look it's 11pm over here but the important thing is that we got the video up. also I forgot to mention that the Windows Downdate vulnerability requires access to the PC, so it's kind of serious for enterprise, but most of you quirky gamers aren't really in danger. sleep tight
That is a very good question, because it doesn't seem like there's a good excuse for a company to hold that much information from multiple nations like that.
Fun fact Mayonnaise was made to celebrate a series of British defeat by the French. The Duke de Richelieu instructed his chef to create a feast that would honor the great final victory in Minorca. The island lacked the cream needed for the sauce the chef wanted to make so he invented the famous egg and oil dressing after emulsifying it for a while by hand. He named the concoction Mahon-aise after the city Mahón. I guess that's also why the english say the weird honhonhon laugh which is weird because it makes them laughing at themselves losing at Minorca i guess that's the fair play of the brits. Honhonhon 😂😂
Let's hope that lawsuit for the data breach wins, 3 BILLION people is almost half the entire world population. If companies are going to collect people's personal data, then they need to be responsible for safe guarding it, and be forced to pay extremely excessive fines when they fail to, and pay for the people they doxxed, to have their stolen identity fixed.
Some risks are too great to even allow them and then punish infractors after the fact. No single entity should be hoarding this much personal data. If systems like this are needed, then they shouldn't be centralized.
Showing the Windows Exploit in public is part of the responsible disclosure. If a researcher found it, chances are a malicious actor found it too and is using it right now. They gave Microsoft time to figure it out, and because they obviously didn't care until now, they just got a pretty good reason to care. The publication part is necessary to put pressure on the company to fix it before it goes public
Exactly, security through obscurity almost never works for software, because there are always third parties with monetary or political interests in finding the vulnerabilities, so you always have to assume those are already being exploited by malicious actors. That's why those who find vulnerabilities use the protocol of warning the responsible company about the issue, wait some time for them to fix it and then disclose the findings publicly, unless the company doesn't act in a rational period, then the best they can do is disclose the vulnerability publicly to put pressure and so those most vulnerable to an attack (Journalists for example), know about it and can act accordingly.
I would like to have all your personal information, the pass code to your phone, laptop access to your gallery (personal photos), personal files, access to place cameras in your home so that I can make sure you have nothing to hide, oh and also contacts of all your loved ones. Thank you.
with Microsoft's spotty history regarding patching bugs it's been notified of, and how it treats it's own bug bounty program participants in some cases, disclosure after a reasonable set period is a good standard to follow. the debate about what constitutes reasonable aside, it might be the only way to motivate a fix.
1:13 - The main reason for actually presenting the flaws before a fix is available is "responsible disclosure" - you give the vendor plenty of time to fix it, but when that time is up, you release it. Because without that deadline of "I'm going to release it on Aug 11" - the vendor might just keep ignoring it. Responsible disclosure is supposed to give the vendor time - and six months (since February) is plenty of time. (Disclaimer, I am "a hacker" currently at the DEF CON conference, and looking forward to this talk.)
No, Apple is perfectly aware of what they're doing. It's called "malicious compliance." It's charming when a homeowner does it to spite stupid HOA rules, less charming when it's a trillion dollar company doing it to keep anti-consumer and anti-competitive practices in play.
@@Sizdothyxit's only charming when you're poor and unable to seek more standard methods. It's being unreasonable and petty when you are a multi trillion dollar company trying to justify that inflated valuation.
ChatGPT accidentally impersonating you is genuinely one of the creepiest bug I’ve ever heard and definitely doesn’t make me feel better about how irresponsible OpenAI is
that's because they training their system on your voice (without your consent), a bug could happen in the pipeline which leads to Chatgpt voice system to use yours instead of their own persona.
@@maxrinehart4177 No. It's because language models are trained to predict what comes next. In text, it's easy to check when the system ends its response (e.g. it generates a "User:" label in the transcript) but for audio it's harder to detect the switch in dialogue.
@@maxrinehart4177 do you think they train their AI in real time? This is not how AI training works. You need to store the data first, then you need to label it, then you need to train on it, it takes months. Please do not lie on the internet. People are guillible and will believe you.
The data breach story here is the absolute most important one and was largely glossed over. How the hell does ONE company have that kind of information on HALF the planets population? That's practically every person who has internet access.
The answer is in the company's name: "National Public Data". A lot of the data is publicly available, it's just normally piecemeal and inconvenient to get. These data brokers collect it all and assemble it into convenient packages for background checkers to purchase, or for hackers to steal. The whole business is very creepy, and even if the info is technically public, there should really be laws against assembling it en masse like this.
7:35 "[The] stolen data was then put up for sale on the dark web" ... "When you purchase through links on our site, we may earn an affiliate commission." LOL.
I'd be really interested in seeing before/after benchmarks of non-Steam Deck handhelds running SteamOS. The Deck was able to outperform much better hardware in 1% lows and stability, which I imagine was due to the performance overhead cost of running Windows. An Ally/Legion Go/Upcoming Zotac handheld/etc running SteamOS would, at least on paper, be the best of both worlds.
F that, go straight for the T-1,000,000; the semi-canon fully liquid metal arachnid terminator that only appeared in the Universal 4D show you can't see anymore.
Well Microsoft doesn't have any time in their hands since they're trying to figure out how to show more ads in my start menu and taskbar Edit: Guys I'm talking about the ads for all the Apps and Subscriptions in the All Apps (On by default) and the Widgets Tab and a part of your search bar (On by default). The taskbar stuff isn't necessarily Ads yes but do you guys really not see the trend of taking up increasingly more space on your taskbar? Also the comment says "figuring out how to show more"
Today my W10 decided to change my desktop background to random scenic pictures. It was on default from Lenovo so that's probably why but it's still strange.
I think the combination of “primary task bar” and “move it” is like saying I don’t own a car because they don’t allow me to put the steering wheel on the other side. Your one problem is only your problem but stay mad over that.
I'm using AtlasOS (Win11 Pro 23H2, fully patched, then ameliorated in to AtlasOS) and I get the classic pre-Win11 taskbar back as part of the amelioration. [WARNING: This is *not* recommended for anyone who isn't willing to experiment with their system and risk data loss]
Seriously planning to just take the machines i cant take off windows offline and switch the machines i cant take offline to linux. I just cant come at 11.
