Template:News/Updates: Difference between revisions

no edit summary
No edit summary
No edit summary
 
(39 intermediate revisions by the same user not shown)
Line 4:
 
Template:
* '''{{End date and age|YYYY|M|D|df=yes}}''' -
-->
* '''{{End date and age|2021|9|22|df=yes}}''' - Reports emerge that even [[w:NSA|NSA]] and [[w:CIA|CIA]] [[adblocking|block ads]] due to the malvertising risks to privacy and security. <sup>[[https://www.vice.com/en/article/93ypke/the-nsa-and-cia-use-ad-blockers-because-online-advertising-is-so-dangerous VICE]]</sup>
* '''{{End date and age|2021|9|22|df=yes}}''' - Research claims that deanonymising users of Apples recently launched VPN is relatively trivial. <sup>[https://portswigger.net/daily-swig/new-icloud-private-relay-service-leaks-users-true-ip-addresses-researcher-claims [PortSwiggers<nowiki>]</nowiki>]</sup>
* '''{{End date and age|2021|9|21|df=yes}}''' - Google enables a new idle user detection [[w:API|API]] and Mozilla criticises it for opening yet another avenue for websites and advertises to spy on the said users. <sup>[[https://www.howtogeek.com/756338/mozilla-says-chromes-latest-feature-enables-surveillance/ HowToGeek]]</sup>
* '''{{End date and age|2021|9|21|df=yes}}''' - {{flagdeco|Lithuania}} Lituanian government audit accuses Xiaomi and Huawei of shipping a 'censorship module' and a 'surreptitious data collection' module in it's phones. <sup>[https://therecord.media/lithuanian-government-warns-about-secret-censorship-features-in-xiaomi-phones/ [TheRecord<nowiki>]</nowiki>]</sup>
* '''{{End date and age|2021|9|21|df=yes}}''' - {{flagdeco|United Kingdom}} UK's Ministry of Defence's data breach puts lives of 250 Aghan interperters in danger. <sup>[https://www.theguardian.com/uk-news/2021/sep/20/mod-data-breach-puts-lives-at-risk-for-more-than-250-afghan-interpreters [The Guardian<nowiki>]</nowiki>]</sup>
* '''{{End date and age|2021|9|20|df=yes}}''' - The domain registrar Epik loses control of 15 million user records. <sup>[https://arstechnica.com/information-technology/2021/09/epik-data-breach-impacts-15-million-users-including-non-customers/ [ArsTechnica<nowiki>]</nowiki>]</sup>
* '''{{End date and age|2021|9|14|df=yes}}''' - ExpressVPN, a VPN service mainly known for their omnipresent advertising presence, is bought by an adware company. <sup>[https://www.theregister.com/2021/09/14/expressvpn_bought_kape/ [The Register<nowiki>]</nowiki>]</sup>
<noinclude> <!-- Maximum of 6 stories (dot points) to be transcluded to the main page. Move this line behind the 6th item from the top if you're adding a new story.-->
* '''{{End date and age|2021|9|6|df=yes}}''' - Protonmail, oft recommended privacy-aware email provider, gets in hot water over a Swiss court order that forced them to log IP address of French environmental activists - something they committed not to do in all of their prior public statements. <sup>[[https://archive.is/20210913142800/https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/ TechCrunch]]</sup>
* '''{{End date and age|2021|9|2|df=yes}}''' - WhatsApp is fined €225m for [[w:GDPR|GDPR]] breaches - one of the largest such fines levied to date. <sup>[[https://www.rte.ie/news/business/2021/0902/1244293-whatsapp-gdpr-ruling/ RTE.ie]]</sup>
[[File:FloctalkatIETF.png|thumb|A still from the talk given by Google.]]
