Techlore Surveillance Report

This Attack De-Anonymizes ALL Browsers - SR95

16 snips
Jul 18, 2022
Ask episode
AI Snips
Chapters
Transcript
Episode notes
INSIGHT

Browser De-Anonymization Risk

  • Researchers demonstrated a web-based attack that can de-anonymize users by analyzing subtle browser activity features across major browsers, including Tor.
  • Fixes require browser and hardware changes, so short-term mitigations and cautious browsing are necessary.
ADVICE

Compartmentalize Browsing Sessions

  • Avoid staying logged into accounts and be cautious about links you click on untrusted sites to reduce exposure to web-based fingerprinting attacks.
  • Compartmentalize by using separate browsers for anonymous activities and personal accounts.
INSIGHT

Careless Defaults Cause Big Breaches

  • Poor security practices exposed 23 million MangaToon accounts via an unsecured Elasticsearch database with weak defaults and MD5 hashing.
  • The vendor changed minimal settings and failed to notify users, highlighting negligent breach responses.
Get the Snipd Podcast app to discover more snips from this episode
Get the app