The Daily Parker

Via Bruce Schneier, your car does not respect your privacy anymore:

Mozilla recently reported that of the car brands it reviewed, all 25 failed its privacy tests. While all, in Mozilla's estimation, overreached in their policies around data collection and use, some even included caveats about obtaining highly invasive types of information, like your sexual history and genetic information. As it turns out, this isn’t just hypothetical: The technology in today’s cars has the ability to collect these kinds of personal information, and the fine print of user agreements describes how manufacturers get you to consent every time you put the keys in the ignition.

Companies claim ownership in advance, so that you can’t sue if they accidentally record you having sex in the backseat, for example. Nissan claimed in a statement that this is more or less why its privacy policy remains so broad. The company says it "does not knowingly collect or disclose customer information on sexual activity or sexual orientation," but its policy retains those clauses because "some U.S. state laws require us to account for inadvertent data we have or could infer but do not request or use." Some companies Engadget reached out to — like Ford, Stellantis and GM — affirmed their commitment, broadly, to consumer data privacy; Toyota, Kia and Tesla did not respond to a request for comment.

This gets even more complicated when you think about how cars are shared. Rental cars change drivers all the time, or a minor in your household might borrow your car to learn how to drive. Unlike a cell phone, which is typically a single user device, cars don’t work like and vehicle manufacturers struggle to address that in their policies. And cars have the ability to collect information not just on drivers but their passengers.

Consumers are effectively hamstrung by the state of legal contract interpretation, and manufacturers are incentivized to mitigate risk by continuing to bloat these (often unread) agreements with increasingly invasive classes of data. Many researchers will tell you the only real solution here is federal regulation. There have been some cases of state privacy law being leveraged for consumers' benefit, as in California and Massachusetts, but on the main it's something drivers aren't even aware they should be outraged about, and even if they are, they have no choice but to own a car anyway.

Note to self: no more don't start having sex in my Prius.

It's 22°C and sunny right now, making me wonder what's wrong with me that I'm putting together a software release. I probably should fire off the release, but I'm doing so under protest. I also probably won't get to read all of these things I've queued up:

• Peter Hamby expresses concern about the rise of the illiberal left in the younger generation.
• Despite the ravings of Fox News and other right-leaning propagandists, the US economy is actually doing better right now than at any point since Obama was in office, says Paul Krugman.
• Greg Sargent slow-claps "the quiet vindication of Hakeem Jeffries."
• Writing in Lawfare, Susan Landau rolls her eyes that law enforcement has turned to scaring people about child sexual abuse in their latest gambit to break end-to-end encryption.
• Archaeologist and sculptor Oscar Nilsson has reconstructed the face of a 14-year-old Inca girl ritually sacrificed in the Andes about 500 years ago.
• An off-duty pilot riding in the jumpseat of an Alaska Airlines E175 attempted to trigger the fire suppressors on the plane's engines Sunday. No one knows why.
• A literature review study has shown convincing evidence my generation really did have a lot more autonomy growing up.
• Google has changed its maps colors for some users—they're still rolling out the changes.
• Today is the 20th anniversary of the Concorde's last revenue flight. Maybe Virgin Galactic will get its SST off the ground someday?

Finally, Stan's Donuts will open a new store just three blocks from the apartment I moved out of one year ago today. I might have to stop in soon. I will not, however, wash them down with CH Distillery's latest abomination, Pumpkin-Spice Malört.

Other than getting a little rained on this morning, I've had a pretty good day. But that didn't leave a lot of time to catch up on any of these before I started a deployment just now:

