Search

Items tagged with: security

✈️ New Blog Post: Your Boarding Pass Is a Skeleton Key. Frontier Airlines Doesn't Care.

Frontier's mobile API returns full passport numbers, home addresses, children's DOB, credit card details, and KTNs for any booking. The only auth? A PNR and last name. Printed on every boarding pass.

Reported March 3rd. 105 days later, still live. They fixed the least important vuln and ghosted me on the rest. They also updated the website code and somehow made the leaks worse.

Full writeup: bobdahacker.com/blog/frontier-…

#InfoSec #BugBounty #ResponsibleDisclosure #FrontierAirlines #Security #CyberSecurity #Privacy #Aviation #PCIDSS #DataExposure

Your Boarding Pass Is a Skeleton Key. Frontier Airlines Doesn't Care.

How I found that anyone with a boarding pass photo can pull full passport numbers, home addresses, children's dates of birth, credit card details, and Known Traveler Numbers for every passenger on a Frontier Airlines booking. Reported March 3rd.
bobdahacker.com
#infosec #privacy #security #cybersecurity #aviation #bugbounty #responsibledisclosure #frontierairlines #pcidss #dataexposure

#technology #computing #internet #tech #surveillance #data #infosec #bigtech #privacy #IT #security #safety #web #meme #digital #online #Cloud

404media.co/fcc-wants-to-kill-…

The FCC wants to make it impossible to buy "burner" phones, such as pre-paid phones not linked to your identity. They plan to do this by forcing all companies to store a ton of data about ALL phone users, including Copy of ID, and Verified address and a ton more info for both new & existing phone users, regardless of company or phone.

#FCC #Privacy #Security

FCC Wants to Kill Burner Phones By Forcing Telecoms to Get All Customers’ IDs

The FCC wants to legally force telecoms to collect new and renewing customers’ government issued identity number and physical address, impacting everyone from the privacy-conscious to domestic abuse survivors.
Joseph Cox (404 Media)
#privacy #security #fcc

The media in this post is not displayed to visitors. To view it, please go to the original post.

because "safety"

it doesn't matter if russian #drones are unaddressed. #fear operates on other topics the #rightWing #politician can amplify and manufacture. drones take away a sense of #security, the liar promises "security" on some other topic

it doesn't work logically, it works emotionally

people want and need safety, even if just a feeling. right wing rhetoric endlessly harps on any topic that people can be tricked into feeling unsafe on. then they making grandiose promises about it

9/x

#security #rightwing #drones #politician #fear

The media in this post is not displayed to visitors. To view it, please go to the original post.

New, by me: A number of high-profile and/or valuable Instagram accounts, including those of the Obama White House and the Chief Master Sergeant for the U.S. Space Force, got hacked and defaced with pro-Iran messaging in the past 24h after people figured out that Meta's AI support assistant could be tricked into resetting account passwords.

From the story:

"A video released on Telegram by pro-Iran hackers claimed to document a remarkably simple exploit that appears to have involved using a VPN connection with an IP address that is in or near the target's usual hometown, requesting a password reset for the account, and then choosing to chat with Meta's AI support assistant. From there, the video shows the attacker told the bot to link the account in question to a new email address, after which the bot dutifully sent that address a one-time code that allowed a password reset."

krebsonsecurity.com/2026/06/ha…

#meta #instagram #hack #ai #security

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick M…
krebsonsecurity.com
#ai #instagram #meta #security #hack

#security #aviation

The media in this post is not displayed to visitors. To view it, please go to the original post.

Surveillance tech coming to a virtual couch near you!

Headway Therapy Patients Forced to Scan Their Faces to Keep Getting Care

404media.co/headway-therapy-fa…

#Headway #Therapy #Security #Privacy #Surveillance #Health #Tech

Headway Therapy Patients Forced to Scan Their Faces to Keep Getting Care

A popular virtual therapy platform is telling providers and patients they'll have to do facial scanning soon, forcing some to choose between handing over their data and continuing care.
Samantha Cole (404 Media)
#tech #surveillance #health #privacy #security #headway #therapy

The media in this post is not displayed to visitors. To view it, please go to the original post.

But can this be used if the police snatch my phone?

