Recentemente, un attore malevolo ha dichiarato di aver reso pubblici un milione di record di dati estratti da Google, creando un notevole allarme sulla sicurezza dei dati personali.

L’informazione è apparsa su un forum online, in un post datato 15 luglio 2024. L’utente “Hana” ha pubblicato un thread intitolato “Google – 1 Million Scrape – Leaked, Download!“, fornendo dettagli su questa presunta fuga di dati.

Contenuto della Fuga di Dati

La fuga di dati è suddivisa in due parti distinte, contenenti diverse tipologie di informazioni:

1. Prima Parte: Recensioni
   
   • Numero di Linee: 1,453,846
   • Informazioni Contenute:
     
     • Valutazione (Rating)
     • Nome del Recensore (ReviewerName)
     • Testo della Recensione (ReviewText)
     • Categorie (Categories)
     • ID Luogo di Google Plus (gPlusPlaceId)
     • Tempo della Recensione in formato Unix (unixReviewTime)
     • Tempo della Recensione (review time)
     • ID Utente di Google Plus (gPlusUserid)

     
     

   
   

2. Seconda Parte: Utenti
   
   • Numero di Linee: 3,747,938
   • Informazioni Contenute:
     
     • Nome (Name)
     • Lavori (Jobs)
     • Luogo Attuale (CurrentPlace)
     • Luoghi Precedenti (PreviousPlaces)
     • Istruzione (Education)
     • ID Utente di Google Plus (gPlusUserid)

     
     

   
   

Implicazioni e Rischi

La fuga di dati descritta comprende una quantità significativa di informazioni personali e recensioni, potenzialmente sensibili. La divulgazione di tali dati può portare a gravi conseguenze per la privacy e la sicurezza delle persone coinvolte. I dati sulle recensioni potrebbero essere utilizzati per analisi di mercato non autorizzate, mentre le informazioni sugli utenti possono essere sfruttate per attività di phishing, furti di identità e altri crimini informatici.

Conferma e Affidabilità della Fonte

Al momento, non possiamo confermare con precisione la veridicità della violazione, poiché l’organizzazione non ha ancora rilasciato alcun comunicato stampa ufficiale sul proprio sito web riguardo l’incidente. Pertanto, questo articolo dovrebbe essere considerato come una ‘fonte di intelligence’ piuttosto che una conferma definitiva della fuga di dati.

Conclusione

La dichiarazione di una fuga di dati di tale entità da parte di Google, se confermata, rappresenta una seria minaccia per la sicurezza e la privacy degli utenti. È essenziale che le aziende e gli individui adottino misure proattive per proteggere le proprie informazioni personali e minimizzare i rischi associati a tali violazioni di dati. Google e altre piattaforme dovranno intensificare gli sforzi per garantire la sicurezza dei dati e prevenire future fughe di informazioni.

Come nostra consuetudine, lasciamo sempre spazio ad una dichiarazione da parte dell’azienda qualora voglia darci degli aggiornamenti sulla vicenda. Saremo lieti di pubblicare tali informazioni con uno specifico articolo dando risalto alla questione.

RHC monitorerà l’evoluzione della vicenda in modo da pubblicare ulteriori news sul blog, qualora ci fossero novità sostanziali. Qualora ci siano persone informate sui fatti che volessero fornire informazioni in modo anonimo possono utilizzare la mail crittografata del whistleblower.

L'articolo Un Threat Actors pubblica 1 Milione di Record di Google nelle underground proviene da il blog della sicurezza informatica.

When you ask a Hackaday crowd to design a business card, you should expect to be surprised by what you get. But still, we were surprised by the breadth of entries! Our judges wracked their brains to pick their top ten, and then we compared notes, and three projects rose to the top, but honestly the top ten could have all won. It was a tight field. But only three of the entries get to take home the $150 DigiKey gift certificates, so without further ado…

Blinkencard – Pocket Altair 8800

[ajlitt] built a full retrocomputer, and a slick looking one to boot, in the size of a business card. Of course, you could run an Altair 8800 emulator on your cell phone, but without the entry buttons and real-live blinkenlights, it just wouldn’t be the same. What our judges loved most about this build was the use of an FPGA and and ESP32, for IO and storage, the reverse-mounted front PCB that doubles as a faceplate, and of course the nice 3DP bezel that hides the bodge wires from view.

BetaBoard – Tiny Particle Physics Lab

So you might have thought someone would put a retrocomputer on a business card, but a working radiation detector was not on our radar. [Tim – DJ8TK]’s entry makes use of not one, but six BPW34 PIN photodiodes, which have the benefit of being well studied in the hacker radiation detection scene. This project took a ton of design work, and our judges thought that the documentation along the way were as good as any physics lecture.

Brushless Motor and Driver Business Card Kit

And speaking of educational business card demos, [Andy Geppert]’s motor driver card not only teaches you how to wind your own coils and make a simple stepper motor, but also how to drive it. While [Andy] admits that the stepper motor design could use a few more poles for smooth operation, he also broke out the coil driver so that you can experiment by driving more professional brushless DC motors if you have them on hand. It’s a great demo, and being in a business card form factor, you can always have one on hand.

Honorable Mentions

As always, we have more awesome projects than we have prizes, so we thought we’d call out some standouts.

• Wafer Thin: [Chinchilla Optional] wowed us with this amazing dead-bug style QR code made out of LEDs. You know the card is thin when the LEDs are the thickest part. [erich.styger] contributed these RFID tag cards, beautifully laser-etched and made of 1 mm thick veneer. And bridging the Utility and Wafer Thin categories, [Maave]’s credit-card sized door entry tool needs to be thin if it’s going to work. Get this cut out of thin steel, and you’ll never get locked out again.
• Aesthetics: [BLANCHARD Jordan]’s Weather Card is cool on many fronts, but the resulting circuit sculpture combining the solar panel and the e-paper really won over our judges eyes with its understated form-follows-function beauty. On the opposite end of the spectrum, [Will Fox]’s Foxie CardClock 2.0 goes overboard with the color LEDs, and it looks awesome.