• Heather Cox Richardson examines US history through the lens of a never-ending conflict between "two Americas, one based in religious zeal, mythology, and inequality; and one grounded in rule of the people and the pursuit of equality."
• Josh Marshall ponders the difficulty of covering the XPOTUS's increasingly ghastly behavior in the "both-sides" journalism world we inhabit.
• James Fallows zooms out to look at the framing decisions that journalists and their publishers make that inhibit our understanding of the world. Like, for example, looking at the soon-to-be 4th time Republicans in Congress have shut down the Federal government and blaming all of Washington.
• Fallows also called attention to Amna Nawaz's recent interview with authoritarian Turkish president Recep Erdogan in which she kept her cool and her focus and he...didn't.
• Speaking of the impending Republican torching of the US Government (again), Krugman looks at the two clown shows in the party, but wonders why "everyone says that with the rise of MAGA, the G.O.P. has been taken over by populists. So why is the Republican Party’s economic ideology so elitist and antipopulist?"
• The Supreme Court has once again told the Alabama legislature that it can't draw legislative maps that disenfranchise most of its black citizens. Which, given the state's history, just seems so unlike them.
• The Federal Trade Commission and 17 US States have sued Amazon for a host of antitrust violations. “A single company, Amazon, has seized control over much of the online retail economy,” said the lawsuit.
• Monica Hesse dredges all the sympathy and understanding she can muster for XPOTUS attorney Cassidy Hutchinson's memoir. NB: Hutchinson is 27, which means I am way overdue for starting my own memoir.
• Chicago Sun-Times columnist David Roeder complains that the CTA's planned Red Line extension to 130th Street doesn't take advantage of the existing commuter rail lines that already serve the far south side, but forgets (even as he acknowledges) that Metra and the CTA have entirely different missions and serve different communities. Of course we need new regional transport policies; but that doesn't mean the 130th St extension is bad.
• Software producer Signal, who make the Signal private messaging app, have said they will leave the UK if the Government passes a "safety" bill that gives GCHQ a back door into the app.
• Molly White shakes her head as the mainstream press comes to terms with something she's been saying for years now: NFTs have always been worthless. Oh, and crypto scored two $200-million thefts this week alone, which could be a new record, though this year has already seen $7.1 trillion of crypto thefts, hacks, scams, and other disasters.
• After almost 20 years and a the removal of much of an abandoned hospital in my neighboorhood, the city will finally build the park it promised in 2017.

Finally, I rarely read classical music reviews as scathing as Lawrence Johnson's evisceration of the Lyric Opera's Flying Dutchman opening night last Friday. Yikes.

Inner Drive Technology WHQ cooled down to 14°C overnight and has started to climb up into the low-20s this morning, with a low dewpoint and mostly-clear skies. Perfect sleeping weather, and almost-perfect walking weather! In a few minutes I'm going to take Cassie out for a good, long walk, but first I want to queue up some stuff to read when it's pissing with rain tomorrow:

• A Wall Street Journal poll (which the XPOTUS funded in part) appears to have bad news for the Biden re-election campaign, not least because 52% of voters surveyed believe the laziest person to hold that office since Harding and the dumbest since...well, Harding..."has a strong record of accomplishments."
• The Wisconsin Republican Party has given up any pretense of respect for the voters by threatening to impeach the newly-elected Democratic state supreme court justice Janet Protasiewicz before she has even heard a single case. Says Jamie Bouille, "In the absence of national regulation — and against the backdrop of a federal Supreme Court that is, at best, apathetic on issues of voting rights — states are as liable to become laboratories of autocracy as they are to serve as laboratories of democracy."
• Molly White may not shed any tears for Sam Bankman-Fried's difficulties getting comfortable in prison, but our prison system really does create dangerous conditions for people who don't have armies of lawyers fighting for them.
• Elizabeth Spiers has had enough of men who double down on reprehensible behavior, and the other men who let them.
• The Chicago Tribune looks at Underground Railroad sites around the city.
• Charlie Warzel laments that "streaming has reached its sad, predictable fate." Vulture reached that conclusion back in June, when it reported on studio executives having reached that conclusion in March. And then the strike happened...
• The Economist's Bartleby column provides a how-to guide on "networking for introverts."
• James Fallows reviews former Naval Intelligence officer Michael McLaughlin's book on the cyber-war that you and I are already fighting.
• The UK set a new record this afternoon with its 7th consecutive day of 30°C temperatures, an unprecedented (at least since the 1880s) occurrence. "Before that, according to Met Office data, the UK has only had three consecutive days of 30°C weather in September on four previous occasions: 1898, 1906, 1911 and 2016," the Guardian reports. "Saturday was named the hottest day of 2023 in the UK with 32.7C recorded at Heathrow." (This is not normal.)