Apple Developing iPhone Anti-Snatching Feature That Locks Stolen Phones Instantly

macrumors.com/2026/05/27/apple…

#Apple #iPhone #AntiTheft #Stolen #Security #Privacy #Tech

Apple Developing iPhone Anti-Snatching Feature That Locks Stolen Phones Instantly

Apple is developing a new feature that will lock your iPhone if it's snatched from your hand by a thief, according to Apple code seen by 9to5Mac.
Juli Clover (MacRumors)
#tech #apple #privacy #security #iphone #antitheft #stolen

The media in this post is not displayed to visitors. To view it, please go to the original post.

Apparently, you can be IDed by what your SSD does

Websites have a new way to spy on visitors: analyzing their SSD activity

arstechnica.com/security/2026/…

#Websites #Spyware #SSD #Hardware #Storage #Privacy #Vulnerability #Security #Surveillance #Tech

Websites have a new way to spy on visitors: analyzing their SSD activity

Telltale SSD activity can be measured in the browser using simple JavaScript.
Dan Goodin (Ars Technica)
#tech #surveillance #privacy #security #hardware #spyware #vulnerability #websites #ssd #storage

The media in this post is not displayed to visitors. To view it, please go to the original post.

Negrodamus strikes again: Data Collection Edition

AI companies and data brokers even resort to fake forms to keep selling our data

9to5mac.com/2026/05/20/ai-comp…

#AI #DataBrokers #Privacy #Security #Surveillance #Tech

AI companies and data brokers even resort to fake forms to keep selling our data

Act surprised! A new privacy study has found that data brokers and AI companies deliberately deceive consumers who attempt to...
Ben Lovejoy (9to5Mac)
#tech #ai #surveillance #privacy #security #databrokers

#tech #privacy #security #gaming #e2ee #encryption #discord

#tech #privacy #security #ageverification

The media in this post is not displayed to visitors. To view it, please go to the original post.

Time to patch those GPUs!

NVIDIA reveal more GPU driver security flaws for May 2026

gamingonlinux.com/2026/05/nvid…

#Nvidia #GPU #Drivers #Security #Vulnerabilities #Hardware #Tech

NVIDIA reveal more GPU driver security flaws for May 2026

Do you have an NVIDIA GPU? You should probably ensure you're on updated drivers, as we have another wave of security issues that have been revealed today.
Liam Squires-Hand (GamingOnLinux)
#tech #security #hardware #nvidia #drivers #gpu #vulnerabilities

The media in this post is not displayed to visitors. To view it, please go to the original post.

I'm inclined to think @pluralistic has had entirely enough of this bullshit & so should we all...

#AgeVerification #privacy #security #surveillance

Cory Doctorow

2026-05-19 08:11:31

mastodon - Link to source

"Object permanence": the ability to understand that things still exist, even if you can't see 'em. Kids acquire a thorough sense of object permanence by the age of two. But when it comes to technopolitics, object permanence eludes full-grown lawmakers. These motherfuckers would lose a game of peek-a-boo.

-

If you'd like an essay-formatted version of this thread to read/share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

pluralistic.net/2026/05/19/she…

1/


Pluralistic: There’s no such thing as “age verification” (19 May 2026) – Pluralistic: Daily links from Cory Doctorow

Pluralistic: There's no such thing as "age verification" (19 May 2026)
Cory Doctorow (Pluralistic: Daily links from Cory Doctorow)

#surveillance #privacy #security #ageverification

#tech #surveillance #fbi #privacy #security #us #acab

Have you used an LLM to scan for vulnerabilities in an Open Source codebase?

#EvanPoll #poll #opensource #security #ai

  • Yes (9%, 25 votes)
  • Yes, but... (0%, 1 vote)
  • No, but... (7%, 20 votes)
  • No (83%, 229 votes)
275 voters. Poll end: 1 month ago

#ai #evanpoll #poll #opensource #security

#technology #security #bitwarden #passwordmanager

The media in this post is not displayed to visitors. To view it, please go to the original post.

20 million people! The New jim Crow has a list of 20 million people, but y'all stay mad at people for just surviving!

ICE Agents Have List of 20 Million People on Their iPhones Thanks to Palantir

404media.co/ice-agents-have-li…

#ICE #Palantir #AI #Security #Privacy #Surveillance #ACAB #Tech

ICE Agents Have List of 20 Million People on Their iPhones Thanks to Palantir

The comments made by a senior ICE official at a trade show highlight how Palantir is increasing the speed at which ICE operates. Most people detained by ICE have no criminal conviction.
Joseph Cox (404 Media)
#tech #ai #surveillance #palantir #ice #privacy #security #acab

The media in this post is not displayed to visitors. To view it, please go to the original post.

