New York governor Kathy Hochul signed landmark climate legislation into law last week, showing how states can keep holding polluters accountable even when President-elect Donald Trump rolls back environmental protections.
Technology
Is your iPhone sharing photos with Apple by default?
Sure enough, when I checked my iPhone 15 Pro this morning, the toggle was switched to on. You can find it for yourself by going to Settings > Photos (or System Settings > Photos on a Mac). Enhanced Visual Search lets you look up landmarks you’ve taken pictures of or search for those images using the names of those landmarks.
To see what it enables in the Photos app, swipe up on a picture you’ve taken of a building and select “Look up Landmark,” and a card will appear that ideally identifies it. Here are a couple of examples from my phone:
On its face, it’s a convenient expansion of Photos’ Visual Look Up feature that Apple introduced in iOS 15 that lets you identify plants or, say, find out what those symbols on a laundry tag mean. But Visual Look Up doesn’t need special permission to share data with Apple, and this does.
A description under the toggle says you’re giving Apple permission to “privately match places in your photos with a global index maintained by Apple.” As for how, there are details in an Apple machine-learning research blog about Enhanced Visual Search that Johnson links to:
The process starts with an on-device ML model that analyzes a given photo to determine if there is a “region of interest” (ROI) that may contain a landmark. If the model detects an ROI in the “landmark” domain, a vector embedding is calculated for that region of the image.
According to the blog, that vector embedding is then encrypted and sent to Apple to compare with its database. The company offers a very technical explanation of vector embeddings in a research paper, but IBM put it more simply, writing that embeddings transform “a data point, such as a word, sentence or image, into an n-dimensional array of numbers representing that data point’s characteristics.”
Like Johnson, I don’t fully understand Apple’s research blogs and Apple didn’t immediately respond to our request for comment about Johnson’s concerns. It seems as though the company went to great lengths to keep the data private, in part by condensing image data into a format that’s legible to an ML model.
Even so, making the toggle opt-in, like those for sharing analytics data or recordings or Siri interactions, rather than something users have to discover seems like it would have been a better option.
Technology
Receiving unexpected international calls? What you need to know
Receiving unexpected international calls can be a source of anxiety for many individuals. Whether it’s a single ring from an unknown number or multiple missed calls from abroad, the uncertainty can leave you wondering about the implications for your privacy and security.
Kathy S. recently reached out with a concern many of us can relate to: “I have received calls from Beijing and Russia on my cellphone. I did not answer them. Can you tell me why this is happening? Is my phone at risk?”
If you’ve experienced similar calls, you’re not alone. Let’s examine this issue and discover what’s really going on.
GET SECURITY ALERTS, EXPERT TIPS, SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT
The rise of international call scams
International call scams have become increasingly common in recent years. One particularly prevalent scam is known as “Wangiri,” which originates from Japan and means “one-ring-and-cut.” These scammers typically let your phone ring once or twice before hanging up, hoping to pique your curiosity and prompt a callback.
HOW TO PROTECT YOUR IPHONE & IPAD FROM MALWARE
Why are you receiving these international scam calls?
There are several reasons why you might be receiving calls from unfamiliar international numbers.
Wangiri scam: Scammers use automated systems to call thousands of numbers, disconnecting after one ring. If you call back, you may be connected to a premium rate number, incurring significant charges.
Telemarketing and robocalls: Some companies use international numbers to bypass local regulations and reach a wider audience.
Number spoofing: Scammers can make their calls appear to come from different countries, tricking you into answering.
HOW TO STOP ANNOYING ROBOCALLS
Is your phone at risk?
While receiving unexpected international calls doesn’t necessarily put your phone at immediate risk, there are several potential dangers to be aware of. The primary risk lies in potential financial losses if you engage with these scammers. If you call back, you may be connected to a premium rate service number owned by the fraudster. You could also be charged heavily for these calls, with the scammer aiming to keep you on the line to increase the billed amount.
While less common with Wangiri scams, there’s always a risk of personal information theft if you engage with unknown callers. Sharing sensitive data like bank account numbers or Social Security numbers could lead to identity theft.
Answering or returning these calls may signal to scammers that your number is active, potentially leading to more scam calls in the future. Although not typically associated with Wangiri scams, some sophisticated phone scams can potentially install malware on your device if you click on certain links, prompts or follow instructions given by the scammer.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
How to protect yourself
While these international calls can be concerning, there are several steps you can take to safeguard yourself and your personal information. Here are six effective strategies to help protect against potential scams and unwanted calls.
1) Don’t answer or call back: If you receive a call from an unknown international number, resist the urge to answer or return the call.
2) Block suspicious numbers: Use your phone’s built-in features to block these numbers and prevent future calls.
3) Report the calls: Inform your phone carrier and the Federal Communications Commission (FCC) about these suspicious calls.
