Apple’s “Private” Relay Exposed Your IP Address?!
Our top stories this week:
- Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses
- Flock Updates
- New Pass-ta-key attacks let malware hijack Google-synced passkeys
- Nearly 1,400 Bitcoin Hacked from Coldcard Wallets
- Linux Desktop Market Share Surpasses 10% in North America
TWIP Live 🔴
Updates from the Team
How the NSA Tried to Backdoor the Internet
Our latest video about the next chapter of the so-called "crypto wars" is out now for members and will release to the public on August 9th. If you want early access, you can sign up at privacyguides.org/donate.
News Briefs
This week we had stories about a new Spectre vulnerability, the depth of North Korea's hacking operations, WhatsApp's Age Verification rollout in India, and more! Subscribe to keep up-to-date on the most important stories that don't make the podcast.
Jonah Aragon
Sources
Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses
Just weeks after Apple's last privacy snafu (see TWIP 63), Apple is in headlines again for allegedly leaking IP addresses for Private Relay, their paid VPN-like Safari feature.
Joseph Cox
Cops Used Flock to Track a Man Across State Lines to Create Pretext to Search His Car for Weed
Police in Wisconsin used Flock to track a man's movements and notice a pattern, then used his frequent trips to Michigan (where weed is legal) as a pretext to tack on more crimes to his arrest. While the man was already wanted for a valid crime (skipping bail), this seems to be simply a case of finding more reasons to arrest him and shows a worrying use of the surveillance technology.
Jason Koebler
Cities Are Ditching Flock, Immediately Replacing It With Axon License Plate Readers
We've covered several stories about how cities are successfully pushing back on Flock, but unfortunately many of these cities are simply swapping to other, less known vendors. This article details a popular one, Axon. While Axon does appear to be slightly better than Flock (no nationwide search network by default), it still doesn't solve most of the fundamental underlying issues with these cameras.
Joseph Cox
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Researchers have discovered three ways to extract passkeys from Google services. All three depend on an already-infected devices, but they're still the first known attacks of this kind and show that nothing is truly unhackable. While we still recommend passkeys, remember to practice good security.
Lawrence Abrams
Nearly 1,400 Bitcoin Hacked from Coldcard Wallets
In a shocking story this week, it turned out that a hardware Bitcoin wallet called Coldcard due to an internal bug. Wallets generated with the devices used a weak random seed generator, which allowed attackers to recover private keys and seeds without access to the device. The breach has already been linked to more than $100 million USD worth of stolen funds.
Jonah Aragon
Linux Desktop Market Share Surpasses 10% in North America
In exciting news, Statcounter and Cloudflare now reports that Linux appears to be just north of 10% usage in North America. This is the highest number we're aware of. Could this actually be "the year of the Linux desktop"? (Probably not, but it's still exciting and worth discussing.)
Bobby Borisov
Forum Updates
No_Name