Finally, my indoor Netatmo base station has picked up a funny mid-September thing: cicadas. The annual dog-day cicadas have only a few more days to get the next generation planted in the ground, so the remaining singletons have come out this morning instead of waiting for dusk. As you can see, the ones in the tree right outside the window closest to the Netatmo have been going at it since dawn:

The predominant species in my yard right now are neotibicen pruinosus, or "scissor-grinder" cicadas. But we also have our share of other species in Northern Illinois. And, of course, next May: Brood XIII comes out. That'll be fun (especially for Cassie)!

It never stops, does it? And yet 100 years from now no one will remember 99% of this:

• A group of psychiatrists warned a Yale audience that the XPOTUS has a "dangerous mental illness" and should never get near political office again. Faced with this obvious truth, 59% of Republicans said they'd vote for him in 2024.
• Timothy Noah looks at the average age of the likely nominees for president next year (79) and the average age of the US Senate (60-something) and concludes our country needs a laxative. (Literally so in millions of cases.) Good thing US Representative Nancy Pelosi (D-CA) said she'll run again next year, after she turns 84. Unfortunately, while I agree in principle with Andrew Sullivan's desire to see President Biden "leave the stage," all the alternatives seem worse to me.
• Senate Majority Whip Dick Durbin (D-IL, age 78) has gotten some pushback from an even bigger dick, Justice Samuel Alito (R-$), because the Senator said it would look unethical if the Justice participated in a case involving a reporter who interviewed the Justice about his unethical behavior. But Samuel says he was ethical; and, sure, he is an honourable man.
• Adolescent narcissist Elon Musk cut Internet coverage to the Ukrainian armed forces just as it started a surprise attack against Russia's Black Sea fleet, apparently at the behest of a Russian official. Josh Marshall calls this clear and convincing evidence that "[y]ou simply can’t have critical national security infrastructure in the hands of a Twitter troll who’s a soft touch for whichever foreign autocrat blows some smoke up his behind. But that's what we have here."
• The Federal Transit Administration has finally committed $2 bn to expanding Chicago's Red Line subway to 130th St., a project first proposed in (checks notes) 1969. And who says the United States has the worst public transit funding in the developed world, other than all the urbanists who have ever studied the problem?
• What do you get when you cross ChatGPT with Google Assistant (or Alexa or Siri)? Don't worry, Bruce Schneier says we'll find out soon enough.
• "Boundaries" has a specific, limited meaning in psychology, not even close to the way most people use the word: "while the proliferation of therapeutic terms has given people access to necessary mental health tools, people may overgeneralize concepts such as boundaries and triggers, and use them to rationalize certain behaviors."

Finally, Guinness set the opening date for its new brewery in Chicago's Fulton Market district: Thursday September 28th. The Brews and Choos Project will visit soon thereafter.

Via Molly White, thieves made off with data from LastPass containing the encrypted passwords from 25 million users. They still have to crack the vaults to get at the data, which takes a long time, but Brian Krebs worries they have already succeeded in cracking a few of them:

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Armed with your secret seed phrase, anyone can instantly access all of the cryptocurrency holdings tied to that cryptographic key, and move the funds to anywhere they like.

Which is why the best practice for many cybersecurity enthusiasts has long been to store their seed phrases either in some type of encrypted container — such as a password manager — or else inside an offline, special-purpose hardware encryption device, such as a Trezor or Ledger wallet.

[Security researcher Nick] Bax said the only obvious commonality between the victims who agreed to be interviewed was that they had stored the seed phrases for their cryptocurrency wallets in LastPass.

If you use LastPass, MetaMask's lead project manager Taylor Monahan urges you to update your credentials now:

According to MetaMask’s Monahan, users who stored any important passwords with LastPass — particularly those related to cryptocurrency accounts — should change those credentials immediately, and migrate any crypto holdings to new offline hardware wallets.

“Really the ONLY thing you need to read is this,” Monahan pleaded to her 70,000 followers on Twitter/X: “PLEASE DON’T KEEP ALL YOUR ASSETS IN A SINGLE KEY OR SECRET PHRASE FOR YEARS. THE END. Split up your assets. Get a hw [hardware] wallet. Migrate. Now.”

If you also had passwords tied to banking or retirement accounts, or even just important email accounts — now would be a good time to change those credentials as well.

