56 posts tagged ‘Privacy’
23andMe Breach
mjtsai,
Lorenzo Franceschi-Bicchierai (Hacker News): On Friday, genetic testing company 23andMe announced that hackers accessed the personal data of 0.1% of customers, or about 14,000 individuals. The company also said that by accessing those accounts, hackers were also able to access “a significant number of files containing profile information about other users’ ancestry.” But 23andMe would […]
End-to-End Security for Facebook Messenger
Jon Millican and Reed Riley (Hacker News): We are beginning to upgrade people’s personal conversations on Messenger to use end-to-end encryption (E2EE) by default.Meta is publishing two technical white papers on end-to-end encryption:Our Messenger end-to-end encryption whitepaper describes the core cryptographic protocol for transmitting messages between clients.The Labyrinth encrypted storage protocol whitepaper explains our protocol […]
Privacy Manifests Update
Apple: Starting in spring 2024, if your new app or app update submission adds a third-party SDK that is commonly used in apps on the App Store, you’ll need to include the privacy manifest for the SDK. Signatures are also required when the SDK is used as a binary dependency. […] Based on the feedback we […]
Governments Using Push Notifications to Surveil Users
Tim Hardwick (Hacker News): Senator Ron Wyden said foreign officials were demanding the data from the tech giants to track smartphones. The traffic flowing from apps that send push notifications put the companies “in a unique position to facilitate government surveillance of how users are using particular apps,” Wyden said.[…]In a statement given to Reuters, […]
iCloud Advanced Data Protection Uptake
John Gruber: Back in August I ran a poll on Mastodon, asking my followers if they have iCloud Advanced Data Protection enabled. iCloud Advanced Data Protection was announced two years ago this week, alongside support for security keys (e.g. Yubico). I’m in the last group, too. I still use some older devices that would be […]
Misinformation About NameDrop
Juli Clover: As noted by The Washington Post, there have been warnings about NameDrop popping up on FaceTime. Police departments in Pennsylvania, Oklahoma, Ohio, and other states have been suggesting that contact information can be shared “just by bringing your phones close together.”[…]While it’s true that NameDrop is turned on by default, the way that […]
iMessage Contact Key Verification
macOS 14.2 Beta: With iMessage Contact Key Verification, users can choose to further verify that they are messaging only with the people they intend. iMessage Contact Key Verification uses Key Transparency to enable automatic verification that the iMessage key distribution service returns device keys that have been logged to a verifiable and auditable map. When […]
GitHub Code Search Now Requires Logging In
koepnick (via Hacker News): This is revolting and an anathema to the open source movement. A movement, I might add, Microsoft is abusing here.We’re told that this is for security… But what possible point is there when I can simply clone the repository and use more dedicated tools for proper searching and analysis?So what possible […]