www/proprietary proprietary-back-doors.html pro...

[Therese Godefroy]

CVSROOT:        /webcvs/www
Module name:    www
Changes by:     Therese Godefroy <th_g> 17/11/28 09:54:23

Modified files:
        proprietary    : proprietary-back-doors.html 
                         proprietary-insecurity.html 
                         proprietary-sabotage.html 
                         proprietary-subscriptions.html 
                         proprietary-surveillance.html 
                         proprietary-tethers.html 

Log message:
        Add new entries:
        - Aibo: proprietary-tethering, -subscriptions and -back-doors (#1250826)
        - Harmony Link sabotage: proprietary-sabotage and -tethering (#1252131)
        - IME unintended back doors: proprietary-insecurity (#1254408)
        - Android tracking when service off: proprietary-surveillance (#1254616)
        - Amazon doorkey: proprietary-insecurity (#1255052)
        - Android trackers: proprietary-surveillance (#1255319)
        - Illegal to study iOS: proprietary-surveillance (#1255614)

CVSWeb URLs:
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-back-doors.html?cvsroot=www&r1=1.52&r2=1.53
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-insecurity.html?cvsroot=www&r1=1.74&r2=1.75
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-sabotage.html?cvsroot=www&r1=1.50&r2=1.51
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-subscriptions.html?cvsroot=www&r1=1.4&r2=1.5
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-surveillance.html?cvsroot=www&r1=1.162&r2=1.163
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-tethers.html?cvsroot=www&r1=1.15&r2=1.16

Patches:
Index: proprietary-back-doors.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-back-doors.html,v
retrieving revision 1.52
retrieving revision 1.53
diff -u -b -r1.52 -r1.53
--- proprietary-back-doors.html 14 Oct 2017 08:46:01 -0000      1.52
+++ proprietary-back-doors.html 28 Nov 2017 14:54:22 -0000      1.53
@@ -19,6 +19,13 @@
 <!-- WEBMASTERS: make sure to place new items on top under each subsection -->
 <ul>
   <li>
+    <p>Sony has brought back its robotic pet Aibo, this time <a
+href="https://motherboard.vice.com/en_us/article/bj778v/sony-wants-to-sell-you-a-subscription-to-a-robot-dog-aibo-90s-pet";>
+    with a universal back door, and tethered to a server that requires a
+    subscription</a>.</p>
+  </li>
+
+  <li>
     <p>Tesla cars have a <a 
href="https://techcrunch.com/2017/09/09/tesla-flips-a-switch-to-increase-the-range-of-some-cars-in-florida-to-help-people-evacuate/";>universal
 back door</a>.</p>
 
     <p>While remotely allowing car &ldquo;owners&rdquo; to use the whole 
battery
@@ -405,7 +412,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2017/10/14 08:46:01 $
+$Date: 2017/11/28 14:54:22 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary-insecurity.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-insecurity.html,v
retrieving revision 1.74
retrieving revision 1.75
diff -u -b -r1.74 -r1.75
--- proprietary-insecurity.html 29 Oct 2017 10:49:14 -0000      1.74
+++ proprietary-insecurity.html 28 Nov 2017 14:54:22 -0000      1.75
@@ -36,6 +36,17 @@
 
 <ul>
 <li>
+  <p>Amazon recently invited consumers to be suckers and <a
+href="https://www.techdirt.com/articles/20171120/10533238651/vulnerability-fo";>
+    allow delivery staff to open their front doors</a>. Wouldn't you know it,
+    the system has a grave security flaw.</p>
+</li>
+<li>
+  <p>Intel's intentional &ldquo;management engine&rdquo; back door has <a
+href="https://www.theregister.co.uk/2017/11/20/intel_flags_firmware_flaws/";>
+    unintended back doors</a> too.</p>
+</li>
+<li>
   <p>Bad security in some cars makes it possible
     to <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14937";>
       remotely activate the airbags</a>.</p>
@@ -551,7 +562,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2017/10/29 10:49:14 $
+$Date: 2017/11/28 14:54:22 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary-sabotage.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-sabotage.html,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -b -r1.50 -r1.51
--- proprietary-sabotage.html   12 Sep 2017 03:03:41 -0000      1.50
+++ proprietary-sabotage.html   28 Nov 2017 14:54:22 -0000      1.51
@@ -19,6 +19,16 @@
 
 <ul>
   <li>
+    <p>Logitech will sabotage all Harmony Link household control devices by
+<a 
href="https://arstechnica.com/gadgets/2017/11/logitech-to-shut-down-service-and-support-for-harmony-link-devices-in-2018/";>
+      turning off the server through which the products' supposed owners
+      communicate with them</a>.</p>
+    <p>The owners suspect this is to pressure them to buy a newer model. If
+      they are wise, they will learn, rather, to distrust any product that
+      requires users to talk with them through some specialized service.</p>
+  </li>
+
+  <li>
     <p>Tesla used software to limit customers to using just <a 
href="https://techcrunch.com/2017/09/09/tesla-flips-a-switch-to-increase-the-range-of-some-cars-in-florida-to-help-people-evacuate/";>part
 of the battery of some
     cars</a>.</p>
   </li>
@@ -368,7 +378,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2017/09/12 03:03:41 $
+$Date: 2017/11/28 14:54:22 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary-subscriptions.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-subscriptions.html,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -b -r1.4 -r1.5
--- proprietary-subscriptions.html      9 Sep 2016 11:56:49 -0000       1.4
+++ proprietary-subscriptions.html      28 Nov 2017 14:54:22 -0000      1.5
@@ -24,6 +24,13 @@
 
