Skip to main content

Search

Items tagged with: privacy


Do You Remember Subseven / Sub7 Trojan?

Certainly one of the most famous, inspired by Netbus / Back Orifice

Great Article:

#infosec #cybersecurity #security #trojan #malware #sub7 #subseven #privacy #bo2k #mobman #backorifice #nostalgia #virus

https://darkcodersc.medium.com/a-malware-retrospective-subseven-d86fed0c88bf


Is somebody here also using the #Flatpak version of @signalapp?

It is so unreliable on my end that the only way to use it is literally running it with:

```
until flatpak run org.signal.Signal; do sleep 1; done
```

It then needs several attempts to start and keeps crashing all the time (but is restarted by the command).

Anybody else experiencing this?

#Signal #Linux #Privacy


Pixelfed users!

For safety reasons, Pixelfed will block DMs from people you don't follow. However, this is just a default option, you can change it if you prefer.

If you use Pixelfed and want to receive DMs from anyone:

1. Log into your account on your Pixelfed server's website
2. Go to Account Settings
3. Go to Privacy
4. Tick the box marked "Receive Direct Messages from anyone"
5. Click the "Submit" button below

#FediTips #PixelfedTips #PixelTips #Pixelfed #Fediverse #Privacy


Red de democratie stop #chatcontrol !! . Dit is zo een extreem slecht wetsvoorstel dat ik er voor als mascotte van de Piratenpartij ZuidHolland voor naar 020 afreis. Lees hier wat het probleem is: https://chatcontrole.nl/

Tot 1 oktober om 13:00 uur op de Dam in Amsterdam!
#ChatControle #privacy #end2endencryption #briefgeheim


My employer is looking for 5 people to join their Technology Advisory Board in the #UK.

https://www.linkedin.com/jobs/view/3728957970/

They're particularly interested in people with experience in:

* #CyberSecurity
* Health Data / #NHS
* #Cloud Infrastructure
* #Privacy
* Technology leadership

Please spread the word - and do consider applying yourself.

Deadline: 18th October.


(ICYMI) Tutanota @Tutanota Unlimited Custom Domain Email Addresses, Contact Lists, Shared Mailboxes & Family Option

- Paid plans get unlimited alias email addresses for custom domains
- Contact lists can be created and shared with new paid plans
- Family options available in paid plans
- Shared encrypted mailboxes

#privacy #privacymatters

https://tutanota.com/blog/summer-releases-2023


Norway wants Facebook behavioural advertising banned across Europe.

Norway has told the European Data Protection Board (EDPB) it believes a countrywide ban on Meta harvesting user data to serve up advertising on Facebook and Instagram should be made permanent and extended across Europe.

https://www.theregister.com/2023/09/29/norway_facebook_behavioral_ads/

#Europe #Norway #EU #EuropeanDataProtectionBoard #EDPB #Facebook #Meta #Advertising #Privacy


Wer 2023 immer noch mit #Microsoft in seinem Unternehmen plant, dem sei gesagt: Der Maschinenraum dieser »Titanic« ist bereits voll Wasser gelaufen. Die Datenschützer & Sicherheitsexperten haben schon unzählige Male oben im Tanzsaal Alarm geschlagen. Aber dort wird noch Champagner getrunken, die Kapelle spielt irgendwas. Die hören nicht, dass das Ganze untergeht. 🌊

#sicherheit #datenschutz #security #privacy

Sinkende Titanic/Schiff


Here is an example (no, not one I am using) of what a password of mine may look like:

WW91IEtub3cgSG93IFRvIFNjYXJlIE1lIFNoaXRsZXNz

And no, it is not hard to remember at all.
I use offline, non-caching Base64 coders.

https://www.base64decode.org

#privacy #encryption #passwords




“It's hard to be your authentic self while you're under surveillance.”

