Search

Items tagged with: Google





Google has just updated its 2FA Authenticator app and added a much-needed feature: the ability to sync secrets across devices.

TL;DR: Don't turn it on.

The new update allows users to sign in with their Google Account and sync 2FA secrets across their iOS and Android devices.

We analyzed the network traffic when the app syncs the secrets, and it turns out the traffic is not end-to-end encrypted. As shown in the screenshots, this means that Google can see the secrets, likely even while they’re stored on their servers. There is no option to add a passphrase to protect the secrets, to make them accessible only by the user.

Why is this bad?

Every 2FA QR code contains a secret, or a seed, that’s used to generate the one-time codes. If someone else knows the secret, they can generate the same one-time codes and defeat 2FA protections. So, if there’s ever a data breach or if someone obtains access .... 🧵

#Privacy #Cybersecurity #InfoSec #2FA #Google #Security


Competition is just a click (and $45b) away
justice.gov/opa/press-release/…

> #Google pays $45 billion a year for contracts to lock out rivals, signing deals with “Apple, LG, Motorola, and Samsung; major U.S. wireless carriers such as AT&T, T-Mobile, and Verizon; and browser developers such as Mozilla, Opera, and UCWeb— to secure default status for its general search engine and, in many cases, to specifically prohibit Google’s counterparties from dealing with Google’s competitors.”


#Google buys an entire #Twitter EVERY SINGLE YEAR to make sure we don't ever use its competitors' products.


So Google is now preventing people from removing location data from photos taken with Pixel phones.

Remember when Google's corporate motto was "don't be evil?"

Obviously, accurate location data on photos is more useful to a data mining operation like Google.

From Google: "Important: You can only update or remove estimated locations. If the location of a photo or video was automatically added by your camera, you can't edit or remove the location."

It's enshitification in action.

Source: support.google.com/photos/answ…

#technology #tech @technology #business #enshitification #Android #Google @pluralistic #infosec




People need to understand.

#Google isn't a search engine.
#Facebook isn't a journal to share with your friend.
#Instagram isn't a public photo album.
#Twitter isn't a micro-blogging website.

They are all advertisement companies.








When #GooglePlay introduced privacy labels, I was very curious to see how they managed to get reliable data about the #privacy properties of Android apps. I know first-hand how difficult and time-consuming privacy audits of #Android apps can be. Now Mozilla has taken a closer look, and it seems #Google doesn't even have reliable data.

foundation.mozilla.org/en/blog…




The DoJ's lawsuit against Google for illegal monopolization of digital advertising dropped last week. It's a 150-page document :allthethings: #digitaladvertising #dataprivacy #Google #techpolicy

🆕 Here's my first attempt to unpack what is probably one of the most complete antitrust cases in ad tech of the last decade. My focus? 👀 How three ad pricing manipulation schemes described in the suit hurt publishers: techpolicy.press/how-google-ma…


While #Google #Meta #Microsoft #Twitter & #Amazon are laying off tens of thousands of people to satisfy shareholders, #Tutanota continues to grow.

Welcome with us Wren, Johannes & Noah! 🥳

Join us if you are a developer wanting to fight for #privacy!

tutanota.com/blog/posts/team-2…


The lead attorney for GitHub arguing that #Copilot using #OpenSource is fair use following precedent from #Oracle Vs #Google is the woman who represented Oracle and personally argued against the verdict in public on Twitter.
reuters.com/legal/litigation/o…


Outside of Europe, #Google's monopoly gets slammed by India too. The ruling says that:

- Google must allow alternative app stores (like F-Droid or ApkPure) on the Play Store. This is really the step zero for fair competition: give everybody the same visibility, and let users pick what they like.

- Google should not force Android providers to install its own apps in order to be a certified Android provider. Step one for fair competition: competition only works if none of the involved party starts from a position of advantage.

- Google should make the Play Store available also on Android forks. Step two for fair competition: if the competitors' stores are available on your store, then your store should also be available on the competitors' forks, and users eventually will pick what they like the most. All the distribution asymmetries should be removed.

This is a good and balanced ruling that aims to create a level playing field by removing all the bumps that, as of now, strongly consolidate Google's position of dominance.

And it's going to hit Google quite badly too: India is the largest global market for Android (arguably on par with China), and Google may be on its way to lose its unfair advantage there.

9to5google.com/2023/01/20/goog…


SUPL-Server nutzen Android-Systeme, um die GPS-Positionsbestimmung zu beschleunigen. Stellt sich heraus, dass die Domain "supl.vodafone.com" nur ein CNAME für "supl.google.com" ist. 🤦

Man meint also, man würde einen etwas datenschutzfreundlicheren SUPL-Server nutzen, aber am anderen Ende hockt dann wieder Google. 😑

mxtoolbox.com/SuperTool.aspx?a…

#android #supl #google #datenschutz #privacy






"Currently, the predominant business model for commercial search engines is advertising. But the goals of the advertising business model do not always correspond to providing quality search to users.

We expect that advertising funded search engines will be inherently biased towards the advertisers and away from the needs of the consumers.

Furthermore, advertising income often provides an incentive to provide poor quality search results.

In general, it could be argued from the consumer point of view that the better the search engine is, the fewer advertisements will be needed for the consumer to find what they want".

Quote: Sergey Brin / Larry Page, from the seminal 1998 paper that kickstarted the #PageRank algorithm - and #Google with it (see Appendix A).

Reading the paper that started it all after so many years is a quite interesting experience. 25 years ago they knew *exactly* what a search engine may have become if it chose the path of an ads-based business model. They were very aware of the conflict of interest that arises when you have to provide relevant results to the users, but also boost those that pay your bills.

In other words, were warning us about the risks of the business model that their own company eventually decided to embrace.

infolab.stanford.edu/pub/paper…


Back to #Firefox I go! Multi-Account Containers are a killer #privacy feature that only Firefox (and maybe derivatives) has access to.

addons.mozilla.org/en-US/firef…

There's some helper add-ons to further silo #Facebook, #Twitter, and #Google. (That said, I use my own containers for Google to split my accounts)

Facebook: addons.mozilla.org/en-US/firef…

Twitter: addons.mozilla.org/en-US/firef…

Google: addons.mozilla.org/en-US/firef…



Do you spot the trick?

This is a cookie banner shown before using Google search in some countries.

"Reject all" is a straightforward option. It appears in the same size and color as "accept all." It uses bullets, simple and concise language, and visualization. It has links for further info. So far, so good.

But there is a trick. Do you spot what is it?

#privacy #cybersecurity #securityawarenessmonth #google


Are you serious right now? You do know what Google is, right? You do understand what their business model is? I thought NGI/NLnet was purportedly about finding and supporting *alternatives* to surveillance capitalists like Google, Meta, etc., not trying to improve their PR by perpetuating the myth that they’re generally a force for good who sometimes (often) make silly mistakes.

Do better.

#ngi #nextGenerationInternet #bigTech #google #surveillanceCapitalism #pr #NLnet