Skip to main content
Electronic Frontier Foundation

Related Content: threat lab

Related Content: threat lab

Place icons dropping down onto a virtual city road map
Deeplinks Blog by Bill Budington | November 8, 2024

Creators of This Police Location Tracking Tool Aren't Vetting Buyers. Here's How To Protect Yourself

Now more than ever, attorneys general in states hostile to reproductive choice will be emboldened to use every tool at their disposal to incriminate those exerting their bodily autonomy. Locate X is a powerful tool they can use to do this. So here are some timely tips to help protect...
Spearphishing
Deeplinks Blog by Cooper Quintin | September 27, 2024

New Email Scam Includes Pictures of Your House. Don’t Fall For It.

You may have arrived at this post because you received an email with an attached PDF from a purported hacker who is demanding payment or else they will send compromising information—such as pictures sexual in nature—to all your friends and family. You’re searching for what to do in this frightening...

Flipper Zero on orange bg
Deeplinks Blog by Bill Budington, Alexis Hancock | March 28, 2024

Restricting Flipper is a Zero Accountability Approach to Security: Canadian Government Response to Car Hacking

On February 8, François-Philippe Champagne, the Canadian Minister of Innovation, Science and Industry, announced Canada would ban devices used in keyless car theft. The only device mentioned by name was the Flipper Zero—the multitool device that can be used to test, explore, and debug different wireless...

2023 Year in Review (text animated to change colors)
Deeplinks Blog by Bill Budington, Alexis Hancock | December 23, 2023

Sketchy and Dangerous Android Children’s Tablets and TV Set-Top Boxes: 2023 in Review

In a series of investigations this year, EFF researchers confirmed the existence of dangerous malware on set-top boxes manufactured by AllWinner and RockChip, and discovered sketchyware on a tablet marketed for kids from the manufacturer Dragon Touch.
malware-shark
Deeplinks Blog by Alexis Hancock | November 14, 2023

Low Budget Should Not Mean High Risk: Kids' Tablet Came Preloaded with Sketchyware

[Update: 10/02/2024]: Google has taken the tablet distributor Dragon Touch, off of their list of Play Protect certified phones and tablets. We are glad to see this development and encourage continued diligence in updating this list to keep consumers safe and make informed decisions with Android...

Security
Press Release | November 14, 2023

EFF Urges FTC to Address American Resellers of Malware on Android TV Set-Top Boxes

SAN FRANCISCO—The Federal Trade Commission (FTC) must act to halt sales by Amazon, AliExpress, and other resellers of Android television set-top boxes and mobile devices manufactured by AllWinner and RockChip that have been pre-infected with malware before ever reaching consumers, the Electronic Frontier Foundation (EFF) urged Tuesday in ...

EU-flag-circuits
Deeplinks Blog by Bill Budington, Eva Galperin | October 3, 2023

EFF And Other Experts Join in Pointing Out Pitfalls of Proposed EU Cyber-Resilience Act

Today we join a set of 56 experts from organizations such as Google, Panasonic, Citizen Lab, Trend Micro and many others in an open letter calling on the European Commission, European Parliament, and Spain’s Ministry of Economic Affairs and Digital Transformation to reconsider the obligatory vulnerability reporting mechanisms built...

Deeplinks Blog by Cooper Quintin | September 13, 2023

Apple and Google Are Introducing New Ways to Defeat Cell Site Simulators, But Is it Enough?

Cell-site simulators (CSS)—also known as IMSI Catchers and Stingrays—are a tool that law enforcement and governments use to track the location of phones, intercept or disrupt communications, spy on foreign governments, or even install malware. Cell-site simulators are also used by criminals to send spam and engage...

China Spying
Deeplinks Blog by Bill Budington | August 21, 2023

Vulnerability in Tencent’s Sogou Chinese Keyboard Can Leak Text Input in Real-Time

Security researchers at Citizen Lab discovered a number of cryptographic vulnerabilities in the Sogou Input Method keyboard software made by Tencent, the most popular input method in China. These vulnerabilities allow adversaries with a privileged network position (such as an ISP or anyone with access to upstream routers) to...

Pages

Back to top

JavaScript license information