Official account of Predicta Lab. Leveraging intelligence since 2020. Contact us at [email protected] Our articles 馃憠 https://xitter.cf/t.co/qCs1kI49wT
Joined March 2020
- Tweets729
- Following293
- Followers9.1K
- Likes634
Flock's own website leaked an access token exposing the locations of 300,000 of its surveillance devices. A researcher turned it into a public map, and the company has been trying to kill it ever since. 猬囷笍
Why it matters: a Washington Post review found at least 50 officers accused or charged with misusing plate readers, 46 of those cases involving Flock's system. An invisible surveillance layer is now something anyone can audit.
What should a city council do when residents show up with a map of every camera in town?
Follow @PredictaLabOff for more cyber and OSINT news.
Everyone spent last week patching PHP2Shell. Meanwhile a second RCE, just as broad, was sitting in Google's Brotli compression code, used by every language on the internet. 猬囷笍
No in-the-wild exploitation confirmed yet. That makes this the rare giant bug you can patch before the breach stories start. Trail of Bits shipped brotli-checker to find out if your code even touches Brotli.
Where does Brotli hide in your stack, and would you have known before this week?
Follow @PredictaLabOff for more cyber and OSINT news.
A root-trusted certificate authority generated a private key that was literally the number four. Not a metaphor: 4. The fallout is ending its entire TLS business. 猬囷笍
The web's trust model rests on key ceremonies nobody re-checks. DigiNotar died of a hack in 2011; eMudhra leaves after a defect no attacker even needed. If your certs chain through a low-cost CA: inventory, reissue, watch the CT logs.
Audits waved these keys through twice. What would actually have caught them: better tooling, transparency logs, or just more paranoid reviewers?
Follow @PredictaLabOff for more cyber and OSINT news.