trashhalo

An iPhone to HDMI adapter was discovered that, when plugged in, runs a program prompting users to download an app. This EZ Cast app collects extensive personal data and sends it to China for ad targeting. It requires location access, photos, and installs tracking cookies. The adapter appears designed to mimic official Apple products. While its intentions are unclear, it demonstrates how such devices could enable privacy risks by introducing untrusted software into a user's devices. Analysis of a similar EZCast dongle found it was vulnerable and not designed with security in mind. Reviews complain the app is useless or a scam. The adapter may have originated as unsold Amazon returns later acquired by electronics recyclers. Its existence relates to concerns about privacy and navigation issues on online marketplaces.

Sridhar Ramaswamy, former CEO of the privacy-focused search engine Neeva, believes the window for AI systems to truly disrupt Google's dominance in consumer search is closing following Snowflake's acquisition of Neeva. At Snowflake, Ramaswamy sees more potential in using AI for enterprise applications and knowledge discovery. While chatbots like ChatGPT showed promise early this year, Google's own Bard system is improving and the lack of integration between services limits disruption. In the enterprise space, Snowflake trusts allow it to securely leverage customers' data to help them use AI. Ramaswamy notes that success in large language models remains unpredictable, as platforms that once dominated like BlackBerry and Nokia have fallen. Overall, the acquisition allows Neeva's team to apply their search technology to Snowflake's structured and unstructured enterprise data.

Grindr Inc. has lost about 45% of its staff as it enforces a strict return-to-office policy that was introduced after a majority of employees announced a plan to unionize.

About 80 of the 178 employees at the LGBTQ dating app company were forced to resign after the company in August mandated workers return to work in person two days a week at assigned “hub” offices or be fired, the Communications Workers of America said in a statement Wednesday.

The West Hollywood, California-based company also gave a severance package to staff who were unable to relocate, in what the CWA alleged was an attempt “to silence workers from speaking out about their working conditions,” according to a statement from the organization. The CWA filed a new labor complaint against the company on Wednesday, the second such complaint in about a month.

Google and Nvidia are offering all Chromebook owners a free 3-month subscription to GeForce Now, Nvidia's cloud gaming service, without needing a credit card. Those who bought a gaming Chromebook get the higher-tier Ultimate subscription allowing 1440p resolution and 120fps streaming. The free trial allows users to experience the improved latency and image quality of Ultimate. A fast internet connection is still required for cloud gaming on a Chromebook. Interestingly, this announcement comes shortly after Google canceled plans for more powerful gaming Chromebooks with dedicated Nvidia GPUs, making one wonder if the free subscriptions were originally intended for those canceled devices. The timing also mirrors Google's previous cancellation of its own Stadia cloud gaming platform around the same time it had announced gaming Chromebooks.

A lawsuit was filed against Reddit alleging that the company fired an employee with anxiety for taking medical leave. The employee, Jamie Lee, had worked at Reddit as an accountant for over 4 years with positive reviews. In July 2022, Lee requested 3 days off for her health but was denied. She was later placed on medical leave after fainting, but was fired upon returning and accused of poor performance. However, the lawsuit claims others made similar mistakes. It also alleges Reddit's new leadership under the CFO has created a "toxic, political, and not inclusive" culture, which two other employees also left over. This highlights challenges employees faced with the changing culture at Reddit.

The organization that represents Scientology founder L. Ron Hubbard's works has petitioned the U.S. government to restrict the right to repair a religious artifact called an E-Meter. This device is core to Scientology practices but the group argues exemptions allowing device hacking should not apply to equipment restricted to trained users. Experts believe the E-Meter is the targeted device, which the Church says requires specific Scientologist operation. Documentation shows the E-Meter updater software mandates registration, including a membership number, suggesting repair restrictions. The language used in the petition matches stipulations Scientology requires for E-Meter use and purchase agreements. In short, the Church appears to be attempting to prevent independent E-Meter repair or experimentation through copyright exemption restrictions.

Google has developed a tool called SynthID that can watermark AI-generated images in a way that is imperceptible to humans but detectable by AI. The watermark is embedded in pixel values without noticeably changing the image. SynthID is being launched for use with Google Cloud's image generator to verify original photos. While aimed initially at detecting deepfakes, the tool could also help businesses check AI-generated images used for tasks like product descriptions. Google hopes SynthID may become a web-wide standard but recognizes others are working on detection methods too. The launch marks the start of an arms race as hackers will try to circumvent the system, requiring it to continuously improve. Overall, SynthID is a first step toward greater transparency around AI-generated content online.

Another new Meet feature lets Duet “attend” a meeting on your behalf. On a meeting invite, you can click an “attend for me” button, and Google can auto-generate some text about what you might want to discuss. Those notes will be viewable to attendees during the meeting so that they can discuss them.

Amazon CEO Andy Jassy recently told employees that those who do not want to return to the office at least three days a week should consider finding employment elsewhere. According to a recording obtained by Insider, Jassy stated "It's past the time to disagree and commit," adding that if employees cannot commit to the new hybrid work model, "it's probably not going to work out for you at Amazon." He characterized the decision to have employees return to the office part-time as a "judgment call." Notably, Jassy said employees are free to leave if they do not want to comply with the hybrid work requirement. This makes clear that Amazon has not changed its stance on returning to office work despite some employees preferring full remote arrangements.

cross-posted from: https://literature.cafe/post/349464

I don't think this was posted here already, but this instance has been up and running for a bit. Apologies if this isn't the best place for it, feel free to remove if need be! The instance has been running for a few weeks now and has a few users already, but if there's people invested in that specific niche interest that wants to spread the load across instances it exists. It has some extra lemmy front end UIs available, and I am building up the local communities as I have time to.

Some policy stuff as to how it operates, for sake of transparency.

Although I am currently the "only admin" I do have a "break glass" admin account and will be giving it to a trusted point person just in case (life happens sometimes...) as well as scaling up the team as need be.

If the instance ever has to go down, at the very least a 30 day notice will be given in advance as well as an outlined explanation as to why and a good faith effort will be made to keep it up as well.

The de-federation policy might be slightly controversial, and I completely understand. It is currently temporarily defederated from lemmys pornographic instances, mainly because of just how much it spams c/all. I will refederate in time when there more granular federation options, but I just can't reasonably moderate that right now. I also do defederate from the "worst of the worst" fediverse instances (ie, known CP hosts, far right, nazis, etc) as a precaution despite how janky cross federation is for lemmy right now, hence why the instance blocklist is long.

The instance currently uses object storage, and I post monthly financial statements as to what the cost of the resources for it are.

I also use a community seeder bot that runs every 12 hours to diversify content in all. The local communities focus are mainly book related, but it federates with most other instances.

I also am currently taking manual secure database backups at least weekly and storing them remotely, but I will be automating that process as soon as I can. I value security greatly.

The link is https://literature.cafe

The author was blocked from accessing a work website due to issues with Cloudflare's browser integrity checks. Despite having credentials to prove his identity, an attempt to bypass the checks by disabling fingerprinting in Firefox resulted in Cloudflare blocking all access. He could still access the site on Chrome, showing the block was based on his browser configuration. This left the author unable to complete important work tasks and questioning how much control individuals really have over authentication in an increasingly centralized web ecosystem dependent on remote attestation. It highlights the need for transparency and user agency in how identity verification is implemented online.