Notices by The New Oil (thenewoil@freeradical.zone), page 7

Firmware bugs in many HP computer models left unfixed for over a year

https://www.bleepingcomputer.com/news/security/firmware-bugs-in-many-hp-computer-models-left-unfixed-for-over-a-year/

EU: Police plans for the “future of travel” are for “a future with even more surveillance”

https://www.statewatch.org/news/2022/august/eu-police-plans-for-the-future-of-travel-are-for-a-future-with-even-more-surveillance/

New Linux malware combines unusual stealth with a full suite of capabilities

https://arstechnica.com/information-technology/2022/09/new-linux-malware-combines-unusual-stealth-with-a-full-suite-of-capabilities/

Intel calls its AI that detects student emotions a teaching tool. Others call it 'morally reprehensible.'

https://www.protocol.com/enterprise/emotion-ai-school-intel-edutech

uBlock Origin Minus: an experimental Manifest v3 compatible extension

https://www.ghacks.net/2022/09/09/ublock-origin-minus-an-experimental-manifest-v3-compatible-extension/

Responsible Disclosure for Cryptocurrency Security

https://www.schneier.com/blog/archives/2022/09/responsible-disclosure-for-cryptocurrency-security.html

Lampion malware returns in phishing attacks abusing WeTransfer

https://www.bleepingcomputer.com/news/security/lampion-malware-returns-in-phishing-attacks-abusing-wetransfer/

Six-year-old blind SSRF vulnerability in WordPress Core feature could enable DDoS attacks

https://portswigger.net/daily-swig/six-year-old-blind-ssrf-vulnerability-in-wordpress-core-feature-could-enable-ddos-attacks

New Signal CEO hopes to roll out useranmes by early 2023

https://community.signalusers.org/t/usernames-in-signal/9157/624

"After self-hosting my email for twenty-three years I have thrown in the towel. The oligopoly has won."

https://cfenollosa.com/blog/after-self-hosting-my-email-for-twenty-three-years-i-have-thrown-in-the-towel-the-oligopoly-has-won.html

@ChrisWere Truthfully I was on the fence about sharing it, but I don't think it's entirely sensational. We've seen Microsoft and Crunchyroll both refuse Tutanota, in one case without a valid reason and in another without any reason at all. And I think his arguments about how Big Tech is trying to edge out self-hosting are legitimate. I wouldn't recommend anyone self host email, but I think it should be an option for everyone. How long before they start edging out Proton?

Cisco won’t fix authentication bypass zero-day in EoL routers

https://www.bleepingcomputer.com/news/security/cisco-won-t-fix-authentication-bypass-zero-day-in-eol-routers/

HP fixes severe bug in pre-installed Support Assistant tool

https://www.bleepingcomputer.com/news/security/hp-fixes-severe-bug-in-pre-installed-support-assistant-tool/

New wave of data-destroying ransomware attacks hits QNAP NAS devices

https://arstechnica.com/information-technology/2022/09/new-wave-of-data-destroying-ransomware-attacks-hits-qnap-nas-devices/

August 2022 Changelog

https://www.reddit.com/r/thenewoil/comments/x8lhzl/august_2022_changelog/

200,000 North Face accounts hacked in credential stuffing attack

https://www.bleepingcomputer.com/news/security/200-000-north-face-accounts-hacked-in-credential-stuffing-attack/

Smart wearables: Are they smart enough to protect your data?

https://adguard.com/en/blog/smart-wearables-iot-security.html

Facebook Engineers Admit They Don’t Know What They Do With Your Data

https://www.vice.com/en/article/qjk3wb/facebook-engineers-admit-they-dont-know-what-they-do-with-your-data

I'm Enabling YouTube Monetization, Here's Why...

PeerTube: https://apertatube.net/w/dELXeyZPCK8KWBuFZcddkN
Odysee: https://odysee.com/@thenewoil:7/i'm-enabling-youtube-monetization,:f
YouTube: https://www.youtube.com/watch?v=rC9c5RS4-aQ

Exposed Redis Commander: The Biggest Contributor to Database Leakage

https://blog.criminalip.io/2022/09/06/redis-database-leaks/