Security/privacy news

[MasterCommander]

Security Researchers Publish Ryzen Flaws, Gave AMD 24 hours Prior Notice

 

Πολύ ύπουλες οι τακτικές των researchers εδώ, προτεραιότητα τους να γίνει όσο περισσότερο θόρυβος γίνεται.

Mένει να δούμε πως θα το χειριστεί η AMD.

[minast]

Ανεξάρτητα από το πόσο καλά τεκμηριωμένη είναι η έρευνά τους, η μία μέρα προειδοποίηση εγείρει μεγάλα θέματα. Θυμίζει λίγο την πολιτική δυσφήμισης της Intel σε εποχές Pentium 4...

Έγινε επεξεργασία Μάρτιος 13, 2018 από minast

[everg77n]

https://theintercept.com/2018/03/20/the-nsa-worked-to-track-down-bitcoin-users-snowden-documents-reveal/

[minast]

Το βάζω και εδώ ως πιο ταιριαστό:

 

[everg77n]

https://edition.cnn.com/2018/03/26/opinions/data-company-spying-opinion-schneier/index.html

[everg77n]

https://www.reuters.com/article/us-usa-immigration-visa/u-s-visa-applicants-to-be-asked-for-social-media-history-state-department-idUSKBN1H611P

[salde]

52 minutes ago, everg77n said:

https://www.reuters.com/article/us-usa-immigration-visa/u-s-visa-applicants-to-be-asked-for-social-media-history-state-department-idUSKBN1H611P

ελπίζω να είναι πρωταπριλιάτικο

[everg77n]

@salde Ανεβηκε σε πολλα site στις 30/3

https://www.nytimes.com/reuters/2018/03/30/us/30reuters-usa-immigration-visa.html

http://www.businessinsider.com/r-us-visa-applicants-to-be-asked-for-social-media-history-state-department-2018-3

https://www.theguardian.com/commentisfree/2018/mar/31/us-visa-social-media-tourism

 

[everg77n]

https://krebsonsecurity.com/2018/04/panerabread-com-leaks-millions-of-customer-records/

 

[everg77n]

On 4/1/2018 at 7:34 PM, everg77n said:

https://www.reuters.com/article/us-usa-immigration-visa/u-s-visa-applicants-to-be-asked-for-social-media-history-state-department-idUSKBN1H611P

 

Ενα μερος της παρανοιας παντως ειναι δικαιολογημενο:

https://www.washingtonexaminer.com/washington-secrets/third-mexican-town-welcomes-migrant-caravan-400-miles-closer-to-us

Quote

the migrants are headed to the U.S. to “demand an end to the political corruption in their cities, and dignity and the right to asylum from Mexico and the United States.”

 

[everg77n]

https://www.nytimes.com/2018/04/07/technology/india-id-aadhaar.html

 

Quote

India is scanning the fingerprints, eyes and faces of its 1.3 billion residents and connecting the data to everything from welfare benefits to mobile phones.

 

[everg77n]

https://techcrunch.com/2018/04/11/facebook-shadow-profiles-hearing-lujan-zuckerberg/

Επικος διαλογος:

Quote

Lujan: Facebook has detailed profiles on people who have never signed up for Facebook, yes or no?
Zuckerberg: Congressman, in general we collect data on people who have not signed up for Facebook for security purposes to prevent the kind of scraping you were just referring to [reverse searches based on public info like phone numbers].
Lujan: So these are called shadow profiles, is that what they've been referred to by some?
Zuckerberg: Congressman, I'm not, I'm not familiar with that.
Lujan: I'll refer to them as shadow profiles for today's hearing. On average, how many data points does Facebook have on each Facebook user?
Zuckerberg: I do not know off the top of my head.
Lujan: Do you know how many points of data Facebook has on the average non-Facebook user?
Zuckerberg: Congressman, I do not know off the top of my head but I can have our team get back to you afterward.
Lujan: It's been admitted by Facebook that you do collect data points on non-[Facebook users]. My question is, can someone who does not have a Facebook account opt out of Facebook's involuntary data collection?
Zuckerberg: Anyone can turn off and opt out of any data collection for ads, whether they use our services or not but in order to prevent people from scraping public information ... we need to know when someone is repeatedly trying to access our services.

 

[everg77n]

https://www.engadget.com/2018/04/13/facebook-users-aren-t-changing-privacy-settings/

 

Quote

Facebook users aren’t changing their privacy settings, despite uproar. The company doesn’t expect any major changes in its revenue.

 

[everg77n]

https://www.theverge.com/2018/4/18/17253784/google-domain-fronting-discontinued-signal-tor-vpn

 

Quote

App developers won’t be able to use Google to get around internet censorship anymore. The Google App Engine is discontinuing a practice called domain-fronting, which let services use Google’s network to get around state-level internet blocks.

 

[everg77n]

https://www.buzzfeed.com/paulfarrell/australias-largest-bank-lost-the-personal-financial?utm_term=.tdmgg1zoL#.mslRRm71P

 

Quote

The Commonwealth Bank lost the personal financial histories of 12 million customers, and chose not to reveal the breach to consumers, in one of the largest financial services privacy breaches ever to occur in Australia.

 

[trendy]

Attention PGP Users: New Vulnerabilities Require You To Take Action Now

 

Παράθεση

A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. EFF has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages.

 

Και το σημερινό update:

Not So Pretty: What You Need to Know About E-Fail and the PGP Flaw

Παράθεση

A group of researchers released a paper today that describes a new class of serious vulnerabilities in PGP (including GPG), the most popular email encryption standard. The new paper includes a proof-of-concept exploit that can allow an attacker to use the victim’s own email client to decrypt previously acquired messages and return the decrypted content to the attacker without alerting the victim. The proof of concept is only one implementation of this new type of attack, and variants may follow in the coming days.

 

[trendy]

Πριν από λίγο πάντως ενημερώθηκε το enigmail στον Thunderbird.

Περισσότερα εδώ

[everg77n]

https://www.bleepingcomputer.com/news/security/backdoor-account-found-in-d-link-dir-620-routers/

[minast]

Για όσους σκέφτονταν να πάρουν Tapplock one, αφήστε το καλύτερα .

https://www.youtube.com/watch?v=RxM55DNS9CE

[astrolabos]

On 2/6/2018 at 4:00 ΠΜ, το μέλος minast έγραψε:

Για όσους σκέφτονταν να πάρουν Tapplock one, αφήστε το καλύτερα .

https://www.youtube.com/watch?v=RxM55DNS9CE

No2: Another flaw hits Tapplock smart locks, thanks to leaky server