Tag: privacy

The Deadly Game of Cyber Mis-Attribution | Digital Guardian

In-brief: Tools to attribute cyber attacks are still primitive – leading to potentially damaging mis-identification. (This post first appeared on the Digital Guardian blog.)

EFF: SSL Records Show Superfish Attacks in the Wild

  In-brief: The Electronic Frontier Foundation warned that it has evidence of man-in-the-middle attacks that take advantage of the same encryption-busting technology that Lenovo and Superfish implanted on consumer laptops.

Verizon: 5 Billion Business IoT Connections by 2020

    In-brief: A report by Verizon finds business adoption of IoT is growing quickly, boosting that company’s Internet of Things numbers. But increased business adoption of IoT brings risks to privacy and security.

Update: Superfish is the Real End of SSL

In-brief: Outrage over Lenovo’s promotion of privacy busting adware continued to grow amid lawsuits and more spying revelations. The big question: is this the final – final straw for the beleaguered Secure Sockets Layer (SSL) technology?  (Updated to add comment from Kevin Bocek of Venafi.)

Gadgets That Spy On Their Owners

  When the recent brouhaha erupted over Samsung SmartTV’s habit of harvesting ambient conversations and transmitting that data to unnamed third parties, we noted that Samsung was hardly alone. In fact, Security Ledger reported on identical behavior by LG television sets back in May, 2014.  But, as this article notes, televisions aren’t the only sensor-rich devices that are seeing and hearing what goes on around us. Forget about Samsung or LG getting recordings of you laughing at The Daily Show, or foggy conversations you have about what to watch next. What about Microsoft Xbox Kinect, which includes sound, motion and infrared sensors that can track up to six individuals simultaneously? Also mentioned: Google Waze, Amazon Echo and GM’s OnStar. The question – as always- is about what privacy protections consumers should expect from connected devices. While all the above manufacturers sought “consent” from users in the text of verbose and legalistic Terms […]