❌

Normal view

Received — 23 April 2026 ⏭

Claude Desktop changes app access settings for browsers you don't even have installed yet

✇The Register – Security
By: Thomas Claburn
20 April 2026 at 21:56

Installation and pre-approval without consent looks dubious under EU law

One app should not modify another app without asking for and receiving your explicit consent. Yet Anthropic's Claude Desktop for macOS installs files that affect other vendors' applications without disclosure, even before those applications have been installed, and authorizes browser extensions without consent.…

Google Chrome lacks protection against one of the most basic and common ways to track users online

✇The Register – Security
By: Thomas Claburn
16 April 2026 at 02:28

Browser fingerprinting is everywhere

Google markets its Chrome browser by citing its superior safety features, but according to privacy consultant Alexander Hanff, Chrome does not protect against browser fingerprinting – a method of tracking people online by capturing technical details about their browser.…

Received — 25 March 2026 ⏭

Cryptographers engage in war of words over RustSec bug reports and subsequent ban

✇The Register – Security
By: Thomas Claburn
20 March 2026 at 22:07

Rust security maintainers contend Nadim Kobeissi's vulnerability claims are too much

Updated  Since February, cryptographer Nadim Kobeissi has been trying to get code fixes applied to Rust cryptography libraries to address what he says are critical bugs. For his efforts, he's been dismissed, ignored, and banned from Rust security channels.…

Google gives Android users a way to install unverified apps if they prove they really, really want to

✇The Register – Security
By: Thomas Claburn
19 March 2026 at 19:30

Chocolate Factory describes concession as an attempt to balance openess with safety

It turns out you won't be limited to Google-verified apps and developers on Android after all. In the face of sustained community dissatisfaction with its developer verification requirement, Google has given Android users an out.…

Received — 16 March 2026 ⏭
Received — 12 March 2026 ⏭
Received — 12 February 2026 ⏭
Received — 6 February 2026 ⏭
Received — 3 February 2026 ⏭
Received — 1 February 2026 ⏭

Java developers want container security, just not the job that comes with it

✇The Register – Security
By: Thomas Claburn
30 January 2026 at 01:12

BellSoft survey finds 48% prefer pre‑hardened images over managing vulnerabilities themselves

Java developers still struggle to secure containers, with nearly half (48 percent) saying they'd rather delegate security to providers of hardened containers than worry about making their own container security decisions.…

Received — 24 January 2026 ⏭
Received — 16 January 2026 ⏭

Flipping one bit leaves AMD CPUs open to VM vuln

✇The Register – Security
By: Thomas Claburn
15 January 2026 at 22:11

Fix landed in July, but OEM firmware updates are required

If you use virtual machines, there's reason to feel less-than-Zen about AMD's CPUs. Computer scientists affiliated with the CISPA Helmholtz Center for Information Security in Germany have found a vulnerability in AMD CPUs that exposes secrets in its secure virtualization environment.…

Received — 11 January 2026 ⏭
❌