Security News

How to use the Whonix advanced security and privacy distribution
2020-07-14 15:23

Whonix is a Linux desktop dedicated to absolute security and privacy. Find out how to use this unique take on the desktop operating system.

Sueball locked, loaded and pointed at LinkedIn over iOS privacy naughtiness
2020-07-13 13:56

Microsoft's social-media-for-suits tentacle, LinkedIn, has attracted legal fire for allegedly peering at the clipboard of iOS devices. As well as doubtless making the podcast app a bit worse, the upcoming version of Apple's mobile OS also features a bunch of privacy features, including a notification telling the user when an app is reading from the device's clipboard.

Augmented Reality Will Compromise the Privacy and Safety of Attack Victims
2020-07-08 05:38

Augmented Reality (AR) technologies will provide new opportunities for attackers to compromise the privacy and safety of their victims.

US Senate Panel OKs Online Child Protection Bill Amid Privacy Fears
2020-07-03 13:10

A US Senate panel Thursday approved legislation aimed at combatting online child exploitation as civil liberties activists warned the measure could lead to an array of constitutional and privacy problems. The Judiciary Committee voted to approve a revised version of the Earn It Act which would eliminate "Blanket liability protection" for online platforms which fail to protect against child sexual abuse material.

Facebook Privacy Glitch Gave 5K Developers Access to ‘Expired’ Data
2020-07-02 16:06

The social media giant said that it recently discovered that 5,000 developers received data from Facebook users - long after their access to that data should have expired. In 2018, on the heels of the Cambridge Analytica privacy incident, Facebook debuted stricter controls over data collection by third-party app developers.

Zoom: We've delivered on all of our security and privacy promises, apart from one
2020-07-02 11:33

As more remote workers turned to Zoom for business meetings, virtual get-togethers and other forms of socially distanced communication, it soon became apparent that security -thanks to headaches such as a wave of ' Zoom-bombing ' - was an area that needed more work. As a result, Zoom CEO Eric Yuan launched a 90-day programme that pledged to address key privacy and security concerns.

macOS Privacy Protections Bypass Disclosed After Apple Fails to Release Fix
2020-07-01 15:30

Details on a macOS privacy protections bypass method were published this week, more than six months after Apple was informed of the issue, but failed to deliver a fix. Dubbed TCC, the privacy protections system was introduced in macOS Mojave to ensure that certain files on the system are kept out of reach of unauthorized applications.

After six months of stonewalling by Apple, app dev goes public with macOS privacy protection bypass
2020-07-01 02:32

Six months after software developer Jeff Johnson told Apple about a privacy bypass vulnerability opening up protected files in macOS Mojave, macOS Catalina, and the upcoming macOS Big Sur, the bug remains unfixed - so he's going public. This latest bug can be exploited by a maliciously crafted app to bypass a privacy system known as Transparency, Consent, and Control that was introduced in OS X Mavericks and got strengthened in subsequent releases through technologies like System Integrity Protection in El Capitan.

New privacy-preserving SSO algorithm hides user info from third parties
2020-06-30 09:33

Some people are also concerned that their ID and password could be stored locally by third parties when they provide them to the SSO mechanism. In an effort to address these problems, Associate Professor Satoshi Iriyama from Tokyo University of Science and his colleague Dr Maki Kihara have recently developed a new SSO algorithm that on principle prevents such holistic information exchange.

Researchers create tool for protecting children’s online privacy
2020-06-30 03:00

A University of Texas at Dallas study of 100 mobile apps for kids found that 72 violated a federal law aimed at protecting children's online privacy. Dr. Kanad Basu, assistant professor of electrical and computer engineering in the Erik Jonsson School of Engineering and Computer Science and lead author of the study, along with colleagues elsewhere, developed a tool that can determine whether an Android game or other mobile app complies with the federal Children's Online Privacy Protection Act.