US insurers use drone photos to deny home insurance policies

April 8, 2024 at 04:35PM US insurance companies are using aerial photos from drones to evaluate and deny claims, with mega-insurers like State Farm and Allstate relying on this technology. The Geospatial Insurance Consortium was established to manage the vast number of homes in America, and it utilizes AI for analysis. Concerns arise over privacy, … Read more

House to Take up Bill to Reauthorize Crucial US Spy Program as Expiration Date Looms

April 6, 2024 at 08:36AM Next week, the House will consider a bill to reauthorize the Section 702 surveillance program for national security, despite concerns about privacy. The program allows the US to collect foreign communications without a warrant. Reauthorization faces political resistance due to concerns about privacy and FBI abuses, with proposed changes to … Read more

1-Click Takeover Bug in AWS Apache Airflow Reveals Larger Risk

March 21, 2024 at 01:33PM A bug in an AWS workflow management service led to cookie tossing, revealing a broader issue affecting major cloud services. Based on the meeting notes, it seems that a bug has affected users of an AWS workflow management service, potentially exposing them to cookie tossing. However, this incident has also … Read more

NHS Breach, HSE Bug Expose Healthcare Data in the British Isles

March 15, 2024 at 04:45PM Cybersecurity vulnerabilities in Ireland and Scotland highlight the precarious nature of protecting sensitive private healthcare data. From the meeting notes, it appears that there are concerns about vulnerabilities in cyber protections for sensitive private healthcare data in Ireland and Scotland, specifically referencing “whoopsies.” This suggests a potential fragility or uncertainty … Read more

Navigating Biometric Data Security Risks in the Digital Age

March 5, 2024 at 10:02AM Summary: Biometrics, though dating back to 1901, has significantly evolved with widespread use in public and private sectors. However, there are security risks, as shown by gaps in the US DoD’s biometrics data management. Enterprises also face data theft and privacy concerns, emphasizing the need for robust security policies and … Read more

China loathes AirDrop so much it’s publicized an old flaw in Apple’s P2P protocol

January 14, 2024 at 10:05PM In June 2023, China announced that operators of short-distance ad hoc networks must adhere to socialist principles and require users to disclose their real-world identities. The focus was on technologies like Wi-Fi hotspots and AirDrop, which were used by protestors during COVID-19 lockdowns. Chinese authorities acknowledged AirDrop’s vulnerability to surveillance … Read more

Drivers: We’ll take that plain dumb car over a flashy data-spilling internet one, thanks

January 12, 2024 at 02:34AM Most people at CES are uncomfortable with car manufacturers sharing their data with third parties, with 72% expressing discomfort. Many are unaware of the extent of data collection by their cars. However, there is a willingness to trade personal data for driver personalization and better insurance rates, suggesting a need … Read more

China Says State-Backed Experts Crack Apple’s AirDrop

January 10, 2024 at 07:09AM Chinese state-backed experts claim to have devised a method for detecting individuals using Apple’s encrypted AirDrop messaging service, as reported by the Beijing municipal government. This revelation was disclosed on SecurityWeek. Based on the meeting notes, it appears that Chinese state-backed experts have claimed to have found a way to … Read more

Meta’s AI-Powered Ray-Bans Portend Privacy Issues

December 15, 2023 at 05:19PM Meta is introducing AI-integrated smart glasses through an early access program. By using the wake phrase “Hey Meta,” users can control features and access real-time information. However, concerns have been raised over extensive data collection and ambiguous privacy policies. The new glasses aim to address the underwhelming sales of the … Read more

23andMe updates user agreement to prevent data breach lawsuits

December 7, 2023 at 04:43PM 23andMe faced a data breach from a credential stuffing attack, affecting 6.9 million people. Post-lawsuits, the company updated its Terms of Use to mandate arbitration over jury trials or class actions. Customers have 30 days to opt-out of the new terms, but the effectiveness of this change is questionable. Meeting … Read more