@@o0Donuts0ohaving taskbar on the left or right side gives you a bit more vertical space on 16:9 monitors. Many people did so in Windows 10. So, yeah, just because you don't do it, it doesn't mean it's not worthy of being a feature.
Asus has rolled out BIOS 3802 with the microcode update for the Asus Z690 Maximus Extreme, AS A BETA.... Can't fix my intel cpu without losiung coverage of my warranty by using a Beta BIOS... Ridiculous.
Yeah for not moving to linux yet. This downdate attack was for Windows 11 systems with the person behind it suspecting that other OS's might also be vulnerable (older windows, mac os, and even linux). So technically 10 is safer than 11 right now.
@@chronossage Not true at all. It only affects Windows 10, 11, and server, and affects them all equally, the attack is on the Windows Update structure itself which is shared. However it would make Windows 10 more vulnerable than 11 since it would have so much longer to roll back the clock on updates compared to 11, leaving 10 in an even more vulnerable state. It has nothing to do with MacOS or Linux. Straight up misinformation you're posting.
Why would be IDs from different countries stored in a single database? If this was some collaboration between countries the system would be decentralized. Also, this looks like a private company. Doesn't make sense to me that many different countries willingly share this much info with an entity under another country.
Microsoft's Chocolate Factory hears your older Windows version fix request pleas, and their answer is ... we know we made it, we know we're the only ones with the source code, we know we're morally obligated to support our own products forever... but... You get nothing! You get nothing! Good day, sir!
@@Will-yy7cg You don't understand how "morals" work eh? Because they made it, they should support it for as long as people are still using it. Sort of how if a plumber installs something in your bathroom/kitchen and then it breaks a year later, they're morally (and sometimes even legally) responsible to come back and address the issue(s) ...
@@3nertia Plumbing work (just like Windows or pretty much any other product you buy) comes with a limited warranty. If they mess something up, they'll come back and fix it. But only for so long. If something goes wrong 10 years later they're going to give you another bill even if you can prove it was their fault. After all, why should they give you an infinite amount of labor because you paid them once?
@@Will-yy7cg Yeah, which is why most failures don't happen until long after their liability ends and exactly why I do such repairs myself - thanks for pointing out one of the myriad ways that capitalism sucks heh
The joke about ketchup was on point because it is also a non-newtonian fluid. It start to flow when under pressure (shear thinning) like mayonnaise.Which is why suddenly whole globs of the stuff come rushing out of the bottle when you hit it slightly too hard under a slightly incorrect angle.
Most hackers are following a responsible disclosure timeline, where they first inform the Company and if nothing happens for some time the exploit is made public.
Well, Spotify is also fighting on behalf of smaller developers and companies which have to earn little to nothing after paying all the fee for the services they use to run the product. Only for Apple to come and take 30% of the revenue for doing nothing. 30% is a lot. Maybe Apple Music have higher percentage to artists because it's not free and does not have to pay 30% cut to Apple itself. Meanwhile Spotify have to pay Apple and Google 30%.
@@LogicalError007lol Spotify still pays significantly less towards artists than Tidal, which has way better bitrate, hifi and master tracks, music videos, etc. Spotify has crap bitrate and podcasts.
So this confirms that OpenAI is actively training its voice models on your voice? And not in the way where it understands mannerism and accents better, but actually training a clone of your voice.
No, it does not. In context learning is a thing. You can easily google that instead of spreading false information that people will of course believe. Actual AI training cannot happen in real time, it takes months. You need to first gather a dataset, label it, then train. Its not easy or fast. This is not what is happening. Why spread rumors of things you dont even understand???
No it doesn't. This is a common problem with LLMs too, but as soon as the LLM tries writing a line starting with "USER:" (or equivalent, there's many formats) it's stopped from continuing (they will gladly continue writing on your behalf if you let them!). Since this isn't text, it's a bit harder.
@@TheManinBlack9054 have you ever even used text to speech AI trained on your own voice? it takes MINUTES to create a model. It's the same idea as tensor models. The base is already there, you're just layering a more specific dataset on top of it, and that sample size can be TINY. Maybe YOU should stop spreading misinformation!
@@pixelpuppy Google rolled one out like 3-4 years ago o your dead grand-mom could read your kids a bedtime story. I believe it needed only 60 seconds of voice to make the sound alike. Im not surprised they are having bugs with it trying to incorporate more into the calculation.
I told them, mayonnaise hold the secret to universe, they've been telling me to stop daydreaming and get a job. Well who's stupid now ! Hijikata Toshiro also was onto it.
Isn't the social security number as an ID an America concept? How can billions of people have their SSN exposed if there are only 300 million Americans?
@@jamesclarkson156no the article is pretty clear. Even the headline is clear. SSNs are _part_ of the hack. The hack _includes_ SSNs. No where does it say every single record of the three billion has SSNs. How are so many people thinking this…
I'm not touching it until it's essentially an Android skin. So, it should have the functionality of an Android phone. Well, I'm not touching iPhones either way because I want my 3.5mm jack and microSD card slot. Apple got rid of the former and never had the latter, so it's a nope from me.
tbh I think that's one of the least important features. 3rd party accessories is where its at, along with headphone jack and SD slot. Coincidentally I'm about to buy a new phone this year to replace my old S7 and it looks like it'll be an Xperia, cuz everyone else is selling phablets or scams.
@@1InVader1yeah because 1080p screen for 1400 eur isn't a scam. I did find it stupid they were doing 4k on previous generations, but if they are lowering it that much at least reduce the price ffs. If the phone was 1100 eur I probably would've already bought it, not because I care about 3.5mm or sd card, but because it's the only phone without notch/punch hole.
One day we will have starships, either powered by mayonnaise, or the gravity drive will rotate a giant jar of it to keep your feet on the ground. And the plasma cannons will be giant ketchup bottles.
