Feed aggregator

Today's NYT Mini Crossword Answers for Wednesday, Nov. 13

CNET Feed - Tue, 11/12/2024 - 10:08pm
Here are the answers for The New York Times Mini Crossword for Nov. 13.
Categories: CNET

Best LED Light Bulb for Every Room in Your House in 2024

CNET Feed - Tue, 11/12/2024 - 10:07pm
Brighten up your home with these CNET-recommended LED lights.
Categories: CNET

Ask HN: Are there strategies for content creators to prove their location?

Hacker News - Tue, 11/12/2024 - 9:55pm

With a looming snap election in Germany, there is revived discussion in Europe and Germany on regulating internet platforms and social media to make foreign election interference and misinformation campaigns harder to carry out.

Regulating or moderating digital discourse to combat misinformation is notoriously difficult on many levels, but one model that has seen some adoption is offering additional information and context to consumers of digital information. For example, YouTube displays contextual information under videos that discuss certain topics, and Twitter/X has the community notes feature.

To mitigate foreign misinformation, a potentially powerful piece of context in the run-up to elections could be whether or not the content was posted from a device located within the European Union (EU). For the sake of argument, assume that the goal is to offer social media users the option to verify that their social media post was sent from a device physically located within the EU. Unverified content could appear as before but could be labeled as "may not originate from inside the EU", much like email clients may display "sender is not part of your organization".

Independent of the merits of such a feature in helping to mitigate foreign misinformation, my technical question is whether you see a practical way to implement a protocol that allows end users of digital platforms to prove that they are physically present within the EU without revealing their actual location to anyone.

The verification would not establish where the post content comes from since it may be relayed to the posting device through the internet, but verified posting should require some physical 'last-mile' EU hardware. In other words, foreign actors intent on pretending to be European would have to acquire/hack a significant number of in-EU devices to relay their messages from overseas. A rate limit on posts per verified device could further increase the cost of verified content posts from foreign imposters.

The solutions can assume that social media companies, ISP providers, or what have you, are cooperating to a reasonable degree to implement a solution. To illustrate this, consider that during the COVID pandemic, the EU with help from Apple and Google, implemented a tracing protocol that used Bluetooth proximity technology to detect nearby devices of users while preserving their privacy [1]. Could an approach like this be used to establish plausible physical EU presence of a device that would be hard or costly to spoof for a foreign actor? What are protocols that would make content infiltration a little harder than jumping on a VPN with ChatGPT from somewhere in the world?

In other words, are there practical strategies for opt-in, "zero-knowledge" proofs that your location is within a relevant jurisdiction?

[1] https://commission.europa.eu/strategy-and-policy/coronavirus-response/travel-during-coronavirus-pandemic/contact-tracing-and-warning-apps-during-covid-19_en

Comments URL: https://news.ycombinator.com/item?id=42122445

Points: 2

# Comments: 0

Categories: Hacker News

Ask HN: You're nominated to the cabinet: what are your first policies?

Hacker News - Tue, 11/12/2024 - 9:51pm

Lots of political gnashing of teeth, would love to have a friendlier discussion about tech and policy around:

1. Patents/IP 2. AI 3. Microchips/trade 4. Worker's rights 5. Censorship 6. More?

What's on your policy wishlist?

Comments URL: https://news.ycombinator.com/item?id=42122422

Points: 1

# Comments: 0

Categories: Hacker News

Best Home Exercise Equipment for 2024

CNET Feed - Tue, 11/12/2024 - 9:50pm
Finding the right gear to use at home can be tough. Here's the best home gym equipment for a challenging full-body workout.
Categories: CNET

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

Security Now - Tue, 11/12/2024 - 9:18pm
  • Did Bitwarden go closed-source?
  • The rights of German security researchers are clarified.
  • Australia to impose age limits on social media.
  • Free Windows Server 2025 anyone?
  • UAC wasn't getting in the way enough, so they're fixing that.
  • "From Russia with fines" -- obey or else.
  • South Korea fines Meta over serious user privacy violations.
  • Synology's (very) critical zero-click RCE flaw.
  • Malicious Python packages invoked by typos.
  • Google to enforce full MFA for all cloud service users.
  • Mozilla Foundation lays off 30%? Is Firefox safe?
  • Some feedback from Dave's Garage (https://grc.sc/dave)
  • GRC email
  • CTL: AI Debugging
  • CTL: Chat GPT vs YouTube Shorts
  • CTL: Update on the "Train Tracks" Pic of the Week
  • CTL: DNS Benchmark compatibility
  • CTL: The accuracy of AI
  • CTL: Exposing NAS to the Internet
  • CTL: Congrats on 1000!

Show Notes - https://www.grc.com/sn/SN-1000-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Categories: Security Now

Pages