- @pluralistic

#privacy #authenticity #trust


So it turns out Europol want the access to all the data that would be collected under plans to scan messages for CSAM. Confirming worst fears that child abuse is being used as an excuse for routine mass surveillance of all images and messages https://balkaninsight.com/2023/09/29/europol-sought-unlimited-data-access-in-online-child-sexual-abuse-regulation/ . #surveillance #eu #privacy


What's in store for the #privacy space in 2023? 🔮

Our Co-Founder & CEO Patricia Thaine makes her predictions about how #privacythinking will evolve in the new year, takes a look back at the results of her 2022 predictions, and shares limitations as well as opportunities for #innovation.

Patricia's 2023 predictions include:

✅ Governments will begin to reconsider employee privacy rights.
✅ A rise of companies linking their privacy policies with the company’s actual code reviews.
✅ Governments worldwide will have more serious discussions about providing #dataprotection, privacy, and #cybersecurity subsidies or incentives.

Read more via Total Security Advisor: https://lnkd.in/gNHZkMH7


Large language models (LLMs) are becoming increasingly popular and more widely accessible for commercial use, as we can see with the rise of OpenAI's #ChatGPT and Google's #LaMDA.

These #ML models are able to generate text that can be indistinguishable from text written by a human, and can be used for a wide range of #NLP tasks such as translation, text summarization, and answering questions.

But these LLMs invariably come with #privacy implications that must be addressed.

Patricia Thaine (Co-Founder & CEO, Private AI) explores how LLMs are being used (and misused), what risks companies leveraging these technologies should be thinking about in respect to exposing #PII, and what solutions exist to protect their customers’ personal #data.

Read more: https://lnkd.in/g8SYmatS



📰 REPORT: WHO IS LOBBYING AGAINST ENCRYPTION?



Cult of the Dead Cow has released #Veilid: A secure peer-to-peer #network for apps that flips off the #surveillance economy


The idea being here that apps – #mobile, #desktop, #web, and headless – can find and talk to each other across the #internet privately and securely without having to go through centralized and often corporate-owned systems. Veilid provides code for app developers to drop into their #software so that their clients can join and communicate in a peer-to-peer #community.

github: https://gitlab.com/veilid/veilid
docs: https://veilid.com/docs

#p2p #security #privacy #framework #communication #freedom #opensource #decentralization #hacker


🚨 NGO LOBBYING GOV CLIENTSIDE SCANNING AGAINST ENCRYPTION

#encryption #crypto #e2ee #Signal #WhatsApp #ChatControl #KOSA #EARNITACT #OnlineSafetyBill #UK #EU #USA #clientsidescanning #HumanRights #privacy #infosec #cybersecurity #Journalism #ethics

#YOUTUBE PREMIER ABOUT TO START (join the live chat!):

https://youtu.be/SRMpAdM045M?si=rqnvawEFUdkNPNg8


Twitter post from Proton Privacy X account , sharing the good news that Swiss Parliament vote to adopt a motion to protect Swiss Internet users from indiscriminate scanning of private messages proposed by the European Commission.

There is just a handful of countries around the world that protect the privacy online of their citizens. Thank you.

#privacy #proton #goodnews #switzerland

Twitter post from Proton Privacy X account , sharing the good news that Swiss Parliament vote to adopt a motion to protect Swiss Internet users from indiscriminate scanning of private messages proposed by the European Commission.


If you're a #privacy proponent donating to @eff, if you're celebrating the #GNU Project's 40th anniversary, if you're a user of the internet feeling helpless towards the claws that large corporations dug in the way we interact with each other as humans, and especially if you're a user of #mastodon, I urge you to take a listen to @pluralistic 's talk at #DEFCON about #enshittification:

https://www.youtube.com/watch?v=rimtaSgGz_4

If #CoryDoctorow doesn't manage to rile you up in the first 3 minutes, nothing will!


