Does it matter (and go widely unnoticed) that GitLab CI+docker-executor produces world-writable files, or do "we" need to raise awareness for that?

I have a vague feeling that there is a wide spread security problem which goes unnoticed. I’m trying to find out how to check the level of relevance and awareness out there or how to maybe raise it.
Situation:
When using GitLab CI with the… Continue reading Does it matter (and go widely unnoticed) that GitLab CI+docker-executor produces world-writable files, or do "we" need to raise awareness for that?

Screen Recording permission in Android 9.0 goes away when force stopping app [migrated]

When I use third party app for screen recording 1st time I have to give screen recording permission.
Then I don’t have to give that permission.
2nd 3rd times …. It can record.
I don’t find any settings in android 9.0 to revoke it.
It ask… Continue reading Screen Recording permission in Android 9.0 goes away when force stopping app [migrated]

Difference between "picture in picture" and "draw over other apps" in android. And their security vulnerability [migrated]

What are the security vulnerability of these two permissions?
Is it possible that I’m typing something in chat heads of a fb messenger and other third app with "display over other app" permission listening it ?
Or drawing a fake … Continue reading Difference between "picture in picture" and "draw over other apps" in android. And their security vulnerability [migrated]

How to disable Files and Folders permissions for specific apps on macOS Sonoma?

I am trying to establish a secure folder in macOS Sonoma 14.3 which should be only accessible to applications with explicitly granted permissions. As far as I understand, this can be only done for certain folders (Documents, Downloads…) … Continue reading How to disable Files and Folders permissions for specific apps on macOS Sonoma?