It common for ethical hackers to first report a bug to the software or hardware manufacturer then wait usually 90 days before reporting it to the world. This is because some software developers wouldn't patch the bug out until they had external pressure from users or government officials. A notable example was windows 7 had login bug that allowed a hacker to gain administration rights remotely. Microsoft wouldn't patch it until the hacker released it to the world and government regulators came knocking.
5:05 The "NO!" right before it changes voices sounds like her AI doppleganger murdering the original AI assistant and taking over, hoping she won't notice 😭
Alas, only have time to be peripherally interested in tech news, but I keep finding myself binging Riley's channels just for the humorous asides and the rush of endorphins at the end when we're all praised for sticking it out.
Saw the security downgrade malware on Eric Parker's channel in one of his analysis videos. Pretty funny to me. The solution to not being able to exploit a bug is to put the bug back
No shit. Updated my PC tonight. Immediately got weird behavior and apps crashing that were functioning perfectly fine before the restart. And windows immediately told me I needed to restart for update AGAIN. This happens quite literally every single time I update. I'm so tired of it. Why tf would I want to "upgrade" to windows 11 with this treatment?
@@lexecomplexe4083 Yeah, I don't miss that. Switched to Linux mint years ago and haven't looked back since. Stable, secure, fast, comfortable, can't complain.
Saying the Ally has a better display than the SteamDeck when the SteamDeck OLED exists... A bigger definition does not make a better display, and 800p is enough for a 7" handheld
@@jernaugurgeh451 it affects even low and midrange CPUs with spec sheet power of ≥65W made at least from Jan 2022 - Dec 2023 and you may have to re request RMA a few times until they accept it according to L1 Techs and Gamers Nexus It *will* affect all CPUs of this type made during this period even if they don't show symptoms yet *especially* because Intel put out microcode and BIOS patches that make the issue take longer to manifest in 2024
I got the Microcode update and it just made my CPU even hotter with higher voltages than the previous BIOS update.. 13600KF on a Z790 Tomahawk WiFi board. Before, intel defaulted to like mode 9 for CPU Lite Load, and temps were okay. Now the intel default seems closer to MODE EIGHTEEN, which is ridiculously hot. CPU was exceeding 100C on load. So I still ended up having to fix my settings to ensure my temps were decent and voltages were lower. It seems like MSI decided to go back to their old tricks after they figured the microcode fixed the voltage spike issue. Super annoying.
Maybe we should stop using ssn in the us, and instead use some other number with at least some amount of security built in. A social security number is effectively just a 9 digit password consisting of the numbers 0-9, those types of passwords stopped being secure ages ago. Also if you have a list of names of people who were born at the same hospital and same day as you, you can figure out their ssn because it is just an incremental number where the first two sets of digits are pre defined for an area and hospital like a zip code.
After reporting on Elon sueing GARM and mocking him for that, I thought you guys would report on GARM folding immediately to the lawsuit today.. Oh well, maybe next time
Man, Riley and the writers were really firing on all cylinders for this one! Caught myself chuckling through my sandwich on my lunch break quite a few times today 😂 Great video!
If you werent using passwords before, now it's the time to do it. tell your parents, kids, partners, etc. a secret word or phrase to ensure that it really is you. Even better, let them know (in person) what counter-phrase or word to use to ensure they really are who they are. If you use the secret, and they dont respond with the correct secret, then assume your secret is compromised and switch to a new one. Or just ask for something only they and you would know.
SteamOS is a linux Distro. The social security number you talk off is the USA card/number that's used as an ID card? because there's no way half the world use their social security number like it is done in the USA.
There is a difference between a regular Linux distro and SteamOS. Sure they are all Linux based but SteamOS, like Android (that is Linux based). Sure you can call all of them distro but SteamOS or Android are fully maintained by a big company that makes sure that users don't need to tinker it or solve issues as they do it for you, just like Apple or Widows do. Linux is great but the kind of distro he's talking about will never be popular as the way it works will always prevent the vast majority of users from using it. The only way for Linux to become widely used is like with SteamOS or Android, meaning a big company that takes care of everything for the users, but than it won't be the Linux current users want. As for the Social Security Number. In cpuntries without a national ID it (or a similar number) is used as a replacement. This is the case in the UK and, as always, it's immediate former (and officially for some current) colonies like the US, Canada, Australia (that use the Tax File Number) and New Zealand (that use a few nationally provided identifiers like a driver's license, Inland Revenue Department or National Health Index - according to Wikipedia). He used this as this is what he knows and and because the vast majority of their viewers are from those countries but the Idea is the same. If you're from a different country and your name was in the list it will most likely be your national ID number.
@@AL5520 Canonical, Red Hat, SUSE, System 76, Tuxedo are all companies that fully maintain and develop Desktop Linux distributions, some supply consumer hardware too. Canonical, Red Hat, SUSE and Oracle are absolutely massive. Did you forget about those? All these systems are supported in the manner you suggest just like Android, Windows or indeed Steam OS.
@@AL5520 OpenSUSE and Fedora are maintained by big companies as well, with both having immutable versions (e.g Fedora Kionite) just like SteamOS. Also, SteamOS is just another atomic KDE distro but with Steam pre-installed. SteamOS isn't as closed down as Android is, and is actually a lot more like normal distros.
@@notjustforhackers4252 For whom? Those either work with businesses (usually big ones) that employ people that can handle this and /or provide paid support. The ones that offers domestic products offer a very general support and the OS is not listed, or excluded, from the warranty. OS support/updates is also very limited. This only demonstrate what I said, for Linux to be viable to regular users it will have to be consolidated and have one (or two) big companies that sell hundreds of millions units and provides long term support for the specific OS distro they provide. This is how things work in the current economic system we have, popular widely used things are those that have a worldwide reach and always end up in the hands of a very small number of companies. Linux can definitely be the main stream leading OS but the cost will be the disappearance of most distros and the large Linux community. Android is a Linux based that is developed by Google and, in theory, any one can use it but apart from a few small manufacturers or places like China use a non Google version for political reasons, all use the official Google system with the Google services with some cosmetic changes but the main services are the same. SteamOS can succeed as a hand held gaming system but very few will use it for more than that, even though they can as this experience will not be a s smooth as the basic game console experience they have.
