teslademigod1

UAE, NSO and minimal punishment or reaction from the US. Story of the last few decades

When it's an all-caps, MY DAUGHTER HAS AUTISM BECAUSE OF [X] VACCINE

I mean, that's misinformation. When you know that no medical literature supports the idea that autism is caused by vaccine, and you still spread it...

Pen testing requires that people not be aware they're getting attacked.

"If someone is pointing out a case where a vaccine caused harm or that they're worried about it — you know, that's a difficult thing to say from my perspective that you shouldn't be allowed to express at all."

Where I'm from, we call that misinformation.

seems Microsoft Teams just got hit: https://www.reddit.com/r/MicrosoftTeams/comments/ihghrq/test...

yeah, sorry, adjunct not associate.

great (or typical?) response from company:

"Through an Amazon representative, CaptainU claimed that the sensitive educational data was “meant to be openly available.” But it seems that CaptainU never mentioned this fact to the students or their parents."

I'd imagine the tuition should drop by about 30-50%, seeing as college costs are going to be dropping. I'm pretty sure in a skeptical sense they'll be trying to pay associate professors less for the same reason.

and charging students more.

i think this is pretty important, so i'll TL;DR:

"We recently discovered an unsecured Amazon Simple Storage Service (S3) bucket that contains more than 55,000 call recordings between loan support workers and American consumers with outstanding student loans.

This open database also contains more than 25,000 PDFs, many of which are scans or photos of proof of income (such as pay receipts or tax returns). Both the proofs of income and call recordings contain the loaners’ social security numbers, among other sensitive personal data.

The database seems to belong to members of the Student Advocates Group, which an FTC press release named as a student loan debt relief scheme that “bilked millions out of consumers by charging illegal upfront fees and falsely promising to lower or even eliminate consumers’ loan payments or balances.”

Because the bucket contains sensitive data from people across the US, including California residents, the bucket owner may have to pay damages and penalties under the CCPA, since:

-The leaked data contains highly personal information (including names plus social security numbers and tax ID numbers,) -The data is both non-encrypted and non-redacted (all samples in this article have been redacted by CyberNews) -The leak is “a result of the business’s violation of the duty to implement and maintain reasonable security procedures and practices appropriate to the nature of the information.”"

The unintended consequences of covid-19 (both good and bad) are really surprising.

Poland for the win :D

This is part knee-jerk, part well-deserved. Zoom isn't great for privacy (and apparently not security either, with its false e2e claims). But MS Teams isn't much better.

But honestly, setting up a zoom meeting with a public link is just asking for trouble

great resource with a sense of humor. loving the "contributable black"

Yeah... but that last part is crucial "... when they visit their website"

It's like a title saying "US government tracks travelers when they visit the US"

I wouldn't right off the bat assume that the US gov't is tracking all travelers all the time. I'd assume it's only when they land in the US

That's likely true. I don't know if I'd call it "outrage" as just...useful information.

Like a live test of a theoretical concept. Privacy over marketing. At some point, they have to improve their offerings and user experience. But I wonder if they went for the quickest option out of the box (there are lots of shady third parties there) or if they considered doing something a bit safer based on their needs.

I know lots of marketers that want A LOT of tools and get A LOT of data -- and not really sure what to do with that data

awesome resource