by Steven Englehardt, Gunes Acar, and Arvind Narayanan Recently we revealed that “session replay” scripts on websites record everything you do, like someone looking over your shoulder, and send it to third-party servers. This en-masse data exfiltration inevitably scoops up sensitive, personal information — in real time, as you type it. We released the data…
Category: Youth & Schools
Teen accused of stealing woman’s phone, then uploading her nude photos to her Instagram account
If you’re the victim of a crime and you’re somewhat lucky, the thief/perpetrator will be caught. And maybe they’ll be punished. But nothing may undo the harm they’ve done because you kept very sensitive and personal information on your phone that they were able to access and upload for the world to see. So why…
Lawyer for Franklin Regional School District DDoS suspect seeks evidence suppression
I posted this over on DataBreaches.net, but am crossposting it here because of the Fourth Amendment issue. Jeff Himler reports that the attorney for Michaela King, a former Franklin Regional School District student accused of launching cyber attacks in 2016 that affected local school districts, the Catholic diocese and Westmoreland County government, has asked the court…
Electronic Toy Maker VTech Settles FTC Allegations That it Violated Children’s Privacy Law and the FTC Act
Electronic toy manufacturer VTech Electronics Limited and its U.S. subsidiary have agreed to settle charges by the Federal Trade Commission that the company violated a U.S. children’s privacy law by collecting personal information from children without providing direct notice and obtaining their parent’s consent, and failing to take reasonable steps to secure the data it…