Skip to main content

Search

Items tagged with: Privacy


A boss is bitten in the bottom after being struck by one of the worst crimes in Finnish history, Strava’s privacy isn’t so private, and a private investigator uncovers some TikTok tall tales.

All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by @gcluley and Carole Theriault, joined this week by @varmazis
Find it in all good podcast apps, or at https://www.smashingsecurity.com/319

#cybersecurity #finland #strava #privacy #databreach #mentalhealth #tiktok
Ville Tapio of Vastaamo, pursued by the media...


< ORIGINAL STATEMENT >
Smartphones using the Snapdragon 630 chip were found to call home to Qualcomm without the consent of the user, bypassing the whole operating system. […]
< SEE ATTACHMENT >

EDIT / UPDATE:
Martijn Braam took a look and provides a valuable counterstatement. Thx @bart
https://blog.brixit.nl/nitrokey-dissapoints-me/
Still without the actual data that gets transmitted though. Unless someone does it first I'll replicate the test setup myself tomorrow and post my findings here.
#privacy #security
Screenshot of original toot:

Smartphones using the Snapdragon 630 chip were found to call home to Qualcomm without the consent of the user, bypassing the whole operating system. Data includes unique hardware ID, current IP, country, your ISP, list of installed apps and other data.

It is send unencrypted and gets combined with data broker profiles.
https://www.nitrokey.com/news/2023/smartphones-popular-qualcomm-chip-secretly-share-private-information-us-chip-maker

As usual, big IT companies don't give a flying fart about any laws, their customers or ethics in general. Who would've guessed. 😔 #privacy #security


☣️ This is why you should never trust your important information (like passwords!) to proprietary software like @1password.

#OpenSource #FreeSoftware #privacy #security #infosec

🤡 #1Password becomes #spyware:

https://blog.1password.com/privacy-preserving-app-telemetry/


Did you know, it's now possible to fingerprint by HTTP/2?

On Firefox, I recommend you to disable the protocoll until we find a solution to either spoof it or break the fingerprinting method. It works even without #javascript.

The whitepaper 👉 https://www.blackhat.com/docs/eu-17/materials/eu-17-Shuster-Passive-Fingerprinting-Of-HTTP2-Clients-wp.pdf

#privacy #fingerprinting #infosec #opsec #cybersecurity #http #http2 #browserleaks

Test yourself at https://browserleaks.com/http2


#rasberrypi właśnie ogłosiło, że wybrało drogę "Internet of 💩".
😞
W kolejnych #rpi będą chipy z własnościowym #AI od #sony , które będzie raportować do bazy "tylko" metadane.
https://www.extremetech.com/computing/new-raspberry-pi-devices-will-have-sony-ai-platform-built-in
#privacy #fail


@Alex Hall If you want to keep #privacy an unlock limits using #medium , you can use alternative FOSS frontend #scribe. There are several instances available, f.e. my: https://scribe.citizen4.eu



Hmmmm, federated cocaine? 🧐

#TikTok and its algos should be a controlled substance 🧠 tightly regulated

(otherwise more bears in all nations will be using it all day and long into the night 🐾 🐾)

#BigTech #Media
#Attention #Hack
#MentalHealth
#Privacy #Surveillance
#Democracy


My “here's to the crazy ones" thesis:

• any #Fediverse self-hosted instance as easy to set up as a Facebook account

• #Fediverse must easily straddle;

- PRIVATE
consumer individual family safe spaces
#privacy #encryption

– OPENWEB
shared public resource, common carrier status,
actual virtual-public-square not #Elmo absolutist illusion w/corp asses covered by #Section230

• SysAdmin a pain = opportunity

• market for #Privacy enabled

• new Laws needed, incumbents will resist


Just learned recently that #Discord is adding AI to their service: https://read.whatever.social/discord/status/1633862297893601280#m

People should definitely worry about this! #AI can be useful but in Discord's case, they might as well be using it to exploit user's #data and violate their #privacy.

