Privacy

Leaking the email of any YouTube user for $10,000

A security researcher discovered a method to leak any YouTube user's email address by exploiting a chain of vulnerabilities in YouTube's blocking system and Google's Pixel Recorder app, earning a $10,000 bug bounty. The exploit involved obtaining a user's Gaia ID through YouTube's API and converting it to an email address via Pixel Recorder's sharing functionality, while bypassing notification systems using an oversized recording title.

UK demands Apple break encryption to allow gov’t spying worldwide, reports say

The UK government secretly ordered Apple to create a universal backdoor for accessing encrypted user data worldwide, challenging Apple's Advanced Data Protection system. Apple may cease offering encrypted storage in the UK rather than compromise global user security, as the order demands unprecedented access to encrypted content across all countries.

F-Droid Awarded Open Technology Fund’s FOSS Sustainability Grant | F-Droid - Free and Open Source Android App Repository

F-Droid received a $396,044 grant from Open Technology Fund to address sustainability challenges and enhance its infrastructure. The funding will support code refactoring, legal strategies, localization improvements, and infrastructure enhancements to ensure the platform's long-term viability in delivering FOSS-based, privacy-focused apps globally.

Infosec 101 for Activists

A comprehensive guide for activists details essential digital security practices, focusing on protecting personal information during protests and daily life through secure communication tools and privacy measures. The resource provides specific recommendations for secure messaging apps, VPN services, and proper phone configuration to minimize surveillance risks and maintain anonymity during activist activities.