Privacy – Security

My Social Media Detox, part 1: Facebook account

January 9, 2019 by Andrea Fortuna

Andrea Fortuna

Right after new year’s, I’ve decided to start a process of “social media detox”: one of my 2019 goals is to find more time left to read, study and watch movies. Of course social networks are main candidates to get excluded from my daily routine, without excluding privacy implication! So,…

“Town of Salem” leak: more than 2 million password hashes are already cracked

January 6, 2019 by Andrea Fortuna

Andrea Fortuna

…and are available to download. Personal details of 7.6 million users of BlankMediaGames game “Town of Salem” has been stolen by an unknown attacker. Town of Salem is a browser-based game that challenges players on their ability to convincingly lie as well as detect when other players are lying. The…

Bay Area: Join us 1/9 to talk about personal data security in 2019

January 3, 2019 by Annalee Newitz

Annalee Newitz

Enlarge / Askhan Soltani has worked with the FTC and as an independent researcher, exploring data privacy issues. Recently, he testified about Facebook's privacy policies before the US and UK governments. (credit: Ashkan Soltani) The Cambridge Analytica scandal. Data breaches at hotels, banks, rideshare companies, and hospitals. Facial recognition. DNA…

Easily setup a Onion Service using Docker

November 5, 2018 by Andrea Fortuna

Andrea Fortuna

Some time ago I’ve written a post about Tor Onion Services (formerly known as hidden services), and how to host them on a spare android smartphone. Tor makes possible for users to hide their locations while offering various kinds of services, such as web publishing or an instant messaging server.…

Meet Helm, the startup taking on Gmail with a server that runs in your home

October 17, 2018 by Dan Goodin

Dan Goodin

Enlarge (credit: Helm) There’s no doubt that Gmail has changed the way we consume email. It’s free, it gives most of us all the storage we’ll ever need, and it does a better job than most in weeding out spam and malware. But there’s a cost to all of this.…

Google backtracks—a bit—on controversial Chrome sign-in feature

September 27, 2018 by Peter Bright

Peter Bright

Enlarge (credit: Google Chrome) Google will partially revert a controversial change made in Chrome 69 that unified signing in to Google's online properties and Chrome itself and which further preserved Google's cookies even when users chose to clear all cookies. Chrome 70, due in mid-October, will retain the unified signing…

Cloudflare supports Privacy Pass

November 9, 2017 by Nick Sullivan

Nick Sullivan

Enabling anonymous access to the web with privacy-preserving cryptography Cloudflare supports Privacy Pass, a recently-announced privacy-preserving protocol developed in collaboration with researchers from Royal Holloway and the University of Waterloo. Privacy Pass leverages an idea from cryptography — zero-knowledge proofs — to let users prove their identity across multiple sites…

Azure Confidential Computing will keep data secret, even from Microsoft

September 14, 2017 by Peter Bright

Peter Bright

Enlarge / The Trusted Execution Environment means that even if the application and operating system are compromised, the green code and data can't be accessed. (credit: Microsoft) Microsoft announced Thursday a new feature coming to its Azure cloud platform named "Confidential Compute." The feature will allow applications running on Azure to…

Advancing Privacy Protection with the GDPR

August 21, 2017 by Caroline Greer

Caroline Greer

A game-changer The road towards implementation of the new European GDPR (the General Data Protection Regulation) has been a long one, even though public awareness of its impact, especially outside of Europe, is only now really starting to take hold. This game-changing piece of EU legislation will require companies to…

Advancing Privacy Protection with the GDPR

August 21, 2017 by Caroline Greer

Caroline Greer

Ninth Circuit Rules on National Security Letter Gag Orders

July 18, 2017 by Doug Kramer

Doug Kramer

As we’ve previously discussed on this blog, Cloudflare has been challenging for years the constitutionality of the FBI’s use of national security letters (NSLs) to demand user data on a confidential basis. On Monday morning, a three-judge panel of the U.S. Ninth Circuit Court of Appeals released the latest decision…

Ninth Circuit Rules on National Security Letter Gag Orders

July 18, 2017 by Doug Kramer

Doug Kramer

More Android phones than ever are covertly listening for inaudible sounds in ads

May 5, 2017 by Dan Goodin

Dan Goodin

Enlarge (credit: Arp et al.) Almost a year after app developer SilverPush vowed to kill its privacy-threatening software that used inaudible sound embedded into TV commercials to covertly track phone users, the technology is more popular than ever, with more than 200 Android apps that have been downloaded millions of times…

Configuring YubiKey for GPG and U2F

April 28, 2017 by adr13n

adr13n

Here is a little walkthrough on how to get started with the YubiKey and GPG. After following this guide you will have a secure setup using a YubiKey containing your GPG keys as well as an authentication key that could be used for SSH. Moreover the configured YubiKey will also be capable of U2F and managing…

Meet PINLogger, the drive-by exploit that steals smartphone PINs

April 18, 2017 by Dan Goodin

Dan Goodin

Enlarge (credit: Harrison Weber) Smartphones know an awful lot about us. They know if we're in a car that's speeding, and they know when we're walking, running, or riding in a bus. They know how many calls we make and receive each day and the precise starting and ending time…

1 2 Next »