4) Use call-blocking apps: Consider installing call-blocking apps to identify and block spam calls.
5) Be cautious with personal information: Never share sensitive data over the phone, especially with unfamiliar callers.
6) Invest in personal data removal services: Consider using services that remove your personal data from the internet, reducing the chances of scammers obtaining your information. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.
HOW TO GET RID OF ROBOCALLS WITH APPS AND DATA REMOVAL SERVICES
Kurt’s key takeaways
While unexpected international calls can be alarming, understanding the nature of these scams empowers you to protect yourself. By staying informed and following the preventive measures outlined above, you can significantly reduce your risk of falling victim to these schemes. Remember, your best defense is a combination of caution, awareness and proactive steps to safeguard your personal information.
Are phone companies doing enough to help protect consumers from international scam calls? Let us know what you think by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions: New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
New York state is defying Trump’s plans to roll back climate action
New York’s Climate Change Superfund Act will require the biggest multinational oil and gas companies to contribute to a fund that’ll be used for infrastructure projects meant to protect New York residents from increasingly dangerous climate disasters like storms and sea level rise.
“New York has fired a shot that will be heard round the world”
Trump will soon step back into office and is expected to dismantle existing climate policies and gut the Environmental Protection Agency (EPA), having openly disparaged clean energy and federal environmental regulations on the campaign trail. So for the next four years at least, Americans will have to rely on local and state efforts like this to deal with the pollution from fossil fuels that’s causing climate change.
“New York has fired a shot that will be heard round the world: the companies most responsible for the climate crisis will be held accountable,” State Senator Liz Krueger said in a statement after Hochul signed the Climate Change Superfund Act into law.
Krueger’s office expects the law to generate $75 billion over the next 25 years. But in the immediate future, the New York State Department of Environmental Conservation (DEC) will first have to propose guidelines for how the fund works. That includes rules for who has to pay into the fund, how the state collects the money, and what kinds of infrastructure projects the fund will support. The law will apply to fossil fuel companies historically responsible for more than 1 billion tons of greenhouse gas emissions. And at least 35 percent of the benefits of the fund are supposed to reach “disadvantaged” communities.
The plan is loosely modeled after state and federal laws that have been in place for decades to hold companies responsible for toxic waste sites they leave behind. But instead of directing funds to cleaning up hazardous substances at old industrial sites, New York’s new law would fund resiliency projects such as upgrading storm water drainage systems.
“New York taxpayers were 100 percent on the financial hook for climate costs. Now Big Oil will pay for much of the damages that they helped cause,” New York Public Interest Research Group (NYPIRG) Executive Director Blair Horner said in a press release.
The Climate Change Superfund Act is supposed to reduce New Yorkers’ future tax burden by $3 billion each year, according to NYPIRG. Extreme weather events exacerbated by climate change are expected to cost half a trillion dollars in preparation and recovery efforts in New York by 2050, Kreuger’s office says.
Joe Biden set a goal of slashing US greenhouse gas emissions by at least 50 percent by 2030 compared to 2005 pollutions levels as part the country’s commitment to the Paris climate accord. He also signed the Inflation Reduction Act into law, a massive spending package that set aside $369 billion for climate action and clean energy technologies.
Trump, on the other hand, says he’ll take the US out of the Paris agreement again (which he briefly did during his first term before Biden recommitted the US to the accord). The President-elect has also said that he’ll rescind any unspent funds from the Inflation Reduction Act. He rolled back more than 100 environmental regulations when he was last president, and says that his pick for the Environmental Protection Agency this time around will ensure “swift deregulatory decisions” at the agency once again.
Still, state laws can make up for some of the ground lost in the fight against climate change. New York’s Climate Superfund Act will have to survive any legal challenges, of course. But this isn’t the first time the state has made ambitious environmental plans while facing hostility toward climate action from Trump. In 2019, New York state passed its Climate Leadership and Community Protection Act. That put the state on a path to slashing its greenhouse gas emissions by 40 percent by 2030, although progress has been slow since then.
New York’s latest answer to the environmental deregulation looming on the horizon is just one part of a larger trend that marked the first Trump presidency, and is poised to be part of the second. Earlier this year, Vermont passed its own Climate Superfund law. Similar legislation has also been introduced in California, Maryland, Massachusetts, New Jersey, and in Congress, according to the nonprofit Food & Water Watch.
Technology
Revealed: The 10 most popular and worst passwords of 2024
Let’s be honest: How many times have you used something like “123456” or “123123” as your password? With so many online accounts to juggle, it’s tempting to go for simple passwords, even though we know they’re weak. Unfortunately, a report from NordPass shows we’re still making the same mistakes when it comes to keeping our accounts secure.
GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE
2024’s most popular (and insecure) passwords
NordPass has released its compilation of the top 200 most popular passwords used for personal and business purposes. Collaborating with threat management company NordStellar, NordPass analyzed a massive 2.5TB database of global passwords, including those sourced from the dark web. Spoiler alert: They’re still shockingly insecure.
TIRED OF GETTING THOSE MYSTERIOUS PASSWORD RESET EMAILS? HERE’S WHAT TO DO ABOUT IT
The password hall of shame
We’re all guilty of using weak passwords at some point, but the extent of this digital negligence is truly staggering. For the sixth consecutive year, “123456” claims the dubious honor of being the most common password used by over 3 million people.
It’s followed closely by its slightly more “complex” cousins: “123456789” and “12345678.” But wait, it gets worse. The password “password” still ranks high on the list, used by nearly 700,000 people. It’s as if we’re collectively daring hackers to break into our accounts.
THIS SNEAKY MALWARE IS AFTER YOUR PASSWORDS AND PERSONAL DATA
Top 10 most common passwords
Here are the top 10 most common passwords of 2024, according to NordPass:
1) 123456
2) 123456789
3) 12345678
4) password
5) qwerty123
6) qwerty1
7) 111111
8) 12345
9) secret
10) 123123
Corporate carelessness
You might think that in professional settings, where sensitive data is at stake, people would be more cautious. Think again. The corporate world mirrors personal password habits alarmingly closely. The same weak passwords dominate business accounts, with “123456” leading the pack, used in over 1.2 million instances.
DATA BROKER BLUNDERS AS MILLIONS ARE EXPOSED WITH PUBLIC PASSWORDS
The consequences of weak passwords
Using such easily guessable passwords is like leaving your front door wide open in a neighborhood full of burglars. These passwords can be cracked in less than a second, potentially leading to account compromise, identity theft and a host of other digital nightmares.
Strengthening your digital defenses
So, how can we break this cycle of password mediocrity?
1) Go long: Aim for passwords that are at least 20 characters long.
2) Mix it up: Use a combination of uppercase and lowercase letters, numbers and special symbols.
3) Unique is key: Never reuse passwords across multiple accounts.
4) Regular reviews: Periodically assess and update your passwords.
5) Consider using a password manager: A password manager will securely store and generate complex passwords. It will also help you to create unique and difficult-to-crack passwords that a hacker could never guess. In addition, it keeps track of all your passwords in one place and fills passwords in for you when you’re logging into an account so that you never have to remember them yourself. The fewer passwords you remember, the less likely you will be to reuse them for your accounts.
What qualities should I look for in a password manager?
When it comes to choosing the best password manager for you, here are some of my top tips:
- Deploys secure
- Works seamlessly across all of your devices
- Creates unique complicated passwords that are different for every account
- Automatically populates login and password fields for apps and sites you revisit
- Has a browser extension for all browsers you use to automatically insert passwords for you
- Allows a fail-safe in case the primary password is ever lost or forgotten
- Checks that your existing passwords remain safe and alerts you if ever compromised
- Uses two-factor authentication security
Get more details about my best expert-reviewed password managers of 2024 here.
6) Start using passkeys: Passkeys are designed to replace traditional passwords and are steadily gaining traction, particularly among major companies and websites. Far more secure and reliable than conventional passwords, passkeys enable automatic sign-ins to websites and apps using facial recognition, fingerprint authentication or a physical security key.
SUBSCRIBE TO KURT’S YOUTUBE CHANNEL FOR QUICK VIDEO TIPS ON HOW TO WORK ALL OF YOUR TECH DEVICES
Kurt’s key takeaways
It’s clear that we need to step up our password game. Using weak passwords like “123456” is a gamble we can’t afford to take, especially with so much of our lives online. By taking simple steps, like creating longer, more complex passwords and using a password manager, we can better protect ourselves from cyber threats. Let’s make 2025 the year we prioritize our digital security and leave those outdated passwords behind.
What’s the worst password you’ve ever used, and did anything bad happen because of it? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover. Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions:
New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.
-
Technology1 week ago
There’s a reason Metaphor: ReFantanzio’s battle music sounds as cool as it does
-
News1 week ago
France’s new premier selects Eric Lombard as finance minister
-
Business1 week ago
On a quest for global domination, Chinese EV makers are upending Thailand's auto industry
-
Health4 days ago
New Year life lessons from country star: 'Never forget where you came from'
-
Technology4 days ago
Meta’s ‘software update issue’ has been breaking Quest headsets for weeks
-
World1 week ago
Passenger plane crashes in Kazakhstan: Emergencies ministry
-
Politics1 week ago
It's official: Biden signs new law, designates bald eagle as 'national bird'
-
Politics6 days ago
'Politics is bad for business.' Why Disney's Bob Iger is trying to avoid hot buttons