Nathaniel Harari @natharari@qoto.org

This is first on Mastodon! Please boost this thread. It’s an important one.

Good morning to readers. Kyiv remains in Ukrainian hands.

Some career news: I’m leaving NPR as part of the layoffs that dramatically reduced the company’s workforce.

I’ve decided to go back into Ukraine to keep reporting.

But this time, alone.

Welcome back

Twitter changes stoke Russian, Chinese propaganda surge
https://apnews.com/article/twitter-russia-china-elon-musk-ukraine-2eedeabf7d555dc1d0a68b3724cfdd55

Google has just updated its 2FA Authenticator app and added a much-needed feature: the ability to sync secrets across devices.

TL;DR: Don't turn it on.

The new update allows users to sign in with their Google Account and sync 2FA secrets across their iOS and Android devices.

We analyzed the network traffic when the app syncs the secrets, and it turns out the traffic is not end-to-end encrypted. As shown in the screenshots, this means that Google can see the secrets, likely even while they’re stored on their servers. There is no option to add a passphrase to protect the secrets, to make them accessible only by the user.

Why is this bad?

Every 2FA QR code contains a secret, or a seed, that’s used to generate the one-time codes. If someone else knows the secret, they can generate the same one-time codes and defeat 2FA protections. So, if there’s ever a data breach or if someone obtains access ....

#Privacy #Cybersecurity #InfoSec #2FA #Google #Security

This sums up @1Password and Big Tech so well

#atheism
Tooted by a #bot!
SN# 1980

this keeps me up at night

The republicans on the Supreme Court are entirely corrupt and the court and it’s decisions are illegitimate.
---
RT @nycsouthpaw
Nine days after Gorsuch was appointed to the Supreme Court, the head of Greenberg Traurig—a major law firm that’s before the Court all the time—bought land he’d been trying to sell for two years. Gorsuch did not report the identity of the purchaser. https://www.politico.com/news/2023/04/25/neil-gorsuch-colora…
https://twitter.com/nycsouthpaw/status/1650829176616767496

@natharari So... Boiled with some sugar and pectin and kept in a jar in a cold, dark place?

A hospital room in an abandoned asylum

Gallery/info: https://www.abandonedamerica.us/taunton-state-hospital

My daughter wants to know...

If you were a fruit, would you rather be:

This one change to ChatGPT could save it from being banned in the EU. https://www.windowscentral.com/software-apps/chatgpt-unveils-incognito-feature-to-shield-your-data-from-prying-eyes

NEW: My WIRED colleagues dive deep into the global impact of "Tucker Carlson Tonight" on far-right movements, from the UK to Brazil and the Netherlands.

"The ethno-nationalism of Carlson’s content resonates internationally because the online far-right is global, with communities in Europe, Latin America, and Australia overlapping, sharing spaces and stories."

https://www.wired.com/story/tucker-carlson-fox-news-disinformation/

Long way to go…
---
RT @Techmeme
OpenAI now lets ChatGPT users turn off their chat histories, excluding them from the sidebar and OpenAI training models (@rachelmetz / Bloomberg)

https://www.bloomberg.com/news/articles/2023-04-25/openai-offers-new-privacy-options-for-chatgpt
http://www.techmeme.com/230425/p24#a230425p24
https://twitter.com/Techmeme/status/1650911565380743168