BC INTERNET
Saved by @jay_millerjay

Well, this should be a depressing read -- notably because the UK and the US are both terrible when it comes to data protection, but the UK appears to be getting a pass. So much for 'adequacy'.

 A few initial thoughts on the Draft Decision on UK Adequacy: https://t.co/ncAqc93UFm

The decision goes into great detail about the state of the UK surveillance system, and notably, "bulk acquisition" of data, and I think I get their argument. /1
For one, while the UK allows similar "bulk powers," it differs from the US regime both in terms of proportionality, oversight, and even notice. Some of this came about after the Privacy International case in 2019 (Privacy International) v Investigatory
Powers Tribunal [2019]) /2
Whereas, other bits were already baked in by virtue of the fact that the Human Rights Act is a thing (This concept doesn't exist in the US; rather we hand-wave about the Constitution and Bill of Rights, and then selectively apply it) /3
For example, UK bulk surveillance (I'm keeping this broad, but the draft policy breaksk it down), substantially limits collection to three agencies: MI5, MI6, and GHCQ). By contrast, it's a bit of a free-for-all in the US, where varying policies /4
and a general lack of oversight, mean that foreign and domestic law enforcement (NSA, CIA, FBI, DHS, LLE) basically do bulk collection of US and non-US citizens on the regular. And only a handful of these efforts go through any sort of judicial review (e.g., the FISC). /5
By contrast, UK surveillance has multiple levels of oversight - including from the ICO (Sec. 2.6 of the draft), the Judicial Data Protection Panel (Sec. 2.6.3), the Investigatory Powers Commissioner (Sec. 3.3.3.2), and Parliament (Sec. 3.2.3.4) /6
(I'm skipping a few, because there's a lot of oversight!). One thing that also exists is direct rights of redress by data subjects -- primarily through the ICO (Sec. 3.2.4). Unlike in the US, where the FISC is fairly hollow and a rubber-stamp, the ICO actually /7
seems to have some enforcement teeth. (Sec. 3.2.6, 3.2.3.1), and there's a right of redress against the ICO if they become too rubber-stampy (Sec. 2.6.4). But there's also process through the Investigatory Powers Tribunal (3.3.4.2), and the European Court of Human Rights /8
This is, by contrast, to the nearly non-existent redress rights in the US noted in the Schrems II decision. Hell, data subjects can't even find out if they've been surveilled due to gag orders tied to CLOUD Act and FISA orders. /9
Finally, there's collection and retention obligations that (AFAIK) don't exist in the US. (Sec. 3.3.1.1.1), with strict periods of collection (E.g., 3.3.1.1.2 for telecom data, 12 months for communications data).

Honestly, there are way more safeguards /10
than I originally realized.

That said, I'm saying the UK is the best system, or that it's all roses and sunshine for data subjects. But on a preliminary level, I think the EC's draft proposal is well thought out and provides clear insight /11
As to why the concerns of Schrems II are easier to address/satisfy within the UK regime, compared to that of the US.

That said, I'm no expert. What am I missing? What didn't I consider?
@threadreaderapp unroll pls

More from Internet

Andy Pavlo
Andy Pavlo
@andy_pavlo
If you're interested in DB internals, stop what you're doing and watch @CMUDB Quarantine Talk from Nico+Cesar about @SQLServer's Cascades query optimizer: https://t.co/FCdsbHHEaD

Many talks this semester were good. This one is the best. My thread provides key takeaways

[6:50] Microsoft hired Goetz Graffe in the 1990s to help them rewrite original Sybase optimizer into Cascades. This framework is now used across all MSFT DB products (@SQLServer, @cosmosdb, @Azure_Synapse).

[14:43] The optimizer checks whether it has stats it will need before cost-based search. If not, it blocks planning until the DBMS generates them. This is different than other approaches we saw this semester where DBMS says "we'll do it live!" with whatever stats are available.

[21:05] Their Cascades' search starts small/simple and then they make decision on the fly whether to expand search based on the expected query runtime and performance benefit from more search.

[26:33] They explicitly have a property for Halloween Problem. Operators specify whether they protect from it and then optimizer ensures property is satisfied. This is mindblowing. I have never thought about using the optimizer for this but it makes sense.
INTERNET
David Evans
David Evans
@pentops4
Years before Andy Grove was attributed with the phrase:

"Whatever can be done, will be done"

A lot of us technologists assumed this was the case anyway.

