Topics discussed include DNS leaks on Android VPN apps, UK banning bad default IoT passwords, a new FOSS authenticator, recent data breaches, a database leak in Utah, an extortion case in Finland, tech news roundup on healthcare breaches and AI in schools, new authenticator apps, and System D's Run Zero announcement.
Android VPNs can leak DNS traffic due to configuration issues, affecting user privacy.
The UK banned weak default passwords for IoT devices to improve cybersecurity and accountability.
Deep dives
Mulvad Discovers DNS Leaks on Android VPNs
Mulvad identified DNS leaks on Android VPNs, specifying scenarios where DNS traffic can leak even with an active VPN but without DNS server configured or during VPN app reconfigurations. The issue is related to the direct calls to Get ADDR info function. They reported the problem to Google and plan to introduce a temporary solution.
UK Bans Bad IoT Passwords
The UK enforced a ban on weak default passwords for IoT devices to enhance security. The Product Security and Telecommunications Infrastructure Act prohibits easily guessed passwords like 'admin12345'. Manufacturers must disclose security update durations and face penalties for non-compliance, promoting better cybersecurity practices.
Bitwarden Releases New Authenticator App
Bitwarden introduced a new authenticator app for generating and storing time-based one-time passwords, enhancing user verification. The app is available for all users, not just Bitwarden customers, with a focus on enterprise features. Bitwarden's app offers additional security layers for authentication and is compatible with both Android and iOS devices.