The Data Tinder Collects, Saves, and Uses

Posted on By infossl
adware, datacollection, privacy, Security technology, socialmedia, surveillance

Under European law, service providers like Tinder are required to show users what information they have on them when requested. This author requested, and this is what she received: Some 800 pages came back containing information such as my Facebook “likes,” my photos from Instagram (even after I deleted the associated account), my education, the … Read More “The Data Tinder Collects, Saves, and Uses” »

ISO Rejects NSA Encryption Algorithms

Posted on By infossl
backdoors, cryptography, edwardsnowden, encryption, nsa, Security technology, vulnerabilities

The ISO has decided not to approve two NSA-designed block encryption algorithms: Speck and Simon. It’s because the NSA is not trusted to put security ahead of surveillance: A number of them voiced their distrust in emails to one another, seen by Reuters, and in written comments that are part of the process. The suspicions … Read More “ISO Rejects NSA Encryption Algorithms” »

What the NSA Collects via 702

Posted on By infossl
courts, datacollection, foia, nationalsecuritypolicy, nsa, privacy, Security technology, surveillance

New York Times reporter Charlie Savage writes about some bad statistics we’re all using: Among surveillance legal policy specialists, it is common to cite a set of statistics from an October 2011 opinion by Judge John Bates, then of the FISA Court, about the volume of internet communications the National Security Agency was collecting under … Read More “What the NSA Collects via 702” »

Apple’s FaceID

Posted on By infossl
apple, authentication, biometrics, facerecognition, hacking, identification, Security technology

This is a good interview with Apple’s SVP of Software Engineering about FaceID. Honestly, I don’t know what to think. I am confident that Apple is not collecting a photo database, but not optimistic that it can’t be hacked with fake faces. I dislike the fact that the police can point the phone at someone … Read More “Apple’s FaceID” »

Bluetooth Vulnerabilities

Posted on By infossl
airgaps, bluetooth, malware, patching, Security technology, vulnerabilities

A bunch of Bluetooth vulnerabilities are being reported, some pretty nasty. BlueBorne concerns us because of the medium by which it operates. Unlike the majority of attacks today, which rely on the internet, a BlueBorne attack spreads through the air. This works similarly to the two less extensive vulnerabilities discovered recently in a Broadcom Wi-Fi … Read More “Bluetooth Vulnerabilities” »

Another iPhone Change to Frustrate the Police

Posted on By infossl
biometrics, ios, iphone, passwords, Security technology

I recently wrote about the new ability to disable the Touch ID login on iPhones. This is important because of a weirdness in current US law that protects people’s passcodes from forced disclosure in ways it does not protect actions: being forced to place a thumb on a fingerprint reader. There’s another, more significant, change: … Read More “Another iPhone Change to Frustrate the Police” »