Web Security and Journalists

Most recent stories in Web Security and Journalists

• 

  Paul Bradshaw

  

  Internet of Things, new opportunities for hackers and cybercriminals

  securityaffairs.co - Pierluigi Paganini

  Internet of Things, a business growing at a compound annual rate of 7,9% that is a privileged target for hackers and cyber criminals. The Internet of …

• 

  Paul Bradshaw

  

  Selling Secrets of Phone Users to Advertisers

  The New York Times - By Claire Cain Miller and Somini Sengupta

  SAN FRANCISCO — Once, only hairdressers and bartenders knew people’s secrets. Now, smartphones know everything — where people go, what they search for, what they buy, what they do for fun and when they go to bed. That is why advertisers, and tech companies like Google and Facebook, are finding new, …

• 

  Paul Bradshaw

  

  Email surveillance could reveal journalists' sources, expert claims

  The Guardian - Alex Hern

  Phil Zimmermann, inventor of PGP encryption, urges shift away from consumer email. By Alex Hern

• If you value your privacy or are worried about what might happen if Dropbox were compelled by a court order to disclose which of its users have stored a particular file, you should encrypt your data yourself with a tool like truecrypt or switch to one of several cloud based backup services that encrypt data with a key only known to the user.
  http://paranoia.dubfire.net/2011/04/how-dropbox-sacrifices-user-privacy-for.html

  

  Paul Bradshaw

  Sep 13, 2013

• SpiderOak encrypts your files and then sends them securely to their servers. The key to decrypt those files is on your machine. The key and the files aren’t kept together. It means, of course, that you have to have a reliable password system in place (I use LastPass and 64-character strings) but means people can’t access your unencrypted files on the ‘cloud’ server.*
  http://dougbelshaw.com/blog/technology/why-im-saying-goodbye-to-dropbox-and-hello-to-spideroak-hive/

  

  Paul Bradshaw

  Sep 13, 2013

• I would wager that they're opening it in order to generate a thumb or preview, or maybe for search indexing, and libreoffice is a good way to achieve this on linux - particularly if they're only opening it once, as they probably use the hash of the file.
  We do exactly this on our eCommerce platform, before wanging stuff into s3 or glacier and just keeping a reference kicking around.
  On the other hand, you have just discovered an information disclosure (host IPs) vulnerability in dropbox. https://news.ycombinator.com/item?id=6375135

  

  Paul Bradshaw

  Sep 13, 2013