7:00 dont worry, its not actually 3 billion people because every time your first name, last name, middle name, adress, zip code, street, city or phone number changes you do show up multiple times since its more like a complete history of the people it tracks and less a list of the most recent information on a person. so in practice its only roughly equal to the population of the usa. which makes sense for a company that only deals with people in the usa.
The only thing holding me to windows atm is the lack of support for VR and VR peripherals like the kat treadmil in linux. If I could use these in Linux to a usable degree (yes i know you can get some VR to work to a sort of usable framerate, but its no where near daily drivable). Once support is available for the devices i use I'd gladly jump ship. I used to daily drive Linux and prefer it over windows
look it's 11pm over here but the important thing is that we got the video up. also I forgot to mention that the Windows Downdate vulnerability requires access to the PC, so it's kind of serious for enterprise, but most of you quirky gamers aren't really in danger. sleep tight
2am where I am (:
same here
I am not sleeping tight it's 1am and you just posted
Nice schedule guys!
8 am vrother chop chop
Apple: "Explain it to me like I'm 5."
EU: *explains*
Apple: "Explain it to me like I'm 4."
At this point, Apple is -15.
Why the actual F is there an online company with the records of three billion people in the first place!
It was a leak from Pr0nHub
That is a very good question, because it doesn't seem like there's a good excuse for a company to hold that much information from multiple nations like that.
Data broker (still tho)
Welcome to globalized online services, all your data belong to us, nothing to worry about...
It's my understanding that this company does background checks. Like when you apply for a job or an apartment rental, etc.
Engineer - someone just flinged some Mayo at me
What the Hell-man
You Mayo may not get hit in the naise for that joke.
Time for a Miracle Whipping.
In Heinz-sight the solution was perfectly obvious.
Fun fact Mayonnaise was made to celebrate a series of British defeat by the French. The Duke de Richelieu instructed his chef to create a feast that would honor the great final victory in Minorca. The island lacked the cream needed for the sauce the chef wanted to make so he invented the famous egg and oil dressing after emulsifying it for a while by hand. He named the concoction Mahon-aise after the city Mahón. I guess that's also why the english say the weird honhonhon laugh which is weird because it makes them laughing at themselves losing at Minorca i guess that's the fair play of the brits. Honhonhon 😂😂
Let's hope that lawsuit for the data breach wins, 3 BILLION people is almost half the entire world population. If companies are going to collect people's personal data, then they need to be responsible for safe guarding it, and be forced to pay extremely excessive fines when they fail to, and pay for the people they doxxed, to have their stolen identity fixed.
Some risks are too great to even allow them and then punish infractors after the fact. No single entity should be hoarding this much personal data. If systems like this are needed, then they shouldn't be centralized.
@@kevinnio Block chain personal data farms?
@@kevinnio That wouldn't prevent leaks, it would just mean you have to rely on more companies to keep their data secure.
Showing the Windows Exploit in public is part of the responsible disclosure. If a researcher found it, chances are a malicious actor found it too and is using it right now. They gave Microsoft time to figure it out, and because they obviously didn't care until now, they just got a pretty good reason to care. The publication part is necessary to put pressure on the company to fix it before it goes public
Exactly, security through obscurity almost never works for software, because there are always third parties with monetary or political interests in finding the vulnerabilities, so you always have to assume those are already being exploited by malicious actors. That's why those who find vulnerabilities use the protocol of warning the responsible company about the issue, wait some time for them to fix it and then disclose the findings publicly, unless the company doesn't act in a rational period, then the best they can do is disclose the vulnerability publicly to put pressure and so those most vulnerable to an attack (Journalists for example), know about it and can act accordingly.
Still using windows?
@@metallurgiconot vegan sry
At this point, just ask for my personal data, its being leaked everywhere anyway.
Why do I need to ask you, Mr. Timothy Hutchings?
Please write your credit card details below, 12 digits, security code, expiration date, and full name included.
I would like to have all your personal information, the pass code to your phone, laptop access to your gallery (personal photos), personal files, access to place cameras in your home so that I can make sure you have nothing to hide, oh and also contacts of all your loved ones. Thank you.
I almost forgot, credit/debit card details and any remaining banking information 😅
@@kennny1508 Aisle 5, just behind ketchup.
Re: Blackhat - unfortunately it is the responsible thing to go public after 6 months to ensure companies treat disclosures responsibly and patch.
Yeah I agree, and 6 months is pretty reasonable...I've seen unpatched bugs go public much earlier.
with Microsoft's spotty history regarding patching bugs it's been notified of, and how it treats it's own bug bounty program participants in some cases, disclosure after a reasonable set period is a good standard to follow. the debate about what constitutes reasonable aside, it might be the only way to motivate a fix.
@@obligatorysignin It also lets users be aware of the issue, so we can do what we need to, to keep our devices secure.
1:13 - The main reason for actually presenting the flaws before a fix is available is "responsible disclosure" - you give the vendor plenty of time to fix it, but when that time is up, you release it.
Because without that deadline of "I'm going to release it on Aug 11" - the vendor might just keep ignoring it.
Responsible disclosure is supposed to give the vendor time - and six months (since February) is plenty of time.
(Disclaimer, I am "a hacker" currently at the DEF CON conference, and looking forward to this talk.)
The main reason is actually you give your hacker buddies time to get as much as they want before you fix it.
No, Apple is perfectly aware of what they're doing. It's called "malicious compliance." It's charming when a homeowner does it to spite stupid HOA rules, less charming when it's a trillion dollar company doing it to keep anti-consumer and anti-competitive practices in play.
It's not "malicious compliance" unless one is complying. Apple is not.
they need to shut down
So you should only be allowed to do it if you're poor?
@@Sizdothyxit's only charming when you're poor and unable to seek more standard methods. It's being unreasonable and petty when you are a multi trillion dollar company trying to justify that inflated valuation.
@@Sizdothyxyes
next question
Hackers: “so we heard you like old windows better…”
Those people: Yesss .meme girl
Further proof not all hackers are bad. 😊
Win2k is my favorite. Windows 7 is my 2nd favorite. Too bad neither work on modern cpu's.
