Notices tagged with security, page 2

RT @thotcon@twitter.com: ATTN Hackers: Tickets for THOTCON 0xA go on sale 10/1. Don’t delay. Tell your friends. https://tickets.thotcon.org #InfoSec #security #hacking #chicago

🐦🔗: https://twitter.com/thotcon/status/1043894927736926208

RT @Kirst3nF@twitter.com: Here's @doctorow@twitter.com on the latest 5 Eyes Statement of Principles on Access to "Evidence" and #Encryption: Oh for fuck's sake, not this fucking bullshit again
https://boingboing.net/2018/09/04/illegal-math.html
#surveillance #security #privacy #backdoors

🐦🔗: https://twitter.com/Kirst3nF/status/1037249753522814979

RT @jmlakar@twitter.com: The Prisoners Dilemma of Defect Disclosure: https://www.mlakartechtalk.com/prisoners-dilemma-defect-disclosure/
This is my analysis of the great article written by @doctorow@twitter.com from @EFF@twitter.com #security #infosec #infosecurity

🐦🔗: https://twitter.com/jmlakar/status/1032268333855461377

"Most worryingly, Google appears to be scooping up information about people who use incognito mode in their browsers – which most people think makes their activities invisible from Google." #privacy #security #surveillance

https://www.fastcompany.com/90222071/study-says-google-is-collecting-more-data-about-you-than-you-realize

Graphic CC BY-SA Sean O'Brien

"The Forum included a live [demo of] cyber exploitations that highlight common cyber risks — many of which can be easily defended against using common sense cyber hygiene" Demos use code at https://frama.link/cyber-demo & PiRogue from Pirahnalysis https://frama.link/yale-cyber-2018 #privacy #security

"Software like pcAnywhere is used by system administrators to access and control systems from a remote location to conduct maintenance or upgrade or alter software. But election-management systems and voting machines are supposed to be air-gapped for security reasons - that is, disconnected from the internet and from any other systems that are connected to the internet." #privacy #security

https://motherboard.vice.com/en_us/article/mb4ezy/top-voting-machine-vendor-admits-it-installed-remote-access-software-on-systems-sold-to-states

"The concern is that a rogue submodule can trick the Git into running code it shouldn’t outside the context of the repository. 'This allowed an adversary to exfiltrate data, pull down a web shell, plant a cryptominer or just totally own the machine...'" #security

https://threatpost.com/bug-in-git-opens-developer-systems-up-to-attack/132395/

"For more than a year, Mozilla Firefox and Google Chrome may have leaked users’ Facebook usernames, profile pictures, and likes if the users’ browsers visited malicious websites that employed a cutting-edge hack" #privacy #security

https://arstechnica.com/information-technology/2018/05/chrome-and-firefox-leaks-let-sites-steal-visitors-facebook-names-profile-pics/

great piece by @yaelwrites including Jack Balkin's concept of information fiduciaries: "Although relationships with third parties might be lucrative for telecoms, any entity collecting sensitive information like location data has a moral obligation to keep it safe."
#privacy #security

https://slate.com/technology/2018/05/locationsmart-security-it-is-totally-legal-for-cellphone-companies-to-sell-location-data-to-third-parties.html

Doctorow: "if that data leaks, it would allow anyone to break into your kid's cloud and plunder all their private data... Naturally, Teensafe stored thousands of parents and kids' usernames and passwords, without encryption, on an insecure server." #privacy #security

https://boingboing.net/2018/05/20/utter-coathangers.html

the question now: "How much intercepted encrypted e-mail will be (or has been) decrypted by intelligence agencies?" Not all PGP/GPG e-mail is vulnerable... but the extent of the fallout won't be known for a while. #security #privacy

https://arstechnica.com/information-technology/2018/05/decade-old-efail-attack-can-decrypt-previously-obtained-encrypted-e-mails/

PGP/GPG users: Keep Calm and Disable HTML Rendering. It's a good idea to protect you from other kinds of tracking (images in HTML e-mails). Short-term mitigation steps for "Efail" vulnerability: https://efail.de #security #privacy

"...a 'rogue Alexa skill' that bypasses Amazon's security checks: it lurks silently and unkillably in the background of your Alexa, listening to all speech in range of it and transcribing it, then exfiltrating the text and audio of your speech..." https://boingboing.net/2018/04/26/user-supplied-listening-device.html

#privacy #security

"The really big data brokers - firms such as Acxiom, Experian, Quantium, Corelogic, eBureau, ID Analytics - can hold as many as 3,000 data points on every consumer, says the US Federal Trade Commission." #privacy #security

http://www.bbc.com/news/business-43697133

"The new terms asserted that Eventbrite staff had the right to 'enter and remain' at any event organized with the platform, record the entirety of the event with video and photography... and retain copyright over everything recorded." https://arstechnica.com/information-technology/2018/04/eventbrite-rolls-back-policy-that-would-have-given-it-right-to-record-events/

#privacy #security

"Netizens have the wrong idea about what their web browser's 'private' or 'incognito' mode actually does. This is according to researchers at the University of Chicago, in the US, and Leibniz University Hannover, in Germany, who this week declared that folks mistakenly believe that by enabling the incognito browsing mode, they are fully shielded from online tracking and malware." #privacy #security

https://www.theregister.co.uk/2018/04/24/private_web_browsing_study/

"A malicious app that can be downloaded from the Google Play store is extremely dangerous, as users will not think twice about downloading it because of their trust in Google" https://arstechnica.com/information-technology/2018/04/malicious-apps-in-google-play-gave-attackers-considerable-control-of-phones/ #security #privacy

"Published today, a two-year study of Android security updates has revealed a distressing gap between the software patches Android companies claim to have on their devices and the ones they actually have."

https://www.theverge.com/2018/4/13/17233122/android-software-patch-trust-problem # privacy #security

135 tracker signatures in the @exodus scanner, and all 2325 reports recomputing! expect some interesting finds in the reports 🕵️ https://news.exodus-privacy.eu.org/ #privacy #security