantech has all the problems of EVs: it requires a large capital expenditure, it will be "smart," and it is expected to last for decades. That's rooftop solar, heat-pumps, smart thermostat sensor arrays, and home storage batteries.

And just as with EVs, policymakers have focused on infrastructure and affordability without paying any attention to the enshittification risks. Your rooftop solar will likely be controlled via a Solaredge box – a terrible technology that stops working if it can't reach the internet for a protracted period (that's right, your home solar stops working if the grid fails!).

I found this out the hard way during the covid lockdowns, when Solaredge terminated its 3G cellular contract and notified me that I would have to replace the modem in my system or it would stop working. This was at the height of the supply-chain crisis and there was a long waiting list for any replacement modems, with wifi cards (that used your home internet rather than a cellular connection) completely sold out for most of a year.

There are good reasons to connect rooftop solar arrays to the internet – it's not just so that Solaredge can enshittify my service. Solar arrays that coordinate with the grid can make it much easier and safer to manage a grid that was designed for centralized power production and is being retrofitted for distributed generation, one roof at a time.

But when the imperatives of extraction and efficiency go to war, extraction always wins. After all, the Solaredge system is already in place and solar installers are largely ignorant of, and indifferent to, the reasons that a homeowner might want to directly control and monitor their system via local controls that don't roundtrip through the cloud.

Somewhere in the hindbrain of any prospective solar purchaser is the experience with bricked and enshittified "smart" gadgets, and the knowledge that anything they buy from a cool startup with lots of great ideas for improving production, monitoring, and/or costs poses the risk of having your 20 year investment bricked after just a few years – and, thanks to the extractive imperative, no one will be able to step in and restore your ex-solar array to good working order.

I make the majority of my living from books, which means that my pay is very "lumpy" – I get large sums when I publish a book and very little in between. For many years, I've used these payments to make big purchases, rather than financing them over long periods where I can't predict my income. We've used my book payments to put in solar, then an induction stove, then a battery. We used one to buy out the lease on our EV. And just a month ago, we used the money from my upcoming Enshittification book to put in a heat pump (with enough left over to pay for a pair of long-overdue cataract surgeries, scheduled for the fall).

When we started shopping for heat pumps, it was clear that this was a very exciting sector. First of all, heat pumps are kind of magic, so efficient and effective it's almost surreal. But beyond the basic tech – which has been around since the late 1940s – there is a vast ferment of cool digital features coming from exciting and innovative startups.

By nature, I'm the kid of person who likes these digital features. I started out as a computer programmer, and while I haven't written production code since the previous millennium, I've been in and around the tech industry for my whole adult life. But when it came time to buy a heat-pump – an investment that I expected to last for 20 years or more – there was no way I was going to buy one of these cool new digitally enhanced pumps, no matter how much the reviewers loved them. Sure, they'd work well, but it's precisely because I'm so knowledgeable about high tech that I could see that they would fail very, very badly.

You may think EVs are bullshit, and they are – though there will always be room for some personal vehicles, and it's better for people in transit deserts to drive EVs than gas-guzzlers. You may think rooftop solar is a dead-end and be all-in on utility scale solar (I think we need both, especially given the grid-disrupting extreme climate events on our horizon). But there's still a wide range of cleantech – induction tops, heat pumps, smart thermostats – that are capital intensive, have a long duty cycle, and have good reasons to be digitized and networked.

Take home storage batteries: your utility can push its rate card to your battery every time they change their prices, and your battery can use that information to decide when to let your house tap into the grid, and when to switch over to powering your home with the solar you've stored up during the day. This is a very old and proven pattern in tech: the old Fidonet BBS network used a version of this, with each BBS timing its calls to other nodes to coincide with the cheapest long-distance rates, so that messages for distant systems could be passed on:

https://en.wikipedia.org/wiki/FidoNet

Cleantech is a very dynamic sector, even if its triumphs are largely unheralded. There's a quiet revolution underway in generation, storage and transmission of renewable power, and a complimentary revolution in power-consumption in vehicles and homes:

https://pluralistic.net/2024/06/12/s-curve/#anything-that-cant-go-on-forever-eventually-stops

But cleantech is too important to leave to the incumbents, who are addicted to enshittification and planned obsolescence. These giant, financialized firms lack the discipline and culture to make products that have the features – and cost savings – to make them appealing to the very wide range of buyers who must transition as soon as possible, for the sake of the very planet.