It's a truism.

What if we could track every person on the planet in real time?

Or at least everyone in a major city

🤔🔮


So, given someone has this idea.

Then the only question is can it be done.

Well, we're already installing all the tech to do this for autonomous vehicles, drones and smart city infrastructure.

It really wouldn't be a huge leap to do that for people.

But how might that be possible 🤔

Sure we can already do it with phones right, but not everyone has a phone and sometimes the batteries die blah blah.

Could we do it in a way that it was difficult to circumvent, and always active?

Well, maybe we could if we put our thinking caps on about the problem.

--- this line intentionally left blank ---

Now I'm going to enter the wild world of wild speculative futurism, so take everything else with a pinch of salt 🧂

--- this line intentionally left blank ---

Turns out cell phone towers pinpoint the location of your phone as part of how they work.

And then as you move around you switch from one tower to another.

I think most people get this.

Something like the image below
INTERNET
Advertisement
David Kaplan
David Kaplan
@depletionmode
Linux code injection paint-by-numbers.

Can we launch a process that looks one way to (superficial) auditors but is, in fact, entirely different? (Think process hollowing and the like on Windows).

Firstly, how are processes created and what does related auditing look like?

The most common pattern is fork() → execve(). Where the fork() syscall create a duplicate of the running process context and execve() overlays a copy of the target program onto that context.

After calling fork(), we’ll have two processes, the original one and a new - duplicated - one (with a new pid).

Control will return from fork() to both process instances. In the child process, the return value will simply by 0, in the parent it will hold the pid of the child.

Thus we can determine whether we are running in the child context and call execv() accordingly, while allowing the parent to continue.


Now, let’s take a look at where the auditing hooks lie. From calling execve(), we’ll eventually land up in exec_binrpm().
INTERNET
Pasquale "Pat" Scopelliti
Pasquale "Pat" Scopell...
@ThyConsigliori
Prepping for today's thread, the story of the CURRENT CYBERWAR is clearly overwhelming. J.E. Dyer @OptimisticCon links us to this story. Just one quote to
INTERNET
Logan | Landing Pages \U0001f4da
Logan | Landing Pages ...
@LoftedLearning
7 Tactics To Increase Engagement on Your Threads

// THREAD //

People are constantly seeing the same stuff over and over again on their timeline.

This is why you need to learn how to stand out.

When they’re scrolling you need to grab their attention and reel them into something they want to read.

If you think about it, your job is just to get them to click your tweet. Once that’s done, they’ll be reading your other ones in no time.

In order to get them to click you need to show one of these 7 things:
> authority
> experience
> value
> lesson
> mystery
> opinion
> numbers

The easiest way to write headlines based off of these things is to write out your audience’s objections.

Then, indirectly counter their objection within your headline (sounds cool right?).

An old copywriting trick 😉

1. Authority

“Why should I read your thread? What have you done that makes me trust you”

Headline:
“$97,840 in Profit This Month Using This 5-Step Plan to Make Landing Pages”

Authority shows people you know what you’re doing by telling them a true stat/claim.
INTERNET , TWITTER

You May Also Like

William
William
@wimgz
🛠️ OPEN BUSINESS IDEAS 🛠️

Below a list of business/product ideas I had or read about.

They are worthless if they remain ideas and if you don't overcome the challenges in building them, so feel free to copy / tweak / implement them!
👇

Better: use one and make a MVP during the #24hrstartup challenge!

😻 Product Hunt Time
A clock that displays the time it is @ProductHunt
Also displays what you should do and where you should post, at each specific time during your launch

🚧 IndieCrunch - VC free tech news
Techcrunch but only for bootstrapped companies

🎧 Kickstarter for audiobooks
A lot of awesome books are not available as audio.
Crowdfund the money to buy the audio rights + a voice actor
MAKERS
Anshul Pandey
Anshul Pandey
@Anshulspiritual
SHAKTA DHARMA AND THEIR ACHARYAS

Śhākta or Shakti or Devi pooja is not a new upasana. It is being carried out right from the time of Vedic period. Puran's tell us that Rishi Vashishth would worship Tara devi. Parshuram ji worshipped Tripura devi,


Agastya learned the secrets of Shri Vidya from Vishnu ji in Hayagriva avtaar. Bhagwan Ram, Laxman and Krishna too learned the tantrik vidya. Even Rig Ved 7.103.5 Sayan Bhasya also mentions about Śhākta/शाक्त(शाक्तस्येव शक्तिमतः).