Another idea: don't hold your assets in crypto, which, unlike real banking, has no protection against theft and few ways to recover stolen funds.

The temperature has crept up towards 34°C all day after staying at a comfortable 28°C yesterday and 25°C Friday. It's officially 33°C at O'Hare but just a scoshe above 31°C at IDTWHQ. Also, I still feel...uncomfortable in certain places closely associated with walking. All of which explains why I'm jotting down a bunch of news stories to read instead of walking Cassie.

• First, if you have tomorrow off for Labor Day, you can thank Chicago workers. (Of course, if you have May 1st off for Labor Day, you can also thank us on the actual day that they intended.)
• A new study suggests 84% of the general population want to experience an orchestral concert, though it didn't get into how much they want to pay for such a thing. (You can hear Händel's complete Messiah on December 9th at Holy Name Cathedral or December 10th at Millar Chapel for just $50!)
• An FBI whistleblower claims Russian intelligence co-opted Rudy Giuliani in the run-up to the 2020 election—not as a Russian agent, mind you, just as a "useful idiot."
• Rapper Eminem has told Republican presidential (*cough*) candidate Vivek Ramaswamy—who Michelle Goldberg calls "very annoying"—to stop using his music in his political campaign.
• The government of Chile has promised to investigate the 3000 or so disappearances that happened under dictator Agosto Pinochet, though they acknowledge that it might be hard to find the ones thrown out of helicopters into the sea, or dropped down mine shafts. And with most of the murderers already dead of old age, it's about time.
• Julia Ioffe wonders when the next putsch attempt will get close to Moscow, now that Prigozhin seems to be dead.
• About 70,000 people continue to squelch through ankle-deep mud at Black Rock City after torrential rains at Burning Man this weekend. (I can't wait to see the moop map...)
• University of Michigan Law Professor Nicholas Bagley had a cogent explanation of why pharmaceutical companies don't want to negotiate drug prices with Medicare. (Hint: record profits.)
• Switching Chicago's pre-World War II bungalows from gas to electric heating could cut the city's GHG emissions by 14%.
• Molly White's weekly newsletter starts off with some truly clueless and entitled behavior from Sam Bankman-Fried and gets weirder.
• Zoning laws, plus the inability of the Portland, Ore., government to allow variances in any useful fashion, has condemned an entire high school to send its kids an hour away by bus while the building gets repaired, rather than just across the street to the community college many of them attend in the evenings. (Guess what skin color the kids have. Go on, guess.)
• A group of hackers compromised a Portuguese-language "stalkerware" company and deleted all the data the company's spyware had downloaded, as well as the keys to the compromised phones it came from, then posted the company's customer data online. "Because fuck stalkerware," they said.
• Traffic engineers, please don't confuse people by turning their small-town streets into stroads. It causes accidents. Which you, not they, have caused.
• Illinois had a mild and dry summer, ending just before our ferociously hot Labor Day weekend.
• James Fallows talks about college rankings, "which are marginally more encouraging than the current chaos of College Football."

Finally, I'll just leave this Tweet from former labor secretary Robert Reich as its own little monument to the New Gilded Age we now inhabit:

Three multibillionaires now own more wealth than the bottom 90% of America – 291 million Americans. This is what oligarchy looks like.

— Robert Reich (@RBReich) September 3, 2023

An entertainer, a criminal, and an architect died this week, and we should remember them all.

The most notable person to die was singer Tony Bennet, 96:

His peer Frank Sinatra called him the greatest popular singer in the world. His recordings – most of them made for Columbia Records, which signed him in 1950 – were characterized by ebullience, immense warmth, vocal clarity and emotional openness. A gifted and technically accomplished interpreter of the Great American Songbook, he may be best known for his signature 1962 hit “I Left My Heart in San Francisco.”

In later years, he memorably dueted on the standard “Body and Soul” with Amy Winehouse, and released a full-length duet album with Diana Krall and a pair of recordings with Lady Gaga. Even after the revelation in early 2021 that he had been diagnosed with Alzheimer’s, he remained active.

Kevin Mitnick, 59, also died this week, but he won't be quite as missed as Bennet:

Described by The New York Times in 1995 as “the nation’s most wanted computer outlaw,” Mr. Mitnick was a fugitive for more than two years.

