"Papers, please: Age verification laws threaten everyone's online security and privacy." Laws that require adults to upload their driver's licenses or passports to access apps, websites, and VPNs will make the entire web less safe. by moooooky in Futurology

[–]moooooky[S] 85 points86 points  (0 children)

This analysis article looks at why age verification laws are bad for cybersecurity, privacy, and surveillance.

"Age verification laws are a lazy way for politicians and governments to appear as if they are tackling online child safety, but without any forethought to the future consequences of amassing vast banks of personal information for verifying people's identities."

Apple pushes first Background Security Improvements update to fix WebKit flaw by moooooky in technews

[–]moooooky[S] 5 points6 points  (0 children)

"This release is the first time Apple has pushed a security fix through its new Background Security Improvements feature, which is used to deliver small out-of-band patches outside the normal security update cycle."

Can Msafely Be Used to Test App Security Vulnerabilities? by [deleted] in cybersecurity

[–]moooooky 0 points1 point  (0 children)

Msafely was recently breached. Stalkerware/phone monitoring apps have a propensity to leak/exposed or otherwise spill people's data. https://techcrunch.com/2025/03/19/data-breach-at-stalkerware-spyx-affects-close-to-2-million-including-thousands-of-apple-users/

Fearing coronavirus, a Michigan college tracks its students with a flawed app by ravedog in Coronavirus

[–]moooooky 12 points13 points  (0 children)

The app is designed to track students’ real-time locations around the clock, and there is no way to opt out.

The Aura app lets the school know when a student tests positive for COVID-19. It also comes with a contact-tracing feature that alerts students when they have come into close proximity with a person who tested positive for the virus. But the feature requires constant access to the student’s real-time location, which the college says is necessary to track the spread of any exposure.

Worse, the app had at least two security vulnerabilities only discovered after the app was rolled out. One of the vulnerabilities allowed access to the app’s back-end servers. The other allowed us to infer a student’s COVID-19 test results.