If you want a privacy-respecting alternative to Discord with E2EE, use #Matrix with #Element


Ya think? 🤦🏻‍♂️

"New research suggests that privacy in the #metaverse might be impossible:
https://venturebeat.com/virtual/new-research-suggests-that-privacy-in-the-metaverse-might-be-impossible/

🔎👀

#Privacy
#Surveillance
#SurveillanceCapitalism
#BigTech
#VR #AI #ML
#BigData



The crazy story of the Ubiquiti hack! Police keep creating encrypted messaging systems for criminals! Apple Watch accused of crying wolf!

All this - and more - in the latest episode of the award-winning "Smashing Security" podcast, with me, Carole Theriault, and special guest Mark Stockley.

Thanks to our sponsors @bitwarden, NordLayer, and SecurEnvoy for their support!

https://grahamcluley.com/smashing-security-podcast-308/

#cybersecurity #podcast #ubiquti #databreach #apple #encryption #privacy


Oh look, Google being Google.

(In case you were thinking of learning/using Go, I’d say skip it. There are plenty of other fish in the sea. Unless you like telemetry by default in your programming languages and tools, that is. In fact, just don’t touch anything tainted by Google if you can help it.)

https://github.com/golang/go/discussions/58409

#google #alphabet #go #surveillance #capitalism #peopleFarming #privacy #development #dev #software


LastPass Sibling Company GoTo Loses Encrypted Backups to Hackers

The hacker also stole an encryption key for a portion of the encrypted backups by accessing a cloud storage database shared by both LastPass and GoTo.

#news #tech #technology #security #privacy #Lastpass #breach #hacking

https://www.pcmag.com/news/lastpass-sibling-company-goto-loses-encrypted-backups-to-hackers


🆕 blog! “The IAB loves tracking users. But it hates users tracking them.”

The Interactive Advertising Bureau (IAB) is a standards development group for the advertising industry. Their members love tracking users. They want to know where you are, who you're with, what you're buying, and what you think. All so they can convince you to spend sligh…

👀 Read more: https://shkspr.mobi/blog/2023/01/the-iab-loves-tracking-users-but-it-hates-users-tracking-them/

#advertising #email #privacy


Uh huh.

Where's your GDPR statement? Handling a lot of people's identifable personal data here.

And storing it indefinitely.

Why do you think "opt out only" is safe for minorities?

I quite like searching stuff but these seem like very obvious concerns. Maybe you could address them in your FAQ?

#GDPR #Privacy #MastodonPrivacy


"The Danger Of Privacy At All Costs"

People have to make a decision. You can only choose one.

Do you want freedom / human autonomy?

Or do you want pretend safety?

Ben Franklin quote:

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."

Thomas Jefferson: "I prefer dangerous freedom over peaceful slavery"

#privacy #humanRights #autonomy #massSurveillance #crypto #e2ee #Signal #encryption quote

https://www.nytimes.com/2022/12/28/opinion/jack-dorseys-twitter-signal-privacy.html


Big tech is dying as we enter a new era of internet. After decades of users being the product, we can take back control from these giants by committing to an #opensource #decentralized future. The #twittermigration is a massive step in the right direction. Internet #privacy will be much more of a priority moving forward.


When billionaires say they don’t care about privacy, it‘s your privacy they’re talking about not theirs. Mark Zuckerberg says “privacy is dead” in one breath and buys the four houses around his house in the next because he values his own privacy. It’s yours that he’s actively engaged in strangling the life out of.

#privacy #markZuckerberg #elonMusk #SiliconValley #surveillance #capitalism


The annoying cookie banners and pop-ups are not the GDPR 's fault: they exist to push us into accepting tracking cookies; EU law* doesn't require cookie banners at all, consent is only required for cookies that aren't necessary for a site to function.

* Directive 2002/58/EC (Article 5(3) in particular), #GDPR and the ECJ "Planet49" decision (C‑673/17). #dataprotection #privacy


Google’s Quest to Digitize Troops’ Tissue Samples
--
#Google had a confidential plan to turn the collection—slivers of skin, #tumor biopsies & slices of organs from #veterans—into an immense archive that could help create tools to aid the diagnosis & treatment of #cancer & other #diseases. And it would seek first, exclusive dibs to do so.

“The chief concern,” Google’s liaison in the #military warned, “is keeping this out of the press.”

