Windows 0 Day Exploit Situation Is Wild
Our top stories this week:
- Windows 0-day drops the same day Microsoft releases record number of patches
- Microsoft Restores Player's 25-Year-Old Account With Son's Baby Photos After Nuking It Due to Hacker
- LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy
- Cloudflare Precursor watches your mouse and keyboard to decide if you are human
- Your Period Data Should Be Private
TWIP Live 🔴
Updates from the Team
Can You Actually Have a Private Phone Plan?
Is it possible to create a private and secure mobile carrier? Cape Mobile thinks so! In this video Jonah sits down with Ruddy Wang, Head of Consumer at Cape to answer questions about the service and to dive into how the privacy & security features work.
Privacy Guides
Sources
Windows 0-day drops the same day Microsoft releases record number of patches
This month's "Patch Tuesday" for Windows users featured a record number of fixes, but was overshadowed by another cybersecurity issue: the researcher known as NightmareEclypse dropped a new zero day mere hours after the patches were published. Nightmare Eclipse has been feuding with Microsoft in recent weeks over claims that they have refused to fix vulnerabilities the researcher has disclosed. The new vulnerability, called HiveLegacy, is an escalation-of-privilege attack that allows non-admin users to get admin access.
Dan Goodin
Microsoft Restores Player's 25-Year-Old Account With Son's Baby Photos After Nuking It Due to Hacker
A streamer's Microsoft account was terminated after his account was hacked and abused. This account included thousands of dollars worth of games and photos of the streamer's son. Xbox did reinstate his account after the streamer created public pressure.
Virginia Glaze
LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy
The Los Angeles Police Department has decided not to renew their contract with Flock until they can secure better, legally-binding wording in their contract regarding topics like privacy and data storage. The LAPD is the third-largest police department in the United States and one of Flock's biggest customers, so this is a huge win and a blow to the company.
Zack Whittaker
Cloudflare Precursor watches your mouse and keyboard to decide if you are human
The cat-and-mouse of bot detection and evasion continues, with Cloudflare announcing a new system that looks at your overall behavior in the browser - like mouse movements, scrolling rhythm, typing cadence, and more. The goal is to make the web more convenient for users while tripping up bots who are good at bypassing specific, short-term checks (like CAPTCHAs). Cloudflare says content of keys being pressed is not captured, but there are still other privacy concerns about collecting such unique data.
Brian Fagioli
Your Period Data Should Be Private
Mozilla partnered with Harvard's Transparency Hub and the University of Illinois to test six popular period tracker apps to figure out which ones are really private. Euki (which is recommended by Privacy Guides) was the only one of the six that got a perfect score, all the others having at least some privacy holes.
Nothing Personal
Forum Updates
Winter