He was sought for gaining illegal access to about 20,000 credit card numbers, including some belonging to Silicon Valley moguls; causing millions of dollars in damage to corporate computer operations; and stealing software used for maintaining the privacy of wireless calls and handling billing information.

Ultimately, he was caught and spent five years in prison. Yet no evidence emerged that Mr. Mitnick used the files he had stolen for financial gain. He would later defend his activities as a high stakes but, in the end, harmless form of play.

At the time of Mr. Mitnick’s capture, in February 1995, the computer age was still young; Windows 95 had not yet been released. The Mitnick Affair drove a fretful international conversation not just about hacking, but also about the internet itself.

Today, 20,000 credit card numbers wouldn't even rate a single paragraph in the Times. How things have changed.

Finally, Chicago architect Richard Barancik, 98, left his mark on the world not just by designing iconic bowling alleys, but also as the last of the so-called "monument men" who repatriated art that the Nazis stole in the 1930s and 40s:

He was the last-known surviving member among nearly 350 "Monuments Men" who recovered art looted in Europe during World War II and shot to prominence with a 2014 film directed by George Clooney and starring Matt Damon, Bill Murray and Cate Blanchett. Barancik hadn't talked much about the assignment before the movie, his daughter said, but once it came out, he was inundated by letters from schoolchildren and by autograph seekers and "World War II nuts."

By then, he had retired from an architecture career that paralleled the Gold Coast's post-war residential development, with high-rises sprouting on Lake Shore Drive and farther inland, readying the Near North Side for the yuppie invasion. His projects included 990 and 1212 N. Lake Shore Drive, office buildings 142 and 211 E. Ontario, and the 44-story and 73-townhouse development at Eugenie and Wells streets in Old Town.

Barancik also pursued suburban office complexes like the East-West Tech Park in Naperville and Woodfield Lakes in northwest suburban Schaumburg, and he designed Chicago Public Schools' Willa Cather Elementary School on the West Side, his daughter said. His bathhouses at Adeline Jay Geo-Karis Illinois Beach State Park near Zion feature wavelike undulating roofs.

In media vita morte sumus. Requiescat in pacem.

I had one of those "why am I working inside today?" moments when I got my lunch a few minutes ago. The obvious answer—Cassie needs dog food—doesn't always work when it's 27°C and sunny. It did get me to re-evaluate my dinner plans, however. Cooking pasta just doesn't appeal when my favorite sushi place has an outdoor patio that allows dogs.

Meanwhile, I'm adding a feature that might take the remainder of this sprint as it completely changes how we store and present 3rd-party calculation results to the end user. Previously we just presented the user's most recent calculation on the results page. But our pesky users seem to want to see their previous calculation results as well. Since we were throwing those away when the user made a new calculation, I have some work to do.

Meanwhile:

• Via Bruce Schneier, the Gandalf AI app lets you socially-engineer an AI to get its password. Schneier himself hasn't gotten past Level 7, so good luck to you.
• Tyler Austin Harper sees an uncomfortable connection between the movies Oppenheimer and Barbie, both of which open this weekend.
• Office furniture brokers have a glut of inventory as post-pandemic return-to-office plans get slower and slower.
• Today is the anniversary of Massachusetts Commodore Dudley Saltonstall's incompetent attack on the British garrison at present-day Penobscot, Maine, in 1779, that should remind all y'all commando wannabes what happens when amateurs attack a vastly superior professional force. (Also a reminder that Benjamin Franklin's diplomacy really won our War of Independence, not George Washington's soldiering.)
• In what can't be politely described, so I'll call it a dick move, Universal Studios denuded a stand of trees along Barham Blvd. in Los Angeles to harass the striking writers and actors who had used the trees for shade in the 32°C heat. And the suits continue to wonder why everyone roots for the talent.
• Of course, the suits broke the business in the first place, so maybe that has more to do with it.

Finally, now that Cassie has had her birthday photo and her sardine dinner, it's time for her bath. Wow, does she need one. And she's going to get one tomorrow morning, traumatizing though it is for her.

Corporate IT has decreed that all passwords must conform to the following rules:
https://neal.fun/password-game/

Keep safe out there!