Daily Shaarli

All links of one day in a single page.

January 20, 2018

Big Brother on wheels: Why your car company may know more about you than your spouse. - The Washington Post

Privacy experts believe tens of millions of Americans are already being monitored by automakers.

Duc: Dude, where are my bytes!
Fake WhatsApp app on the Google Play Store was downloaded more than 1 million times – BGR

More than 1 million people downloaded a copycat WhatsApp app from the Google Play Store, according to a report from The Hacker News. The app, which is officially called Update WhatsApp Messenger, w…

EFF and Lookout Uncover New Malware Espionage Campaign Infecting Thousands Around the World | Electronic Frontier Foundation

San Francisco – The Electronic Frontier Foundation (EFF) and mobile security company Lookout have uncovered a new malware espionage campaign infecting thousands of people in more than 20 countries. Hundreds of gigabytes of data has been stolen, primarily through mobile devices compromised by fake...

Google ditches Ubuntu for Debian from internal engineering environment

Switches commercial model for contribution to open source,Software ,Software,Open Source,Linux

WinDirStat - Windows Directory Statistics

Windows Directory Statistics cleanup tool

Mobile Advanced Persistent Threat actor conducting global espionage campaign from Lebanon

Lookout and Electronic Frontier Foundation (EFF) have discovered Dark Caracal, a persistent and prolific actor running a global espionage campaign against military personnel, enterprises, medical professionals, lawyers, journalists, educational institutions, and activists.

QDirStat – Treemap Visualization of Directory Statistics | Hacker News
qdirstat/README.md at master · shundhammer/qdirstat · GitHub

qdirstat - QDirStat - Qt-based directory statistics (KDirStat without any KDE - from the original KDirStat author)

NSA deleted surveillance data it pledged to preserve - POLITICO

The agency tells a federal judge that it is investigating and 'sincerely regrets its failure.'

system-bus-radio/README.md at master · fulldecent/system-bus-radio · GitHub

system-bus-radio - Transmits AM radio on computers without radio transmitting hardware.

altWinDirStat/README.md at master · ariccio/altWinDirStat · GitHub

altWinDirStat - An unofficial modification of WinDirStat

Want to use my wifi?
Not a whole lot of new lessons to be learned from this, but basic reinforcement ... | Hacker News

Not a whole lot of new lessons to be learned from this, but basic reinforcement of old ones:

  • It's easy to get users, even high-profile at-risk users, to install arbitrary applications. Since there's little to be gained from litigating this basic fact, we have to work around it. We recommend at-risk users stick to relatively recent iPhones, not because Android phones can't be made to be asymptotically as secure, but simply because it's more difficult (technically and logistically) to set up a deployment process that gets an application installed on an iPhone that can do as much as these backdoored Android apps can.

  • The biggest threat facing users on general-purpose computers (Windows or Mac) is email attachments. The most profitable desktop infection vector here seems to have been Word macros. There's no point in litigating whether people should or shouldn't use Word documents; they're going to do that. So we have to work around that. Our recommendation is that users be trained not to view attachments on general-purpose computers by clicking on them. Two options: view attachments on iOS devices, where the viewers are less privileged and less full-featured, or always opening them using Google's office tools.

To me, the big lesson of the past few years working with non-technical users targeted by attackers is: general purpose computers simply aren't secure, and can't (for normal users) be made secure. Get people out of computer apps and onto phone or web apps.