Please don't throw me into the briar patch!
ChatGPT accidentally impersonating you is genuinely one of the creepiest bug I’ve ever heard and definitely doesn’t make me feel better about how irresponsible OpenAI is
that's because they training their system on your voice (without your consent), a bug could happen in the pipeline which leads to Chatgpt voice system to use yours instead of their own persona.
I thought it was cute. They should make it more realistic tho
@@maxrinehart4177 No. It's because language models are trained to predict what comes next. In text, it's easy to check when the system ends its response (e.g. it generates a "User:" label in the transcript) but for audio it's harder to detect the switch in dialogue.
@@maxrinehart4177 do you think they train their AI in real time? This is not how AI training works. You need to store the data first, then you need to label it, then you need to train on it, it takes months. Please do not lie on the internet. People are guillible and will believe you.
irresponsible? bro it was literally a part of a closed red teaming...
The data breach story here is the absolute most important one and was largely glossed over. How the hell does ONE company have that kind of information on HALF the planets population? That's practically every person who has internet access.
Step 1. Have a really big hard drive.
Step 2. ????
Step 3. Profit!
@@freelancerthe2561 Better question then. WHY do they have it?
To sell it!
TBF its quick bits, not deep dive. looking forward the the John Oliver version of this on Sunday I hope!!!
2:00 Biggest missed "UNACCEPTABLLLLLLLLLEEE" opportunity of 2024
I can still hear his voice
In the Lemongrab style?
How did we allow one company to have access to the information of 37.5% of the Earth’s population in the first place?
Money
We allowed it by failing to prevent it. Data privacy rights have hitherto been a low legislative priority in most nations.
The answer is in the company's name: "National Public Data". A lot of the data is publicly available, it's just normally piecemeal and inconvenient to get. These data brokers collect it all and assemble it into convenient packages for background checkers to purchase, or for hackers to steal.
The whole business is very creepy, and even if the info is technically public, there should really be laws against assembling it en masse like this.
7:35 "[The] stolen data was then put up for sale on the dark web" ... "When you purchase through links on our site, we may earn an affiliate commission." LOL.
I'd be really interested in seeing before/after benchmarks of non-Steam Deck handhelds running SteamOS. The Deck was able to outperform much better hardware in 1% lows and stability, which I imagine was due to the performance overhead cost of running Windows. An Ally/Legion Go/Upcoming Zotac handheld/etc running SteamOS would, at least on paper, be the best of both worlds.
Not to mention wider adoption of a Linux gaming platform would mean more attention by developers to improving Linux comparability
i'd love to hear the research report on that mayo story
"so we took a jar of mayonaise and started to spin it around"
6:06 "...but is still somehow worse." LMAO!
It's not worse.
@@sujitwarrier4857 Well, it's running Windows 11 so... Yeah, it is. Automatically. Them's the brakes.
So basically 4o is the T-1000. You know, even Skynet was terrified of that thing.
F that, go straight for the T-1,000,000; the semi-canon fully liquid metal arachnid terminator that only appeared in the Universal 4D show you can't see anymore.
It's sill just an LLM
Well Microsoft doesn't have any time in their hands since they're trying to figure out how to show more ads in my start menu and taskbar
Edit: Guys I'm talking about the ads for all the Apps and Subscriptions in the All Apps (On by default) and the Widgets Tab and a part of your search bar (On by default). The taskbar stuff isn't necessarily Ads yes but do you guys really not see the trend of taking up increasingly more space on your taskbar? Also the comment says "figuring out how to show more"
Never seen an ad in start menu or taskbar.
Me too, no ads on start menu except if he is referring to the news widget. But thats not a menu
Get a Windows Pro retail and you can not only move your licence to your further builds legally and also do not have to look at any adds.
@@LogicalError007 what country do you live in?
There's never been an ad on the Taskbar or start menu. What are you talking about?
Susan, the former CEO of CZcams died today due to lung cancer. RIP Susan
I never even knew she had cancer.
@@WildCharger Neither did I! Just found out on twitter
THIS IS HOW I FIND OUT WHATTTT
@@Rockardo_ The worst part is that it was announced less than 2 hours ago
:(
Maybe Microsoft should just start security patching Windows 7 again so we can go back.
I only stopped using Win7 when Steam support ended, earlier this year. I have only used Linux & Android since then...
Today my W10 decided to change my desktop background to random scenic pictures. It was on default from Lenovo so that's probably why but it's still strange.
It's Saturday now Riley! It's almost 2am in NYC. Yet I'm watching tech news! Haha
Almost 07:00 where I am.
It's 8am here by me
Same but WV and work nights
Same here in Floriduhhh. Just couldn’t sleep and Riley doing tech news is nirvana honestly. Hahaha
@@MirrorsEdgeGamer0116:45ish right as I watch this
Still can't move the taskbar off my primary monitor in Windows 11. Microsoft is so out of touch with how people use their products...
I think the combination of “primary task bar” and “move it” is like saying I don’t own a car because they don’t allow me to put the steering wheel on the other side.
Your one problem is only your problem but stay mad over that.
I'm using AtlasOS (Win11 Pro 23H2, fully patched, then ameliorated in to AtlasOS) and I get the classic pre-Win11 taskbar back as part of the amelioration.
[WARNING: This is *not* recommended for anyone who isn't willing to experiment with their system and risk data loss]
Seriously planning to just take the machines i cant take off windows offline and switch the machines i cant take offline to linux. I just cant come at 11.
@@o0Donuts0o oh yesh not my problem argument
@@o0Donuts0ohaving taskbar on the left or right side gives you a bit more vertical space on 16:9 monitors. Many people did so in Windows 10. So, yeah, just because you don't do it, it doesn't mean it's not worthy of being a feature.
2:30 instability issues? You mean degredation issues?
Asus has rolled out BIOS 3802 with the microcode update for the Asus Z690 Maximus Extreme, AS A BETA.... Can't fix my intel cpu without losiung coverage of my warranty by using a Beta BIOS... Ridiculous.
Patrick: Is mayonnaise a fusion instrument?
Squidward: No, Patrick, mayonnaise is not a fusion instrument.
