News for hackers. Stuff that matters.

iwalsh

Re:Chrome exempts Google sites from user site data settings on Sunday October 18, 2020 @11:51AM (#24818719)
There is an ancient (created in 2012) bug report about this general issue; it appears broader than the report's title would indicate: https://bugs.chromium.org/p/chromium/issues/detail?id=127340
Re:See all your purchases, subscriptions and reservations on Thursday September 27, 2018 @11:16PM (#18090718)
Google reads all Gmail messages, presumably for targeted advertising. In this case it looks like they're giving folks a UI to look at (some of) what they're gathering.
Re:Google: Security Keys Neutralized Employee Phishing on Monday July 23, 2018 @01:38PM (#17594327)
That vuln only affected RSA keys generated for specific niche functionality and not most uses of the YubiKey.

> The issue weakens the strength of on-chip RSA key generation and affects some use cases for the Personal Identity Verification (PIV) smart card and OpenPGP functionality of the YubiKey 4 platform. Other functions of the YubiKey 4, including PIV Smart Cards with ECC keys, FIDO U2F, Yubico OTP, and OATH functions, are not affected. YubiKey NEO and FIDO U2F Security Key are not impacted.

Re:New autoplay policy in Chrome on Monday May 07, 2018 @03:01AM (#17010855)
chrome://flags/#autoplay-policy
Re:1.1.1.1: Fast, privacy-first consumer DNS service on Sunday April 01, 2018 @03:56PM (#16730094)
Not sure if they edited anything. Your quote is from the blog post[1] but the aforementioned quote by tialaramex is from the 1.1.1.1 site itself[2].

[1] https://blog.cloudflare.com/announcing-1111/ [2] https://1.1.1.1

Unfortunately the same requirement isn't generally understood to hold in these circumstances.

For example, the 9th circuit court of appeals in U.S. vs Davis[1] held that airport searches are "administrative searches" and are permissible in much broader ways than searches while being arrested.

[1] http://cdn.ca9.uscourts.gov/datastore/opinions/2005/06/07/04...

>"We just want to search your house for 30 minutes" or "you can have your document back after we photocopy it, so no warrant needed."

This scenario would be quite a bit more akin to "let me have that locked briefcase you're carrying through security, no need for you to unlock it" and then returning it to you locked after 10 minutes.

Was that a 4th amendment search if they claim that they didn't look through your briefcase?

It's possible the TSA will claim that taking a device for some amount of time and giving it back doesn't qualify as a (4th amendment) search.

However, from a security perspective it would be awful if they could disappear with your device whenever they wanted - that certainly makes me uncomfortable.

Re:Standalone Signal Desktop on Tuesday October 31, 2017 @05:39PM (#15596832)
What does this mean for ChromeOS users? Will Signal be maintained for ChromeOS or will those users no longer be able to use Signal?
Re:King County rolls out Miranda rights tailored for young people on Thursday September 28, 2017 @04:31PM (#15360464)
King County is already using prosecutorial discretion to reduce the number of criminal prosecutions that lead to jail and have been for some time.

Not claiming that we shouldn't do more work here but the Miranda warning changes are in tandem with other improvements here.

https://www.seattletimes.com/seattle-news/crime/in-king-coun...