Self-Driving Cars Are Surveillance Cameras on Wheels - Schneier on Security
Police are already using self-driving car footage as video evidence
overvaking
NSO Group Exploited New Zero-Click Vulnerabilities in iOS
https://gizmodo.com/nso-group-exploited-new-zero-click-vulnerabilities-in-i-1850347936
Citizen Lab identified three new exploits that targeted iOS users worldwide in 2022. Apple’s Lockdown Mode reportedly worked as promised.
Austrian DSB: Meta Tracking Tools Illegal
https://noyb.eu/en/austrian-dsb-meta-tracking-tools-illegal
the Austrian Data Protection Authority (DSB) has decided that the use of Facebook’s tracking pixel directly violates the GDPR
…
The DSBs decision to declare Google Analytics illegal, also applies to the “Facebook Login” and “Meta Pixel” tools provided by Meta: If these tools are used, data is inevitably transferred to the USA, where the data is at risk of intelligence surveillance. European website operators are therefore advised not to include any tools from Meta on their websites.
The privacy loophole in your doorbell - POLITICO
https://www.politico.com/news/2023/03/07/privacy-loophole-ring-doorbell-00084979
Police were investigating his neighbor. A judge gave officers access to all his security-camera footage, including inside his home.
…
It really takes the control out of the hands of the homeowners, and I think that’s hugely problematic,” said Jennifer Lynch, the surveillance litigation director of the Electronic Frontier Foundation, a digital rights advocacy group.
In the debate over home surveillance, much of the concern has focused on Ring in particular, because of its popularity, as well as the company’s track record of cooperating closely with law enforcement agencies.
The Kremlin Has Entered Your Telegram Chat - WIRED
https://www.wired.com/story/the-kremlin-has-entered-the-chat/
Russian antiwar activists placed their faith in Telegram, a supposedly secure messaging app. How does Putin’s regime seem to know their every move?
…
She says the officer told her that investigators had been following along with her private Telegram chats as she wrote them.
…
In many cases, it’s impossible to tell what’s really happening to people’s accounts—whether spyware or Kremlin informants have been used to break in, through no particular fault of the company; whether Telegram really is cooperating with Moscow; or whether it’s such an inherently unsafe platform that the latter is merely what appears to be going on.
TikTok Spied On Forbes Journalists
https://www.forbes.com/sites/emilybaker-white/2022/12/22/tiktok-tracks-forbes-journalists-bytedance/
An internal investigation by ByteDance, the parent company of video-sharing platform TikTok, found that employees tracked multiple journalists covering the company, improperly gaining access to their IP addresses and user data in an attempt to identify whether they had been in the same locales as ByteDance employees.
According to materials reviewed by Forbes, ByteDance tracked multiple Forbes journalists as part of this covert surveillance campaign, which was designed to unearth the source of leaks inside the company following a drumbeat of stories exposing the company’s ongoing links to China.
TikTok Parent ByteDance Planned To Use TikTok To Monitor The Physical Location Of Specific American Citizens
Report: Mercenary spyware exploited Google Chrome zero-day to target journalists - The Record by Recorded Future
A zero-day vulnerability in Google Chrome was discovered when attackers exploited it to target users in the Middle East, including journalists, cybersecurity firm Avast said Thursday.
The company attributed the attacks to a secretive Israeli firm known as Candiru — named after a notorious parasitic fish — that sells spyware to governments.
Ring Reveals They Give Videos to Police Without User Consent or a Warrant - Electronic Frontier Foundation
Amazon’s Ring devices are not just personal security cameras. They are also police cameras—whether you want them to be or not. The company now admits there are “emergency” instances when police can get warrantless access to Ring personal devices without the owner’s permission. This dangerous policy allows police, in conjunction with Ring, to decide when access should be granted to private video.
How mercenary hackers sway litigation battles
https://www.reuters.com/investigates/special-report/usa-hackers-litigation/
A trove of thousands of email records uncovered by Reuters reveals Indian cyber mercenaries hacking parties involved in lawsuits around the world – showing how hired spies have become the secret weapon of litigants seeking an edge.
…
Reuters identified 35 legal cases since 2013 in which Indian hackers attempted to obtain documents from one side or another of a courtroom battle by sending them password-stealing emails.
The messages were often camouflaged as innocuous communications from clients, colleagues, friends or family. They were aimed at giving the hackers access to targets’ inboxes and, ultimately, private or attorney-client privileged information.