Business Insider reports that Oura is planning to expand its Oura wearable rings beyond health tracking to allow for payments, authentication, and more.

Well, Capitan Buzzkill (me) here wrote about Oura's security and privacy practices earlier this year, and found:

• Oura rings *don't* end-to-end encrypt users' health data;
• As such, Oura *can* access its users' data;
• Oura told me that the company *has* received U.S. government demands for users' data.

More: https://this.weekinsecurity.com/oura-ring-deal-raises-valid-concerns-about-users-health-data-security/

Oura ring deal raises valid concerns about users' health data security

The government partnership sparked customer concerns about the security of data collected by Oura's wearable, even if the spark was a red herring.

~this week in security~

@zackwhittaker why do people use that shit?

Are they all #Smombies or what?