Crooked Bough News Round-up

— Netflix’s Password-Sharing Crackdown Has Hit the US

 

at 5/27/23 7:00am

TikTok user data is exposed to Chinese ByteDance employees, a screen recording app goes rogue in Google Play, and privacy groups want Slack to expand encryption.

[Category: Security, Security / Security News]

— Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

 

at 5/25/23 1:55pm

The co-inventor of “bcrypt” is reflecting on the ubiquitous function’s 25 years and channeling cybersecurity’s core themes into electronic dance music.

[Category: Security, Security / Cyberattacks and Hacks]

— The Security Hole at the Heart of ChatGPT and Bing

 

at 5/25/23 12:00am

Indirect prompt-injection attacks can leave people vulnerable to scams and data theft when they use the AI chatbots.

[Category: Security, Security / Cyberattacks and Hacks]

— China Hacks US Critical Networks in Guam, Raising Cyberwar Fears

 

at 5/24/23 4:27pm

Researchers say the state-sponsored espionage operation may also lay the groundwork for disruptive cyberattacks.

[Category: Security, Security / Cyberattacks and Hacks, Security / National Security]

— Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto

 

at 5/23/23 1:02pm

And it's happening in plain sight.

[Category: Security, Security / Security News, Security / Privacy]

— There’s Finally a Way to Improve Cloud Container Registry Security

 

at 5/23/23 12:23pm

“Container registries” are ubiquitous software clearinghouses, but they've been exposed for years. Chainguard says it now has a solution.

[Category: Security, Security / Cyberattacks and Hacks, Security / Security News]

— Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption

 

at 5/22/23 1:23pm

In response to an EU proposal to scan private messages for illegal material, the country's officials said it is “imperative that we have access to the data.”

[Category: Security, Security / Privacy]

— Meta’s $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

 

at 5/22/23 8:38am

The record-breaking GDPR penalty for data transfers to the US could upend Meta's business and spur regulators to finalize a new data-sharing agreement.

[Category: Security, Security / Privacy, Business / Social Media]

— The Real Risks in Google’s New .Zip and .Mov Domains

 

at 5/21/23 5:00am

While the company’s new top-level domains could be used in phishing attacks, security researchers are divided on how big of a problem they really pose.

[Category: Security, Security / Cyberattacks and Hacks]

— A TikTok ‘Car Theft’ Challenge Is Costing Hyundai $200 Million

 

at 5/20/23 7:00am

Plus: The FBI gets busted abusing a spy tool, an ex-Apple engineer is charged with corporate espionage, and collection of airborne DNA raises new privacy risks.

[Category: Security, Security / Cyberattacks and Hacks, Security / National Security, Security / Privacy, Security / Security News]

— The Underground History of Turla, Russia's Most Ingenious Hacker Group

 

at 5/20/23 4:00am

From USB worms to satellite-based hacking, Russia’s FSB hackers, known as Turla, have spent 25 years distinguishing themselves as “adversary number one.”

[Category: Security, Security / Cyberattacks and Hacks, Security / National Security]

— How You, or Anyone, Can Dodge Montana’s TikTok Ban

 

at 5/19/23 9:15am

Montana’s TikTok ban will be impossible to enforce. But it could encourage copycat crackdowns against the social media app.

[Category: Security, Security / National Security]

— A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks

 

at 5/19/23 4:00am

Kaspersky researchers have uncovered clues that further illuminate the hackers’ activities, which appear to have begun far earlier than originally believed.

[Category: Security, Security / Cyberattacks and Hacks, Security / National Security, Security / Security News]

— Google May Delete Your Old Accounts. Here’s How to Stop It

 

at 5/18/23 11:41am

Your inactive profiles, like Gmail or Docs, could turn into digital dust later this year. A few clicks can save them.

[Category: Gear, Gear / How To and Advice, Security / Security Advice]

— The US Post Office Is Spying on the Mail. Senators Want to Stop It

 

at 5/17/23 12:05pm

The USPS carries out warrantless surveillance on thousands of parcels every year. Lawmakers want it to end—right now.

[Category: Security, Security / Privacy, Security / Security News]

— The True Cost of a Free Telly TV

 

at 5/17/23 5:00am

Telly TV tracks you and bombards you with ads on a dedicated second screen. It could help normalize smartphone-style surveillance in your living room.

[Category: Security, Security / Privacy]

— ChatGPT Scams Are Infiltrating Apple's App Store and Google Play

 

at 5/17/23 4:00am

An explosion of interest in OpenAI’s sophisticated chatbot means a proliferation of “fleeceware” apps that trick users with sneaky in-app subscriptions.

[Category: Security, Security / Security News, Security / Cyberattacks and Hacks]

— WhatsApp 2023: New Privacy Features, Settings, and More

 

at 5/16/23 9:00am

The Meta-owned app offers end-to-end encryption of texts, images, and more by default—but its settings aren't as private as they could be.

[Category: Security, Security / Security Advice, Security / Privacy]

— Buffalo Mass Shooting Victims' Families Sue Meta, Reddit, Amazon

 

at 5/15/23 2:14pm

The families of victims of a mass shooting in Buffalo are challenging the platforms they believe led the attacker to carry out a racist massacre.

[Category: Security, Security / National Security, Business / Social Media]

— The UK’s Secretive Web Surveillance Program Is Ramping Up

 

at 5/15/23 12:00am

A government effort to collect people’s internet records is moving beyond its test phase, but many details remain hidden from public view.

[Category: Security, Security / Privacy]

— How to Use Google Authenticator

 

at 5/14/23 6:00am

The two-factor authentication tool got some serious upgrades that can help you bolster security for your online accounts.

[Category: Security, Security / Security Advice]

As of 5/29/23 4:54pm. Last new 5/27/23 7:28am.