By 2025, Non-human identities (NHIs) will be the prime vector for cyberattacks.

As automation, AI, and IoT grow, so does the attack surface. Attackers exploit NHIs to breach systems before traditional defenses can react.

Discover how NHIDR can proactively detect and stop attacks in their tracks.

Read the full article: https://thehackernews.com/2024/11/nhis-are-future-of-cybersecurity-meet.html

🚨 WATCH OUT! Cybercriminals have unlocked a terrifying new cash-out method, using NFC technology and exploiting Google Pay and Apple Pay to steal funds from your 💳 digital wallet – no phone required.

A new technique called Ghost Tap relays NFC traffic between devices, allowing criminals to cash out in different countries, undetected.

Learn how this attack works: https://thehackernews.com/2024/11/ghost-tap-hackers-exploiting-nfcgate-to.html

notes from the webinar chat, fyi -

Here are a handful critical reports on Signal:

https://blacklistednews.com/article/79127/how-cia-created-signal-messenger.html

https://kitklarenberg.com/p/signal-facing-collapse-after-cia

https://yasha.substack.com/p/signal-is-a-government-op-85e

https://weehingthong.org/2021/01/16/signal-is-a-us-govt-operation-having-been-created-and-fund-by-a-cia-spin-off-is-it-true/

https://city-journal.org/article/signals-katherine-maher-problem

—-
Katherine Maher, head of NPR, is believed by many to be a CIA asset (think Operation Mockingbird). She is also on the board of Signal
—
WhatsApp is owned by Facebook/Meta. Not great
—
There is a service called Optery which deletes your personal data from a lot of data broker sites
—
I would not recommend proton VPN, simply because you have to download the app from Google store.

q. Is Muktivad better than Proton vpn? I definitely found that Proton VPN didn't protect me. I know that the VPN I've used so far haven't worked. Love to learn about the multivad one u recommend


a. In terms of privacy, I'd say yes. But we don't have that many VPN servers yet, honestly. So you can not choose from as many countries with us as with Proton (yet)

https://mullvad.net/en

note: The Proton VPN app can be installed via F-Droid too after some extra hurdles. It has some Anti-features that will hide the app by default.
—
Some apps require Google components to be on the phone, which GrapheneOS does not have by default. These can be added optionally in a sandboxed manner, giving the user control over all permissions. Best to use a separate user profile for this in terms of privacy.Some apps require Google components to be on the phone, which GrapheneOS does not have by default. These can be added optionally in a sandboxed manner, giving the user control over all permissions. Best to use a separate user profile for this in terms of privacy.
—
Using a SIM card to make calls and texts will always make these visible to your carrier.
Learn more here
https://takebackourtech.org/phones-who-can-we-call-on/
—
How about "unplugged" phone? Do their phones have an NSA back door?
—-
https://briarproject.org/
—-
AbovePhone can limit the phone to only use 4G
—-
AbovePhone messaging app (SMS replacement) Cheogram, is primarily for XMPP, yet offers virtual phone number service with JMP.chat too

you get a virtual/internet phone number for $5 / mo.

cheogram.com

https://JMP.chat
—-

Q. It is possible to migrate existing phone numbers into JMP.chat

A. Absolutely
We accept BTC and XMR (and so does JMP.chat
—-
has email, videoconference (Jitsi app), XMP messaging (Cheogram app), OpenStreet map, Freetube, secure applications.

This has been the goal of Microsoft for a long time. PC by subscription everything being done from within the cloud. This would be the biggest nightmare for privacy and security for the individual.

https://www.xda-developers.com/windows-365-link-mini-cloud-pc/

🔒Android 16 DP1 automatically hides some sensitive notifications from the lock screen

I discovered that Android 16 automatically redacts the content of notifications that have OTP codes in them from appearing on the lock screen.

Details + images can be found in this article.

Google has officially launched the Android Switch app and also announced a few improvements to iOS --> Android data transfer process, including:

- A streamlined onboarding process

- 40% faster data transfers when using a cable

- Ability to restore data after setup. Already available on Pixel 9 series but coming to more Android devices in 2025.

- New express setup option that only transfers data stored locally and not in the cloud. Also already available on Pixel 9 series.

- If you have a Pixel Watch, it'll prompt you to transfer data to your new phone at the end of setup.

🗓 Did Google releasing Android 16 DP1 yesterday surprise you?

What if I told you that Google actually planned to release it last Thursday? That’s right, Google originally planned to release Android 16 DP1 on the same week as Android 15 QPR2 Beta 1, but it got delayed. Whew.

GNU Linux-Libre 6.12 Kernel Released for Those Seeking 100% Freedom for Their PCs - 9to5Linux
https://9to5linux.com/gnu-linux-libre-6-12-kernel-released-for-those-seeking-100-freedom-for-their-pcs

💡Android 16 DP1 integrates Extra Dim into the brightness bar

A few months ago, I told you about a new feature that Google was working on called Even Dimmer.

Well, it's actually now live in Android 16 DP1...but only for the Pixel 9 for some reason.

Details can be found in this article.

With Black Friday approaching beware the legal trickery when online shopping.

https://www.maketecheasier.com/legal-tricks-online-sellers-use/

If you're a part of the modding community, you may know what Google did recently about Google Play Integrity.

@alph4 is trying to sue Google via Antitrust and various consumer protection agencies in European Union about the Google Play Integrity.

At the current stage we need people who can leave their testimonials about how Google Play Integrity restricts/ed their daily usage of phone.

If you can help, this is the group (https://t.me/fuckgoogleint), we appreciate your help for this action.