security - CybAI news

22 Jun

The Body Shop of Security: Biometrics

stp2y0 CommentsNewscoding, community, development, discuss, engineering, inclusive, learning, productivity, security, software

Introduction Biometrics is a physical security technique that makes use of a person's physical characteristics which are unique to that person.This technique is used to authenticate the user's identity and grant access to the certain things. It is a kind of personal touch for authentication which can only be done by the genuine user. Types of Biometrics _Physiological : _ Physiological Biometrics is based on a person's body's unique features like fingerprints, facial recognition, iris scan, etc. This system of authentication is difficult to forge as compared to passwords. This type of security will remain constant throughout the person's life…

21 Jun

The Importance of Continuous Code Review and Early Security Integration

stp2y0 CommentsNewscoding, community, development, devops, engineering, inclusive, security, software, tutorial, webdev

In today's fast-paced digital landscape, software development is at the heart of innovation and progress. As businesses and organizations rely more heavily on software solutions, the need for robust, secure, and efficient code has never been greater. This is where continuous code review and early security integration come into play, serving as crucial pillars in the modern software development lifecycle. Continuous code review is the practice of systematically examining code changes throughout the development process, rather than waiting until the end of a project. Early security integration, on the other hand, involves incorporating security measures and best practices from the…

18 Jun

Is it safe to use encryption with plausible deniability?

stp2y0 CommentsNewscoding, community, development, encryption, engineering, inclusive, Linux, security, software

I wanted to try to hide some of my files in a way that it wouldn't even be visible that something is hidden. I found a tutorial for Cryptsetup LUKS and tried to implement it. The problem is what I read on several other threads that a person might be detained and arrested if signs of such encryptions are found on their computer. Does anyone know if it's actually a serious issue? Source link lol

04 Jun

This Hacker Tool Extracts All the Data Collected by Windows’ New Recall AI

stp2y0 CommentsGenAIartificial intelligence, cybersecurity, microsoft, privacy, security

Hagenah⁩ says an attacker could get a huge amount of information about their target, including insights into their emails, personal conversations, and any sensitive information that’s captured by Recall.Hagenah’s work builds on findings from cybersecurity researcher Kevin Beaumont, who has detailed how much information Recall captures and how easy it can be to extract it. Beaumont also says he has built a website where a Recall database can be uploaded and instantly searched. He says he hasn’t released the site yet, to allow Microsoft time to potentially change the system. “InfoStealer trojans, which automatically steal usernames and passwords, are a…

04 Jun

AI Is Your Coworker Now. Can You Trust It?

stp2y0 CommentsAIartificial intelligence, chatgpt, enterprise, google, google gemini, microsoft, openai, privacy, security

Yet “it doesn’t seem very long before this technology could be used for monitoring employees,” says Elcock.Self-CensorshipGenerative AI does pose several potential risks, but there are steps businesses and individual employees can take to improve privacy and security. First, do not put confidential information into a prompt for a publicly available tool such as ChatGPT or Google’s Gemini, says Lisa Avvocato, vice president of marketing and community at data firm Sama.When crafting a prompt, be generic to avoid sharing too much. “Ask, ‘Write a proposal template for budget expenditure,’ not ‘Here is my budget, write a proposal for expenditure on…

22 May

Teslas Can Still Be Stolen With a Cheap Radio Hack—Despite New Keyless Tech

stp2y0 CommentsRAG modelscrime, cyberattacks, hacking, security, tesla

In 2020, Tesla even wrote in a filing to the US Federal Communications Commission that it would be implementing ultra-wideband in its keyless entry systems, and that the ability to far more precisely measure the distance of a key fob or smartphone from a car would—or at least could—prevent its vehicles from being stolen via relay attacks. “The distance estimate is based on a Time of Flight measurement, which is immune to relay attacks,” Tesla's filing read. That document, first turned up by the Verge, led to widespread reports and social media comments suggesting that the upcoming ultra-wideband version of…