Skip to main content

security

See All Stories

Used Nest cams can spy on you due to third-party software [Google now fixed]

Used Nest cams allow previous owner to view feed

Update: Google told The Verge that it has now fixed the problem.

We were recently made aware of an issue affecting some Nest cameras connected to third-party partner services via Works with Nest. We’ve since rolled out a fix for this issue that will update automatically, so if you own a Nest camera, there’s no need to take any action.

Used Nest cams allow the original owner to spy on whoever buys them. The problem was discovered by a former owner of the popular Nest Cam Indoor.

Worryingly, the behavior survives the official reset procedure, and right now there appears to be no fix available for it …


Expand
Expanding
Close

A Cellebrite UFED extracting data from an iPhone

iPhone and Android hacking tool used by FBI and DHS on sale on eBay for as little as $100

The Cellebrite Universal Forensic Extraction Device (UFED) is a smartphone hacking tool commonly used by the FBI, Department of Homeland Security and other law enforcement agencies in the US and elsewhere. It’s the most powerful tool yet created by the Israeli company, able to extract a huge amount of data – even data which has been deleted from phones.

A brand new one normally costs $5,000 to $15,000 depending on the model, but older models can be found on eBay for as little as $100 …

Expand Expanding Close

Google’s Password Checkup Chrome extension warns of breached third-party logins

Safer Internet Day is officially today, but Google is spending the entire week discussing security and launching new features. The first is a Password Checkup Chrome extension that will advise users to reset credentials breached on third-party sites, while Cross Account Protection extends first-party tools to re-secure breached Google Sign In apps.


Expand
Expanding
Close

Jigsaw brings Project Shield DDoS protections to EU campaigns, journalists ahead of elections

Jigsaw Project Shield

Targeting elections is now a common tactic aimed at disrupting democracy around the world. Last year, Google announced voter education, Ads Transparency, and security trainings ahead of European Parliament elections in May. The company today provided an update, including Jigsaw expanding its Project Shield DDoS protections.


Expand
Expanding
Close

Some Android OEMs are effectively lying about security updates by changing dates without adding patches [Update]

Android security patch

Updates on Android have long been a mess. Despite Google’s best efforts to improve security and make updates easier for everyone, it’s rare that an OEM can actually keep up with everything Google is doing. According to a new report, though, some have just been saying they’re up to date, without actually putting in the work…


Expand
Expanding
Close

Google warning Android developers to disclose crash reports in apps or be removed from Play Store

Google Play Store

Crashing apps happen on all platforms, but on Android, they can be more common because of the numbers of variables developers have to work around. To get data on why an app is crashing, developers often collect crash reports once the user reopens an app. However, some developers are getting a warning from Google to change the way those reports are being collected…


Expand
Expanding
Close

Manage push notifications

notification icon
We would like to show you notifications for the latest news and updates.
notification icon
You are subscribed to notifications
notification icon
We would like to show you notifications for the latest news and updates.
notification icon
You are subscribed to notifications