I know its slim pickings nowadays, but if the Feds reset your router, maybe buy a new one

The FBI may have reset your wireless router; if so, you should replace it

9to5mac.com/2026/05/12/the-fbi…

#FBI #NSA #Wireless #Router #Surveillance #Security #Privacy #TPLink #ACAB #Tech

The FBI may have reset your wireless router; if so, you should replace it

The FBI and NSA jointly announced that Russia has been systematically compromising the security of home and small office routers...
Ben Lovejoy (9to5Mac)
#tech #surveillance #fbi #privacy #security #acab #wireless #nsa #router #tplink

Would you pass a background check?

#EvanPoll #poll #security #backgroundcheck

  • Yes (56%, 120 votes)
  • Yes, but... (30%, 65 votes)
  • No, but... (3%, 8 votes)
  • No (9%, 21 votes)
214 voters. Poll end: 1 month ago

#evanpoll #poll #security #backgroundcheck

@tomgauld.bsky.social That illustrates why we're taught #safety requirements always have priority over #security requirements. "You don't password-protect an emergency stop button".
#security #safety

The media in this post is not displayed to visitors. To view it, please go to the original post.

This is such a cunning, shameless, beautiful scam.

Got an email from Equifax (who exposed zillions of records to hackers not long ago if memory serves), the gist of which was:

'Nice credit rating you got there. Be a shame if something happened to it...'

I took the bait and logged in.

The images tell the story.

It's a sublime shakedown.

@pluralistic

#economics #equifax #security #tech

#tech #economics #security #equifax

BREAKING! Meshcore team splits over dispute over AI-generated code disclosure, and hostile trademark takeover.

Meshcore is an off-grid, decentralised mesh radio platform powered by low-cost and public access LoRa radio technology for reliable, long-range emergency text and embedded sensors communication. It can communicate across kilometres — no towers, no subscriptions, no single point of failure.

blog.meshcore.io/2026/04/23/th…

#meshcore #meshtastic #lora #radio #opensource #foss #drama #privacy #security #selfsovereignty #ai #copyright #takeover

Meshcore.io - Why The Split? - MeshCore Blog

Migrating to the new meshcore.io site
blog.meshcore.io
#ai #radio #opensource #meshtastic #meshcore #privacy #security #foss #copyright #lora #drama #selfsovereignty #takeover

Google announced several months ago that its Chrome browser would make secure connections the standard in October 2026. But you can already block shady websites by taking one simple step. PC World tells us how to do it in Chrome, Edge and Firefox:

flip.it/Tl04k8

#Tech #CyberSecurity #Chrome #Edge #Firefox #Technology #Security

One simple browser setting can help block shady websites

You have to tweak Chrome, Edge, and Firefox if you want your data to only go through encrypted connections. Here’s how.
Alaina Yee (PCWorld)
#technology #tech #security #cybersecurity #firefox #chrome #edge

#technology #tech #ai #news #deepfake #privacy #security #aislop

#1 #security #australia #age gating #age verification #child safety #harms to children #social media #social media bans

The death of phishing cannot come soon enough. Alas, the scamming mechanism is alive and well, tricking some of the savviest web users. But if you know what to look for, you can bolster your security, avoid the embarrassment of telling your friends how you got hoodwinked, and much worse. PC World shows us how:

flip.it/2tgxfj

#Tech #Phishing #Security #Technology

I insta-delete any email with these red flags of a phishing scam

The best way to spot phishing emails is to know what to look for and these are some of the biggest red flags to help keep you safe.
Jon Martindale (PCWorld)
#technology #tech #security #phishing

We know (the ever transactional) Tangerine Tyrant sees NATO as a cost to the US from which they derive little if any benefit... and we all know this is essentially nonsense.

But as Andrew Gawthorpe notes its not just historical ignorance (or lack of interest), it is also because a significant aspect of the value fo NATO to the US is really based on a counter-factual - things avoided because of NATO's existence & that is much more difficult to see?

#security #politics
theconversation.com/donald-tru…

Donald Trump says the US doesn’t get much out of Nato membership – but is that true?

The Trump administration is once again threatening to withdraw the US from Nato, citing the reluctance of the alliance to join the Iran war.
The Conversation
#politics #security

#socialmedia #technology #media #internet #tech #enshittification #data #infosec #bigtech #IT #microslop #microsoft #linkedin #social #security #safety #web

⇧