#WhiteHouse App Is a Terrifying #Security Mess

From a hidden #GPS tracker polling your location every 4.5 minutes to JavaScript loaded from a random GitHub account, no SSL certificate pinning, and an in-app browser that silently strips cookie consent dialogs and paywalls from every page you visit, the new White House app seems to have a little bit of everything. A security researcher pulled the #APK apart to discover the #cybersecurity #vulnerabilities. "
#privacy

https://it.slashdot.org/story/26/05/06/0424251/white-house-app-is-a-terrifying-security-mess?utm_source=rss1.0mainlinkanon&utm_medium=feed

White House App Is a Terrifying Security Mess - Slashdot

New submitter spazmonkey writes: From a hidden GPS tracker polling your location every 4.5 minutes to JavaScript loaded from a random GitHub account, no SSL certificate pinning, and an in-app browser that silently strips cookie consent dialogs and paywalls from every page you visit, the new White Ho...

Google & Microsoft publish transparency reports on government
data requests 2x/year. But behind the country subpoenas
lies a second layer: FISA 702, the CLOUD Act, and EO 12333:
US laws that no data residency commitment can neutralise.

In H1 2025, FISA content requests alone affected 177,000+
Google and 33,000+ Microsoft accounts.

We analysed how these laws work and what they mean for Belgian
and EU sovereignty.

👉 https://belibre.be/en/blog/sovereignty/us_regulations/

#DigitalSovereignty #FISA #Privacy #GDPR #Belgium

🚨 #DoveHealthcare settles litigation tied to July 2024 cyberattack 💻 Patient & employee data exposed, including SSNs and health information🏥 Multiple lawsuits consolidated into one class action #DataBreach #HIPAA #Privacy #Healthcare 👉 https://www.netsec.news/dove-healthcare-management-services-data-breach/
Dove Healthcare Management Services Resolves Data Breach Affecting Patient and Employee Information - NetSec.News

Dove Healthcare Management Services has agreed to resolve litigation arising from a July 2024 cyberattack through a settlement that provides credit monitoring, identity theft protection ... Read more

NetSec.News

RE: https://infosec.exchange/@technadu/116527410843875957

My country is NOT a free country. Any democratic nation would allow use of VPNs and understand why people use them. "Age checks for VPNs" is code for "We're making a database of those purchasing/using a VPN so there can be no online anonymity. We don't care about children, only control"

#dystopian #dystopia #privacy #tech #technology

I'm in the process of evaluating different browsers (Firefox user). For now, I'm testing Chrome, and I've read some reviews and comparisons (2026).
In one article I read that Google was "selling personal data", and in others articles I read what I've been reading and told since years about Chrome and privacy.
I think there are some misunderstandings and legends circulating, including in online press. I want to judge with facts, so I made some searches about that:

Google make "money with ads, not by selling personal data", as they tell themselves:
https://support.google.com/chrome/answer/10400210?hl=en

Then I found information on how this whole monetization process works:
https://www.eff.org/deeplinks/2020/03/google-says-it-doesnt-sell-your-data-heres-how-company-shares-monetizes-and

On Firefox I used ublock origin for privacy and adblock, on Chrome there is the "lite" version, as their website explains:
https://ublockorigin.com/

#chrome #browsers #privacy

How Google protects your privacy & keeps you in control - Google Chrome Help

Keeping you safe online means protecting your information and respecting your privacy. That’s why in every product we make, we focus on keeping your information secure, treating it responsibly, and ke

@thenewoil It’s so interesting. I haven’t seen any more of the RCS standard adds. Replies. Tapback on photos. Why are we not just using the standard? Enjoy my Apple devices but if the idea is to gatekeep standard features of a universal profile in favor of your proprietary messaging that makes me a little bummed. #apple #security #privacy #universalprofile #rcs

Proton Mail adds post-quantum encryption to future-proof your email

Proton Mail now offers post-quantum encryption to all users. Here's how to turn it on and why protecting your email against future threats actually matters.

https://yoota.it/en/proton-mail-adds-post-quantum-encryption-to-future-proof-your-email/

Proton Mail introduce la crittografia post-quantum per proteggere le email del futuro

Proton Mail introduce la crittografia post-quantum come opzione per tutti gli utenti. Scopri come attivarla e perché è importante proteggere le email anche dalle minacce future.

https://yoota.it/proton-mail-introduce-la-crittografia-post-quantum-per-proteggere-le-email-del-futuro/

Google Chrome silently installs a 4GB AI Model on desktop systems without user consent. Learn how to find and delete it to reclaim your disk space.

Full details here: https://ostechnix.com/google-chrome-4gb-ai-model-weights-bin-file/

#GoogleChrome #GeminiNano #WeightsBin #AI #LLM #Privacy #Security #Gdpr #Browser

Google Chrome Silently Installs a 4GB AI Model on PC Without User Consent - OSTechNix

Google Chrome silently installs a 4GB AI Model on desktop systems without user consent. Learn how to find and delete it to reclaim your space.

OSTechNix