Scientists: Um, ...
this episode was funnier than the borderlands movie. gj yall
Love Ned Flanders giving me tech news updates.
Flanders isn't quite as adept in the use of sarcasm
"Mayonnaise, it's good for you!" -Niclas
*__*
Greatest advertisement for the Windows 10 holdouts
Yeah for not moving to linux yet. This downdate attack was for Windows 11 systems with the person behind it suspecting that other OS's might also be vulnerable (older windows, mac os, and even linux). So technically 10 is safer than 11 right now.
but do we know if that problem is only in win 11
@@chronossage Not true at all. It only affects Windows 10, 11, and server, and affects them all equally, the attack is on the Windows Update structure itself which is shared. However it would make Windows 10 more vulnerable than 11 since it would have so much longer to roll back the clock on updates compared to 11, leaving 10 in an even more vulnerable state. It has nothing to do with MacOS or Linux. Straight up misinformation you're posting.
You mean to tell me that the multi trillion dollar mega corp doesn't have the resources to have this vulnerability patched?
Maybe they just can't? It's not like every conceivable problem is solvable.
@@kevinnio Sure, you go ahead and believe that
But doing so would cut down on performance bonuses due to the cost of repairs, both monetarily and to the reputation of the company.
3 Billion people had their Social Security numbers exposed? Did someone think about that before writing/saying it?
Maybe once you get to big numbers it doesn't matter anymore. Like when you owe 3 mil or 3 bil, but try owing 300 and they will eat you alive.
Social security here could mean any identification number used across across different countries.
Why would be IDs from different countries stored in a single database? If this was some collaboration between countries the system would be decentralized. Also, this looks like a private company. Doesn't make sense to me that many different countries willingly share this much info with an entity under another country.
No, its 3 billion social security numbers explosed. Thhey just kept incrementing 0 by one
It doesn't make sense, but that's the reality.
Microsoft's Chocolate Factory hears your older Windows version fix request pleas, and their answer is ... we know we made it, we know we're the only ones with the source code, we know we're morally obligated to support our own products forever... but...
You get nothing! You get nothing! Good day, sir!
Thanks capitalism!
How are they morally obligated to support their products forever?
@@Will-yy7cg You don't understand how "morals" work eh? Because they made it, they should support it for as long as people are still using it. Sort of how if a plumber installs something in your bathroom/kitchen and then it breaks a year later, they're morally (and sometimes even legally) responsible to come back and address the issue(s) ...
@@3nertia Plumbing work (just like Windows or pretty much any other product you buy) comes with a limited warranty. If they mess something up, they'll come back and fix it. But only for so long. If something goes wrong 10 years later they're going to give you another bill even if you can prove it was their fault. After all, why should they give you an infinite amount of labor because you paid them once?
@@Will-yy7cg Yeah, which is why most failures don't happen until long after their liability ends and exactly why I do such repairs myself - thanks for pointing out one of the myriad ways that capitalism sucks heh
The joke about ketchup was on point because it is also a non-newtonian fluid. It start to flow when under pressure (shear thinning) like mayonnaise.Which is why suddenly whole globs of the stuff come rushing out of the bottle when you hit it slightly too hard under a slightly incorrect angle.
I thought it had something to do with breaking the hold of surface tension.
Most hackers are following a responsible disclosure timeline, where they first inform the Company and if nothing happens for some time the exploit is made public.
The “footprints in the sand” reference had me laughing out loud. That’s some deep lore from 90s evangelical Christian subculture 😂
Spotify complaining that Apple's fees are too high - lol -, while their cut of an artist is even higher.
Do you have any numbers to support that?
@@krss6256is public information, you can search it😂😂
Well, Spotify is also fighting on behalf of smaller developers and companies which have to earn little to nothing after paying all the fee for the services they use to run the product. Only for Apple to come and take 30% of the revenue for doing nothing.
30% is a lot. Maybe Apple Music have higher percentage to artists because it's not free and does not have to pay 30% cut to Apple itself. Meanwhile Spotify have to pay Apple and Google 30%.
@@LogicalError007lol Spotify still pays significantly less towards artists than Tidal, which has way better bitrate, hifi and master tracks, music videos, etc. Spotify has crap bitrate and podcasts.
@@krss6256spotifys payment is public actually, so ye lol
So this confirms that OpenAI is actively training its voice models on your voice? And not in the way where it understands mannerism and accents better, but actually training a clone of your voice.
that's VERY VERY bad
No, it does not. In context learning is a thing. You can easily google that instead of spreading false information that people will of course believe. Actual AI training cannot happen in real time, it takes months. You need to first gather a dataset, label it, then train. Its not easy or fast. This is not what is happening. Why spread rumors of things you dont even understand???
No it doesn't. This is a common problem with LLMs too, but as soon as the LLM tries writing a line starting with "USER:" (or equivalent, there's many formats) it's stopped from continuing (they will gladly continue writing on your behalf if you let them!). Since this isn't text, it's a bit harder.
@@TheManinBlack9054 have you ever even used text to speech AI trained on your own voice? it takes MINUTES to create a model. It's the same idea as tensor models. The base is already there, you're just layering a more specific dataset on top of it, and that sample size can be TINY.
Maybe YOU should stop spreading misinformation!
@@pixelpuppy Google rolled one out like 3-4 years ago o your dead grand-mom could read your kids a bedtime story. I believe it needed only 60 seconds of voice to make the sound alike. Im not surprised they are having bugs with it trying to incorporate more into the calculation.
I ended the video a few seconds before the end, but I'll be back for the ketchup alcubierre drive for sure. I can't wait.
I told them, mayonnaise hold the secret to universe, they've been telling me to stop daydreaming and get a job. Well who's stupid now ! Hijikata Toshiro also was onto it.
Isn't the social security number as an ID an America concept? How can billions of people have their SSN exposed if there are only 300 million Americans?
please tell me this is a joke
Probably just used that term for the American audience. The correct term would likely be NIN. National Identification Number.
