"Manipulating the weather since 1915"

x.com/NexxusLux/status/1942211…

Former Librarian of Congress, fired by Trump, vows to improve public information in new Mellon role
https://apnews.com/article/carla-hayden-library-of-congress-mellon-foundation-9db128ac035982ecaa6b339dbe8b7276?utm_source=flipboard&utm_medium=activitypub

Posted into Business and Finance @business-and-finance-AssociatedPress

Powell joining Heat, Collins to Clippers, Love and Anderson to Utah in 3-team trade, AP source says
https://apnews.com/article/kevin-love-norman-powell-john-collins-trade-75389dd7d91196d87dab06ebb36fcd75?utm_source=flipboard&utm_medium=activitypub

Posted into Sports @sports-AssociatedPress

American kids have become increasingly unhealthy over nearly two decades, new study finds
https://apnews.com/article/children-health-maha-rfk-jr-jama-d920bb5421bfdc2c83d4356986e9ade7?utm_source=flipboard&utm_medium=activitypub

Posted into Health @health-AssociatedPress

Sales: We need a new summer holiday.

Walmart: Hold my beer.

Iris Van Herpen unveils 'living' couture dress of bioluminescent algae in Paris
https://apnews.com/article/paris-couture-fashion-iris-van-herpen-2280860f73e49faca730b74aa1d256f2?utm_source=flipboard&utm_medium=activitypub

Posted into Entertainment @entertainment-AssociatedPress

Fun fun fun!

Til you bring home a "D" in algebra and yer Daddy takes the skates away....

Sensitive content Reveal/hide

#一ノ瀬瑠菜

#Facebook is always hungry for all of your data.

The ecosystem maintained by #Meta will always try to scoop as much data as possible about you.

And they also love to spy on you while you’re not even using their services.

The “Meta pixel” has so far been adopted by ~20% of most visited websites.

It’s an invisible element rendered on all those webpages whose purpose is to spy on you. It’s thanks to these pixels that Meta probably has details about your tax returns and medical records.

But that isn’t enough for the espionage company better known as Meta.

After rolling out the tracking pixels about 10 years ago, many browsers and extensions have learned how to block them.

If you use Firefox in Strict mode, and/or the Facebook Container extension, and/or Privacy Badger or uBlock Origin, then chances are that your browser is blocking Meta’s creepy eyes.

Probably there aren’t a lot of people out there who take these measures, as they usually involve some degree of tech-savvyness. But the fact that there are still some people on planet earth that are trying to block their creepy eyes, some people whose tax returns, health records or sexual habits aren’t known to them, makes Meta uneasy. After all, it’s a company explicitly designed to know EVERYTHING about EVERYONE!

So what have they done?

Well, they basically opened a local backdoor on all Android phones that have some of their apps installed.

Usually a mobile app with INTERNET permissions can bind to any non-privileged TCP port on the local interface.

And that’s exactly what their mobile apps are doing.

They open a localhost socket, and then whenever you open your mobile browser on a website that has one of their trackers the JavaScript code tries to connect to that port to push scraped data from your browsing history to their apps.

They basically abuse the localhost sandbox, usually used by developers and less subject to the scrutiny of tracker-blocking software, to funnel private data scooped up from your usage of other websites, unencrypted, to their own apps, which in turn pushes it to their servers.

To be clear, this isn’t something new. Yandex has been doing it since 2017. And by now you probably shouldn’t trust any large-scale apps that come out of the US, Russia or China because they are all funded by State-sponsored programs whose aim is collective espionage and data collection.

If you want to protect yourself:

1. Never use Chrome for browsing. Only use Firefox or one of its forks. And, since Firefox is the only mobile browser that supports extensions, don’t forget to install Facebook Container (which limits all activities related to known Meta domains in their own sandbox), Privacy Badger and uBlock Origin on it. And I would also recommend NoScript - better to explicitly whitelist all JavaScript content that you want to run on your devices than risking your data leaking to unintended actors. The way Meta exploits these loopholes in the browser to violate people’s privacy shows that it’s no longer tolerable to have browsers that don’t actively provide users ways to block trackers. Google acknowledged Meta’s abuse, allegedly provided a patch to close the localhost loophole, but still doesn’t provide privacy-focused features in their browser because they have a strong conflict of interests - because they also profit from violating people’s privacy. Ditching their products has now become a civic duty.
2. Uninstall the Facebook and Instagram apps. Use the website instead. Webpages run in the browser’s sandbox and can’t just arbitrarily access the storage or start TCP services. I know that Facebook and Instagram in a browser suck, and that’s deliberate - it’s all part of Meta’s plan to force people to use their apps instead. But maybe it’s a good way to limit your usage of this crap.
3. Avoid using WhatsApp through their app directly too if you can (sure, individual messages are E2E encrypted, but there’s plenty of juicy metadata that they can still scoop up from your app usage). I personally use Matrix with a WhatsApp bridge, so I can interact with my conversations directly from my Element app instead of using WhatsApp directly on the phone.
4. Use Meta’s services as little as possible. If there’s some data point that they can harvest and sell about you, then rest assure that they will do. Moving to privacy-aware decentralized solutions like the Fediverse is now a civic duty. The more people move over their content, the more Meta’s services lose their value, the less people will be inclined to use them even if they hate them just because “everyone else is there”.

localmess.github.io/

Facebook Is Receiving Sensitive Medical Information from Hospital Websites – The Markup

Experts say some hospitals’ use of an ad tracking tool may violate a federal law protecting health information

^{themarkup.org}

My helpful feedback to Clearly (a supposively Canadian company):

I felt very uncomfortable you were asking my doctor's name and the date of the prescription.

🧵

Russia's ex-minister found dead hours after being fired, investigators believe he killed himself
https://apnews.com/article/russia-starovoyt-minister-suicide-kursk-59babee35c7c1bae79c5becd51f52066?utm_source=flipboard&utm_medium=activitypub

Posted into International News @international-news-AssociatedPress

Today's Epstein List Fiasco = Donald Trump critically compromised by (Israeli) Foreign Intelligence

Elon Musk stands vindicated. Anyone who cares about America would want the immediate removal of Trump, and all his fellow victims, from positions of power in the US government.

A reignited Trump-Musk feud burns Tesla investors, shares of EV company tumble 8%
https://apnews.com/article/tesla-stock-evs-trump-musk-feud-496967841ef31b6ccaa74ba6a59da8a5?utm_source=flipboard&utm_medium=activitypub

Posted into Technology @technology-AssociatedPress