Privatnost i sigurnost podataka i korisnika - Stranica 45

Bubba · 17.04.2026., 16:22

Brussels launched an age checking app. Hackers say it takes 2 minutes to break it.

https://www.politico.eu/article/eu-b...utes-break-it/

tomek@vz · 17.04.2026., 21:52

Citiraj:

Autor Bubba

Brussels launched an age checking app. Hackers say it takes 2 minutes to break it.

https://www.politico.eu/article/eu-b...utes-break-it/

S tim Age chcking na OS razini fakat pretjeruju.

d0X · 17.04.2026., 23:22

I vjerojatno koštalo nekoliko milijuna eura da se namire siromašni briselski kumovi i rođaci. Sjekirom ih treba.

Bubba · Jučer, 11:25

Citiraj:

Autor d0X

I vjerojatno koštalo nekoliko milijuna eura da se namire siromašni briselski kumovi i rođaci. Sjekirom ih treba.

Vidis, tu dolazimo do sustine - nije problem u njima, nego u onima koji nista ne citaju, ni u cemu ne sudjeluju i samo kmeče - jer doslovce pise u clanku tko i koliko.

Citiraj:

The European Commission in 2024 opened a €4 million tender for the age verification app late last year, which was won by Swedish digital identity company Scytáles and Deutsche Telekom.

spawn · Jučer, 11:56

Ne kuzim kako ce se sprijeciti pornjava za 15 godisnjaka sa bilo kojom aplikacijom za provjeru starosti.Kao ni pušenje i alkohol.

d0X · Jučer, 11:58

@Bubba citatom si samo potvrdio moju "vidoviti Milan" pretpostavku/pošalicu, svaka ćas.

mkey · Jučer, 16:18

dox, napisao si "vjerojatno nekoliko milijuna". Nije "vjerojatno" nego upravo nekoliko milijuna, i to točno 4. Što se mene tiče, "nekoliko" uključuje i 4. 5 već ne. Dakle, u krivu si što si u pravu.

tomek@vz · Danas, 06:19

Citiraj:

Yesterday the U.S. Congress approved "a short-term extension" of a FISA law that allows wiretaps without a warrant for surveilling foreign targets, reports CNN — but only until April 30. Republican congressional leaders had sought an 18-month extension, but "failed to secure" the votes after "clamoring from some of their members for reforms to protect Americans' privacy."

Citiraj:

The warrantless surveillance law, known as Section 702 of the Foreign Intelligence Surveillance Act, was set to expire on Monday night. Members are hoping the additional time will allow them to come to agreement without ending authorization for the intelligence gathering program, which permits US officials to monitor phone calls and text messages from foreign targets... There was an hour of suspense in the Senate Friday morning when it appeared possible that Democratic Sen. Ron Wyden, a longtime critic of FISA 702, might block the House-passed extension. But ultimately, he said his House colleagues had assured him "this short-term extension makes reform more likely, and expiration makes reform less likely," and so he chose not to object....

House Republican leaders believed Thursday night they had struck a deal with conservative holdouts who harbor deep and longstanding concerns that a key piece of the law infringes on Americans' privacy rights. But in a pair of after-midnight votes, more than a dozen rank-and-file Republicans rejected the long-term reauthorization plan on the floor, which was the result of days of tense negotiations among leadership, lawmakers and the White House.

The law allows authorized US officials to gather phone calls and text messages of foreign targets, but they can also incidentally collect the data of Americans in the process. Senior national security officials have for years said the law is critical for thwarting terror attacks, stemming the flow of fentanyl into the US and stopping ransomware attacks on critical infrastructure. Civil liberties groups on the left and the right, meanwhile, argue the surveillance authority risks infringing on Americans' privacy.

Citiraj:

Wednesday BleepingComputer reported that more than 30 WordPress plugins "have been compromised with malicious code that allows unauthorized access to websites running them." A malicious actor planted the backdoor code last year but only recently started pushing it to users via updates, generating spam pages and causing redirects, as per the instructions received from the command-and-control (C2) server. The compromise affects plugins with hundreds of thousands of active installations and was spotted by Austin Ginder, the founder of managed WordPress hosting provider Anchor Hosting, after receiving a tip about one add-on containing code that allowed third-party access.

Further investigation by Ginder revealed that a backdoor had been present in all plugins within the EssentialPlugin package since August 2025, after the project was acquired in a six-figure deal by a new owner.... "The injected code was sophisticated. It fetched spam links, redirects, and fake pages from a command-and-control server. It only showed the spam to Googlebot, making it invisible to site owners," explained Ginder.
"WordPress.org's v2.6.9.1 update neutralized the phone-home mechanism in the plugin," Ginder writes in a blog post. "But it did not touch wp-config.php. The SEO spam injection was still actively serving hidden content to Googlebot.

"And here is the wildest part. It resolved its C2 domain through an Ethereum smart contract, querying public blockchain RPC endpoints. Traditional domain takedowns would not work because the attacker could update the smart contract to point to a new domain at any time." This has happened before. In 2017, a buyer using the alias "Daley Tias" purchased the Display Widgets plugin (200,000 installs) for $15,000 and injected payday loan spam. That buyer went on to compromise at least 9 plugins the same way.... The WordPress plugin marketplace has a trust problem... The Flippa listing for Essential Plugin was public. The buyer's background in SEO and gambling marketing was public. And yet the acquisition sailed through without any review from WordPress.org.

WordPress.org has no mechanism to flag or review plugin ownership transfers. There is no "change of control" notification to users. No additional code review triggered by a new committer. The Plugins Team responded quickly once the attack was discovered. But 8 months passed between the backdoor being planted and being caught.

17.04.2026., 16:22	#1321
Bubba E Pluribus UNIX Moj komp Datum registracije: Oct 2002 Lokacija: M82 Postovi: 6,848	Brussels launched an age checking app. Hackers say it takes 2 minutes to break it. https://www.politico.eu/article/eu-b...utes-break-it/ __________________ https://2.71828182845904523536028747...966967627.com/ Programer Rok od dva mjeseca u stvari znači četiri, ali nikako ispod šest.

17.04.2026., 23:22	#1323
d0X Kostolomac Moj komp Datum registracije: Jun 2006 Lokacija: Rijeka Postovi: 1,605	I vjerojatno koštalo nekoliko milijuna eura da se namire siromašni briselski kumovi i rođaci. Sjekirom ih treba. __________________ PSN Steam

Jučer, 11:58	#1326
d0X Kostolomac Moj komp Datum registracije: Jun 2006 Lokacija: Rijeka Postovi: 1,605	@Bubba citatom si samo potvrdio moju "vidoviti Milan" pretpostavku/pošalicu, svaka ćas. __________________ PSN Steam

Jučer, 11:56	#1325
spawn Premium Moj komp Datum registracije: Aug 2004 Lokacija: Istra Postovi: 8,616	Ne kuzim kako ce se sprijeciti pornjava za 15 godisnjaka sa bilo kojom aplikacijom za provjeru starosti.Kao ni pušenje i alkohol.

Oglasni prostor
PC Ekspert Forum Oglas