#unencrypted — Public Fediverse posts

Surprisingly, much of #communication across #satellite systems is still #unencrypted and you can listen in!

Here's how https://hackers-arise.com/satellite-hacking-listening-to-unencrypted-geo-satellite-traffic/
#cybersecurity

Eavesdropping on Internal Networks via Unencrypted Satellites

https://satcom.sysnet.ucsd.edu/

#HackerNews #Eavesdropping #Internal #Networks #Unencrypted #Satellites #Cybersecurity

Eavesdropping on Internal Networks via Unencrypted Satellites

https://satcom.sysnet.ucsd.edu/

#HackerNews #Eavesdropping #Internal #Networks #Unencrypted #Satellites #Cybersecurity

You Only Need $750 to Pilfer #Unencrypted Data From #Satellites , Researchers Say
#security #privacy #encryption #e2ee

https://mobile.slashdot.org/story/25/10/18/2032252/you-only-need-750-to-pilfer-unencrypted-data-from-satellites-researchers-say?utm_source=rss1.0mainlinkanon&utm_medium=feed

You Only Need $750 to Pilfer #Unencrypted Data From #Satellites , Researchers Say
#security #privacy #encryption #e2ee

https://mobile.slashdot.org/story/25/10/18/2032252/you-only-need-750-to-pilfer-unencrypted-data-from-satellites-researchers-say?utm_source=rss1.0mainlinkanon&utm_medium=feed

📄 Don’t Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites

🌍 https://satcom.sysnet.ucsd.edu/docs/dontlookup_ccs25_fullpaper.pdf

[EN ]]Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data ➡️ https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/

[ES] Satélites sin cifrado exponen secretos de la Guardia Nacional, CFE, Telmex y el mundo ➡️ https://es.wired.com/articulos/satelites-sin-cifrado-exponen-secretos-de-la-guardia-nacional-cfe-telmex-y-el-mundo-una-antena-barata-basto-para-saberlo

#guaridanacional #cifrado #CFE #Telmex #Mexico #unencrypted #cybersecurity

📄 Don’t Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites

🌍 https://satcom.sysnet.ucsd.edu/docs/dontlookup_ccs25_fullpaper.pdf

[EN ]]Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data ➡️ https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/

[ES] Satélites sin cifrado exponen secretos de la Guardia Nacional, CFE, Telmex y el mundo ➡️ https://es.wired.com/articulos/satelites-sin-cifrado-exponen-secretos-de-la-guardia-nacional-cfe-telmex-y-el-mundo-una-antena-barata-basto-para-saberlo

#guaridanacional #cifrado #CFE #Telmex #Mexico #unencrypted #cybersecurity

Satellites leak voice calls, text messages and more https://www.malwarebytes.com/blog/news/2025/10/satellites-still-leak-unencrypted-traffic-including-voice-calls-and-text-messages #geostationary #unencrypted #satellite #Privacy #News

Satellites leak voice calls, text messages and more https://www.malwarebytes.com/blog/news/2025/10/satellites-still-leak-unencrypted-traffic-including-voice-calls-and-text-messages #geostationary #unencrypted #satellite #Privacy #News

Just when you thought your data was safe... in space. Turns out, satellites have been spilling sensitive T-Mobile, military, and corporate data, completely unencrypted. Is this the new frontier of data breaches?

#Cybersecurity #DataLeak #Tmobile #Unencrypted #TechNews
https://www.cnet.com/tech/services-and-software/satellites-have-been-leaking-sensitive-data-from-t-mobile-and-others-research-reveals/#ftag=CAD590a51e

#Satellites Are #Leaking the World’s Secrets: Calls, Texts, #Military and Corporate Data

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites #unencrypted.
#privacy #encryption #e2ee #security

https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/

#Satellites Are #Leaking the World’s Secrets: Calls, Texts, #Military and Corporate Data

