Lukasz Olejnik

AI vulnerability/bug founds and reports is a huge problem. Curl has banned the use of AI-generated submissions via HackerOne because none of it made any sense, and is a waste of resources and time. "We are effectively being DDoSed. If we could, we would charge them for this waste of our time" https://hackerone.com/reports/3125832

Medien: 1

Apple and Meta got the first EU Digital Markets Act fines. Apple got a €500 million penalty for App Store. Meta has been fined €200 million for 'Consent or Pay', since some services should be provided for free and without processing user data. https://ec.europa.eu/commission/presscorner/detail/en/ip_25_1085

Beware of narrative stretches used for PR purposes. Even a single packet sent from a Ukrainian IP in a DDoS attack on X platform doesn’t imply 'Ukraine behind it'. This is an oversimplification, perhaps to to divert attention. Attribution doesn’t work that way—an IP is inconclusive. And much of Ukraine is occupied, with traffic operated by Russian ISPs.

Medien: 1

My assessment of the case of Google Chrome preloading its browser extension by default, with some privileges. Does it breach Digital Markets Act? #DMA may apply, but navigating this maze is tough. https://blog.lukaszolejnik.com/digital-markets-act-google-chrome-extensions-case-study/

Another remote code execution in OpenSSH (RHEL, and unmaintained Fedora) https://lwn.net/ml/all/20240708162106.GA4920@openwall.com/ https://nvd.nist.gov/vuln/detail/CVE-2024-6409

So here's EU_Commission's VP Vera Jourova speaking that the #ChatControl regulation is designed to break encryption. Mass, untargeted surveillance. Oh and by the way, the European Court of Human Rights has a verdict that untargeted encryption breaking is illegal.

The US military tracked Putin's movements. How? His comrades (advisers, drivers, etc.) had smartphones and were browsing the internet, using apps. Ads were displayed to them. And data traces from advertising networks revealed everything. https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/

"Ukraine tried to use surface drones in Sevastopol Bay, but the Starlink connection was lost 70 kilometers from the target. It was not possible to convince Musk to turn it on." https://www.pravda.com.ua/eng/news/2024/01/1/7435389/

My life story, or life with a disability. I have a hearing impairment. I am a person with a disability. I explain what it is about. Why did I write this? Because I hope it will be useful to at least one person. https://blog.lukaszolejnik.com/invisible-disability-in-the-world-of-technology/

My comment in The Register about phasing out third-party cookies in the most popular browser Chrome. This is an issue of privacy and competition. It is a regulated territory, subject to competition and data protection laws. Privacy improvements are welcome https://www.theregister.com/2023/11/14/google_chrome_devs_third_party_cookie/ #privacy #web #security #cookies #adtech

Medien: 1