It's not enough for our policymakers to focus on financing and infrastructure barriers to cleantech adoption. We also need a policy-level response to enshittification.

Ideally, every cleantech device would be designed so that it was impossible to enshittify – which would also make it impossible to brick:

  • Based on free software (best), or with source code escrowed with a trustee who must release the code if the company enters administration (distant second-best);

  • All patents in a royalty-free patent-pool (best); or in a trust that will release them into a royalty-free pool if the company enters administration (distant second-best);

  • No parts-pairing or other DRM permitted (best); or with parts-pairing utilities available to all parties on a reasonable and non-discriminatory basis (distant second-best);

  • All diagnostic and error codes in the public domain, with all codes in the clear within the device (best); or with decoding utilities available on demand to all comers on a reasonable and non-discriminatory basis (distant second-best).

There's an obvious business objection to this: it will reduce investment in innovative cleantech because investors will perceive these restrictions as limits on the expected profits of their portfolio companies. It's true: these measures are designed to prevent rent-extraction and other enshittificatory practices by cleantech companies, and to the extent that investors are counting on enshittification rents, this might prevent them from investing.

But that has to be balanced against the way that a general prohibition on enshittificatory practices will inspire consumer confidence in innovative and novel cleantech products, because buyers will know that their investments will be protected over the whole expected lifespan of the product, even if the startup goes bust (nearly every startup goes bust). These measures mean that a company with a cool product will have a much larger customer-base to sell to. Those additional sales more than offset the loss of expected revenue from cheating and screwing your customers by twiddling them to death.

There's also an obvious legal objection to this: creating these policies will require a huge amount of action from Congress and the executive branch, a whole whack of new rules and laws to make them happen, and each will attract court-challenges.

That's also true, though it shouldn't stop us from trying to get legal reforms. As a matter of public policy, it's terrible and fucked up that companies can enshittify the things we buy and leave us with no remedy.

However, we don't have to wait for legal reform to make this work. We can take a shortcut with procurement – the things governments buy with public money. The feds, the states and localities buy a lot of cleantech: for public facilities, for public housing, for public use. Prudent public policy dictates that governments should refuse to buy any tech unless it is designed to be enshittification-resistant.

This is an old and honorable tradition in policymaking. Lincoln insisted that the rifles he bought for the Union Army come with interoperable tooling and ammo, for obvious reasons. No one wants to be the Commander in Chief who shows up on the battlefield and says, "Sorry, boys, war's postponed, our sole supplier decided to stop making ammunition."

By creating a market for enshittification-proof cleantech, governments can ensure that the public always has the option of buying an EV that can't be bricked even if the maker goes bust, a heat-pump whose digital features can be replaced or maintained by a third party of your choosing, a solar controller that coordinates with the grid in ways that serve their owners – not the manufacturers' shareholders.

We're going to have to change a lot to survive the coming years. Sure, there's a lot of scary ways that things can go wrong, but there's plenty about our world that should change, and plenty of ways those changes could be for the better. It's not enough for policymakers to focus on ensuring that we can afford to buy whatever badly thought-through, extractive tech the biggest companies want to foist on us – we also need a focus on making cleantech fit for purpose, truly smart, reliable and resilient.

(Image: 臺灣古寫真上色, Grendelkhan CC BY-SA 4.0; modified)


Hey look at this (permalink)



A Wayback Machine banner.

