• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: February 16th, 2024

help-circle
rss


  • There are many reasons why renting is better for some people and buying is better for others.

    Renting gives you the flexibility to just up sticks and leave at a known notice period. You don’t have to worry about the boiler breaking, or mould/damp, or the roof coming off (or like I’m about to have to deal with, a fence panel getting blown away in a storm) because your contact with the landlord says they’ll fix that for you.

    There should absolutely be that choice available.

    The problem, at least in the UK and probably elsewhere, is that renting is just SO expensive that it’s not possible to rent and save money, meaning that if your goal is to buy, you can’t because you can’t raise the deposit, even if paying a mortgage on a similar sized property would actually be cheaper on a monthly basis.

    Sure, you read stories about people who are wonderful landlords, they don’t raise rents, or at least, by less than market rates, they’re quick to fix any problems the tenants have, all that good stuff.

    Equally, you read stories about people who are basically renting from Satan and all the things I mentioned above take months or years to get fixed, if ever. (Slumlords are definitely people who should be put up against the wall and shot come the revolution)

    I’m assuming the vast majority are somewhere in the middle.

    But the fact that you’ll probably rent for at least some of your life shouldn’t drain all your money into someone else’s mortgage. As I said in that other post, housing of some form should be a basic human right. And the fact that individuals or companies can buy many houses and leave them empty because they can afford to have rents set so high that most people can’t afford them? That’s just wrong.












  • It’s like… I want to disagree with you, but you’re making me think.

    Why are we ok with having required services that are only provided by third party companies?

    They’re not specific - No government says you must have a Facebook or Twitter account. But you’re right - you have to have a bank account and you’ll not get far in 2024 without email.

    What about a step further? If you want a phone number, you need a landline or mobile. Both of those are only provided by private companies too…


  • While I don’t disagree with you in principle, I do find it a bit funny that you’ve picked one of the easiest services to change between as your hill.

    There’s no reason you _ have_ to use Gmail, or Hotmail. There are a billion email providers and if you have enough technical knowledge, you can even run your own (I really don’t recommend this though, it’s harder then it seems to do it safely and securely).

    If you pick a provider outside the US, your government can’t do dick about getting it shut down, and if you pick one in a particularly privacy-conscious country, you can have everything encrypted to the point where the provider themselves can’t read your messages.

    Also, I assume this is similar in the States, but I’ve seen government IT projects in the UK and some of them are truly awful. I wouldn’t necessarily trust them to look after important emails for me. Plus a single source of email would be an awfully tempting target for hacker groups around the world.




  • I want to use my main mail address everywhere, even public places.

    No you don’t. It’s not quite as simple, but buy your own domain, get an email provider such as Fastmail that will let you use a catch-all, then use a unique address for every site you visit.

    Then if one starts receiving spam, you can block that specific address and voila, no more spam. Plus you know what sites have either poor customer detail hygiene or are actively selling your details.


  • Ok, so not great, but not terrible.

    Firstly you had to fall for social engineering to get the dodgy app via TestFlight. Later on, you had to fall for social engineering to get the dodgy app via you installing an MDM profile on your own device. In the future, you’ll doubtless be able to get socially engineered to sideload it.

    Currently, in the UK (I don’t know what this is like in other countries), we get regular prompts from our banks not to share one-time codes with anyone, not even bank employees. And not to transfer money to ‘safe’ accounts, even if someone claiming to be the bank or the police tell you to. They’ll just need to update those to also say “We at Bank will never ask you to install test or special versions of our app, or update them anywhere other than the official Apple/Google app store”.

    This is a social engineering problem, not really an iOS (or Android) technical one.

    EDIT: The article is suspiciously vague one one point:

    Once installed on either an iPhone or an Android phone, GoldPickaxe can collect facial recognition data, identity documents and intercepted text messages, all to make it easier to siphon off funds from banking and other financial apps. To make matters worse, this biometric data is then used to create AI deepfakes to impersonate victims and access their bank accounts.

    What ‘facial recognition data’ is it gathering, and how? As I understand it, FaceID is processed in a secure enclave, and regular apps don’t have access to that - they send a ‘verify this person’ request, the phone itself triggers a FaceID scan, does the verification itself and sends back a ‘yes, all good’ reply to the app - the app itself does not get FaceID or biometric data. So unless it’s just doing something like using the camera to take some photos or videos of the user, I’d like to know what the article is talking about there…