<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments for User Oriented Machines</title>
	<atom:link href="http://useroriented.wordpress.com/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://useroriented.wordpress.com</link>
	<description>Half-baked ideas  about friendly machines and their users</description>
	<lastBuildDate>Thu, 26 Nov 2009 10:38:25 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Symbian client for Locaccino by nilesh</title>
		<link>http://useroriented.wordpress.com/2009/08/20/symbian-client-for-locaccino/#comment-415</link>
		<dc:creator>nilesh</dc:creator>
		<pubDate>Thu, 26 Nov 2009 10:38:25 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=196#comment-415</guid>
		<description>good</description>
		<content:encoded><![CDATA[<p>good</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on A Security Flaw in Google Android by erant</title>
		<link>http://useroriented.wordpress.com/2009/02/22/a-security-flaw-in-google-android/#comment-404</link>
		<dc:creator>erant</dc:creator>
		<pubDate>Fri, 24 Jul 2009 17:40:06 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=130#comment-404</guid>
		<description>Bull corn poster: I must say that I completely disagree. The fact that programs on your PC can track your location is problematic to say the least. On your mobile device its even worse. People take their mobile devices everywhere, to more private places, than they take their laptops to. 

It is also a question of standards. Currently, there is no standard for sharing your location on PCs. However, the iPhone and the Android platforms have a built in security mechanisms for location sharing. This is excellent progress. However, while the iPhone has it right (requiring the user to decide about location sharing no matter how the location is retrieved), the Android has it wrong. The fact that location can be retrieved through WiFi positioning without the user&#039;s consent is a major loophole, which application developers can exploit. 

Finally, presenting the question of location-sharing as an all-or-nothing issue is just wrong. The fact that our location can be tracked does not mean that it should be tracked all of the time by everybody. Cars have GPS and credit card companies track our transactions, but I would be very angry if this information was sent to the wrong hands. I think you would be to.</description>
		<content:encoded><![CDATA[<p>Bull corn poster: I must say that I completely disagree. The fact that programs on your PC can track your location is problematic to say the least. On your mobile device its even worse. People take their mobile devices everywhere, to more private places, than they take their laptops to. </p>
<p>It is also a question of standards. Currently, there is no standard for sharing your location on PCs. However, the iPhone and the Android platforms have a built in security mechanisms for location sharing. This is excellent progress. However, while the iPhone has it right (requiring the user to decide about location sharing no matter how the location is retrieved), the Android has it wrong. The fact that location can be retrieved through WiFi positioning without the user&#8217;s consent is a major loophole, which application developers can exploit. </p>
<p>Finally, presenting the question of location-sharing as an all-or-nothing issue is just wrong. The fact that our location can be tracked does not mean that it should be tracked all of the time by everybody. Cars have GPS and credit card companies track our transactions, but I would be very angry if this information was sent to the wrong hands. I think you would be to.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on A Security Flaw in Google Android by Mike H</title>
		<link>http://useroriented.wordpress.com/2009/02/22/a-security-flaw-in-google-android/#comment-403</link>
		<dc:creator>Mike H</dc:creator>
		<pubDate>Tue, 14 Jul 2009 15:36:26 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=130#comment-403</guid>
		<description>Let&#039;s get this straight..

You claim that just because traffic reports have been online / on TV for years, showing the relative traffic speed, that people&#039;s cellphones are being monitored for this?

Piffle.  

Wireless networks have enough to keep up with just handing the call over from tower to tower, versus plotting average speed for individual users.  If this were the case, shouldn&#039;t I see -every- street on Google Maps &#039;traffic&#039; layer show up with a speed indicator?  Well, I only see major interstates, and even then, only in densely populated areas.

Ever look *really* closely along these highways? If not, well I&#039;ll clue you in: there are RADAR DEVCES along the roadway.  Want some photos of some on my commute every day? Just let me know!