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites #unencrypted.
#privacy #encryption #e2ee #security

https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/

Eavesdropping on internal networks via unencrypted satellites [pdf]

https://satcom.sysnet.ucsd.edu/docs/dontlookup_ccs25_fullpaper.pdf

#HackerNews #Eavesdropping #Satellites #Unencrypted #Networks #Cybersecurity #Research

Eavesdropping on internal networks via unencrypted satellites [pdf]

https://satcom.sysnet.ucsd.edu/docs/dontlookup_ccs25_fullpaper.pdf

#HackerNews #Eavesdropping #Satellites #Unencrypted #Networks #Cybersecurity #Research

Tile trackers plagued by weak security, researchers warn https://www.malwarebytes.com/blog/news/2025/09/tile-trackers-plagued-by-weak-security-researchers-warn #unencrypted #Privacy #Life360 #News #Tile

Tile trackers plagued by weak security, researchers warn https://www.malwarebytes.com/blog/news/2025/09/tile-trackers-plagued-by-weak-security-researchers-warn #unencrypted #Privacy #Life360 #News #Tile

#Apple Gave Governments Data on Thousands of #PushNotifications

… sent to its devices, which can identify a target’s specific device or in some cases include #unencrypted content like the actual text displayed in the notification, according to data published by Apple. In one case, that Apple did not ultimately provide data for, #Israel demanded data related to nearly 700 push #notifications as part of a single request.
#privacy #security #e2ee #encryption

https://www.404media.co/apple-gave-governments-data-on-thousands-of-push-notifications/

#Apple Gave Governments Data on Thousands of #PushNotifications

… sent to its devices, which can identify a target’s specific device or in some cases include #unencrypted content like the actual text displayed in the notification, according to data published by Apple. In one case, that Apple did not ultimately provide data for, #Israel demanded data related to nearly 700 push #notifications as part of a single request.
#privacy #security #e2ee #encryption

https://www.404media.co/apple-gave-governments-data-on-thousands-of-push-notifications/

🤖📧 Oh no, a #DOGE #aide fumbled #Treasury #policy by sending sensitive data via #unencrypted email! 🚨 But don't worry, #The Register's bot has you covered with a polite "403 forbidden" ✋—the perfect shield against your curiosity. 😂👌
https://www.theregister.com/2025/03/17/doge_treasury/ #Email #Cybersecurity #Register #HackerNews #ngated

🤖📧 Oh no, a #DOGE #aide fumbled #Treasury #policy by sending sensitive data via #unencrypted email! 🚨 But don't worry, #The Register's bot has you covered with a polite "403 forbidden" ✋—the perfect shield against your curiosity. 😂👌
https://www.theregister.com/2025/03/17/doge_treasury/ #Email #Cybersecurity #Register #HackerNews #ngated

小紅書的明碼 (未加密) 傳輸

之前 TikTok (國際版的抖音) 在美國的事情，所以有不少人跳去小紅書，所以才有歐美的 security company 去研究小紅書的問題：「TikTok alternative RedNote (Xiaohongshu) fails basic security measures」。

好久

https://blog.gslin.org/archives/2025/02/27/12275/%e5%b0%8f%e7%b4%85%e6%9b%b8%e7%9a%84%e6%98%8e%e7%a2%bc-%e6%9c%aa%e5%8a%a0%e5%af%86-%e5%82%b3%e8%bc%b8/

#API #Computer #Murmuring #Network #Security #Service #Social #Software #app #encrypted #privacy #rednote #security #unencrypted #vulnerability

小紅書的明碼 (未加密) 傳輸

之前 TikTok (國際版的抖音) 在美國的事情，所以有不少人跳去小紅書，所以才有歐美的 security company 去研究小紅書的問題：「TikTok alternative RedNote (Xiaohongshu) fails basic security measures」。

好久

https://blog.gslin.org/archives/2025/02/27/12275/%e5%b0%8f%e7%b4%85%e6%9b%b8%e7%9a%84%e6%98%8e%e7%a2%bc-%e6%9c%aa%e5%8a%a0%e5%af%86-%e5%82%b3%e8%bc%b8/

#API #Computer #Murmuring #Network #Security #Service #Social #Software #app #encrypted #privacy #rednote #security #unencrypted #vulnerability

