Monthly Shaarli

All links of one month in a single page.

August, 2018

Changing Our Approach to Anti-tracking - Future Releases

In the near future, Firefox will -- by default -- protect users by blocking tracking while also offering a clear set of controls to give our users more choice over what information they share with sites.

T-Mobile Database Breach Exposes 2 Million Customers' Data

T-Mobile has suffered a breach that may have exposed personal data for 2.3 million of its 77 million customers, and one security researcher says the hacker appears

Facebook addiction linked to staking your self-worth on social acceptance

More than one billion people use Facebook to connect with others and maintain social relationships. But new research suggests that the social networking ...

"J'ai voulu reprendre le contrôle de mes données"

La récupération par un cabinet de conseil politique des données personnelles de plusieurs dizaines de millions d'utilisateurs de Facebook a conduit de nombreux internautes à questionner leur présence sur le réseau social. Les réponses vont de la colère à la résignation. Reportage Abde[...]

Google Edits Help Page After Location-Tracking Revelation | Fortune

Fortune 500 Daily & Breaking Business News

L'essor des malwares bancaires mobiles

Kaspersky met en garde les utilisateurs

Turn Off Your Fitbit, Garmin, Apple Watch GPS NOW! « Breaking Defense - Defense industry news, analysis and commentary

WASHINGTON: Hey! Take off that Fitbit and turn it off. Hand in that Apple Watch. Make sure you’ve turned off the geolocation capabilities of your Garmin. That was the word today from Deputy Defense Secretary Patrick Shanahan. For years, cell phones have been banned from many offices in the Pentagon, not to mention any Secure Compartmentalized Information Facility (SCIF). The reason was simple: anything that can transmit and has a microphone can be used to record and send information. If it’s got a camera, then photographs or video can be taken as well. Today, the threat is less obvious. It comes from those Apple Watches, Garmins, Fitbits, custom smartwatches and other remote sensors that track your location and share it with remote databases. “These geolocation capabilities can expose personal information, locations, routines, and numbers of DoD personnel, and potentially create unintended security consequences and increased risk to the joint force and mission,” says Shanahan’s memo, which was released by the Pentagon press office too ensure everyone sees it. This was all sparked when reports surfaced earlier this year of a fitness-tracking company, Strava, publishing maps showing where users jog, bike and exercise. Since many of its users are members of the military, their jogging routes and other exercises showed exactly where the US has service members around the world, as well as showing their running routes. In Pentagon-speak, here’s the broad problem: “The rapidly evolving market of devices, applications, and services with geolocation capabilities (e.g., fitness trackers, smartphones, tablets, smartwatches, and related software applications) presents significant risk to Department of Defense (DoD) personnel both on and off duty, and to our military operations globally.” Strava apparently intended no harm but, you can guess how uneasy this made service members and senior Pentagon officials. A review of Pentagon policies about the devices that made this possible was ordered and that’s what this memo is all about. Note the requirement for the Chief lnformation Officer (CIO) and the Undersecretary of Defense for Intelligence (USDI) to “jointly develop” guidance and training for commanders and others.  

Facebook’s New Message to WhatsApp: Make Money - WSJ

WhatsApp detailed plans to sell ads and charge big companies that want to reach their customers through its service, launching its first major revenue streams as growth at Facebook’s main app is starting to decelerate.

Taking a new direction | Lubuntu

During the transition to LXQt, we have received mixed feedback about Lubuntu's perceived direction going forward, so we decided it would be good to make a blog post explaining what's been happening during the transition, and where our focus will be.

Logged off: meet the teens who refuse to use social media | Society | The Guardian

Generation Z has grown up online – so why are a surprising number suddenly turning their backs on Instagram, Facebook and Snapchat?

How Facebook, Apple and Microsoft are contributing to an openly licensed map of the world – The ODI
Going FLOSS-only on Android

Someone recently asked me how my experience has been with a couple of ROMs I have tried on my Android phone. Which reminded me that I need to write a post de...

Spyware Company Leaves ‘Terabytes’ of Selfies, Text Messages, and Location Data Exposed Online - Motherboard

A company that sells surveillance software to parents and employers left “terabytes of data” including photos, audio recordings, text messages and web history, exposed in a poorly-protected Amazon S3 bucket.

mjg59 | I've bought some more awful IoT stuff
HUD.gov / U.S. Department of Housing and Urban Development (HUD)
Un hack transforme les Amazon Echo en espions

Failles corrigées et accès physique nécessaire

Who Left Open the Cookie Jar?
Facebook Figured Out My Family Secrets, And It Won't Tell Me How
Top Facebook Executive Defended Data Collection In 2016 Memo — And Warned That Facebook Could Get People Killed
Facebook Wanted Us to Kill This Investigative Tool
Gazing Back at the Surveillance Cameras That Watch Us - The New York Times

These photographers explored the implications of a culture of pervasive monitoring.

