Archive for December 13, 2017

Apple Releases iOS & tvOS Update That Fully Fixes HomeKit Exploit

Posted in Commentary with tags on December 13, 2017 by itnerd

If you use HomeKit devices, then you’re aware of a HomeKit bug that was disclosed and partially fixed last week that would give the bad guys remote access to your HomeKit devices. For example, they could unlock the doors and turn off your security cameras before stealing everything from your home. Apple did some back end fixes and disabled the ability to remote access HomeKit devices until they could get out an iOS update that fixed the rest of the issues.

Today, iOS 11.2.1 made an appearance which fixes the rest of the HomeKit issues. Of interest, there’s also a tvOS 11.2.1 fix that came out as well which has HomeKit fixes too. That shouldn’t come as a shock as you need an AppleTV to fully leverage HomeKit. Including the ability to do remote access. You should likely go to your iDevices and download this updates ASAP.

While I’m at it, if you own an Apple Airport Extreme or Express base station, you might want to log into it and check to see if you have a software update waiting. Chances are that you have as Apple has released an update that fixes the KRACK vulnerability in those products.

Almost 45 Million Tons Of eWaste Discarded Last Year – UNN

Posted in Commentary with tags on December 13, 2017 by itnerd

A new study [Warning: PDF] from the United Nations University says that 44.7 million metric tons (49.3 million tons) of TV sets, refrigerators, cellphones and other electrical good were discarded last year, with only a fifth recycled to recover the valuable raw materials inside. That isn’t good for the environment of course.

My take on this goes something like this. Without better disposal/recycling options, it’s going to continue to be like this. People aren’t going to put in the effort to search out methods of recycling electronics, hazardous waste like propane tanks, etc. People don’t have space to store that waste to wait for an opportunity to properly dispose of it. The fact that the trash and recycling service that everyone pays for doesn’t help with this problem. Thus we really need a rethink of how we keep eWaste out of landfills and the like.

 

Why Ontario’s New Ticket Sales Act Won’t Work

Posted in Commentary with tags on December 13, 2017 by itnerd

Today, a bill called The Ticket Sales Act is coming up for final reading in the Ontario Legislature. If passed, which given that the current Liberal government has a majority in the Legislature seems certain, it’s purpose is to do the following:

  • Banning ticket “bots” and the sale of tickets that were purchased using bots
  • Capping the resale price of tickets at 50 per cent above face value
  • Requiring businesses selling tickets to disclose more information to consumers
  • Establishing new enforcement measures to help make sure that ticket selling and reselling businesses are following the rules

All of that sounds great on paper. After all, it’s impossible to get a ticket for a big name concert or sporting event at the moment. Thus it should shift the balance of power back into the hands of consumers like you and I. Right?

Not so fast.

They reason why this act will fail centers around the banning of “bots” which are software programs that are designed to by tickets by the hundreds the second they become available for sale. Now, how do you enforce that ban precisely? Sure someone like a Ticketmaster could trace where a transaction was launched from over the Internet. That’s not hard. But how do they tie it to an individual in Ontario or elsewhere?

They can’t. And that’s part of the problem.

On top of that, you can rent what are called “bot farms” to do everything from take down websites to pwn IoT devices. And I know for a fact that you can rent “bot farms” to buy tickets in bulk for resale. Because the “bot farm” is owned by a third party, the actual ticket broker has plausible deniability if the cops knock on their door. Assuming of course the cops can even find them. Which they won’t. Thus this act is doomed to failure. Simply saying that “bots” are illegal doesn’t stop their use. At best, it modifies how they’re used so the users are less likely to get caught. Unless the Ontario Government is willing to set up enforcement in the form of some sort of team of computer nerds that will hunt down these operations and take them down, this is a futile exercise. And I think it’s safe to say that the Ontario Government isn’t going to do that. Besides, if were truly as simple as hiring a bunch of nerds to take down bots, Ticketmaster would have done it already and we would not be talking about this now.

The bottom line is that the Ontario Government will get to tick off a check box a few months out from an election, but nothing will change for consumers. You still won’t be able to get tickets for the Toronto Maple Leafs, the next U2 concert, or anything else. Because this act does nothing to change the fact that because these “bots” exist, you have no chance. Zip, zero, nada. The real solution is found in making the use of bots ineffective. That requires technology and not legislation.