Firefox: The zero-days are numbered

https://lwn.net/Articles/1068906/ #LWN #Linux #security #Firefox

Security updates for Tuesday

https://lwn.net/Articles/1068830/ #LWN #Linux #security

@nixCraft I'm seeing a lot of comments about #EU #GDPR & Right to be Forgotten, However to train its #AI #Atlassian either uses metadata (by definition no identifier, things like story points & tasks classes), or in-app data (think: comments), where it will "remove direct identifiers, aggregate data, and apply protections before using it for training". So in a nutshell, GDPR not applicable and in theory, no additional #security risk. Issues around #IP & #copyright remain wide open.

OpenBSD -current is now "7.9-current" https://www.undeadly.org/cgi?action=article;sid=20260420053238 #openbsd #development #current #newrelease #security #freesoftware #libresoftware

LibreSSL 4.3.1 released https://www.undeadly.org/cgi?action=article;sid=20260420085845 #openbsd #libressl #libtls #ssl #TLS #crypto #cryptography #security #development

Security updates for Monday

https://lwn.net/Articles/1068681/ #LWN #Linux #security

Will be attending #Synology 2026 partner event in #Zagreb on the 23rd.

#selfhosting #selfhosted #homelab #backup #surveillance #disasterrecovery #activeprotect #network #security

Last night I was watching a video from a YouTuber I enjoy. He’s likeable and reviews all kinds of smartphones. I find it relaxing, it makes me smile. In yesterday’s video, he showed his partner switching from an iPhone to Android and sharing his impressions.

At one point, the partner started saying that iOS is "dumber2 in many ways, specifically talking about the keyboard, because "Apple’s privacy is stronger, so they spy on you less". To me, that’s a feature, not a bug.

He went on to say it’s absurd, that he would actually like Amazon Alexa, Google, Android, iOS, and so on to know everything about him, so they can make things easier and provide more convenient features.

I was honestly stunned. So I went to check the comments and... they were all focused only on the fact that, "finally", he introduced his boyfriend in a video.

As long as this is how the average user thinks, big tech will keep their balance sheets locked tight and their hands on everyone’s data.

#Privacy #Security #OwnYourData

[$] A more efficient implementation of Shor's algorithm

Shor's algorithm is the main practical example of an algorithm that runs more quickly on a quantum computer than a classical computer — at least in theory. Shor's algorithm allows [...]

https://lwn.net/Articles/1066156/ #LWN #Linux #security #Rust

Security updates for Friday

https://lwn.net/Articles/1068400/ #LWN #Linux #security

Security updates for Thursday

https://lwn.net/Articles/1067993/ #LWN #Linux #security

Security updates for Wednesday

https://lwn.net/Articles/1067718/ #LWN #Linux #security

rpki-client 9.8 released https://undeadly.org/cgi?action=article;sid=20260415115612 #openbsd #rpkiclient #rpki #routing #security #bgp #networking #libresoftware #freesofware

What West doesn’t understand about Russia - a Lithuanian who knows

#Lithuania's parliamentary speaker Juozas Olekas said #peace with #Russia can be secured only from position of strength warning unless #Moscow is stopped in #Ukraine, it will continue aggression deeper in #Europe

Lithuania’s #security approach shaped by its history of #Soviet #occupation & by belief Russia’s #imperial attitudes extend beyond #Kremlin

https://kyivindependent.com/peace-with-russia-must-come-from-strength-lithuanian-speaker-juozas-olekas-warns-moscow-will-push-further-into-europe-if-not-stopped-in-ukraine/

#RussianAggression #RussianImperialism #imperialism

"According to the audit from privacy search engine webXray, 55 percent of the sites it checked set ad cookies in a user’s browser even if they opted out of tracking. Each company disputed or took issue with the research, with Google saying it was based on a “fundamental misunderstanding” of how its product works."

There's a powerful whiff of bullshit coming from Google (not your friend).

#privacy #security #surveillance

https://www.404media.co/google-microsoft-meta-all-tracking-you-even-when-you-opt-out-according-to-an-independent-audit/

In case there are any doubts about updating to the latest #synology #DSM 7.3.2 version, be sure to check this list of CVE exploits that were patched

https://www.synology.com/en-global/security/advisory/Synology_SA_26_06

#selfhosting #selfhosted #homelab #security #network #storage

Adam Savage learning about how evil #USB devices can be is a fantastic thing to watch.
https://youtu.be/OpcuqePIL7k

#security #cybersecurity #sysadmin

😆 this is excellent #TheCrux @daedalus

"We take security seriously!!
Cover up that incident with this handy sticking plaster."

https://www.redbubble.com/shop/ap/174240626

#infosec #slop #security #nosecurity

Alt...