#DeepSeek #iOS app sends data #unencrypted to ByteDance-controlled servers - Ars Technica

Apple's defenses that protect data from being sent in the clear are globally disabled.
> that’s globally disabled within that specific app
#bytedance #China #privacy #encryption #security

https://arstechnica.com/security/2025/02/deepseek-ios-app-sends-data-unencrypted-to-bytedance-controlled-servers/

#DeepSeek #iOS app sends data #unencrypted to ByteDance-controlled servers - Ars Technica

Apple's defenses that protect data from being sent in the clear are globally disabled.
> that’s globally disabled within that specific app
#bytedance #China #privacy #encryption #security

https://arstechnica.com/security/2025/02/deepseek-ios-app-sends-data-unencrypted-to-bytedance-controlled-servers/

#Whistleblower finds #unencrypted location data for 800,000 VW EVs
#privacy #security #geoloc #surveillance

https://arstechnica.com/cars/2024/12/whistleblower-finds-unencrypted-location-data-for-800000-vw-evs/

#Whistleblower finds #unencrypted location data for 800,000 VW EVs
#privacy #security #geoloc #surveillance

https://arstechnica.com/cars/2024/12/whistleblower-finds-unencrypted-location-data-for-800000-vw-evs/

1. Tr^mp's lawyers did not dispute anything disclosed in the new filing. 2. If he believed overturning the election was part of his official acts, why was he using a burner phone routed outside of the U.S., unencrypted? 3. How many countries may be planning to blackmail him as a result of this #security #breach, or others?
#AdamCochran #Smith #filing #burner #phone #SpamRiskEgypt #EspionageAct #indict #espionage #risk #blackmail #foreign #intelligence #unencrypted #official #act #SCOTUS #king

1. Tr^mp's lawyers did not dispute anything disclosed in the new filing. 2. If he believed overturning the election was part of his official acts, why was he using a burner phone routed outside of the U.S., unencrypted? 3. How many countries may be planning to blackmail him as a result of this #security #breach, or others?
#AdamCochran #Smith #filing #burner #phone #SpamRiskEgypt #EspionageAct #indict #espionage #risk #blackmail #foreign #intelligence #unencrypted #official #act #SCOTUS #king

Over 600 million #Meta #passwords stored in plain text

The issue was first uncovered in 2019 when #Facebook admitted to "hundreds of millions" of passwords being stored #unencrypted. Facebook said that the passwords were not available outside of the company — but also admitted that around 2,000 engineers had made about 9 million queries on that user database
#privacy #security

https://appleinsider.com/articles/24/09/27/meta-stored-600-million-facebook-and-instagram-passwords-in-plain-text

Over 600 million #Meta #passwords stored in plain text

The issue was first uncovered in 2019 when #Facebook admitted to "hundreds of millions" of passwords being stored #unencrypted. Facebook said that the passwords were not available outside of the company — but also admitted that around 2,000 engineers had made about 9 million queries on that user database
#privacy #security

https://appleinsider.com/articles/24/09/27/meta-stored-600-million-facebook-and-instagram-passwords-in-plain-text

@marcan
Be careful out there. Its amazing that we use #email, #unencrypted email, for business purposes.

no personal and private information should ever be put in an email that travels in the clear; no account numbers, bdays, transaction info etc.

We need to demand that corps provide their #publicKey and accept our public key before we do business with them.
or
at least demand that they use an encrypted email service.

Learn about public/private key #encryption it's not that hard.

@marcan
Be careful out there. Its amazing that we use #email, #unencrypted email, for business purposes.

no personal and private information should ever be put in an email that travels in the clear; no account numbers, bdays, transaction info etc.

We need to demand that corps provide their #publicKey and accept our public key before we do business with them.
or
at least demand that they use an encrypted email service.

Learn about public/private key #encryption it's not that hard.

#CloudFlare is a giant #MITM [1] that can read all of your #unencrypted #data that you send to websites that use CloudFlare (almost all of them) including #passwords. It's also a central point of #failure to the Internet [2].

