The Conviction of Uber’s Chief Security Officer
November 7 2022I have been meaning to write about Joe Sullivan, Uber’s former Chief Security Officer. He was convicted of crimes related to covering up a cyberattack against Uber. It’s a...
Read moreLeaking Passwords through the Spellchecker
September 26 2022Sometimes browser spellcheckers leak passwords:
When using major web browsers like Chrome and Edge, your form data is transmitted to Google and Microsoft, respectively, should enhanced spellcheck features be...
Read more
More Log4j News
December 16 2021Log4j is being exploited by all sorts of attackers, all over the Internet:
At that point it was reported that there were over 100 attempts to exploit the vulnerability...
Read more
ProtonMail Now Keeps IP Logs
September 10 2021After being compelled by a Swiss court to monitor IP logs for a particular user, ProtonMail no longer claims that “we do not keep any IP logs.”
EDITED...
Read moreColorado Passes Consumer Privacy Law
July 15 2021First California. Then Virginia. Now Colorado. Here’s a good comparison of the three states’ laws.
Read moreThe Problem with Treating Data as a Commodity
February 26 2021
Excellent Brookings paper: “Why data ownership is the wrong approach to protecting privacy.”
From the introduction:
Treating data like it is property fails to recognize either the value that varieties...
Read more
Virginia Data Privacy Law
February 18 2021Virginia is about to get a data privacy law, modeled on California’s law.
Read moreNoxPlayer Android Emulator Supply-Chain Attack
February 8 2021
It seems to be the season of sophisticated supply-chain attacks.
This one is in the NoxPlayer Android emulator:
ESET says that based on evidence its researchers gathered, a threat...
Read more
Researchers have been able to find all sorts of personal information within GPT-2. This information was part of the training data, and can be extracted with the right sorts...
Read moreBackdoor in Zyxel Firewalls and Gateways
January 6 2021
This is bad:
More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers root access to devices via...
Read more
Recent Comments