1141
Updating our inactive account policies
Starting later this year, we are updating our inactivity policy for Google Accounts to 2 years across our products.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1142
Case study: fake hardware cryptowallet
Fake hardware cryptowallet, and how bitcoins were stolen from it.
1143
Session recording for Tailscale SSH in beta
This guide shows you how to set up session recordings for Tailscale SSH. Learn how to record the terminal output whenever someone on your tailnet initiates a Tailscale SSH connection. Use these recordings to detect threats, investigate security incidents, and remain compliant with your network security policies.
1144
Restricting network access using Linux Network Namespaces
Our last blog post on Linux mount namespaces explored ways to restrict access to the file system. In this post we'll show how to restrict access to the network.
1145
Belgium legalises ethical hacking
On 15 February 2023, Belgium saw the entering into force of a new ‘whistleblower’ law, which legalised ‘ethical hacking’ even for cases where the hacked entity did not consent to it. In order to benefit from such decriminalisation, the law poses a number of conditions for ethical hacking, that have to be fulfilled in…
1146
Windows 11: TPMs and Digital Sovereignty
The problem with enforcing TPMs on consumers
1147
Element is one of fourteen messaging apps blocked by Central Indian Government
Element is one of 14 messaging apps blocked by the Central Indian Government which - we believe from media reports - relates to Section 69A of the Information Technology Act, 2000.
1148
Concrete: A fully homomorphic encryption compiler
An introduction on how to use the Zama Concrete open source TFHE compiler
1149
The EARN IT bill is back. We've killed it twice, let's do it again
EARN IT Act is aiming at scanning our messages and photos, we are calling of Senators to oppose this surveillance bill!
1150
Google Introduces Passkey Authentication
By: Arnar Birgisson and Diana K Smetters, Identity Ecosystems and Google Account Security and Safety teams Starting today , you can create a...
1151
EARN IT Act undermines the privacy, security, and safety of law-abiding users
Yesterday, TechFreedom sent a letter to the Senate Judiciary Committee raising concerns about the Eliminating Abusive and Rampant Neglect of Interactive Technologies Act of 2023 (EARN IT Act). As it did when introduced in each of the past two sessions of Congress, the EARN IT Act undermines the privacy, security, and…
1152
Passkeys: The beginning of the end of the password
We’ve begun rolling out support for passkeys across Google Accounts on all major platforms as an additional option that people can use to sign in.
1153
An Update on the Lock Icon
Editor’s note: based on industry research (from Chrome and others), and the ubiquity of HTTPS, we will be replacing the lock icon in Chrome’...
1154
Are mental health apps better or worse at privacy in 2023?
Privacy Not Included was launched in 2017 to help you understand the privacy risks of tech products that connect to the internet. We are continuing that work in the form of Product Reviews at our magazine Nothing Personal, where our privacy experts do hours of hands-on testing and research on the most popular consumer…
1155
Update: The Swedish authorities answered our protocol request
Since the events of the search warrant by the Swedish police at Mullvad’s office in Gothenburg, we have tried to get hold of documents and protocols tied to the operation. This is what the authorities came back with.
1156
Funds of every Trust Wallet browser extension could have been stolen
Seed generation of Trust Wallet was flawed, the total entropy was only 32 bits. We have created a file containing all possible seeds. Fortunately, the Ledger Donjon discovered the vulnerability very quickly and likely avoided one of the biggest hack in the crypto ecosystem.
1157
Is Gmail killing independent email?
People report that self-hosted emails always end up in Gmail spam. Is there anything Google can do about it?
1158
California Court of Appeal finds geofence warrant unconstitutional
The California Court of Appeal has held that a geofence warrant seeking information on all devices located within several densely-populated areas in Los Angeles violated the Fourth Amendment. This is the first time an appellate court in the United States has reviewed a geofence warrant. The case is...
1159
Why is OAuth still hard in 2023?
We implemented OAuth for the 50 most popular APIs. TL;DR: It is still a mess.
1160
Smartphones with Qualcomm chip secretly send personal data to Qualcomm
Nitrokey security research reveals that smartphones with Qualcomm chips secretly send device data to Qualcomm without user consent. NitroPhone is not affected.
1161
1162
Google Authenticator now supports Google Account synchronization
Christiaan Brand, Group Product Manager We are excited to announce an update to Google Authenticator , across both iOS and Android, which a...
1163
Statement on EU-US Cooperation on Turning Public Opinion Against Encryption
The members of the Global Encryption Coalition’s Steering Committee issued a statement on the EU-US collaboration against encryption.
1164
Cloudflare launches easy to set up consent manager that respects users
Cloudflare Zaraz now can also help you with gathering and managing consent. With this new tool, you can easily collect user’s consent preferences on your website, using a consent modal, and apply your consent policy on third-party tools you load via Cloudflare Zaraz
1165
WTF is a KDF?
Earlier this week a letter from an activist imprisoned in France was posted to the internet. Contained within Ivan Alococo’s dispatch from the Villepinte prison
1166
Compromising Garmin Sport Watches: A Deep Dive into GarminOS and Its MonkeyC VM
13 vulnerabilities in GarminOS and the MonkeyC VM, 9 with CVEs, that let Connect IQ apps escape the VM and bypass permissions on 100+ Garmin watches.
1167
The EARN IT bill is back, seeking to scan our messages and photos
In a free society, people should not have their private correspondence constantly examined. U.S. lawmakers, we would hope, understand that individuals have the right to a private conversation without the government looking over their shoulder. So it’s dismaying to see a group of U.S. Senators...
1168
Introducing 'Trusted Publishers'
Announcing a new, more secure way to publish to PyPI
1169
Mullvad VPN was subject to a search warrant – customer data not compromised
On April 18 at least six police officers from the National Operations Department (NOA) of the Swedish Police visited the Mullvad VPN office in Gothenburg with a search warrant. They intended to seize computers with customer data.
1170
KeePassXC Audit Report
KeePassXC Password Manager