121
New study: The advertising industry is systematically breaking EU law
The online advertising industry is behind comprehensive illegal collection and indiscriminate use of personal data, research from the Norwegian Consumer Council shows.
122
123
Let's Encrypt's New Root and Intermediate Certificates
On Thursday, September 3rd, 2020, Let’s Encrypt issued six new certificates: one root, four intermediates, and one cross-sign. These new certificates are part of our larger plan to improve privacy on the web, by making ECDSA end-entity certificates widely available, and by making certificates smaller. Given that we…
124
IBM Releases Fully Homomorphic Encryption Toolkit for macOS and iOS
At IBM Research, we’re inventing what’s next in AI, quantum computing, and hybrid cloud to shape the world ahead.
125
Looking back at how Signal works
In the midst of world-wide protests against racism and police brutality, a lot of people are becoming more immediately aware and concerned about the security of their data and online communication. We’ve gotten a lot of questions at Signal over the past week, so we wanted to briefly recap how it ...
126
DOJ plans to strike against encryption while the Techlash iron is hot
There’s a story in today’s Washington Post “Cybersecurity 202” newsletter that confirms that the Department of Justice is capitalizing on the techlash in order to build up congressional support for the DOJ’s long-desired goal of legislation that will restrict your freedom to encrypt your data and
127
TeamViewer stores user passwords in registry, encrypted with hard-coded key
Oh man where to even begin with this one. This was a crazy ride and I learned a ton along the way.
128
Moving from reCAPTCHA to hCaptcha
We recently migrated the CAPTCHA provider we use from Google's reCAPTCHA to a service provided by the independent hCaptcha. Here's a walk through of the rationale in more detail.
129
Microsoft Put Off Fixing Zero Day for 2 Years
A security flaw in the way Microsoft Windows guards users against malicious files was actively exploited in malware attacks for two years before last week, when Microsoft finally issued a software update to correct the problem.
130
SCOTUS rules you may sue government agents for damages when they violate rights
Arlington, Va.—In a unanimous opinion issued today by the U.S. Supreme Court, and authored by Associate Justice Clarence Thomas, the Court ruled in Tanzin v. […]
131
Privacy is the most important concept of our time
Privacy is more than the right of an individual to be left alone. It concerns the very fabric of society.
132
Stop donating your customers' data to Google Analytics
In 2020, with better alternatives available, using Google Analytics (GA) to track your web usage is n...
133
Moving your SSH port isn’t security by obscurity
I just came across another post on Hacker News talking about why you shouldn’t move your SSH port off of 22 because it’s Security by Obscurity. Ther
134
Image Scaling Attacks
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts. Overview: …
135
Windows 10 20H2: ChkDsk damages filesystem on SSDs with KB4592438 installed
[German]In Windows 10 20H2 with installed cumulative update KB4592438, chkdsk causes massive issues. It destroys the file system during a disk check on SSDs, so Windows 10 can’t start after a reboot.
136
Unauthorized access to cameras in Safari on macOS and iOS
A vulnerability in Safari allowed hackers to access the iPhone and Macbook cameras. (CVE-2020-3852, CVE-2020-3864, CVE-2020-3865, CVE-2020-3885, CVE-2020-3887 & CVE-2020-9784)
137
Zoom Security Exploit: Cracking private meeting passwords
Short version: Zoom meetings were default protected by a 6 digit numeric password, meaning 1 million maximum passwords. I discovered a vulnerability in the Zoom web…
138
1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
139
1Password for Linux beta
Buckle up Linux Desktop users! We just opened an awesome ride that we'd love for you to join us on. 🎢 🙌🏼
140
141
Memory safe ‘curl’ for a more secure internet
tldr: work has started to make Hyper work as a backend in curl for HTTP. curl and its data transfer core, libcurl, is all written in C. The language C is known and infamous for not being memory safe and for being easy to mess up and as a result accidentally cause security problems. At … Continue reading rust in curl…
142
Dockerfile Security Best Practices
Quickly improve the security of your docker containers by following security best practices in the Dockerfile
143
US Border Patrol says they can create central repository of traveler emails
The U.S. government has taken the opportunity during the global pandemic, when people aren't traveling out of the country much, to roll out a new platform for storing information they believe they are entitled to take from people crossing the border. A new filing reveals how the U.S. Border Patrol will store data from…
144
Dangerous domain corp.com goes up for sale
As an early domain name investor, Mike O’Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O’Connor refused to auction perhaps the most sensitive domain in his stable…
145
250M Microsoft customer service and support records exposed on the web
250 million leaked conversations between Microsoft customer support agents and customers were left exposed on the web, putting users at risk of phishing.
146
147
Using Zoom? Here are the privacy issues you need to be aware of
If you’re using Zoom while working from home, you should be aware of Zoom's privacy policies, including its “attention tracking” tool.
148
SSH Agent Explained
The SSH agent acts behind the scenes to keep you safe. Here's how it works.
149
New Mac ransomware spreading through piracy
We analyze a new Mac ransomware that appears to encrypt user files with a bit of a time delay. The ransomware encrypts files with little strategy.
150
Inrupt, Tim Berners-Lee's Solid, and Me
For decades, I have been talking about the importance of individual privacy. For almost as long, I have been using the metaphor of digital feudalism to describe how large companies have become central control points for our data. And for maybe half a decade, I have been talking about the world-sized robot that is the…