‘See No Evil’ — Mozilla SLAMS Google’s App Privacy Labels - Security Boulevard

Google’s not Looking, so You’re Blind: Google doesn’t want you to know what your Android apps do with your data. That seems to be the conclusion from a Mozilla study into Google’s app store.

3/ Oh, what a tangled web we weave.

In today’s #SBBlogwatch, we struggle to be brief.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/LXa1NJagnj

— @Richi 🤓 Jennings (@RiCHi) February 24, 2023

WTH? WFH is 6× Pre-Covid ¦ Plus: Agile Sucks (Redux) - DevOps.com

The Moral of the Story: Life is like a coin—you can spend it any way you wish, but you only spend it once

In this week’s #TheLongView:
1⃣ Working from home #WFH is here to stay, and
2⃣ #Agile is still a failure.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/e7eZXyPq0w #DevOps

— @Richi 🤓 Jennings (@RiCHi) February 23, 2023

Surprise! US DoD Server Had no Password — 3TB of Sensitive Data Leaked - Security Boulevard

I’m Sorry, Dave: Sensitive military data found on unprotected Microsoft Azure server. Defense Department email store left insecure for at least 11 days.

3/ Amateurs. In today’s #SBBlogwatch, we seek professional help.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/dF4Gk01OuM

— @Richi 🤓 Jennings (@RiCHi) February 22, 2023

Lesson from Core-JS: Beware hidden dependencies from indebted Russian devs - ReversingLabs

This is not a drill: Denis Pushkarev has big debts — and his code is EVERYWHERE.
The Code-JS project is absolutely huge. Perhaps your project has a dependency on it? The likelihood is you’d never know.

The #SoftwareSupplyChain #security alarm should be at DEFCON 2 by now.

In this week’s #SSBlogwatch we sum up the situation at fast pace.

For @ReversingLabs’ @SecuredSoftware: https://t.co/LkVjR4i6Bg

— @Richi 🤓 Jennings (@RiCHi) February 22, 2023

GoDaddy Hosting Hacked — for FOURTH Time in 4 Years - Security Boulevard

4th Time’s a Charm: GoDaddy’s web hosting service breached yet again. This time, the perps were redirecting legit websites to malware.

3/ Hey, @GoDaddy: It’s bad enough you keep reporting hacks—but the same hack you failed to clean up previous times? INEXCUSABLE.

In today’s #SBBlogwatch, we note the trouble started when CEO moved from Expedia.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/M1hMQdZ62Q

— @Richi 🤓 Jennings (@RiCHi) February 20, 2023