Verified Apps (Privacy Guides) is an app‑signing certificate hash viewer/verifier that checks installed apps or APKs against a crowdsourced DB. MIT • Last update 2026-06-13. Learn more: https://github.com/privacyguides/verified-apps-android/blob/main/README.md 🔐📱 #Security #Android #OpenSource

https://apt.izzysoft.de/fdroid/index/apk/org.privacyguides.verifiedapps

Your Question: Will Bill C-34 Affect Mastodon?

One of the questions we got is whether or not Mastodon is affected by Bill C-34. We'll make an attempt to answer that today.

https://www.freezenet.ca/your-question-will-bill-c-34-affect-mastodon/

#Censorship #News #Privacy #Security #AgeVerification #BillC34 #Canada #Mastodon #OnlineHarms #SocialMedia

Security updates for Friday

https://lwn.net/Articles/1078662/ #LWN #Linux #security

GrapheneOS version 2026061800 released:

https://grapheneos.org/releases#2026061800

See the linked release notes for a summary of the improvements over the previous release.

Forum discussion thread:

https://discuss.grapheneos.org/d/36568-grapheneos-version-2026061800-released

#GrapheneOS #privacy #security

Security updates for Thursday

https://lwn.net/Articles/1078465/ #LWN #Linux #security

Do we make 2FA mandatory for everyone? Kinda want to do this #security

Everything security at PyCon US 2026

https://lwn.net/Articles/1078361/ #LWN #Linux #security #Python

Did you miss #PyConUS this year? 🐍🛡️ Here's a summary of everything security at @pycon US 2026, including the new security talk track, an update from PSF security engineers, and notes from the OSS maintainer security open space.

#Security #OpenSource #SupplyChain #SBOM

https://pyfound.blogspot.com/2026/06/everything-security-at-pycon-us-2026.html

Security updates for Wednesday

https://lwn.net/Articles/1078339/ #LWN #Linux #security

GrapheneOS version 2026061600 released:

https://grapheneos.org/releases#2026061600

See the linked release notes for a summary of the improvements over the previous release.

Forum discussion thread:

https://discuss.grapheneos.org/d/36483-grapheneos-version-2026061600-released

#GrapheneOS #privacy #security

✈️ New Blog Post: Your Boarding Pass Is a Skeleton Key. Frontier Airlines Doesn't Care.

Frontier's mobile API returns full passport numbers, home addresses, children's DOB, credit card details, and KTNs for any booking. The only auth? A PNR and last name. Printed on every boarding pass.

Reported March 3rd. 105 days later, still live. They fixed the least important vuln and ghosted me on the rest. They also updated the website code and somehow made the leaks worse.

Full writeup: https://bobdahacker.com/blog/frontier-airlines-hack

#InfoSec #BugBounty #ResponsibleDisclosure #FrontierAirlines #Security #CyberSecurity #Privacy #Aviation #PCIDSS #DataExposure

Well that's pretty sneaky. Cybercriminals deployed ransomware on a target's network and disguised their footsteps as MS Teams traffic.

https://www.theregister.com/cyber-crime/2026/06/16/crooks-found-a-new-way-to-collaborate-using-teams-by-hiding-command-and-control-traffic/5256296

#news #technews #cybersecurity #security #microsoft #crime #cybercrime #ransomware

Security updates for Tuesday

https://lwn.net/Articles/1078158/ #LWN #Linux #security

I'm with Frances Ryan, there is a false distinction drawn by our political class between threats to security that emanate from the global system & those that stem from how UK society is organised.

The argument that we necessarily need to choose between military expenditure & welfare spending (wilfully) misunderstands the *real* threats to the UK population.

Rather we should see the UK's 'security' as including the plight of the population.

#security #politics #welfare
https://www.theguardian.com/commentisfree/2026/jun/16/warfare-v-welfare-britain-spend-benefits-defence-safe

Alt...

Threats to a nation do not always come from enemies across an ocean. Often, the danger is closer to home: the way an economy and society are rigged against a populace that increasingly feels divided, alienated and without the means to live a decent life. And the bad actors, both in the UK and abroad, who are willing to stoke real grievances for their own distorted ends. This is not the kind of safety that will be gained with drones and missiles – think social housing, healthcare and education instead – but it is no less integral to Britain’s wellbeing.

Using Loupe, we found out that Proton VPN is the only VPN that prevents internal tunnel IP fingerprinting by assigning 10.2.0.2 to all users. Other VPNs, such as Mullvad, assign a static and unique IP per session. This allows iOS apps to track user sessions across apps.

Mullvad is aware of this issue. It is described in this blog:

https://mullvad.net/en/help/why-wireguard

You can download Loupe here:
https://apps.apple.com/app/id6766152470

#iOS #privacy #infosec #security #cybersecurity

Alt...

Proton VPN tunnel internal IP as shown in the Settings app

Alt...

Proton VPN tunnel internal IP as shown in Loupe

Alt...

Mullvad VPN tunnel internal IPs as shown in the Settings app

Alt...

Mullvad VPN tunnel internal IPs as shown in Loupe

⚽ New Blog Post: I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.

Registered on FIFA's public Agent Platform, got added to their Entra tenant, and accessed the Streaming Management panel for every live World Cup 2026 match. RTMP ingest URLs, stream keys, all five camera angles. Confirmed live in VLC. An attacker could have replaced live camera feeds on TV worldwide.