If you turn off iCloud Keychain
When you turn off iCloud Keychain, password, passkey, and credit card
information is stored locally on your device. If you sign out of iCloud on
that device while Keychain is turned on, you're asked to keep or delete
that information.
• If you choose to keep the information, it isn't deleted or updated
when you make changes on other devices.
• If you don't keep the information on at least one device, your
Keychain data is also deleted from the iCloud servers.
Published Date: October 24, 2022
support.apple.com/en-us/HT204085


If you turn off iCloud Keychain
• When you turn off iCloud Keychain, password, passkey, and
credit card information is stored locally on your device.
• When you sign out of iCloud on your device while iCloud
Keychain is turned on, you're asked to keep or
delete your Keychain information.
• If you choose to keep the information, your passwords and
passkeys are stored locally on your device, but aren't
deleted or updated when you make changes on other
devices.
• If you don't keep the information, your passwords and
passkeys aren't available on your device. An encrypted
copy of your Keychain data is kept on iCloud servers. If
you turn iCloud Keychain back on, your passwords and
passkeys will sync to your device again.
• When you turn off iCloud Keychain or sign out of iCloud on
your device, you won't have access to any of your shared
password groups. Other members of those groups will still
have access to the passwords and passkeys that you shared.
Published Date: September 26, 2023


A small security check:

If you're one of the few users who haven't synced their Passwords & Keychain with iCloud and have upgraded to iOS 17, iPadOS 17 or macOS Sonoma, check your iCloud settings and make sure the option to sync "Passwords & Keychain" is off. This case was reproducible in our testing, but some iCloud accounts didn't change the setting. The reason is not clear.

If you find that the setting has changed to on, don't panic. Keychain data is end-to-end encrypted. Apple cannot read it.

Also it would be helpful if you share your experience in the comments. 🙏

#Privacy #Cybersecurity #Apple #iOS17 #iPadOS17 #macOS #infosec #Security

Screenshot of iCloud settings on macOS Sonoma showing that syncing Passwords & Keychain has changed to on after the Mac was successfully upgraded from macOS Ventura



Randal Quran Reid was arrested for crimes in Louisiana, a state he claims to have never visited. He's now suing over the misuse of facial recognition technology that led to him spending days in prison for a crime he didn't commit.

https://flip.it/Q4igsP

#FacialRecognition #Privacy


Facial recognition technology jailed a man for days. His lawsuit joins others from Black plaintiffs

"A lawsuit filed this month blames the misuse of facial recognition technology by a sheriff’s detective in Jefferson Parish, Louisiana, for his ordeal.
(...)
Quran, 29, is among at least five Black plaintiffs who have filed lawsuits against law enforcement in recent years, saying they were misidentified by facial recognition technology and then wrongly arrested. Three of those lawsuits, including one by a woman who was eight months pregnant and accused of a carjacking, are against Detroit police.
The technology allows law enforcement agencies to feed images from video surveillance into software that can search government databases or social media for a possible match.
Critics say it results in a higher rate of misidentification of people of color than of white people."
https://apnews.com/article/mistaken-arrests-facial-recognition-technology-lawsuits-b613161c56472459df683f54320d08a7
#Facialrecognition #Technology #Privacy #videoSurveillance #Detroit #USA


So last week I found a #privacy #security #exploit in Slack - I reported it on #HackerOne - but I got the reply it was working as intended.

So I wrote up about it, so you to can understand how easy it is.

https://tane.dev/2023/09/slack-wants-you-you-know-this-privacy-exploit-is-fine/


Attention #DataLeaders in the #EU (and elsewhere). These rules will test the #DataLeadership skills & acumen of your #CEO and #Board. Are they ready/prepared for the challenge? #Governance. #Privacy. #Security. @EU_Commission


FTC Warns Tax Prep Companies Against Invasive #Online #Tracking

From @themarkup

Last year The Markup revealed that tax prep companies sent sensitive personal information/tax related info/financial info to #Facebook without clear disclosure or expressed consent. This was primarily happening because of the #Meta Pixel, which collects data on websites that implement it - regardless if you have a Facebook/Meta company account.

Afterall, who files taxes and expects that information get sent straight to Facebook/Meta when using a tax prep software?

#privacy #privacymatters

https://themarkup.org/pixel-hunt/2023/09/19/ftc-warns-tax-prep-companies-against-invasive-online-tracking


#Signal introduces a new quantum-resistant key agreement protocol called PQXDH.

"With this upgrade, we are adding a layer of protection against the threat of a quantum computer being built in the future that is powerful enough to break current encryption standards"

https://signal.org/blog/pqxdh/

#privacy #quantum #crypto


iOS 17 added a new Safari setting for private browsing.

