New from Francesca D'Annunzio: Under Governor Greg Abbott's multi-billion dollar border security bonanza, Operation Lone Star, the Rio Grande no longer holds back law enforcement efforts. Today's digital border reaches across Texas and beyond. https://www.texasobserver.org/texas-dps-surveillance-arsenal-artificial-intelligence-lege/
This story is presented in partnership with the Pulitzer Center.
OpenBSD 7.6 // EXPAT // ERRATA 011
Date: April 1, 2025
Name: 011_expat.patch
Description: In libexpat fix regression of behavior introduced by previous errata.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.6/common/011_expat.patch.sig
So here's a question... an iPhone has a thing where you can "Erase All Content and Settings" which I assume does just that.
Let's say someone is concerned with the authorities taking their phone. How much would the erasing protect the person's data & information?
And let's say the person's phone is *not* taken by authorities, could the person just restore it later from a previous backup?
EMERGENCY UPDATES
Apple pushed additional updates for 3 zero-days that may have been actively exploited.
CVE-2025-24200 (Accessibility) additional patches, CVE-2025-24201 (WebKit) additional patches:
- iOS and iPadOS 15.8.4
- iOS and iPadOS 16.7.11
CVE-2025-24085 (CoreMedia) additional patches:
- iPadOS 17.7.6
- macOS Sonoma 14.7.5
- macOS Ventura 13.7.5
FIXED IN iOS and iPadOS 18.4
- 7 bugs in WebKit
- 5 bugs in Siri
- 4 bugs in Safari
- 3 bugs in libxpc
and 43 other vulnerabilities fixed
https://support.apple.com/en-us/122371
NEW SECURITY CONTENT
macOS Sequoia 15.4 - 131 bugs fixed
https://support.apple.com/en-us/122373 macOS Sonoma 14.7.5 - 91 bugs fixed
https://support.apple.com/en-us/122374 macOS Ventura 13.7.5 - 85 bugs fixed
https://support.apple.com/en-us/122375
iOS and iPadOS 18.4 - 62 bugs fixed
https://support.apple.com/en-us/122371
visionOS 2.4 - 38 bugs fixed
https://support.apple.com/en-us/122378 iPadOS 17.7.6 - 38 bugs fixed
https://support.apple.com/en-us/122372
tvOS 18.4 - 36 bugs fixed
https://support.apple.com/en-us/122377 iOS and iPadOS 16.7.11 - 2 bugs fixed
https://support.apple.com/en-us/122346 iOS and iPadOS 15.8.4 - 2 bugs fixed
https://support.apple.com/en-us/122345
Thanks for allowing the long detour of a thought experiment at https://mastodon.social/@theprivacyfoundation/114258140266536566 Comments on that post are off to allow for train of thought.
From a #privacy and #security perspective, it is a unique challenge. Even though it's all hypothetical, one can ponder self protection opportunities and apply safety ideas within legal boundaries to their own needs.
There are no universal situations or solutions to keep people safe. Think on your own situation. How do you stay safe?
Thought experiment: What could a person do to protect themselves from deportation or harm from authoritarian regimes?
Totally hypothetical.
This thread will have comments off.
A passkey is a secure, easy-to-use replacement for passwords. It uses your device's built-in security (Face ID, fingerprint, PIN, etc.) to log you into a website or service, without requiring you to remember or type anything.
#passkey #password #security
https://www.techspot.com/article/2971-passkeys-explainer/
Warum wir unbedingt mehr "#Security by Design" brauchen: Das #Krankenhausinformationssystem (KIS) ist das Kernstück der digitalen Gesundheitsdatenverarbeitung.
Das #BSI hat zum Thema eine neue Studie veröffentlicht, bei der die #Cybersecurity des KIS untersucht wird. Fazit: Es wurden signifikante Schwachstellen wie die unsichere Übertragung von Daten, die unsichere Speicherung und Verwaltung von Passwörtern sowie die unsichere Verteilung von Software-Updates festgestellt:
https://www.bsi.bund.de/DE/Service-Navi/Presse/Alle-Meldungen-News/Meldungen/SiKIS_250327.html
"Recently, the editor in chief of The Atlantic found himself in a group chat on Signal, in which president Trump's national security team discussed a military operation in Yemen. This immediately became SignalGate.
Here I present the secure government equipment and networks that Trump's team should have used instead of an app on their (personal) smartphones. It will also become clear why the Trump team prefers using Signal."
https://www.electrospaces.net/2025/03/the-equipment-that-trumps-national.html
I describe here 4 decades of US defense/intelligence reports on the threat of #climatechange to national security.
The new 2025 report from Trump's Office of the Director of National Intelligence explicitly censors out ANY mention of #climate change threats to #peace and #security or to the operations and bases of US #military. This is political interference with intelligence analysis.
How to report a security issue in an open source project
So you’ve found a security issue in an open source project – or maybe just a weird problem that you think might be a security problem. What should you do next?
– from @jacob
https://jacobian.org/2025/mar/27/reporting-security-issues-in-oss/
CodeQLEAKED - Public Secrets Exposure Leads toSupply Chain Attack on GitHub CodeQL https://lobste.rs/s/ctjxbo #devops #security
https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/
#politics #trump #alt #economy #oligarchy #security #confederacy #Signal #thirdterm
Heather Cox Richardson Oligarchy vs 80 Years of Stability
3/30/25
DATE: March 31, 2025 at 09:50AM
SOURCE: HIPAA JOURNAL
Direct article link at end of text block below.
Oracle Health Breach Affects Patients of Multiple U.S. Multiple Hospitals https://t.co/42e13gaQaa #healthcare #databreach
Here are any URLs found in the article text:
Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .
-------------------------------------------------
Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org
Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity
-------------------------------------------------
DATE: March 31, 2025 at 09:51AM
SOURCE: HIPAA JOURNAL
Direct article link at end of text block below.
Virginia Consumer Protection Act Updated to Include Reproductive and Sexual Health Information https://t.co/0uM15asE2R
Here are any URLs found in the article text:
Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .
-------------------------------------------------
Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org
Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity
-------------------------------------------------
Keylength - Cryptographic Key Length Recommendation https://www.keylength.com/ #cryptography #algorithms #parameter #security #compare #attack #length #method #level #key
