Today in Privacy — Oct 26
Posted by PrivacyWire
- There's a third PHP2Shell bug, but it won't get an emergency fix — A third PHP2Shell bug matters because software vulnerabilities can put systems and private data at risk. The lack of an emergency fix also raises questions… — discuss · link - Abandoned Popcorn Time app exposed millions of devices to RCE attacks — An abandoned app with a vulnerable updater could let attackers run malicious code with elevated privileges on millions of computers. This matters for privacy… — discuss · link - SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs — SPECTER shows that air-gapped PCs may still leak data through USB power controls, phone charging changes, and connected peripherals. This matters because… — discuss · link - Guide to project tracking: Best techniques and tools for tracking projects — Set up powerful project tracking without any project management software. Key metrics, methods, and free tools included. — link - Bias in Qwen3-Coder Model — Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and… — link These stories show how vulnerable software, abandoned update systems, air-gapped devices, and biased coding tools can all undermine privacy and security, while better tracking may help teams manage risks. What weaknesses or unexpected security issues are you seeing in the tools and systems you rely on?