EIGENMAGIC sticker in form of a band-aid claiming "We take security seriously."

OpenSSL 4.0.0 released

https://lwn.net/Articles/1067622/ #LWN #Linux #security

X.Org X server and Xwayland security advisory released for multiple issues https://www.gamingonlinux.com/2026/04/x-org-x-server-and-xwayland-security-advisory-released-for-multiple-issues/

#Linux #OpenSource #Security

Security updates for Tuesday

https://lwn.net/Articles/1067595/ #LWN #Linux #security

#Canada Has Lost The Plot... #Privacy #Security #Surveillance #AgeID #yt #SomeOrdinaryGamers #sog

https://youtu.be/Qh-v3N6gLfM

OpenBSD -current has moved to version 7.9 https://www.undeadly.org/cgi?action=article;sid=20260414052048 #openbsd #nolongerbeta #openbsd79 #development #security #freesoftware #libresoftware

Security updates for Monday

https://lwn.net/Articles/1067436/ #LWN #Linux #security

Switzerland Ends #Palantir Contract Over #Data #Sovereignty Risks - #Cybersecurity

#Switzerland’s decision to discontinue the use of Palantir is not a #technology story.

- It's a #risk management story. The platform was not rejected because it failed to perform. On the contrary, it delivered advanced data fusion and operational insight.

It was rejected because the residual sovereignty risk was considered unacceptable.

#security #BigData #insecure #surveillance #SurveillanceCapitalism

[1/2]

This case shows the growing dilemma that many countries now face. In a global supply chain economy, the most capable #digital #platforms are rarely national

- They are built, operated, updated, and legally #governed elsewhere

For #sensitive domains such as #defense, #intelligence, #public #safety, and #critical #infrastructure, this creates a structural tension between performance and control.

https://zendata.security/2026/02/14/switzerland-ends-palantir-contract-over-data-sovereignty-risks/

#BigData #privacy #security #corruption #dictators

[2/2]

In a capitalist society privacy is only as good as it is profitable.

#Privacy #Security #Capitalism

> There is sunshine and rainbows in our future Hank because strong security is simple security. #Passwords stink. Multiffactor authentication (#MFA) where you type in a code stinks. So really we to be secure we have to take the human out of the equation and that means it'll be easier for us.

https://youtu.be/V6pgZKVcKpw?si=NilUbnumkT18R5Y0&t=827

#Yep #Security #WellPut

🆕 blog! “FobCam '25 - All my MFA tokens on one page”

Some ideas are timeless. Back in 2004, an anonymous genius set up "FobCam". Tired of having to carry around an RSA SecurID token everywhere, our hero simply left the fob at home with an early webcam pointing at it. And then left the page open for all to see.

Security expert Bruce…

👀 Read more: https://shkspr.mobi/blog/2025/04/fobcam-25-all-my-mfa-tokens-on-one-page/
⸻
#2fa #CyberSecurity #MFA #Satire(Probably) #security

We’ve published the second monthly report (March 2026) for the Cyber Resilience Act Readiness project, part of our ongoing 2026 effort to prepare the FreeBSD community for the European Union’s cybersecurity regulation.

Read the March report: https://github.com/FreeBSDFoundation/all-projects/blob/main/Cyber%20Resilience%20Act%20Readiness/monthly-updates/2026-03.md

#FreeBSD #OpenSource #Security #CyberResilienceAct #CRA #Community

Proton built their entire brand on one promise: Swiss law means government agencies can't touch your data.
Their own Terms of Service, their own infrastructure contracts, and a federal court case from March say otherwise.

https://blog.ppb1701.com/not-even-government-agencies

#bigtech #blog #infosec #privacy #proton #protonmeet #security #surveillance #userhostile #selfhosting

Security updates for Friday

https://lwn.net/Articles/1067200/ #LWN #Linux #security

In the past, many FOSS proponents would mistakenly apply the "many eyes make bugs shallow" quote to all classes of bugs, in particular security ones. That historically hasn't been true because you need security expertise to find security bugs, it's not democratized in the same way as general classes of bugs.

LLMs have now changed that. This blog post by Thomas Ptacek does a good job of explaining what is going on:

https://sockpuppet.org/blog/2026/03/30/vulnerability-research-is-cooked/

#security #AI #LLM

[$] A flood of useful security reports

The idea of using large language models (LLMs) to discover security problems is not new. Google's Project Zero investigated the feasibility of using LLMs for security research in 2 [...]

https://lwn.net/Articles/1066581/ #LWN #Linux #security #FOSDEM

Security updates for Thursday

https://lwn.net/Articles/1066972/ #LWN #Linux #security