Cloudflare is the exact opposite of #privacy.

[1] https://blog.ipv6.rs/understanding-tls-mitm-and-privacy-policies/

[2] https://blog.cloudflare.com/cloudflare-1111-incident-on-june-27-2024

#CloudFlare is a giant #MITM [1] that can read all of your #unencrypted #data that you send to websites that use CloudFlare (almost all of them) including #passwords. It's also a central point of #failure to the Internet [2].

Cloudflare is the exact opposite of #privacy.

[1] https://blog.ipv6.rs/understanding-tls-mitm-and-privacy-policies/

[2] https://blog.cloudflare.com/cloudflare-1111-incident-on-june-27-2024

@gianmarcogg03 well never sees that screen as #CloudFlare are#blacklisted here.

I actually like that screen, because it is warning me about I'm about to enter a domain that is on a #unencrypted connection with a lot of #tracking and #Privacy violation going on.

Se the #Positive in the #negative ... IF == Possible 😃

@gianmarcogg03 well never sees that screen as #CloudFlare are#blacklisted here.

I actually like that screen, because it is warning me about I'm about to enter a domain that is on a #unencrypted connection with a lot of #tracking and #Privacy violation going on.

Se the #Positive in the #negative ... IF == Possible 😃

@dannotdaniel @mypdns Just a short

You reconnaissance that any connections running through #Cloudflare de facto is unencrypted traffic? and the fact CloudFlare DO COLLECT all your private data as they decrypt the traffic at their data centers before forwarding it to the domain holders servers?

Just to be sure you know CloudFlare only offers old style #unencrypted traffic

@dannotdaniel @mypdns Just a short

You reconnaissance that any connections running through #Cloudflare de facto is unencrypted traffic? and the fact CloudFlare DO COLLECT all your private data as they decrypt the traffic at their data centers before forwarding it to the domain holders servers?

Just to be sure you know CloudFlare only offers old style #unencrypted traffic

Open garage doors anywhere in the world by exploiting this “smart” device

Each $80 device used to open and close garage doors and control home #security alarms and smart power plugs employs the same easy-to-find universal #password to communicate with #Nexx servers. The controllers also broadcast the #unencrypted email address, device ID, first name, and last initial corresponding to each one
#privacy

https://arstechnica.com/?p=1929120

Open garage doors anywhere in the world by exploiting this “smart” device

Each $80 device used to open and close garage doors and control home #security alarms and smart power plugs employs the same easy-to-find universal #password to communicate with #Nexx servers. The controllers also broadcast the #unencrypted email address, device ID, first name, and last initial corresponding to each one
#privacy

https://arstechnica.com/?p=1929120

A Network of Knockoff Apparel Stores Exposed 330,000 Customer Credit Cards - Slashdot

Since Jan 6, a DB containing hundreds of thousands of #unencrypted #creditcard numbers & corresponding cardholders' infor was spilling onto the open web. At the time it was pulled offline on Tues, the DB had about 330,000 credit card numbers, cardholder names, and full billing addresses

https://yro.slashdot.org/story/23/01/26/0412252/a-network-of-knockoff-apparel-stores-exposed-330000-customer-credit-cards

A Network of Knockoff Apparel Stores Exposed 330,000 Customer Credit Cards - Slashdot

Since Jan 6, a DB containing hundreds of thousands of #unencrypted #creditcard numbers & corresponding cardholders' infor was spilling onto the open web. At the time it was pulled offline on Tues, the DB had about 330,000 credit card numbers, cardholder names, and full billing addresses

https://yro.slashdot.org/story/23/01/26/0412252/a-network-of-knockoff-apparel-stores-exposed-330000-customer-credit-cards

@heiseonline Wer ein #Backup auf eine fremde #Cloud macht, hat halt eine schlechte #Backupstrategy. Zumal wenn die #Backups #unencrypted/#unverschlüsselt sind. War schon immer so, wird immer so sein. Neu ist dieser Sachverhalt ja nicht.