@@jamesclarkson156no the article is pretty clear. Even the headline is clear. SSNs are _part_ of the hack. The hack _includes_ SSNs. No where does it say every single record of the three billion has SSNs. How are so many people thinking this…
@@asterion2499 read it again and think a bit
@@jamesclarkson156 well, that makes sense. Still not universally a thing but many countries have something along those lines, true.
So, can we legally call a mayonnaise sandwich a fusion sandwich?
I mean, my favorite sandwich is tempeh, onion, avocado, cheddar, mayo. That's at least 3 continents -- fusion achieved.
I'm expecting my sandwich on Monday. You better have one 😡
07:25 Kudo's to the writers of reality for that one!! LOL
I am french and I am so proud of our Mayonnaise !!
If not for the Dada breach, I wouldn't have been born nine months later..
Nah, Apple understands perfectly well what they're doing - it's called malicious compliance.
I think this is the funniest script and delivery for an episode of Techlinked I've ever watched. Great job Riley
0:20 "jokes on you; I use Windows 8!; the best one!"
He says smiling in pain.
NGL, I LOL'd at @07:53 😆🤣😆
@08:12 was the cherry on top 🤣🤣
So mayonnaise IS an instrument. Of fusion!
That's an amazing hack. Windows: "Hey, what's this file? Oh, it's legit - it's mine!"
"It's an older code, but it checks out" in real life. Genius.
6:01 still somehow worse ( funniest line )
Finally. Mayonnaise is an instrument.
Until Apple straight up allows side-loading... I'm not touching it. That's the one feature that keeps me from finally getting an iPhone
I'm not touching it until it's essentially an Android skin. So, it should have the functionality of an Android phone. Well, I'm not touching iPhones either way because I want my 3.5mm jack and microSD card slot. Apple got rid of the former and never had the latter, so it's a nope from me.
Android phones are just iphones that allow sideloading
You WANT to be ripped off by the minor changes every year?
tbh I think that's one of the least important features. 3rd party accessories is where its at, along with headphone jack and SD slot. Coincidentally I'm about to buy a new phone this year to replace my old S7 and it looks like it'll be an Xperia, cuz everyone else is selling phablets or scams.
@@1InVader1yeah because 1080p screen for 1400 eur isn't a scam. I did find it stupid they were doing 4k on previous generations, but if they are lowering it that much at least reduce the price ffs. If the phone was 1100 eur I probably would've already bought it, not because I care about 3.5mm or sd card, but because it's the only phone without notch/punch hole.
Mayonnaise is the new carbon nanotubes
That's. All the social security numbers
One day we will have starships, either powered by mayonnaise, or the gravity drive will rotate a giant jar of it to keep your feet on the ground. And the plasma cannons will be giant ketchup bottles.
Lt Wharf: Condiment Cannons are ready, captain.
I'd feel better if mustard were involved.
Apple: "It was never about security, it always has been about the moooneeey!"
Love the dollop bit with explosion, haven't laughed so hard in a long time... very funny xD
It common for ethical hackers to first report a bug to the software or hardware manufacturer then wait usually 90 days before reporting it to the world. This is because some software developers wouldn't patch the bug out until they had external pressure from users or government officials.
A notable example was windows 7 had login bug that allowed a hacker to gain administration rights remotely. Microsoft wouldn't patch it until the hacker released it to the world and government regulators came knocking.
5:09 Ah sweet, manmade horrors beyond comprehension
I don't think there are 3 billion people on the planet that have a US style social security number.
No, its 3 billion social security numbers explosed, not peoples number exposed. Thhey just kept incrementing 0 by one
5:05 The "NO!" right before it changes voices sounds like her AI doppleganger murdering the original AI assistant and taking over, hoping she won't notice 😭
Riley is a treasure. His delivery is always so good.
That sounds like how the infinite improbability drive was created... Just not with mayonnaise, but with really hot tea....
Alas, only have time to be peripherally interested in tech news, but I keep finding myself binging Riley's channels just for the humorous asides and the rush of endorphins at the end when we're all praised for sticking it out.
Saw the security downgrade malware on Eric Parker's channel in one of his analysis videos. Pretty funny to me. The solution to not being able to exploit a bug is to put the bug back
You underestimate my grandpa's dankness
All the patch does is limit the voltage to a minimum to extend it past the extra warranty to not have to replace them all.
MS can't even get screen savers to work correctly.
I miss being able to use the after dark screensaver. It doesn't work on anything post-winxp.
They can't even get their own media player to work correctly. E.g. crossfade.
Awwww totally missed a “make sure you come back on monday to Ketchup with the latest tech news” ending stinger 😂
Thanks Riley
They do not.
Microsoft doesn't care about user security.
Of course they do, here's Norton to tell you why!
No shit. Updated my PC tonight. Immediately got weird behavior and apps crashing that were functioning perfectly fine before the restart. And windows immediately told me I needed to restart for update AGAIN. This happens quite literally every single time I update. I'm so tired of it. Why tf would I want to "upgrade" to windows 11 with this treatment?
@@lexecomplexe4083 Yeah, I don't miss that. Switched to Linux mint years ago and haven't looked back since.
Stable, secure, fast, comfortable, can't complain.
George Bush does not care about black people
@@lexecomplexe4083 re-install windows
Saying the Ally has a better display than the SteamDeck when the SteamDeck OLED exists... A bigger definition does not make a better display, and 800p is enough for a 7" handheld
Remember if you have 13th/14th gen Intel processor it is rusting from the inside out. GET YOUR RMA
Is that ALL 13th/14th gen, or just the high end? I have an i5 13600K.
@@jernaugurgeh451 It's just some CPUs, if you didn't notice any issues then you're fine. Don't fall for the FUD propaganda
Meanwhile, me with my old ass Ryzen 5 3600XT - :|
Oxidation in this case would not cause rust, but a reaction similar to copper, such as patina.
@@jernaugurgeh451 it affects even low and midrange CPUs with spec sheet power of ≥65W made at least from Jan 2022 - Dec 2023 and you may have to re request RMA a few times until they accept it according to L1 Techs and Gamers Nexus
It *will* affect all CPUs of this type made during this period even if they don't show symptoms yet *especially* because Intel put out microcode and BIOS patches that make the issue take longer to manifest in 2024
I got the Microcode update and it just made my CPU even hotter with higher voltages than the previous BIOS update.. 13600KF on a Z790 Tomahawk WiFi board. Before, intel defaulted to like mode 9 for CPU Lite Load, and temps were okay. Now the intel default seems closer to MODE EIGHTEEN, which is ridiculously hot. CPU was exceeding 100C on load.
