Group items tagged

"Regin is a tool capable of infecting and compromising entire networks, not just individual computers, as security companies Symantec and Kaspersky Labs detailed in their technical reports published on Sunday and Monday. It's not only a computer virus or malware, but also a toolkit or platform that can be used for different purposes, depending on the needs of the attackers. It can collect passwords, retrieve deleted files, and even take over entire networks and infrastructures, according to researchers. "

"The company behind Whisper, the social media app that promises users anonymity and claims to be "the safest place on the internet", is tracking the location of its users, including some who have specifically asked not to be followed. The practice of monitoring the whereabouts of Whisper users - including those who have expressly opted out of geolocation services - will alarm users, who are encouraged to disclose intimate details about their private and professional lives."

"Twitter has deleted more than 125,000 accounts linked to terrorists since mid-2015, the company announced, offering some of the most detailed insight yet of how Silicon Valley is collaborating with western governments in its fight against Islamic State."

"The algorithmic manager seems to watch everything you do. Ride-hailing platforms track a variety of personalized statistics, including ride acceptance rates, cancellation rates, hours spent logged in to the app and trips completed. And they display selected statistics to individual drivers as motivating tools, like "You're in the top 10 percent of partners!" Uber uses the accelerometer in drivers' phones along with GPS and gyroscope to give them safe driving reports, tracking their performance in granular detail. One driver posted to a forum that a grade of 210 out of 247 "smooth accelerations" earned a "Great work!" from the boss."

""Privacy Not Included" is Mozilla's Christmas shopping (anti)-guide to toys and gadgets that spy on you and/or make stupid security blunders, rated by relative "creepiness," from the Nintendo Switch (a little creepy) to the Fredi Baby monitor (very creepy!). Mozilla's reviews include a detailed rationale for each ranking, including whether the product includes encryption, whether it forces a default password change, how easy to understand the documentation is, whether it shares your data for "unexpected reasons," whether it has known security vulnerabilities, whether it has parental controls and more."

"After a successful phishing attack that captured over 50 accounts, hackers stole 500,000 records from the San Diego Unified School District, for staff, current students, and past students going all the way back to 2008; including SSNs, home addresses and phone numbers, disciplinary files, health information, emergency contact details, health benefits and payroll info, pay information, financial data for direct deposits."

""The Myanmar issues have, I think, gotten a lot of focus inside the company," he told Vox as he went on to detail an incident when he was informed of "sensational messages" being spread through Facebook Messenger to incite violence on both sides of the conflict."

"This detail may seem trivial, but it goes to the heart of the way in which the spread of digital technologies can amplify and extend social prejudice."

"Chinese scientists have developed a 500 megapixel facial recognition camera four times more detailed than the human eye that can identify individuals from crowds of tens of thousands in streets or at sports stadiums. "

"The app, which scraped billions of photos from the likes of Facebook, YouTube, Venmo, and other online platforms, drew the world's attention last weekend following a detailed report in the New York Times. The app's supposed capability to identify practically anyone from even low-quality photos frightened privacy advocates and officials. And today, one of the latter - New Jersey's attorney general Gurbir Grewal - actually did something about it."

"Gmail users are under attack in a gigantic phishing operation that's spreading like wildfire across the internet right now. People took to Twitter to report receiving an email that looks like an invitation to join a Google Doc from someone they know. But when you click on the link to open the file, you are directed to grant access to an app that looks like Google Docs but is actually a program that sends spam emails to everyone you've emailed, according to a detailed outline of the attack on Reddit. "

"This tool predicts your psycho-demographic profile from digital footprints of your behaviour. It reveals how you might be perceived by others online and provides detailed insights on your personality, intelligence, life satisfaction and more." YIKES

"Facebook has detailed the steps it's taking to get help for people who need it. Which involves using artificial intelligence to "detect posts or live videos where someone might be expressing thoughts of suicide," identifying appropriate first responders, and then employing more people to "review reports of suicide or self harm". The social network has been testing this system in the U.S. for the last month, and "worked with first responders on over 100 wellness checks based on reports we received via our proactive detection efforts." In some cases the local authorities were notified in order to help."

"Twitter is expanding its use of warning labels on tweets that contain misleading details about coronavirus vaccines. The move, announced in a blogpost on Monday, is designed to strengthen the social network's existing Covid-19 guidance, which has led to the removal of more than 8,400 tweets and challenged 11.5m accounts worldwide."

"Jim Baker served as the FBI's general counsel from 2014 until 2017, and he presided over the the FBI's attempt to force Apple to undermine its cryptography under the rubric of investigating the San Bernadino shooters; he has long been a prominent advocate for mass surveillance, but he has had a change of heart: in a long, detailed essay on Lawfare, Baker explains why he believes that governments should not seek to introduce defects into cryptographic systems."

"As of this summer, though, Sift does have a file on you, which it can produce upon request. I got mine, and I found it shocking: More than 400 pages long, it contained all the messages I'd ever sent to hosts on Airbnb; years of Yelp delivery orders; a log of every time I'd opened the Coinbase app on my iPhone. Many entries included detailed information about the device I used to do these things, including my IP address at the time."

"But it is not just governments who will be interested in the results. The software is freely available and cheap. It is being distributed all over the internet of things, from intercoms to "home assistants". Once our faces are attached to the detailed digital identities that are already compiled by the advertising industry, any sufficiently sophisticated shopping mall will have a map of the preferences of everyone who enters its maw."

"Before we go deeper, it's important to note that there are two approaches to facial - or any biometric - authentication: "match on server" and "match on device." The former approach shares some of the risky aspects of facial recognition technology because it stores the details of one's most personal features-your face or your fingerprint-on a server, which is inherently insecure. There are some well-publicized examples of biometric databases being hacked, which is why so many companies are committing to only do on-device biometrics."

"That can include statistical or machine learning algorithms that rely on police records detailing the time, location, and nature of past crimes in a bid to predict if, when, where, and who may commit future infractions. In theory, this should help authorities use resources more wisely and spend more time policing certain neighborhoods that they think will yield higher crime rates."

"The Singapore government says the wearable device it is developing for COVID-19 contact tracing will not have GPS, internet, or cellular connectivity, so data it collects can only be extracted when it is physically handed over to a health official. These details are being offered up as the government looks to ease concerns about data privacy and drive the adoption of digital tools that can help speed up contact tracing. "