Cell Phone Security and Heads of State

Earlier this week, the New York Times reported that the Russians and the Chinese were eavesdropping on President Donald Trump’s personal cell phone and using the information gleaned to better influence his behavior. This should surprise no one. Security experts have been talking about the potential security vulnerabilities in Trump’s cell phone use since he became president. And President Barack… Continue reading Cell Phone Security and Heads of State

Conspiracy Theories around the "Presidential Alert"

Noted conspiracy theorist John McAfee tweeted: The "Presidential alerts": they are capable of accessing the E911 chip in your phones — giving them full access to your location, microphone, camera and every function of your phone. This not a rant, this is from me, still one of the leading cybersecurity experts. Wake up people! This is, of course, ridiculous. I… Continue reading Conspiracy Theories around the "Presidential Alert"

Facebook Is Using Your Two-Factor Authentication Phone Number to Target Advertising

From Kashmir Hill: Facebook is not content to use the contact information you willingly put into your Facebook profile for advertising. It is also using contact information you handed over for security purposes and contact information you didn’t hand over at all, but that was collected from other people’s contact books, a hidden layer of details Facebook has about you… Continue reading Facebook Is Using Your Two-Factor Authentication Phone Number to Target Advertising

Using a Smartphone’s Microphone and Speakers to Eavesdrop on Passwords

It’s amazing that this is even possible: "SonarSnoop: Active Acoustic Side-Channel Attacks": Abstract: We report the first active acoustic side-channel attack. Speakers are used to emit human inaudible acoustic signals and the echo is recorded via microphones, turning the acoustic system of a smart phone into a sonar system. The echo signal can be used to profile user interaction with… Continue reading Using a Smartphone’s Microphone and Speakers to Eavesdrop on Passwords

Google Tracks its Users Even if They Opt-Out of Tracking

Google is tracking you, even if you turn off tracking: Google says that will prevent the company from remembering where you’ve been. Google’s support page on the subject states: "You can turn off Location History at any time. With Location History off, the places you go are no longer stored." That isn’t true. Even with Location History paused, some Google… Continue reading Google Tracks its Users Even if They Opt-Out of Tracking

The danger of third parties: ads, pipelines, and plugins

We take a look at the perils of the tools and services embedded into the websites you use on a daily basis, thanks to the development help of third parties.
Categories:

101
FYI

Tags: ad networksadsbreachphonespipelinesupply chainthird party

Continue reading The danger of third parties: ads, pipelines, and plugins

Traffic Analysis of the LTE Mobile Standard

Interesting research in using traffic analysis to learn things about encrypted traffic. It’s hard to know how critical these vulnerabilities are. They’re very hard to close without wasting a huge amount of bandwidth. The active attacks are more interesting. EDITED TO ADD (7/3): More information. I have been thinking about this, and now believe the attacks are more serious than… Continue reading Traffic Analysis of the LTE Mobile Standard