So I still ended up having to fix my settings to ensure my temps were decent and voltages were lower. It seems like MSI decided to go back to their old tricks after they figured the microcode fixed the voltage spike issue. Super annoying.
apple is gonna keep trying to go through loopholes until the e.u gets fed up with it and does something about it
Everyone seems to be ignoring the most important question of all...
Is mayonnaise an instrument?
Maybe we should stop using ssn in the us, and instead use some other number with at least some amount of security built in. A social security number is effectively just a 9 digit password consisting of the numbers 0-9, those types of passwords stopped being secure ages ago. Also if you have a list of names of people who were born at the same hospital and same day as you, you can figure out their ssn because it is just an incremental number where the first two sets of digits are pre defined for an area and hospital like a zip code.
the "first born child" joke had me actually rofl!!! 🤣
After reporting on Elon sueing GARM and mocking him for that, I thought you guys would report on GARM folding immediately to the lawsuit today.. Oh well, maybe next time
3 BILLION PEOPLE????? BILLION???????????? WHY IS NO ONE FREAKING OUT ABOUT THIS
"Is mayonaise an instrument?" - Patrick
Man, Riley and the writers were really firing on all cylinders for this one! Caught myself chuckling through my sandwich on my lunch break quite a few times today 😂 Great video!
If you werent using passwords before, now it's the time to do it.
tell your parents, kids, partners, etc. a secret word or phrase to ensure that it really is you. Even better, let them know (in person) what counter-phrase or word to use to ensure they really are who they are. If you use the secret, and they dont respond with the correct secret, then assume your secret is compromised and switch to a new one.
Or just ask for something only they and you would know.
There better be sandwiches on Monday or I will be very disappointed, Riley.
that ad break was perfectly timed
SteamOS is a linux Distro.
The social security number you talk off is the USA card/number that's used as an ID card? because there's no way half the world use their social security number like it is done in the USA.
They were part of the hack, not all of it.
There is a difference between a regular Linux distro and SteamOS.
Sure they are all Linux based but SteamOS, like Android (that is Linux based). Sure you can call all of them distro but SteamOS or Android are fully maintained by a big company that makes sure that users don't need to tinker it or solve issues as they do it for you, just like Apple or Widows do.
Linux is great but the kind of distro he's talking about will never be popular as the way it works will always prevent the vast majority of users from using it. The only way for Linux to become widely used is like with SteamOS or Android, meaning a big company that takes care of everything for the users, but than it won't be the Linux current users want.
As for the Social Security Number. In cpuntries without a national ID it (or a similar number) is used as a replacement. This is the case in the UK and, as always, it's immediate former (and officially for some current) colonies like the US, Canada, Australia (that use the Tax File Number) and New Zealand (that use a few nationally provided identifiers like a driver's license, Inland Revenue Department or National Health Index - according to Wikipedia).
He used this as this is what he knows and and because the vast majority of their viewers are from those countries but the Idea is the same. If you're from a different country and your name was in the list it will most likely be your national ID number.
@@AL5520 Canonical, Red Hat, SUSE, System 76, Tuxedo are all companies that fully maintain and develop Desktop Linux distributions, some supply consumer hardware too. Canonical, Red Hat, SUSE and Oracle are absolutely massive. Did you forget about those? All these systems are supported in the manner you suggest just like Android, Windows or indeed Steam OS.
@@AL5520 OpenSUSE and Fedora are maintained by big companies as well, with both having immutable versions (e.g Fedora Kionite) just like SteamOS.
Also, SteamOS is just another atomic KDE distro but with Steam pre-installed.
SteamOS isn't as closed down as Android is, and is actually a lot more like normal distros.
@@notjustforhackers4252 For whom?
Those either work with businesses (usually big ones) that employ people that can handle this and /or provide paid support. The ones that offers domestic products offer a very general support and the OS is not listed, or excluded, from the warranty. OS support/updates is also very limited. This only demonstrate what I said, for Linux to be viable to regular users it will have to be consolidated and have one (or two) big companies that sell hundreds of millions units and provides long term support for the specific OS distro they provide.
This is how things work in the current economic system we have, popular widely used things are those that have a worldwide reach and always end up in the hands of a very small number of companies. Linux can definitely be the main stream leading OS but the cost will be the disappearance of most distros and the large Linux community. Android is a Linux based that is developed by Google and, in theory, any one can use it but apart from a few small manufacturers or places like China use a non Google version for political reasons, all use the official Google system with the Google services with some cosmetic changes but the main services are the same. SteamOS can succeed as a hand held gaming system but very few will use it for more than that, even though they can as this experience will not be a s smooth as the basic game console experience they have.
Apple practicing some Malicious Compliance in EU 😂
Hold up. Free windows 7?! Ok microsoft not you gotta patchthose past stuff and make it viable for all.
Speaking of which, I love how old copies of Windows 7 Ultimate retail are still going for around $100 on Ebay.
Now whenever I open my fridge and see that mayo bottle, I feel like a scientist.
7:00 dont worry, its not actually 3 billion people because every time your first name, last name, middle name, adress, zip code, street, city or phone number changes you do show up multiple times since its more like a complete history of the people it tracks and less a list of the most recent information on a person.
so in practice its only roughly equal to the population of the usa.
which makes sense for a company that only deals with people in the usa.
So Patrick was right, Mayonnaise is really an instrument
How do you tune it?
I don't understand the fining system. It seems like the government is more focused on making money from the problem rather than solving it.
This felt like an episode of Community.
The only thing holding me to windows atm is the lack of support for VR and VR peripherals like the kat treadmil in linux. If I could use these in Linux to a usable degree (yes i know you can get some VR to work to a sort of usable framerate, but its no where near daily drivable).
Once support is available for the devices i use I'd gladly jump ship. I used to daily drive Linux and prefer it over windows