Change it here:

Settings > Safari

(See pic)
#Apple #Safari #Privacy

iOS 17 added, default, search engines for regular, browsing and private browsing.


Screenshot of the location services settings that iOS 17 switches on even if they were disabled before.


#UK's #Online Safety Bill finally passed by #parliament


Source: https://www.reuters.com/world/uk/uks-online-safety-bill-passed-by-parliament-2023-09-19/

#Messaging platforms led by #Meta's (META.O) #WhatsApp have opposed a provision in the law that they say could force them to break #end-to-end #encryption.


We can't trust anymore #software from #UK.

😱


#e2e #security #privacy #politics #news #surveillance #bigbrother #orwell #1984


The battle for End-to-End Encryption is going to be a very important one.

Support it.
Talk about it.
Do not believe the excuses they give to break it.

End-to-End Encryption protects everyone!

#Privacy #TinyPrivacyTip #RootForE2EE
https://signal.org/blog/uk-online-safety-bill/



PSA: Google has now begun to roll-out the Ad Topics "feature" onto Android itself. It's not just in Chrome you have to disable the settings. Please #Boost to spread awareness.

If you didn't get the pop-up screen on your Android device (it'll look like the first two screenshots), to opt-out of these settings:

  1. Go to your device Settings
  2. Press on "Google"
  3. Press on "Ads"
    • While you're here, press on the "Delete Advertising ID" button and delete it


  4. Press on "Ad Privacy"
  5. Review: "Ad Topics", "App-suggested ads", and "App Measurement". Make sure they are all labelled as "OFF". (This page will look like the third screenshot.)

If you don't see "Ad Privacy" in Step 4 then it means that it hasn't been rolled out to you yet. You might need to wait and check back in a couple of days to see if/when it has been implemented to disable these settings.

EDIT: There's another setting to review. In step 2, scroll to "Personalize using shared data". Turn everything off.

#Android #Google #Privacy #AdTopics

A screenshot of the Ad Topics "feature" that Google is now pushing out to Android phones. The following is what it says (there are two screenshots, this is 1 of 2):

New ads privacy features now available

Android now offers new privacy features that give you more choice over the ads you see.

Android notes topics of interest based on apps you've used recently. Also, apps you use can determine what you like. Later, apps can ask for this information to show you personalized ads. You can choose which topics and apps are used to show you ads.

To measure the performance of an ad, limited types of data are shared between apps. A screenshot of the Ad Privacy page where the options "Ad topics", "App-suggested ads", and "Ad measurement", are labelled "OFF".
A screenshot of the Ad Topics "feature" that Google is now pushing out to Android phones. The following is what it says (there are two screenshots, this is 2 of 2):

More about ads on Android

More useful ads

Apps can ask Android for information to help personalize the ads you see.

• Android notes topics of interest based on the apps you've used recently.

Apps you use can also determine what you like based on how you use them. For example, if you use an app that sells long-distance running shoes, the app might decide that you're interested in running marathons.

Later, an app you use can ask for this information - either your ad topics or ads suggested by apps you've used.

Android auto-deletes topics and app-suggested data regularly. You can also block specific topics and apps you don't want to make suggestions.

Measuring how well an ad performs Apps you use can ask Android for information to help them measure the performance of their ads. Android lets apps collect limited types of data, such as the time of day an ad was shown to you.

Learn more about how Android protects your data in our Privacy Policy.

You can make changes in privacy settings.


TransJakarta wants to profile each and every passenger on the bus network by linking their government issued identity numbers with their tickets under the guise of targeted subsidy scheme so the haves will not be paying subsidized ticket fares. They also want to know exactly how you travel each day on the network as individuals. If you’re a non Jakarta resident they want to charge you a different fare.

I don’t even know where to begin my outrage https://metro.tempo.co/read/1774854/ada-perbedaan-tarif-transjakarta-bagi-warga-ktp-dki-dan-luar-jakarta-setelah-tiket-berbasis-akun-diberlakukan

#Jakarta #PublicTransport #TransJakarta #Indonesia #Privacy #DataCollection