AP Exclusive: Google tracks your movements, like it or not
          SAN FRANCISCO (AP) — Google wants to know where you go so badly that it records your movements even when you explicitly tell it not to.
          An Associated Press investiga
I don’t trust Signal | Drew DeVault’s Blog

Occasionally when Signal is in the press and getting a lot of favorable discussion, I feel the need to step into various forums, IRC channels, and so on, and explain why I don’t trust Signal. Let’s do a blog post instead.

Facebook taps banks, but for chatbots not purchase data like Google | TechCrunch

Backlash swelled this morning after Facebook’s aspirations in financial services were blown out of proportion by a Wall Street Journal report that neglected how the social network already works with banks. Facebook spokesperson Elisabeth Diana tells TechCrunch it’s not asking for credit…

Google Plans to Launch Censored Search Engine in China, Leaked Documents Reveal

Search app that will "blacklist sensitive queries" could be launched in six to nine months, according to documents and people familiar with the plans.

Peter Steinberger sur Twitter : "Tried the GDPR data export from Spotify. By default, you get like 6 JSON files with almost nothing. After many emails and complaining and a month of waiting, I got a 250MB archive with basically EVERY INTERACTION I ever did with any Spotify client, all my searches. Everything. https://t.co/ALVw6Auief"
Yahoo, Bucking Industry, Scans Emails for Data to Sell Advertisers - WSJ

The web giant owned by Verizon analyzes more than 200 million inboxes for clues about what products people might buy—a practice much of Silicon Valley has declared off-limits.

Number of Third-Party Cookies on EU News Sites Dropped by 22% Post-GDPR

The number of tracking cookies on EU news sites has gone down by 22% according to a report by the Reuters Institute at the University of Oxford, who looked at cookie usage across EU news sites in two phases, in April 2018 and July 2018, pre and post the introduction of the new EU General Data Protection Regulation (GDPR).

Epic's first Fortnite Installer allowed hackers to download and install anything on your Android phone silently | Android Central

Google has just publicly disclosed that it discovered an extremely serious vulnerability in Epic's first Fortnite installer for Android that allowed any app on your phone to download and install anything in the background.

What Your Car Knows About You - WSJ

Auto makers can now collect large amounts of data from internet-connected vehicles, from location to driving habits.

Géolocalisation : Google suit les déplacements en dépit des paramètres

Des réglages opaques et un brin trompeurs

Facebook has been collecting call history and SMS data from Android devices - The Verge

iOS devices appear to be unaffected

Internal Facebook Note: Here Is A “Psychological Trick” To Target Teens
The Document Foundation announces LibreOffice 6.1, a major release which shows the power of a large and diverse community of contributors - The Document Foundation Blog

Berlin, August 8, 2018 – The Document Foundation announces LibreOffice 6.1, the second major release of the LibreOffice 6 family presented in January 2018, with a significant number of new and improved features: Colibre, a new icon theme for Windows based on Microsoft’s icon design guidelines, which makes the office suite visually appealing for users […]

Last I heard Facebook was working with First Data for ad-targeting insights base... | Hacker News

Last I heard Facebook was working with First Data for ad-targeting insights based on purchase behavior. That partnership is what enables their advanced targeting based on in-store purchasing data (look at the CPG targeting categories available in Facebook ads, for example). While First Data is not technically a bank or credit card company that's a very misleading and disingenuous statement for Facebook to make.

Facebook to Banks: Give Us Your Data, We’ll Give You Our Users - WSJ

Facebook has asked large U.S. banks to share detailed financial information about customers, including card transactions and checking-account balances, as it seeks to boost user engagement.

Sci-Hub Proves That Piracy Can be Dangerously Useful - TorrentFreak

Despite two lost legal battles in the US, domain name seizures, and millions of dollars in damage claims, Sci-Hub continues to offer unauthorized access to academic papers. The site's founder says that she would rather operate legally, but copyright gets in the way. Sci-Hub is not the problem she argues, it's a solution, something many academics appear to agree with.

CCleaner v5.45 Introduces Data Collection with No Way to Opt-Out

he newly added monitoring elements are called Active monitoring and heartbeat, and it appears they are sending user data to CCleaner servers.