The rise of ChatGPT-enabled GitHub spam(mastodon.social)

96 points by luu 3 years ago | 64 comments

Philips Hue will soon force users to create an account(defcon.social)

209 points by linker3000 3 years ago | 224 comments

Twitter Is DDOSing Itself(sfba.social)

1275 points by ZacnyLos 3 years ago | 208 comments

A Mastodon post with videos showing Twitter's web client firing about 10 requests per second at its own servers after Twitter started requiring login to read tweets.

Example of why you should not use FaceID to unlock your phone(mastodon.social)

42 points by donutshop 3 years ago | 35 comments

Google has removed Conversations_im from the Play Store(gultsch.social)

242 points by bertman 2 years ago | 137 comments

Passkeys will be importable, exportable, cross-device, and across managers(hachyderm.io)

67 points by latexr 3 years ago | 42 comments

Google Authenticator now supports Google Account synchronization(security.googleblog.com)

412 points by ortusdux 3 years ago | 297 comments

Google Security Blog post announcing that Google Authenticator can now back up and sync one-time codes across devices via Google Accounts.

I never authorized an integration that scans my secrets(github.com)

202 points by trvrprkr 9 days ago | 155 comments

A closed GitHub issue on the home-assistant.io repo in which a user complains that an integration scanning their secrets was enabled without authorization, calling it a privacy invasion.

Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out(csoonline.com)

412 points by miles 2 years ago | 271 comments

CSO Online news article on a Microsoft Authenticator design flaw that overwrites existing MFA accounts when new ones are added, locking users out.

Gmail registration now requires scanning a QR code and sending a text message(discuss.privacyguides.net)

575 points by negura 5 months ago | 427 comments

Privacy Guides forum thread discussing Google account registration now requiring users to send an SMS from their phone (via QR code) rather than receive one.

FSF trying to contact Google about spammer sending 10k+ mails from Gmail account(daedal.io)

354 points by pabs3 6 months ago | 203 comments

A Mastodon post by Thom Zane asking for a human contact on Google's Gmail team to report a spammer who sent 10,000+ spam emails via Gmail.

Google API keys weren't secrets, but then Gemini changed the rules(trufflesecurity.com)

1206 points by hiisthisthingon 8 months ago | 288 comments

Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.