AshwinDurairaj

Can you provide any examples of high quality subreddits?

Does anyone know if Telegram will ever move away from relying on phone numbers for authentication?

The motives for explanation 2 are currently not known. MBS might have had numerous reasons, ranging from WaPo or AWS. But regardless, there could have been many reasons to target Bezos. The part that doesn't sit right with me is the leaks, since it would have burned the 0day and connected Saudis to hacking phones which I doubt they would have wanted.

There were also claims of android keyboardd being used to log messages on Signal (and maybe Telegram), by Naomi Wu and others. No proof for this though.

Assuming Tor Browser, just change Tor circuit, ctrl+l (I believe), until you get one without captcha (works after 2-3 times usually). Only use Google search when absolutely necessary though.

Think he means DYR, do your research.

An honest question - What outcomes would there be if countries like Spain decide one day to impose exorbant taxes, like those totalling $1b annually for Google?

Would it just be cheaper for these companies to pull out? And what international recourse would happen?

Does someone know if in cases like these Google will inform you why this happened?

I think this is a disproportionately negative title compared to what actually happened, and solely for one word, "breach".

My opinion is that it conveys something more serious than a bug. Thousands of secrets have been leaked on Github/Bitbucket, and we don't need to report every single one as a "breach".

For instance many AWS credentials have been reported as being leaked on HackerOne, but I don't see Ars writing an article for each one saying "X company breach let's outside hacker have full access to X's infrastructure"

It wasn't law enforcement taking the domain name, it also was only solved fast because of intervention from the Namecheap CEO.

I briefly read through those leaked FB files, I think they're on NBC News. There was an email and other documents that showed they were thinking about opening a cloud offering multiple times, but it seems they never got round to launching it in the end.

Agree with you, it's impossible to compare numbers of data breaches. It's possible to compare reported data breaches, but every source is different, as its almost impossible to collate every single one reported or known.

I hope those that get fired sue for wrongful termination to see if Google really did interfere purposely with the labor organizers, or if the organizer maliciously acted and their termination was justified.

They're just some risks, we could also say: - Local drug dealer knows where you live and cut /threaten you - Local drug dealer can find out a lot about you, and mess with your job or family etc - Local drug dealers often always have cut or non pure 'product' - Local drug dealers from what I've read and seen, are much more likely to fuck you over than drug dealers on DNMs

I'm laughing too.

Its all opportunistic as Disney+ is hot on the news right now. Wait till they find out that these tools are cracking Hulu, Reddit etc etc, probably also the BBCs own site. And I guarantee the net is more than 4000 for them.

I'm sure other forms of exchange, for example, USD to GC, can still be used to launder money. This is not exclusive to cryptocurrency as you would imply.

Google has already been sued for linking health data, so this should certainly raise eyebrows for those interested, and I wouldn't expect Google to have any free pass here either.

SAP and Salesforce would love to, but haven't achieved Oracle-free status to the joy of Larry.

Sorry to say but Wikipedia is far from a neutral source.

Basically, I gathered from the indictment that they had a 'WAF misconfiguration', which I take to be SSRF allowing her to obtain temporary AWS credentials from the metadata endpoint, which have the WAF role they talked about, which has sufficient permissions to list buckets and download files etc.

Most likely not very significant, they probably got the 2 billion records as a upper bound, considering the amount of junk data they likely have in the db, I think its just an overblown news story.