 <ul>
 <li>
+<p>Sony has brought back its robotic pet Aibo, this time <a
+href="https://motherboard.vice.com/en_us/article/bj778v/sony-wants-to-sell-you-a-subscription-to-a-robot-dog-aibo-90s-pet";>
+with a universal back door, and tethered to a server that requires a
+subscription</a>.</p>
+</li>
+
+<li>
 <p><a
 
href="http://www.scientificamerican.com/article/adobe-software-subscription-model-means-you-cant-own-your-software/";>
 Adobe tools require a subscription</a>.  Adobe also tried to <a
@@ -97,7 +104,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2016/09/09 11:56:49 $
+$Date: 2017/11/28 14:54:22 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary-surveillance.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-surveillance.html,v
retrieving revision 1.162
retrieving revision 1.163
diff -u -b -r1.162 -r1.163
--- proprietary-surveillance.html       21 Nov 2017 06:39:17 -0000      1.162
+++ proprietary-surveillance.html       28 Nov 2017 14:54:22 -0000      1.163
@@ -503,6 +503,12 @@
 </div>
 
 <ul>
+  <li><p>The DMCA and the EU Copyright Directive make it <a
+href="https://boingboing.net/2017/11/25/la-la-la-cant-hear-you.html";>
+      illegal to study how iOS cr...apps spy on users</a>, because this
+      would require circumventing the iOS DRM.</p>
+  </li>
+
   <li><p>In the latest iThings system, &ldquo;turning off&rdquo; WiFi and 
Bluetooth the
       obvious way <a
  
href="https://www.theguardian.com/technology/2017/sep/21/ios-11-apple-toggling-wifi-bluetooth-control-centre-doesnt-turn-them-off";>
@@ -609,6 +615,18 @@
 </div>
 
 <ul>
+  <li><p>Tracking software in popular Android apps is pervasive and
+      sometimes very clever. Some trackers can <a
+href="https://theintercept.com/2017/11/24/staggering-variety-of-clandestine-trackers-found-in-popular-android-apps/";>
+      follow a user's movements around a physical store by noticing WiFi
+      networks</a>.</p>
+</li>
+
+  <li><p>Android tracks location for Google <a
+href="https://www.techdirt.com/articles/20171121/09030238658/investigation-finds-google-collected-location-data-even-with-location-services-turned-off.shtml";>
+      even when &ldquo;location services&rdquo; are turned off, even
+      when the phone has no SIM card</a>.</p></li>
+
   <li><p>Some portable phones <a 
href="http://www.prnewswire.com/news-releases/kryptowire-discovered-mobile-phone-firmware-that-transmitted-personally-identifiable-information-pii-without-user-consent-or-disclosure-300362844.html";>are
       sold with spyware sending lots of data to China</a>.</p></li>
 
@@ -1527,7 +1545,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2017/11/21 06:39:17 $
+$Date: 2017/11/28 14:54:22 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary-tethers.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-tethers.html,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -b -r1.15 -r1.16
--- proprietary-tethers.html    12 Oct 2017 15:49:57 -0000      1.15
+++ proprietary-tethers.html    28 Nov 2017 14:54:22 -0000      1.16
@@ -21,6 +21,23 @@
 
 <ul>
 <li>
+<p>Logitech will sabotage all Harmony Link household control devices by
+<a 
href="https://arstechnica.com/gadgets/2017/11/logitech-to-shut-down-service-and-support-for-harmony-link-devices-in-2018/";>
+turning off the server through which the products' supposed owners
+communicate with them</a>.</p>
+<p>The owners suspect this is to pressure them to buy a newer model. If
+they are wise, they will learn, rather, to distrust any product that
+requires users to talk with them through some specialized service.</p>
+</li>
+
+<li>
+<p>Sony has brought back its robotic pet Aibo, this time <a
+href="https://motherboard.vice.com/en_us/article/bj778v/sony-wants-to-sell-you-a-subscription-to-a-robot-dog-aibo-90s-pet";>
+with a universal back door, and tethered to a server that requires a
+subscription</a>.</p>
+</li>
+
+<li>
   <p>The Canary home surveillance camera has been sabotaged by its
     manufacturer, <a
 
href="https://www.theverge.com/circuitbreaker/2017/10/4/16426394/canary-smart-home-camera-free-service-update-change";>
@@ -142,7 +159,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2017/10/12 15:49:57 $
+$Date: 2017/11/28 14:54:22 $
 <!-- timestamp end -->
 </p>
 </div>