Remove Data collection Remove Encryption Remove Government Remove Surveillance
article thumbnail

China’s Olympics App Is Horribly Insecure

Schneier on Security

Key Findings: MY2022, an app mandated for use by all attendees of the 2022 Olympic Games in Beijing, has a simple but devastating flaw where encryption protecting users’ voice audio and file transfers can be trivially sidestepped. Citizen Lab examined the app and found it riddled with security holes.

article thumbnail

5G Security

Schneier on Security

Because the companies that make the equipment are subservient to the Chinese government, they could be forced to include backdoors in the hardware or software to give Beijing remote access. Both criminal attacks and government cyber-operations will become more common and more damaging. But the enhancements aren't enough.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Judging Facebook's Privacy Shift

Schneier on Security

And if you read his 3,000-word post carefully, Zuckerberg says nothing about changing Facebook's surveillance capitalism business model. Better data security so Facebook sees less. On the other hand, WhatsApp -- purchased by Facebook in 2014 -- provides users with end-to-end encrypted messaging. How Facebook manages for privacy.

article thumbnail

Privacy predictions 2022

SecureList

Global connectivity underpins the most basic functions of our society, such as logistics, government services and banking. Governments in many countries push for easier identification of Internet users to fight cybercrime, as well as “traditional” crime coordinated online.

article thumbnail

Understanding the Different Types of Audit Evidence

Centraleyes

This evidence serves multiple purposes, including: Verification of Controls : Auditors rely on evidence to verify the existence and effectiveness of cybersecurity controls, from access management to encryption mechanisms. The audit includes reviewing risk analysis, data access controls, encryption procedures, and physical security controls.

Risk 52
article thumbnail

Knock, Knock; Who’s There? – IoT Device Identification & Data Integrity Is No Joke

Thales Cloud Protection & Licensing

They all must have unique identifiers and the ability to collect and transfer data over networks to enable monitoring, surveillance, and execution of decisions based on the collected data with little or no human intervention. Maintaining the privacy of sensitive data is imperative in most industries.

IoT 72
article thumbnail

Quad9 to move offices to Switzerland, invites other privacy-focused firms to follow

SC Magazine

It offers additional privacy and security features, including screening for malicious domains and encryption. The company received a finding of law from the Swiss government that it will not be treated as a telecommunications provider, exempting it from laws that would mandate data collection. and Google Public DNS.

DNS 96