Well, it happened: local cops have access to a tool called Fog Reveal that is based on location data harvested from ordinary smartphone apps. Cops using without warrants to see what devices in an area, track down individuals. Sold to cops for cheap.
New: here is the user manual for a mass surveillance tool that U.S. local cops are actively using. Based on location data harvested from ordinary apps installed on peoples' phones. No warrant needed, just login and search
A lot of the recent policy debates around surveillance/encryption start from the frame of police *losing capability* but nobody ever talks about how quickly their capabilities have grown. Did we have a democratic debate about ubiquitous location surveillance?
-
This story is great. There is a stolen pagan ring, a curse tablet, and JRR Tolkien.
1) A stranger than fiction Roman ring mystery thread: this enigmatic Roman gold ring was found in a ploughed field near Silchester in 1785. The square bezel has a portrait of the pagan goddess Venus, inscribed backwards SUNEV for use as a signet ring by the owner. Curiously...
-
The attempted murder of Cristina Kirchner makes @hoffman_bruce and @Jacob_A_Ware's article just published in @WarOnTheRocks,The Accelerating Threat of Political Assassination, even more timely.
warontherocks.com/2022/08/the-ac…
Radio Pichincha @radio_pichincha
-
Often a better way to think about the vague concept of "shift left" is for the goal to be to move more security from run time to build time.
-
Another day, another 'cyber expert' reaches in the well of his daily cyberwar Google Alert to find new content to latch their priors onto.
-
CloudFlare are, for some unknown reason, choosing to die on the KiwiFarms hill. Maybe Cloudflare wouldn’t have dropped Switter if they had pivoted from supporting sex workers to encouraging neo nazis?
When @TheRegister doesn't use its usual satirical/joking tone and just says the damning facts straight up, you know it is no laughing matter, @Cloudflare.
-
Usenix archive is free.
https://www.usenix.org/conferences/past
Want to dig into some archival content? Browse the list of past USENIX conferences--you'll find videos of presentations linked on the program page for each event, freely available to watch thanks to our open access policy. Start here: usenix.org/conferences/pa… #openaccess
-
If you don’t notice over-refunding a customer by ten and a half million dollars for seven months, I’m not sure you’re responsible enough to handle having it back
Ars Technica @arstechnica
-
This is awesome. YandexTaxi was hacked and all the taxis sent to one location, causing a huge traffic jam. See my supplemental post for more.
Пишут «Яндекс.Такси» хакнули и заставили многих водил ехать на один и тот же адрес в Москве – как итог образовалась огромнейшая пробка на Кутузовском проспекте
-
State Department reached settlement with three former NSA analysts who worked for the UAE providing exploits used for cyber surveillance. The three are "prohibited from participating directly or indirectly in any activities subject to the ITAR for 3 years"
-
-
Years(!) in the making - the #ChipWhisperer-Husky @crowd_supply is now live at crowdsupply.com/newae/chipwhis… . This has been hugely delayed due to supply chain issues, but @jptvelo & Alex have been using that time to build out some of the most amazing features in this device.
-
So it looks like one of my videos can't get Chinese subtitles because it generates errors every time they are trying to translate it.
The English subtitles contains the following:
java.lang.ProcessBuilder
...
-
Some lessons that I've learned:
1/ Accept that prevention would eventually fail, invest in detection and response
At this scale, somebody gotta find some way to break in. Google Blue Team hunts and extinguishes them before they could cause any substantial damage.
CC @methodtim
J. A. Guerrero-Saade @juanandres_gs
-
Insanity of EVE’s architecture.
Excited about the advances in AI/ML that we've been seeing in the last few years. The playful AI content generation has really captured people's imaginations and sparked a lot of interesting conversations and creations. However, I've also been noticing some worrying trends. 🧵
-
Australia's foreign signals intelligence agency ASD (@ASDGovAu) releases coin with secret codes to mark its 75th anniversary (Sep 1) abc.net.au/news/2022-09-0…
If you can crack the codes, you're invited to submit the answers here: asd.gov.au/75th-anniversa…
-
@Aelkus this is my core thesis of why, if vamps existed, their hunters would not be funded by religious group but insurance companies and banks. Who wants to pay out on long-term investments?
-
Cut the editing window down to 5 minutes, disallow editing that changes images or links, reduce potential abuse & harm.
#EditButton https://t.co/br4bQ1TOHD
Rachel Tobac @RachelTobac
-
Assasination attempt on Argentina’s vicepresident Cristina Kirchner, gun fails to fire. Assailant, 35-year-old Brazilian, has been arrested.
-
This is the finished product, I ended up keeping it simple because this was already a huge tangent to explain the context and significance of Linear Executables for this writeup on a bug for #BGGP3 n0.lol/lemonade/
-
Some lessons that I've learned:
1/ Accept that prevention would eventually fail, invest in detection and response
At this scale, somebody gotta find some way to break in. Google Blue Team hunts and extinguishes them before they could cause any substantial damage.
CC @methodtim
J. A. Guerrero-Saade @juanandres_gs
-
So it looks like one of my videos can't get Chinese subtitles because it generates errors every time they are trying to translate it.
The English subtitles contains the following:
java.lang.ProcessBuilder
...
-
Automatic execution of code upon package download from pypi.
If you run pip install <package>, you know that setup.py will be run. The finding is that if you run pip download <package> then setup.py is also run. You’ve probably never even seen pip download, so I guess just to be on the safe side, continue not using that command.
-