Then we find that in the Harrappan excavations many figurines depicting Shakti were found. So in that age too, which was supposedly an urban city shakti was being worshipped. So naturally this tradition would be prevalent in rural areas too.

It is wrong to say that shakti puja originated from Bengal although it was popular there. Matsyendranath received this vidya from Maheshwari herself in Kamrup. We know that Shakti pooja is practised all over India.

Not much is known about the Śhākta saints in other parts of India in the middle ages.

Adi Shankaracharya wrote Pramanech saar named book on tantra and Anand lahri book on Devi strotras. Then there were Acharya Shankar, Bhaskar Rai, Laxman, Deshikendra, Raghav Bhatt, Krishnand,
ALL
Advertisement
Lu_lu\U0001f498
Lu_lu💘
@luciame16
Some thoughts on episode 53 of #Hercai

Love,that is not real,has no passion. Its fire turns into embers, it doesn’t not smell. The day, the night, the moon&year burn without sun, light, comfort&sleep.
Ömer Hayyam

#Reyyan #Miran #ReyMir #EbruŞahin #AkınAkınözü
#HercaiThoughts


1
PRAISE
The praise in this episode goes foremost to Ebru because she portrayed Reyyan so realistically like a woman who truly lost her unborn child. I was in awe and pain watching her along the episode, all her breakdowns and tears were so real.
#Hercai

2
Of course also Akın took his part and did his part masterfully, but he rightfully was the one who stood aside in this specific episode that needed to be about Reyyan’s pain and thus concentrated on Ebru.
#Hercai

3
And last but not least, if I say thank you to something that B gave us this year, then it’s to have Ali as our director. Also in this episode we saw the artistic eye behind every shot and I loved it.
#Hercai

4
OVERALL COMMENT
I don’t know who wrote ep. 52 but ep. 53 was going strong once more on symbols: roses, stones, fire and trees were incorporated and especially the ReyMir dialogues were written very well. I truly loved every ReyMir scene.
So let's get into it.
#Hercai
CULTURE
Christina Warren
Christina Warren
@film_girl
A brief thread on Jovan Hutton Pulitzer, the crazy con man who is now claiming to have hacked into the Georgia voting machines in Fulton County. 90s kids and tech aficionados might remember Jovan as the inventor of the CueCat, the dumbest gadget of all time.

Also, for anyone who wants to claim that Jovan Hutton Pulitzer (not his given name, but one he changed legally after the CueCat debacle) invented QR Codes: he did not. Like that other right-wing crazy man who claimed to have invented email, Jovan didn’t invent QR Codes.

He did invent the CueCat, a product that somehow raised $185 million dollars for a tethered barcode scanner for magazines and newspapers, so you could get ads from your ads. As I said, the dumbest product of all time. Good backup barcode scanners after they were hacked, however

Oh, that’s another thing. When CueCat was a thing, its systems were hacked. I guess that’s what makes Jovan a security expert. His bankrupt company from 20 years ago was hacked and widely mocked. He’s a genius.

In recent years, Jovan pivoted to being a treasure hunter who was featured on and widely mocked on Curse of Oak Island, because the man is insane.
POLITICS
The Chartians
The Chartians
@chartians
Took me 5 years to get the best Chartink scanners for Stock Market, but you’ll get it in 5 mminutes here ⏰

Do Share the above tweet 👆

These are going to be very simple yet effective pure price action based scanners, no fancy indicators nothing - hope you liked it.

https://t.co/JU0MJIbpRV

52 Week High
One of the classic scanners very you will get strong stocks to Bet on.

https://t.co/V69th0jwBr

Hourly Breakout
This scanner will give you short term bet breakouts like hourly or 2Hr breakout

Volume shocker
Volume spurt in a stock with massive X times
SCREENERS , ALL , CHARTLINK SCREENERS