#privacy #ethics #DOD #Health
https://www.propublica.org/article/google-human-tissue-jpc-military?utm_medium=social&utm_source=mastodon&utm_campaign=mastodon-post


Law Enforcement Is Extracting Tons Of Data From Vehicle Infotainment Systems

https://www.techdirt.com/2022/12/05/law-enforcement-is-extracting-tons-of-data-from-vehicle-infotainment-systems/

#infotainment #databrokers #siriusxm #hacking #privacy #cars #1


This week on #osspodcast @kurtseifried and I chat about #stylometry

There's a tool to look at #HackerNews authors and see if their writing is similar to another user (sock puppets anyone?)

This of course leads to larger discussions about #privacy, #cybersecurity, #impersonation, and of course, #shakespeare

https://opensourcesecurity.io/2022/12/04/episode-352-stylometry-removes-anonymity/


Supervisor @W_Wiewiorowski@twitter.com welcomes a delegation from the Parliament of India 🇮🇳 and from the Parliament from Indonesia 🇮🇩 in the framework of the #RuleOfLaw Programme Asia of the Konrad Adenauer Stiftung. #dataprotection #privacy #gdpr #cooperation
Supervisor Wiewiorowski stands in front of an audience and delivers his speech. Seven people are sitting at a table and listen to him. Two screens in the background are presenting some slides to support the presentation.


In episode 300 🥳 of the "Smashing Security" podcast, original co-host @vanjasvajcer returns to the show...

We discuss why deleting your Twitter account may be a very bad idea, how the police unravelled the #iSpoof fraud gang, and take a trip into interplanetary file-systems.

Find "Smashing Security" in your favourite podcast app, or listen at https://www.smashingsecurity.com/300

Thanks to everyone who has listened, appeared on the show, or supported us! 🙏

#cybersecurity #twitter #ipfs #phishing #privacy
Smashing Security episode 300.  Picture of a spacesuited astronaut floating weightlessly above the Earth...


THIS great sentiment
+
maybe we ALL take a serious & sober look at how ABSENCE of LAW over past 18 years (not bad law, shitty or law unfair law... no law)
in:
• #internet
• #mobile #social
• #privacy
• #surveillance
• #AI #ML
• #data #governance

This is a massive #mastodon #fediverse opportunity we can collectively capitalize on before #SiliconValley #BigTech #VC carpet baggers arrive.

#my2cents

@klonick@davew@craignewmark@jeffjarvis@daphnehk@qjurecic@blaine @@profcarroll


Wait, what?… you don’t mean that your all-important secret for your Small Web site is going to be… A STRING OF EMOJI?!*

(Why yes, yes it is…) :awesome:

* Or, if you want to take all the fun out of it, a base256 encoding of your ed25519 private key that is purposefully impractical to write down somewhere or type in so you’ll be forced to practice good security hygiene and store it in your password manager.

#design #security #privacy #cryptography #kitten #SmallWeb #SmallTech
Screenshot of Kitten running an app at ~/sandbox/kitten-auth-test-1 (git main branch, 62 changes). Alongside the normal output there is a highlighted box labelled IMPORTANT! that reads: “This line of emoji is your secret <line of emoji follows> It will not be shown again. Please save your secret in your password manager.”


And its happening in Germany too after France banned it last week! #Microsoft355 has finally been banned from schools!

#FLOSS #Privacy

https://bestofprivacy.com/eu/germany-forces-a-microsoft-365-ban-due-to-privacy-concerns/


Fuuuuuuuuuuuuck meeeeeee.
#Privacy #Facebook


Tax prep services send sensitive financial info to Facebook https://pluralistic.net/2022/11/22/free-file-now/

"If you were unfortunate enough to e-file your US tax using HR Block, Taxact or Taxslayer, your most sensitive financial information was nonconsensually shared with Facebook, where it was added to the involuntary dossier the company maintains billions of people, including people who don't have Facebook accounts.”


Content warning: We heard you left Twitter for an open-source alternative?


Another instance, another #introduction - here's hoping that I'll settle here for good!

I'm matchboxbananasynergy, AKA Banana, That Banana Guy, Bananaman... you get the point.

My main interests are #privacy and #security - with an extra focus on #android

I've previously contributed to privacy and security resources, and I am currently doing community moderation for various privacy and security related open-source projects.

Feel free to say hi! 👋​