mysk , 1 month ago to random

I stopped using #Apple Podcasts a long time ago for #privacy reasons. Yet the Privacy Report shows that the app accesses my media library regularly. Third-party apps can't access the media library without asking for permission, even Apple's Photos asks for permission.
Ok, I will delete it.

#iOS #privacymatters #InfoSec

Screenshot of the privacy label of Apple Podcasts. It shows that data related to usage data is linked to the user
Screenshot of Spotify prompting for access to the media library. The prompt says: "Spotify" would like to access Apple Music, your music and video activity, and your media library This will let you play your imported music or podcasts on Spotify. -Don't Allow -Allow
Screenshot of apps that have requested access to the media library on iOS showing Photos and Spotify

avoidthehack , 1 month ago to random

#PayPal is building an ad network based on your #Venmo data

Quoting: “If you’re someone who’s buying products on the web, we know who is buying the products where, and we can leverage the #data..."

They will collect this data by default - users will have to opt-out.

This will affect both PayPal and Venmo users.

#privacy #privacymatters

https://www.theverge.com/2024/5/28/24166381/paypal-building-ad-network-transaction-data

murena , 2 months ago to random French

🔥 Final 3 days to enjoy the exclusive discounts on Murena Fairphone 4 in Europe and the USA

🗓 Offer available until April 29th

🇪🇺 Shop now in Europe at http://murena.com

🇺🇸 Shop Murena Fairphone 4 in the USA 👉
https://murena.com/america/

🌎 and join us in making a sustainable choice !

#Fairphone @gael @e_mydata #DataPrivacy #PrivacyMatters #Smartphone #MobileOS #eOS

avoidthehack , 4 months ago to random

Pluralistic: Your car spies on you and rats you out to insurance companies

They’re also mobile #cybersecurity nightmares…

#privacy #privacymatters

@pluralistic

https://pluralistic.net/2024/03/12/market-failure/#car-wars

mysk , 4 months ago to random

Google Authenticator still syncs two-factor authentication secrets without E2EE. If you enable cloud syncing, this means:

1️⃣ Google can read the secrets and generate one-time passwords for your accounts
2️⃣ Google knows the services you use
3️⃣ #Google knows your usernames
4️⃣ Given a court order, Google is obliged to hand over this data to law enforcement

#Privacy #privacymatters #CyberSecurity #infosec
https://defcon.social/@mysk/110262313275622023