Reality Winner, N.S.A. Contractor, Sentenced to 5+ Years in Leak Case

A former NSA contractor, Reality L. Winner, has plead guilty on charges of leaking classified information, regarding a report on election meddling by Russian operatives in the 2016 U.S. elections. She was charged with espionage and was sentenced to more than five years in prison and three years o...

reality-leuchten.de XSS vulnerability

Open Bug Bounty ID: OBB-607309 Description| Value ---|--- Affected Website:| reality-leuchten.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

March 13, 2018—KB4088776 (OS Build 16299.309)

None None...

March 5, 2018—KB4090913 (OS Build 16299.251)

None None...

Human Factor Podcast: Jenny Radcliffe and Chris Boyd

A little while ago, I was invited to take part in Jenny Radcliffe's Human Factor Podcast. With 44 episodes strong and counting!, Jenny spends an hour or so talking at length with her guests who are professional investigators, security advocates, all-round educators, tireless consultant/conference...

reality-cheb.cz XSS vulnerability

Open Bug Bounty ID: OBB-553150 Description| Value ---|--- Affected Website:| reality-cheb.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Plugging a virtual leak: insecure VR app exposes customer data

I've been giving talks on the possible problems raised by virtual/augmented/mixed reality for a while now, and sure enough, we have what may be one of the first potentially major security issues thrown up by an in-the-wild application. Until a recent fix was applied, users of the pornography app...

reality.pro XSS vulnerability

Open Bug Bounty ID: OBB-530990 Description| Value ---|--- Affected Website:| reality.pro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Virtual Reality (VR) Porn App Exposed Personal Data of 20k Users

By Waqas Virtual Reality apps can be fun to use but they This is a post from HackRead.com Read the original post: Virtual Reality VR Porn App Exposed Personal Data of 20k Users...

Profile of Reality Winner

New York Magazine published an excellent profile of the single-document leaker Reality Winner...

Augmented Reality games and real-world trolling

Augmented Reality games—where you wave a device around and the digital collides with reality— have been booming in popularity ever since Pokemon GO! rolled into mobile storefronts. However, many AR games haven't really been designed with the possible consequences of real-world safety in mind. Tak...

Fraud Detection in Pokémon Go

I play Pokémon Go. There, I've admitted it. One of the interesting aspects of the game I've been watching is how the game's publisher, Niantic, deals with cheaters. There are three basic types of cheating in Pokémon Go. The first is botting, where a computer plays the game instead of a person. Th...

Today’s Predictions for Tomorrow’s Internet

Making predictions is a tricky business and in no area more so than in the area of rapidly developing technology. The pace of change continues to accelerate and the nature of innovation is such that entrepreneurs, as well as criminals are continually searching for “the next big thing” to either...

The grugq on Reality Winner, the Intercept, and OPSEC

Good commentary...

FBI Arrests NSA Contractor for Leaking Secrets – Here's How they Caught Her

The FBI arrested a 25-year-old NSA contractor on Saturday 3rd June for leaking classified information to an online news outlet which published its report yesterday 5th June — meaning the arrest was made two days before the actual disclosure went online. Reality Leigh Winner, who held a top-secret...

pop6AR - Augmented Reality&ADS - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application pop6AR - Augmented Reality&ADS published at the 'play' market has multiple vulnerabilities...

The 'Audience of You' at NAB

It's all about the "audience of you" as Akamai gears up for next week's 2017 NAB Show in Las Vegas. With that phrase, we're talking about helping to deliver the best possible experiences for each and every OTT video viewer. It's not an easy thing to do, but we're demonstrating a host of new...

Android Beats Windows to Become World's Most Popular Operating System

It's an impressive milestone for Google — For the first time in decades, Android has been crowned as the world's most popular operating system in terms of Internet usage, knocking Microsoft Windows off the top spot. According to a new report from web traffic analytics firm StatCounter, Google's...

Mozilla Firefox WebVR Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker can exploit this vulnerability to execute arbitrary code...

gallys.realitykings.com XSS vulnerability

Open Bug Bounty ID: OBB-197565 Description| Value ---|--- Affected Website:| gallys.realitykings.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...