Security News for the Week Ending April 28, 2023
A Couple of Annoyed Redditors Launched Website to Anonymously Rate Your Landlord – What Could Possibly Go Wrong?
While I understand why some folks might be annoyed at their landlord, how do you verify anything that is on the site? Until now there really hasn’t been a way to figure out whether a landlord treats their tenants fairly. I am not sure this will really work, but it could get dicey for landlords. And potentially get tenants sued. Credit: Vice
Massachusetts Guardsman Leaked Classified Ukraine Docs a Year Earlier than Thought
As this story unfolds, the disenchanted Massachusetts Air National Guardsman with a Top Secret Clearance leaked documents with 600 of his closest friends just days after the war started. So much for the government’s ability to surveil the entire Internet. Expect most surveillance as a result – much more surveillance. Credit: NBC Boston
NSO Group (Pegasus) Spyware Still At It
NSO Group have at least 3 new iOS 15 and iOS 16 ZERO CLICK exploits that were being used against human rights activists last year. Zero Click means that there is nothing you can do to defend yourself against the attacks other than to hope that Apple accidentally stumbles on the bugs and fixes them or someone rats them out. If you consider yourself high risk, you should consider using Apple’s LOCKDOWN mode to get alerted to this attack. Note that Lockdown reduces iPhone functionality – but it depends on your priority. Credit: Dark Reading
Windows 10 22H2 is the Last Feature Version of Windows 10
Windows 10 22H2 released the last feature update of Windows 10 last fall. That doesn’t mean that Windows 10 is completely dead; they will continue to release security patches until October 2025, which means that you have about two years to complete your upgrade. Right now more than 73% of Windows computers are still running Windows 10. That number is likely to decrease significantly between now and fall of 2025. Start planning now. Credit: Bleeping Computer
Wikipedia Says if UK Forces Age-checking, They Might Just Block UK Users
Since Wikipedia is a non-profit and doesn’t generate revenue from ads, they could, possibly do this. Right now, it is just a threat. But their reasoning is sound. They are committed to collecting as little information about readers and contributors as possible and laws this this UK bill and others around the world require them – and web sites everywhere – to collect, store, protect and validate a whole lot of very personal information that they don’t need to run their business. It is not clear if this would conflict with GDPR. Maybe they should rename this bill the “UK Hacker’s Payday Law”. Credit: The Register
by 