Adrienne Porter Felt: We reviewed 100 Chrome extensions and found that 27 of the 100 extensions leak all of their privileges to a web or WiFi attacker.
Stevens Le Blond, et al: In this paper, we show how to exploit real-time communication applications to determine the IP address of a targeted user. (This paper was posted by error. It was withdrawn by the author and will be posted again after the termination of a responsible disclosure process.)
Do the authors not realize that "version 1" of the paper is still available for download, only a link away? Jonathan Zdziarski: I canceled the OnStar subscription on my new GMC vehicle today after receiving an email from the company about their new terms and conditions. While most people, I imagine, would hit the delete button when receiving something as exciting as new terms and conditions, being the nerd sort, I decided to have a personal drooling session and read it instead. I'm glad I did. OnStar's latest T&C has some very unsettling updates to it, which include the ability to sell your personal GPS location information, speed, safety belt usage, and other information to third parties, including law enforcement. To add insult to a slap in the face, the company insists they will continue collecting and selling this personal information even after you cancel your service, unless you specifically shut down the data connection to the vehicle after canceling.
Kashmir Hill: Facebook keeps track of every person who has ever poked you. All your pokes are going into a permanent record.
David Kravets: AT&T permanently retains information detailing a phone's movement history via its connections to mobile phone towers while it's traveling.
Jenna Wortham: Facebook still dominates the majority of the time Americans spend on the Web, occupying more than 53 billion minutes each month.
Metafilter Wisdom: If you are not paying for it, you're not the customer; you're the product being sold.
David Kravets: Verizon keeps a list of everyone you've exchanged text messages with for the past year. T-Mobile stores the same data up to five years. It's 18 months for Sprint, and seven years for AT&T.
Adrian Short, on Big Web: When you use a free web service you're the underclass. At best you're a guest. At worst you're a beggar, couchsurfing the web and scavenging for crumbs. The open web of free and independent websites has never looked so weak.
Maya Baratz, head of new products at The Wall Street Journal, on Facebook: It really is kind of like another internet.
Nik Cubrilovic: Even if you are logged out, Facebook still knows and can track every page you visit.
Kashmir Hill: Most of you probably know that Facebook knows a lot about you. But did you know that if you were to print it out, it might take up about 880 pages?
| 