This day in history (permalink)

#20yrsago FastCompany’s terrible linking policy https://memex.craphound.com/2004/06/25/fastcompanys-terrible-linking-policy/

#15yrsago Magic Mirror of the Mermaid Queen, sequel to CHANGELING, a modern folktale of New York https://memex.craphound.com/2009/06/25/magic-mirror-of-the-mermaid-queen-sequel-to-changeling-a-modern-folktale-of-new-york/

#15yrsago Illegal e-waste dumped in Ghana includes unencrypted hard drives full of US security secrets https://web.archive.org/web/20090628071458/https://www.itworld.com/security/69758/reporters-find-northrop-grumman-data-ghana-market

#10yrsago Once there was a show called “The Hat Squad” and it was very, very stupid https://memex.craphound.com/2014/06/25/once-there-was-a-show-called-the-hat-squad-and-it-was-very-very-stupid/

#10yrsago UK secretary of state: “There is no surveillance state” https://www.bbc.com/news/uk-politics-28006739

#10yrsago Cops bust cybercrook who sent heroin to Brian Krebs https://krebsonsecurity.com/2014/06/the-fly-has-been-swatted/

#10yrsago SF city attorney demands shutdown of parking-space-auctioning app https://web.archive.org/web/20140625033523/http://blog.sfgate.com/cityinsider/2014/06/23/sf-cracks-down-on-street-parking-cash-apps/

#5yrsago An 14-year-old’s Internet-of-Things worm is bricking shitty devices by the thousands https://www.zdnet.com/article/new-silex-malware-is-bricking-iot-devices-has-scary-plans/

#5yrsago How Metabrainz stood up to a predatory copyright lawsuit and won https://blog.metabrainz.org/2019/06/25/we-were-sued-by-a-copyright-troll-and-we-prevailed/

#5yrsago “Massive scale” intrusion into mobile carriers’ networks exposed customers’ location, call data for years https://www.cybereason.com/blog/research/operation-soft-cell-a-worldwide-campaign-against-telecommunications-providers

#5yrsago Independent evaluation of “aggression detection” microphones used in schools and hospitals finds them to be worse than useless https://features.propublica.org/aggression-detector/the-unproven-invasive-surveillance-technology-schools-are-using-to-monitor-students/

#5yrsago Microsoft employees want to starve its PAC, which keeps giving money to homophobic, racist, climate-denying Republicans https://onezero.medium.com/a-group-of-microsoft-employees-is-fighting-the-companys-political-action-committee-7dae732290e3

#5yrsago Cult of the Dead Cow: the untold story of the hacktivist group that presaged everything great and terrible about the internet https://memex.craphound.com/2019/06/25/cult-of-the-dead-cow-the-untold-story-of-the-hacktivist-group-that-presaged-everything-great-and-terrible-about-the-internet/


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, holding a mic.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • Picks and Shovels: a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books, February 2025

  • Unauthorized Bread: a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, 2025



Colophon (permalink)

Today's top sources: Katharine Trendacosta.

Currently writing:

  • Enshittification: a nonfiction book about platform decay. Today's progress: 762 words (17680 words total).

  • A Little Brother short story about DIY insulin PLANNING

  • Picks and Shovels, a Martin Hench noir thriller about the heroic era of the PC. FORTHCOMING TOR BOOKS JAN 2025

  • Vigilant, Little Brother short story about remote invigilation. FORTHCOMING ON TOR.COM

  • Spill, a Little Brother short story about pipeline protests. FORTHCOMING ON TOR.COM

Latest podcast: My 2004 Microsoft DRM Talk https://craphound.com/news/2024/06/16/my-2004-microsoft-drm-talk/>


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Medium (no ads, paywalled):

https://doctorow.medium.com/

Twitter (mass-scale, unrestricted, third-party surveillance and advertising):

https://twitter.com/doctorow

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

Read the whole story
mkalus
17 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete
Next Page of Stories