This is how they&#039;ve been able to show freeway speeds on TV for the last decade and some.  Even back when Analog cell reception was sometimes the best available and used by the majority of callers.</description>
		<content:encoded><![CDATA[<p>Let&#8217;s get this straight..</p>
<p>You claim that just because traffic reports have been online / on TV for years, showing the relative traffic speed, that people&#8217;s cellphones are being monitored for this?</p>
<p>Piffle.  </p>
<p>Wireless networks have enough to keep up with just handing the call over from tower to tower, versus plotting average speed for individual users.  If this were the case, shouldn&#8217;t I see -every- street on Google Maps &#8216;traffic&#8217; layer show up with a speed indicator?  Well, I only see major interstates, and even then, only in densely populated areas.</p>
<p>Ever look *really* closely along these highways? If not, well I&#8217;ll clue you in: there are RADAR DEVCES along the roadway.  Want some photos of some on my commute every day? Just let me know!</p>
<p>This is how they&#8217;ve been able to show freeway speeds on TV for the last decade and some.  Even back when Analog cell reception was sometimes the best available and used by the majority of callers.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on A Security Flaw in Google Android by bull corn!</title>
		<link>http://useroriented.wordpress.com/2009/02/22/a-security-flaw-in-google-android/#comment-393</link>
		<dc:creator>bull corn!</dc:creator>
		<pubDate>Wed, 01 Jul 2009 02:42:58 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=130#comment-393</guid>
		<description>What a complete non-issue. What a bunch of nonsense. Any device which has a WIFI can locate APs and determine a location. There are huge databases of WIFI APs, their MAC addresses, and GPS coordinates, all freely available. Heck, your IP address can normally tell people the county, if not city you&#039;re in. 

If this absolute junk of a post have any credibility then every computer in the world has the exact same &quot;Security Flaw&quot;; wireless not needed. Please notice the use of scary music to build yet more hype. Of course the real answer is, &quot;BULL CORN!&quot; No sane, reasonable person considers this a security flaw.

Besides, Google uses everyone with the network provider enabled as a WIFI scanner for their network. If you&#039;re concerned about your location being reported, turn off your cell phones [android not required] (tower id with data connection is known) and turn off your WIFI (all AP, long/lat, tower id, etc, is known). How do you think they are able to map traffic flows online? Guess what, its not helicopters and companies have been doing that long before Android existed.

In short, no security flaw exists so one has to be created. If you are concerned about your locality being detected, you&#039;re only option is to not be on the Internet and never use a cell phone or credit card; and hopefully you don&#039;t have a modern car with a GPS built in. Period.</description>
		<content:encoded><![CDATA[<p>What a complete non-issue. What a bunch of nonsense. Any device which has a WIFI can locate APs and determine a location. There are huge databases of WIFI APs, their MAC addresses, and GPS coordinates, all freely available. Heck, your IP address can normally tell people the county, if not city you&#8217;re in. </p>
<p>If this absolute junk of a post have any credibility then every computer in the world has the exact same &#8220;Security Flaw&#8221;; wireless not needed. Please notice the use of scary music to build yet more hype. Of course the real answer is, &#8220;BULL CORN!&#8221; No sane, reasonable person considers this a security flaw.</p>
<p>Besides, Google uses everyone with the network provider enabled as a WIFI scanner for their network. If you&#8217;re concerned about your location being reported, turn off your cell phones [android not required] (tower id with data connection is known) and turn off your WIFI (all AP, long/lat, tower id, etc, is known). How do you think they are able to map traffic flows online? Guess what, its not helicopters and companies have been doing that long before Android existed.</p>
<p>In short, no security flaw exists so one has to be created. If you are concerned about your locality being detected, you&#8217;re only option is to not be on the Internet and never use a cell phone or credit card; and hopefully you don&#8217;t have a modern car with a GPS built in. Period.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on UML Class Diagram Lecture by nandha</title>
		<link>http://useroriented.wordpress.com/2006/11/30/uml-class-diagram-lecture/#comment-381</link>
		<dc:creator>nandha</dc:creator>
		<pubDate>Tue, 10 Mar 2009 17:12:43 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/2006/11/30/uml-class-diagram-lecture/#comment-381</guid>
		<description>the ppt has a lot more information than the diag above . . . . . .