Full writeup: https://bobdahacker.com/blog/fifa-hack

#InfoSec #BugBounty #ResponsibleDisclosure #FIFA #WorldCup #Security #CyberSecurity #RTMP #BrokenAccessControl

Stenberg: curl summer of bliss

https://lwn.net/Articles/1077946/ #LWN #Linux #security

Security updates for Monday

https://lwn.net/Articles/1077945/ #LWN #Linux #security

The security situation with the Arch Linux AUR got a lot worse https://www.gamingonlinux.com/2026/06/the-security-situation-with-the-arch-linux-aur-got-a-lot-worse/

#Linux #ArchLinux #Security

Security updates for Friday

https://lwn.net/Articles/1077703/ #LWN #Linux #security

The Arch Linux AUR had over 400 packages compromised with malware https://www.gamingonlinux.com/2026/06/the-arch-linux-aur-had-over-400-packages-compromised-with-malware/

#Linux #ArchLinux #Security

syslogd(8) privileged and non-privileged parts now separate binaries https://www.undeadly.org/cgi?action=article;sid=20260612080210 #openbsd #syslogd #privsep #privelegeseparation #separation #security #logging #development

Government Rolling Age Verification and Online Harms into One Giant Mess

Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.

https://www.freezenet.ca/government-rolling-age-verification-and-online-harms-into-one-giant-mess/

#Censorship #News #Privacy #Security #AgeVerification #Canada #FreeSpeech #legislation #OnlineHarms

#tech #technology #BigTech #data #security #privacy #safety #InfoSec #IT #surveillance #computing #digital #online #internet #web #cloud #meme

Alt...

Meme, showing a continuous circle of data breach messages from corporations… Ahaha you're not gonna believe this but we had a bit of a data breach. Your data is probably for sale online now. That means someone could easily impersonate you. Going forward we're gonna need more of your data to make sure its you.

Security updates for Thursday

https://lwn.net/Articles/1077536/ #LWN #Linux #security

Dealing with passkeys is kind of hassle for me. Does it get better after a while?

I’m asking because I started selfhosting PocketID and it ONLY has passkeys, no passwords and I have to decide if I keep it or not.

#selfHosting #passkeys #pocketid #askFedi #security

Larson: Are insecure code completions a vulnerability?

https://lwn.net/Articles/1077413/ #LWN #Linux #security #Python

The Arsenal, the sister publication of The Counteroffensive, conducted an #interview with U.S. Senator Ruben Gallego at the Black Sea #Security Forum about #veterans and how they can be supported now and after the war. Watch it at the link! https://www.counteroffensive.news/p/war-threatens-ukraines-checkers-champions

Security updates for Wednesday

https://lwn.net/Articles/1077362/ #LWN #Linux #security

[$] Eliminating long-lived credentials with trusted publishing

Trusted publishing is an authentication mechanism that relies on short-lived credentials to reduce the risk of supply-chain attacks. At the 2026 Open Source Summit North America, M [...]

https://lwn.net/Articles/1076205/ #LWN #Linux #security #Python #Git #OSS

Security updates for Tuesday

https://lwn.net/Articles/1077163/ #LWN #Linux #security

I think I've mentioned this before, but I'm toying around with adding keyboard patterns in my password generator.

The algorithm:

1. Pick a random key.
2. Identify adjacent keys horizontally and vertically.
3. Pick a random adjacent key.
4. Repeat until entropy target is reached.

72-bit examples:

Colemak: 098(){]|}+}[{]\\]|}|}[{{:YU8u
Dvorak: 5$#$p>EJkXKJkUpyp>#2#>pYF
QWERTY: XZxcxzxZXSXsde3>?.?:?>?:"[}+
Workman: _+-0["['I"['iO>oEnFuENfNyn

#passwords #security

Do i have someone in my peer group that could give a 4 hrs workshop on target Information Gathering at a company? Ideally based on Kali linux or alike.

#mastohelp #getfedihired #workshop #security

Security updates for Monday

https://lwn.net/Articles/1076983/ #LWN #Linux #security

Schweizer Rüstungsunternehmen RUAG zahlt Lösegeld an Cybergang

Nachdem die Cybergang Akira bei der RUAG-Tochter Mecanex USA Daten abgezogen hat, hat RUAG ein Lösegeld gezahlt.

https://www.heise.de/news/Schweizer-Ruestungsunternehmen-RUAG-zahlt-Loesegeld-an-Cybergang-11321552.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Datenleck #IT #Ransomware #Security #news

UK: Palantir break clause

Cross party committee of MPs has just officially recommended that the government trigger the break clause in #Palantir's #NHS contract.

The report states ...

#corruption #privacy #security #USThreats #USAggression #BigData

[1/2]

Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more

Loupe is free, private, and open source. Give it a try 👇

https://apps.apple.com/app/id6766152470

Link to source code:

https://github.com/mysk-research/loupe

#iOS #privacy #infosec #security #cybersecurity

Alt...

Banner for Loupe

Security updates for Friday

https://lwn.net/Articles/1076605/ #LWN #Linux #security

One step forward, two steps back on CA age bill (EFF Deeplinks Blog)

https://lwn.net/Articles/1076377/ #LWN #Linux #security

Security updates for Thursday

https://lwn.net/Articles/1076364/ #LWN #Linux #security

Mastodon Update

We have completed the update to Mastodon v4.5.11 which contains some security fixes. Protecting our community is paramount to us - so we'd rather not wait until the wee little hours.

#MastoAdmin #Security #OpenBSD

Security updates for Wednesday

https://lwn.net/Articles/1076117/ #LWN #Linux #security