Privacy Not A Crime

📰 Disinformation as a service: BlackCore sells influence campaigns Public opinion has officially gone up for sale. Researchers from Citizen Lab have uncovered the activities of Israeli company BlackCore, which has moved disinformation from intelligence services' toolkit into conventional B2B services. Now any paying client can access a full information warfare cycle: from creating hundreds of convincing fake profiles to artificially suppressing unwanted narratives, complete with detailed efficiency reports. 📢 How the disinformation factory works The fake campaign management process is structured like a classic advertising agency. Instead of crudely selling inactive accounts, BlackCore implements complete infrastructure. Neural networks generate avatar faces for social media, writers craft coordinated messages, and algorithms artificially boost posts. This system lets clients quickly simulate mass support or destroy a competitor's reputation by flooding the space with aggressive noise. Operations follow professional standards including target audience analysis, multi-platform deployment, engagement metrics tracking, and polished final deliverables presented as corporate reports. It is information manipulation packaged like any other enterprise service. ❔ Why this matters for everyone The main risk lies in increasing accessibility of these methods on the open market. When tools for suppressing opinions and dominating agendas sell as corporate subscriptions, it becomes nearly impossible to distinguish genuine social movements from paid digital illusions. The implications extend far beyond corporate competition. Political campaigns, public health messaging, and social justice efforts can all be drowned out by manufactured consensus funded by undisclosed actors. 🔗 Check more information about this at Citizen Lab 😊 Follow us to stay informed about the latest threats and protect yourself. #Disinformation #CyberSecurity #InformationWarfare #DigitalPrivacy #StateSp

🦠 Finding vulnerable subdomains using Censys Censys is like Shodan and Google Dorks, but powered up. We already talked about it in detail in the article How to Use Censys. Today, we will analyze it from the perspective of searching for vulnerabilities in subdomains. The best way to find subdomains using search engines is to use filters called dorks that are better understood by the Internet itself. We cannot simply tell Google find all Microsoft subdomains please. We need to speak computer language, not human language. Bug Bounty is a reward program that a website owner conducts to attract external information security specialists to find vulnerabilities. When participating in Bug Bounty, one must act ethically and follow established rules. 💻 Search for Microsoft subdomains Let us try to find Microsoft subdomains. Go to Censys Search and copy and paste the following query into the search bar. (services.tls.certificates.leaf_data.names: microsoft.com) and services.http.response.status_code=200 After execution, a list of working subdomains of the site will appear. The results show active domains that respond with HTTP status code 200, meaning they are live and accessible. ⚡️ Enable virtual hosts filter For a better result, click on the settings icon next to the search panel and select the Virtual Hosts option. This setting expands your search beyond just the primary domain. Now, with Virtual Hosts enabled, you can see all subdomains available to Microsoft services and possibly find attack vectors. The Virtual Hosts feature is particularly valuable because many organizations host multiple services on the same IP address. By enabling this option, Censys reveals which subdomains share infrastructure and what services they expose publicly. 🔘 Real bug bounty example In one scenario from a HackerOne report, a bug hunter discovered an interesting subdomain with registration enabled for internal users this way. Then, after registration, the hacker was able to acce

Headlines like these really annoy me. https://arstechnica.com/gadgets/2026/09/owners-mourn-spoiled-food-after-firmware-update-bricks-samsung-smart-fridges

💻 Spectre bypasses Linux defenses via stale processor records A new attack known as Branch Target Reuse (BTR) takes advantage of outdated entries in the branch predictor once JIT code has been removed. On modern Intel processors, researchers demonstrated two working exploits targeting Linux cBPF that could read arbitrary kernel memory at roughly 8 bytes per second. In just a matter of minutes, this technique made it possible to extract the root password hash. ⚙️ Understanding the mechanism The vulnerability stems from a desynchronization between the JIT-generated code and the Branch Target Buffer. By the time software removes or replaces code, the processor may still retain traces of previous jump targets in its hardware prediction state. This allows speculative execution to follow stale addresses that no longer correspond to active instructions. While similar behavior has been identified across Intel, AMD, and Arm processors, complete data exfiltration has been experimentally verified only on Intel platforms so far. 🔧 What the fixes entail Developers are addressing the issue with patches that force the predictor state to clear whenever memory gets reassigned. In the Linux ecosystem, this falls under CVE-2026-64507 and CVE-2026-64508, with the kernel implementing IBPB protections specifically for BPF JIT operations. Systems running JIT-heavy environments, such as browsers, virtual machines, or runtime engines, should prioritize patch deployment as soon as updates roll out. 😊 Follow us to stay informed about the latest threats and protect yourself. #Spectre #BTR #Linux #Security #Vulnerability @PrivacyNotACrime 🗽 ⌨️ Chat

■■□□□ US military complex with data from civilian technologies. Includes project nimbus, AWS, Google and relevant.

🤖 Google strengthens Android security with Advanced Protection Google has announced a significant security update for Android that tightens control over accessibility services. When the Advanced Protection program is active, the operating system will now restrict access to these powerful permissions exclusively to verified Accessibility Tools. This move effectively cuts off one of the primary pathways used by malicious applications to deploy malware and commit financial fraud on the platform. ❗️ Closing a dangerous loophole Accessibility services were originally designed to help users with disabilities navigate their devices, granting apps the ability to read screen content and simulate touch gestures. However, threat actors have long abused this feature to steal credentials, bypass two factor authentication, and silently transfer funds. By limiting access only to vetted applications under Advanced Protection, Google aims to neutralize these sophisticated attacks before they can execute. While this adds a layer of friction for users who rely on third party tools, it drastically reduces the attack surface for high value targets. ☯️ Balancing control and freedom It is worth noting the growing dominance Google exerts over the Android ecosystem through such mandatory security layers. While the company effectively steers the direction of the platform security architecture, the core of Android remains open source. The AOSP ensures that the fundamental code is still free and modifiable by anyone, preserving the spirit of the platform even as Google tightens its grip on the commercial distribution and default configurations. The tension between centralized security enforcement and the open nature of the OS continues to define the future of mobile privacy. To protect yourself regardless of whether you use Advanced Protection, it is crucial to review your installed apps regularly. Go to Settings > Accessibility and ensure no unknown applications have permission to contr