Fingerprinting: Critics say Google rules put profits over privacy

Changes which come in on Sunday permit so-called "fingerprinting", which allows online advertisers to collect more data about users including their IP addresses and information about their devices.

https://www.bbc.com/news/articles/cm21g0052dno

Perfect choice for a #Qubes workstation. This is great news and worth the wait.

If I had money, I would buy this laptop right now. Maybe I should. Who knows how much we'll pay to #Trump and #Musk after the #tariffs kick in.

@novacustom #qubesos #qubes_os #linux #privacy #security #privsec

https://forum.qubes-os.org/t/the-novacustom-v54-series-14-0-inch-coreboot-laptop-is-qubes-certified/32383

Easily and quickly instantiate #QubesOS RPCs and clients for systemd services.

#Qubes_OS #qubes #privacy #security #privsec

https://gist.github.com/bcduggan/bb60d79d2d1a2c2045d3a5dd4d35ca4d

Yubikey-Guide: a very complete (and long) Guide to use YubiKey as a SmartCard for storing GPG encryption, signing and authentication keys, which can also be used for SSH #PrivSec https://github.com/drduh/YubiKey-Guide

A reminder for #researchers and #privsec advocates:

If you are tweeting or tooting about data dumps and are using screenshots of TAs' posts, remember to redact any links in the posts.

I have just seen two examples in the past hour where people tweeted screenshots that show the whole world where to find personal information of students in one case and protected health information in the second case.

Tweet or toot responsibly. Remember to redact.

Have a great weekend.

Subscription Privilege Escalation and RCE by Abusing Azure Storage Account Keys

https://orca.security/resources/blog/azure-shared-key-authorization-exploitation/

Privacy Update: PrivSec - Part 4 - 'Badness Enumeration!' https://dt.gl/privacy-update-privsec-part-4-badness-enumeration/ #privacy #security #privsec

#Privacy Update: PrivSec - Part 3 - #Android! Privacy Advocate https://dt.gl/privacy-update-privsec-part-3-android/ #security #privsec

#PrivSec - an examination - 1 - The Hated One threat levels https://dt.gl/privsec-an-examination-part-1/

8x8 support is claiming that jitsi won't allow changing a username and login account have to have the email address as the username

Does anyone run a jitsi install and have it setup to allow for human readable names rather that the #PrivSec problem of advertising email addresses?

Investigating Privilege Escalation Methods in #AWS
#privsec #infosec
https://know.bishopfox.com/research/privilege-escalation-in-aws