* '''{{End date and age|2021|8|28|df=yes}}''' - Google engineer admits that Google's smoke and mirrors privacy initiative FLoC not only fails to solve web's privacy woes, but instead makes its users even more identifiable. <sup><nowiki>[</nowiki>[[w:IETF|IETF]] talk via [https://www.forbes.com/sites/zakdoffman/2021/08/28/stop-using-google-chrome-on-windows-10-android-and-apple-iphones-ipads-and-macs/ Forbes]]</sup>
* '''{{End date and age|2021|8|27|df=yes}}''' - {{flagdeco|Australia}} Australian parliament passes a sweeping new surveillance legislation which gives police the ability to takeover online accounts and add, delete or modify any account data; all without even a judge's warrant. <sup>[[https://www.crikey.com.au/2021/08/27/coalition-labor-police-surveillance-hacking-powers/ Crikey]]</sup>
* '''{{End date and age|2021|8|26|df=yes}}''' - {{flagdeco|United Kingdom}} United Kingdom announces it will overhaul it's privacy rules - hopefully to make them even stronger - in a departure from EU's GDRP framework it has transposed into its own legislation following [[w:Brexit|Brexit]]. <sup>[[https://www.theguardian.com/technology/2021/aug/26/uk-to-overhaul-privacy-rules-in-post-brexit-departure-from-gdpr?utm_medium The Guardian]]</sup>
* '''{{End date and age|2021|8|24|df=yes}}''' - Researchers with [[w:Citizen Lab|Citizen Lab]] observe a new zero-click iMessage vulnerability being used by {{flagdeco|Bahrain}} Bahrain against political dissidents - with the help of NSO group and their hacking tool Pegasus. <sup>[[https://threatpost.com/pegasus-spyware-uses-iphone-zero-click-imessage-zero-day/168899/ Threatpost]]</sup>
* '''{{End date and age|2021|8|20|df=yes}}''' - {{flagdeco|China}} China passes one of the strongest data privacy laws in the world, largely modelled on GDPR. <sup>[[https://www.reuters.com/world/china/china-passes-new-personal-data-privacy-law-take-effect-nov-1-2021-08-20/ Reuters]]</sup>
* '''{{End date and age|2021|08|17|df=yes}}''' - {{flagdeco|Afghanistan}} Afghanistani residents race to delete online evidence of their pre-[[w:Taliban|Taliban]] lives following the [[w:fall of Kabul|fall of Kabul]] and collapse of the [[w:2021 Taliban offensive|US-backed Afghanistani government]] - undoubtedly, they also had [[nothing to hide]]. <sup>[[https://www.wired.co.uk/article/afghanistan-social-media-delete WIRED]]</sup>
* {{flagdeco|United States}} United States mobile carriers are having a free-for-all with their user's data.
** '''{{End date and age|2021|08|20|df=yes}}''' - AT&T denies that is has suffered a breach affecting 70 million users - but data auctioned by the supposed hackers appears to be legit. <sup>[[https://www.bleepingcomputer.com/news/security/atandt-denies-data-breach-after-hacker-auctions-70-million-user-database/ BleepingComputer]]</sup>
** '''{{End date and age|2021|08|15|df=yes}}''' - T-Mobile confirm that it has been hacked, yet again, and has lost control of records covering 100 million customers. <sup>[[https://www.vice.com/en/article/y3d4dw/t-mobile-confirms-it-was-hacked VICE]]</sup>
* '''{{End date and age|2021|8|17|df=yes}}''' - Researchers disclose a severe bugs affecting millions of IoT devices from many brands - including security cameras and baby monitors - which could enable hackers to hijack the devices and directly spy on the users. <sup>[[https://www.bleepingcomputer.com/news/security/critical-bug-impacting-millions-of-iot-devices-lets-hackers-spy-on-you/ BleepingComputer]]</sup>
* '''{{End date and age|2021|08|10|df=yes}}''' - Privacy-promoting non-profit [[w:NOYB|NOYB]] files 422 GDPR complaints against websites engaging in deceptive and illegal dark patterns which are pushing users into accepting invasive tracking. <sup>[[https://noyb.eu/en/noyb-files-422-formal-gdpr-complaints-nerve-wrecking-cookie-banners NOYB]]</sup>
* '''{{End date and age|2021|8|5|df=yes}}''' - [[Apple]] plans to scan everyon's iPhone's camera roll for child abuse materials, since everyone is now presumed guilty until proven innocent.<sup>[[https://12ft.io/proxy?q=https://www.ft.com/content/14440f81-d405-452f-97e2-a81458f5411f Financial Times]]</sup>
* '''{{End date and age|2021|8|4|df=yes}}''' - Google has reportedly fired dozens of employees between 2018 and 2020 for abusing their privileged access to internal tools and customer data. <sup>[[https://www.vice.com/en/article/g5gk73/google-fired-dozens-for-data-misuse VICE]]</sup>
* '''{{End date and age|2021|8|3|df=yes}}''' - {{flagdeco|EU}} EU is gearing up to clamp down on cash use in an effort to gain absolute control over it's citizens' financial lives. <sup>[[https://www.independent.ie/news/cars-funerals-and-home-improvements-eu-to-crack-down-on-large-cash-payments-40713482.html Independent.ie]]</sup>
* '''{{End date and age|2021|08|03|df=yes}}''' - A report claims that [[Facebook]] is attempting to analyse encrypted data without decrypting it in an effort to find novel and innovative ways to violate their user's privacy. <sup>[[https://www.techspot.com/news/90660-facebook-reportedly-trying-analyze-encrypted-data-without-decrypting.html TECHSPOT]]</sup>