just download and explore . . . . . .</description>
		<content:encoded><![CDATA[<p>the ppt has a lot more information than the diag above . . . . . .</p>
<p>just download and explore . . . . . .</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on A Security Flaw in Google Android by erant</title>
		<link>http://useroriented.wordpress.com/2009/02/22/a-security-flaw-in-google-android/#comment-374</link>
		<dc:creator>erant</dc:creator>
		<pubDate>Tue, 24 Feb 2009 03:29:53 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=130#comment-374</guid>
		<description>That is an interesting point. The ultimate solution is to have the semantics of every application defined, completely and accurately. As always, some kind of a trade-off should be found.</description>
		<content:encoded><![CDATA[<p>That is an interesting point. The ultimate solution is to have the semantics of every application defined, completely and accurately. As always, some kind of a trade-off should be found.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on A Security Flaw in Google Android by Paul</title>
		<link>http://useroriented.wordpress.com/2009/02/22/a-security-flaw-in-google-android/#comment-373</link>
		<dc:creator>Paul</dc:creator>
		<pubDate>Mon, 23 Feb 2009 21:17:45 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=130#comment-373</guid>
		<description>This is a really interesting and non-obvious conflict between what the program declares as its intent, or its reason for needing certain data, and what it actually does with that data.  In some ways, this related to the notion of usage control ... some guys I went to grad school with focused on this and they had really interesting frameworks for imposing what they called &quot;obligations&quot; on data: you must delete this within 30 days, you can&#039;t send this stuff to Skyhook, etc.  It&#039;s non-trivial, but what you would want here is almost an intent semantics where the program declares not what data it needs, but what it needs to do.  This could be translated in a user-understandable way to the user when he/she gets those prompts that you show.

Cool stuff.</description>
		<content:encoded><![CDATA[<p>This is a really interesting and non-obvious conflict between what the program declares as its intent, or its reason for needing certain data, and what it actually does with that data.  In some ways, this related to the notion of usage control &#8230; some guys I went to grad school with focused on this and they had really interesting frameworks for imposing what they called &#8220;obligations&#8221; on data: you must delete this within 30 days, you can&#8217;t send this stuff to Skyhook, etc.  It&#8217;s non-trivial, but what you would want here is almost an intent semantics where the program declares not what data it needs, but what it needs to do.  This could be translated in a user-understandable way to the user when he/she gets those prompts that you show.</p>
<p>Cool stuff.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Less privacy, more security by erant</title>
		<link>http://useroriented.wordpress.com/2009/02/15/less-privacy-more-security/#comment-372</link>
		<dc:creator>erant</dc:creator>
		<pubDate>Sun, 22 Feb 2009 03:03:46 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=127#comment-372</guid>
		<description>It is more of a philosophical question. Security gets better as there is more information. For example, when the source and destination of messages reaching a firewall is known. Privacy gets better when there is less information around. For example, when messages you send a Web application are anonymous.

On the practical level, there are possible compromises and trade-offs, of course.</description>
		<content:encoded><![CDATA[<p>It is more of a philosophical question. Security gets better as there is more information. For example, when the source and destination of messages reaching a firewall is known. Privacy gets better when there is less information around. For example, when messages you send a Web application are anonymous.</p>
<p>On the practical level, there are possible compromises and trade-offs, of course.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Less privacy, more security by John H.</title>
		<link>http://useroriented.wordpress.com/2009/02/15/less-privacy-more-security/#comment-371</link>
		<dc:creator>John H.</dc:creator>
		<pubDate>Sun, 22 Feb 2009 01:59:46 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=127#comment-371</guid>
		<description>Is there a conflict? I&#039;m not sure.</description>
		<content:encoded><![CDATA[<p>Is there a conflict? I&#8217;m not sure.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on News: Got my Ph.D. by erant</title>
		<link>http://useroriented.wordpress.com/2008/08/30/news-got-my-phd/#comment-367</link>
		<dc:creator>erant</dc:creator>
		<pubDate>Tue, 04 Nov 2008 22:22:12 +0000</pubDate>
		<guid isPermaLink="false">http://useroriented.wordpress.com/?p=101#comment-367</guid>
		<description>Thanks! It is never too late :-)

CMU is actually great.</description>
		<content:encoded><![CDATA[<p>Thanks! It is never too late <img src='http://s.wordpress.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>CMU is actually great.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
