Notwendige Kontrollen für Flock nach klaren Missbrauchsmustern
Teaser aus der Quelle
Flock Safety, das Netzwerke von automatisierten Kennzeichenlesern und Sicherheitskameras betreibt, steht im Fokus von Debatten über Datenschutz. Obwohl die Technologie zur Aufklärung schwerer Verbrechen beitragen kann, sammelt sie sensible Standortdaten und macht sie über verschiedene Behörden hinweg durchsuchbar. Es ist nun entscheidend, dass Flock Kontrollmechanismen implementiert, um den Zugriff auf Daten auf das für die Aufgabe Notwendige zu beschränken.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei CSO Online lesenMehr zu Fixing
Weitere Advisories
- Ohne Bewertungosv:ECHO-976f-52c3-e76aUpstream can no longer reproduce issue after fixing issue #631 on Jul 30, 2017 (before version 7.0.6 of the package). https://github.com/ImageMagick/ImageMagick/issues/633 https://github.com/ImageMagick/ImageMagick/issues/631
- Ohne Bewertungosv:ECHO-33f2-e5a3-58aeUpstream can no longer reproduce issue after fixing issue #631 on Jul 30, 2017 (before version 7.0.6 of the package). https://github.com/ImageMagick/ImageMagick/issues/633 https://github.com/ImageMagick/ImageMagick/issues/631
- Ohne Bewertungosv:ECHO-d134-92e0-c60bIt's pretty dodgy to consider this not applicable, because the CVE can easily be exploited. The vulnerability is in the function is_safe(), which when given a path with symlinks can claim a path cannot be accessed by another user falsely. The justification mostly boils down to the function not being supposed to be relied on for security, but for safety. In other words it's to make sure the user doesn't do stupid things, not to protect against attackers. There is extra nuance in that the function claims to do some things and not be exhaustive anyway, but it's documentation does not mention it cannot follow symlinks. There is no fix upstream or any intention of fixing it, and the fix would almost certainly be a documentation change. Justification: https://seclists.org/oss-sec/2011/q4/234 Bug report and exploit: https://rt.cpan.org/Public/Bug/Display.html?id=69106 Vulnerable code: https://github.com/Perl/perl5/blob/blead/cpan/File-Temp/lib/File/Temp.pm CVE: https://security-tracker.debian.org/tracker/CVE-2011-4116
- Ohne Bewertungosv:SUSE-SU-2018:0065-1Fixing security issues on OBS toolchain
- Ohne Bewertungosv:SUSE-SU-2017:3253-1Fixing security issues on OBS toolchain
Weitere News-Einträge
- Zero Trust for AI Agents Starts With Fixing Zero VisibilityNewsThe Hacker News
- Begin at the End: How to Enable Agentic RemediationNewsSecurityWeek
- When the patch tsunami meets the maintenance windowNewsCSO Online
- Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged AgentNewsThe Hacker News
- Google fixing Android lock screen bug that lets Gemini send SMS without a PINNewsThe Register — Security
- Why fixing your data architecture matters more than upgrading your detection modelsNewsCSO Online
- Thief posed as Wi-Fi fixing hero, then stole priceless trophyNewsThe Register — Security
- Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ AttackNewsSecurityWeek
ID