Schneier on Security's Journal
 
[Most Recent Entries] [Calendar View]

Thursday, December 5th, 2013

    Time Event
    6:58a
    The Problem with EULAs

    Some apps are being distributed with secret Bitcoin-mining software embedded in them. Coins found are sent back to the app owners, of course.

    And to make it legal, it's part of the end-user license agreement (EULA):

    COMPUTER CALCULATIONS, SECURITY: as part of downloading a Mutual Public, your computer may do mathematical calculations for our affiliated networks to confirm transactions and increase security. Any rewards or fees collected by WBT or our affiliates are the sole property of WBT and our affiliates.

    This is a great example of why EULAs are bad. The stunt that resulted in 7,500 people giving Gamestation.co.uk their immortal souls a few years ago was funny, but hijacking users' computers for profit is actually bad.

    1:16p
    Heartwave Biometric

    Here's a new biometric I know nothing about:

    The wristband relies on authenticating identity by matching the overall shape of the user's heartwave (captured via an electrocardiogram sensor). Unlike other biotech authentication methods -- like fingerprint scanning and iris-/facial-recognition tech -- the system doesn't require the user to authenticate every time they want to unlock something. Because it's a wearable device, the system sustains authentication so long as the wearer keeps the wristband on.

    << Previous Day 2013/12/05
    [Calendar]
    Next Day >>

Schneier on Security   About LJ.Rossia.org