* '''{{End date and age|2021|08|02|df=yes}}''' - Zoom settles a privacy class action in the USA for US$86 million. <sup>[[https://www.bbc.com/news/business-58050391 BBC]]</sup>
* '''{{End date and age|2021|07|30|df=yes}}''' - [[w:EU|EU]] fines Amazon record 746 million euro for GDPR breaches - still a drop in the bucket of Amazon's 100 billion USD second quarter. <sup>[[https://mashable.com/article/amazon-gdpr-fine-eu Mashable]]</sup>
* '''{{End date and age|2021|7|26|df=yes}}''' - [[w:Catherine De Bolle|Executive director]] of [[w:Europol|Europol]] and a [[w:New York County District Attorney|New York County District Attorney]] pen a '[[w:Think of the children|won't somebody please think of the children]]' missive entirely devoid of any meaningful solutions aside from [[w:Indiana Pi Bill|banning math]].<sup>[[https://www.politico.eu/article/the-last-refuge-of-the-criminal-encrypted-smartphones-data-privacy/ POLITICO.eu]]</sup>
* '''{{End date and age|2021|7|25|df=yes}}''' - Researches discover 4 encryption flaws in [[Telegram]].<sup>[[https://portswigger.net/daily-swig/multiple-encryption-flaws-uncovered-in-telegram-messaging-protocol PortSwigger]]</sup>
* '''{{End date and age|2021|7|23|df=yes}}''' - [[w:Australian Privacy Commissioner|Australian Privacy Commissioner]] accuses [[w:Uber|Uber]] of privacy breaches affecting over 1 million Australians. <sup>[[https://www.zdnet.com/article/uber-found-to-have-interfered-with-privacy-of-over-1-million-australians/ ZDNet]]</sup>
* '''{{End date and age|2021|7|14|df=yes}}''' - Majority of iOS users deny tracking prompts, devastating the surveillance business that big tech companies like Facebook are running, proving that people care about privacy when they do have meaningful choices to make. <sup>[[https://www.bloomberg.com/news/articles/2021-07-14/facebook-fb-advertisers-impacted-by-apple-aapl-privacy-ios-14-changes Bloomberg]]</sup>
* '''{{End date and age|2021|7|14|df=yes}}''' - New reporting suggest that various data brokers have the ability to link the supposedly [[w:pseudonymous|pseudonymous]] advertising IDs with real life identities 'at scale' thus offering fine grained insight into the lives of anyone with a smartphone to any willing buyer. <sup>[[https://www.vice.com/en/article/epnmvz/industry-unmasks-at-scale-maid-to-pii Vice]]</sup>
* '''{{End date and age|2021|7|10|df=yes}}''' - Oft recommended privacy conscious US mobile carrier Mint Mobile suffers a data breach. <sup>[[https://www.bleepingcomputer.com/news/security/mint-mobile-hit-by-a-data-breach-after-numbers-ported-data-accessed/ BleepingComputer]]</sup>
* '''{{End date and age|2021|7|9|df=yes}}''' - New York's new biometric transparency law goes into effect, requiring businesses to prominently disclose if they're processing your biometric data.<sup>[[https://web.archive.org/web/20210722141124/https://techcrunch.com/2021/07/09/new-york-city-biometrics-law/ TechCrunch]]</sup>
* '''{{End date and age|2021|7|7|df=yes}}''' - A routine prenatal test of Chinese origin, developed in collaboration with [[w:People's Liberation Army|People's Liberation Army]], is being used to collect vast amounts of DNA data. <sup>[[https://www.reuters.com/investigates/special-report/health-china-bgi-dna/ Reuter]]</sup>
* '''{{End date and age|2021|7|6|df=yes}}''' - New EU law relaxes the rules around message privacy to allow service providers to rummage through your messages looking for child sexual abuse materials. No word yet on how EU intends to force child abusers to use these compromised platforms when they already use [[w:darkweb|darkweb]] and strong crypto which won't be affected by this law. <sup>[[https://www.euractiv.com/section/data-protection/news/new-eu-law-allows-screening-of-online-messages-to-detect-child-abuse/ EURACTIV]]</sup>
* '''{{End date and age|2021|7|5|df=yes}}''' - Popular FOSS audio editor Audacity is in hot water after the new owner of the project changes the privacy policy and adds data collection mechanisms. <sup>[[https://www.pcmag.com/news/audacity-is-being-called-spyware-after-privacy-policy-update PCMag]]</sup>
<noinclude> <!-- Maximum of 6 stories (dot points) to be transcluded to the main page. Move this line behind the 6th item from the top if you're adding a new story.-->
* '''{{End date and age|2021|7|3|df=yes}}''' - [[w:Judiciary of the Netherlands#District Courts|Amsterdam District Court]] rejects Facebook's arguments regarding the litigation brought by two Dutch non-profits, [https://dataprivacystichting.com/ Data Privacy Foundation] and [[w:Consumentenbond|Consumentenbond]], who claim that Facebook does not have a proper legal basis for data processing in the Netherlands, clearing the way for the case to be heard in October. <sup>[[https://web.archive.org/web/20210704123032/https://techcrunch.com/2021/07/02/dutch-court-will-hear-another-facebook-privacy-lawsuit/ TechCrunch]]</sup>
* '''{{End date and age|2021|06|30|df=yes}}''' - US state of Maine bans facial recognition tech possession and its use by virtually all public officials and employees. <sup>[[https://epic.org/2021/06/maine-becomes-first-state-to-e.html EPIC]]</sup>