• Madman Muntz: Earl “Madman” Muntz was famous for cutting corners by removing parts until the thing broke, and we had a couple standout ultra-minimalist entries. [Adam Billingsley]’s CH32V003 Business Card targeted a $1 price tag, and this USB-capable, capacitive-touch card pulls out all the stops to get at least in the ballpark. Amazing. [Lincoln Uehara] cut corners by getting rid of the PCB entirely, and this makes his Back-to-basics paper business card friendly for younger builders too.
• Fun and Games: A business card with a working 4×4 tic-tac-toe game? [Esc]’s entry does double duty as a game and PCB design tutorial. Whether or not you should base your choice of a partner on skin resistance alone, [Un Kyu Lee]’s Doctor Love is a hilarious device, and background story. And finally, [Eontronics]’s RetroMedleyCard is an ambitious project to bring game emulation to your wallet. This project is insane, and it’s one to watch!
• Utilitarian: Our last category showcases useful cards of all sorts. From [Peter]’s Pi Pico MSP430 Debug Probe and programmable 4th Calculator to [Gangwa Labs]’s reflow hotplate (!), there’s no shortage of function that you can pack into your pockets.

Thanks to Everyone!

As always, we had more awesome entries than we have space to feature. You should go check out all the entries over on Hackaday.io. And thanks again to DigiKey for sponsoring these with prizes.

Top of the air data computer module, with pressure sensors, RS232 driver and DC-DC converter visible. (Credit: Le Labo de Michel, YouTube)
An air data computer (ADC) is a crucial part of an avionics package that can calculate the altitude, vertical speed, air speed and more from pressure (via pitot tubes) and temperature inputs. When your airplane is a one-way attack drone like Iran’s Shahed-136, you obviously need an ADC as well, but have to focus on making it both cheap and circumvent a myriad of sanctions. As [Michel] recently found out while reverse-engineering one of these ADCs. Courtesy of the Russo-Ukrainian war, hundreds of these Shahed drones are being destroyed every month, with some making it back down again intact enough for some parts to end up on EBay.

The overall design as captured in the schematic is rather straightforward, with the component choice probably being the most notable, as it uses an STM32G071 MCU and Analog Devices ADM3232 RS-232 driver, in addition to the two pressure sensors (by Silicon Microstructures Inc., now owned by TE). The DC-DC converter is a Mornsun URB24055-6WR3.

With the board in working condition, [Michel] hooks it up to a test setup to see the output on the serial interface when applying different pressures to the pressure sensor inputs. This results in a lot of ASCII data being output, all containing different values that were calculated by the firmware on the STM32 MCU. In the drone this data would then be used by the flight computer to make adjustments. Overall it’s a rather basic design that doesn’t seem to have a dedicated temperature sensor either, though [Michel] is still analyzing some details. A firmware dump would of course be rather fascinating as well.

youtube.com/embed/PI8aGYTlvJQ?…

Lockpicking is a grand skill to have, and one that’s often presumed to be one of the dark arts of the burglar. However, a new technique has come to the fore in some European contexts. It appears nitric acid is being used to damage locks to allow criminals to gain entry into residential premises.

Germany’s Bildhas covered this matter, as has Feuerwehr Magazine. The technique has apparently come to prominence in the last couple of years. Attackers pour the corrosive liquid into the keyway of a typical door lock. This damages the cylinder, and perhaps the pins inside as well. Once the metal has been eaten away and the structure of the lock is sufficiently degraded, it can presumably be forced open quite easily with hand tools. The technique is apparently especially effective in Germany, where locks are typically installed with the pins facing down. This makes it easy for any liquid trickled into the lock to eat away at the pins in the bottom.

German authorities advised people to be on the look out for discoloration around door locks. If seen, it’s important to avoid contact with any corrosive liquid that may have been used on the lock.

It’s a nasty technique that doesn’t just damage locks, but doors as well! Meanwhile, if you’re learning the art of lockpicking, just remember not to practice on any important locks you might actually need. More pictures after the break.

Wow new lockpicking meta just dropped? Nitric acidt.co/rWHabR3HuY t.co/O95nTlEOdd pic.twitter.com/EVFWFwGLlQ

— SwiftOnSecurity (@SwiftOnSecurity) July 14, 2024

They say Rome wasn’t built in a day, but this great little music-controlling macro pad by [nibbler] actually was. Why? Because as Hackaday’s own [Donald Papp] reminded us, we all need a win sometimes, especially as projects drag on and on without any end in sight.

Image by [nibbler] via Toxic AntidoteAs [nibbler] points out, what really constitutes a win? Set the bar too low and it won’t feel like one at all. Too high, and you may become too discouraged to cross the finish line. With that in mind, [nibbler] set the bar differently, limiting themselves to what could be done in the one day per week they have to devote time to electronic matters.

One-day turnaround usually means using parts on hand and limiting oneself to already-learned skills and techniques. No problem for [nibbler], who, armed with an Arduino Leonardo Tiny and a some colorful push buttons, set about designing a suitable enclosure, and then putting it all together. Was this a win? [nibbler] says yes, and so do I.

Keycaps To Dye For

Image by [Nosp1] via redditWhen I saw [Nosp1]’s reddit post about dyeing their Moonlander keycaps, I remembered I was going to do that myself one of these days. While I was planning to use good ol’ Rit dye, [Nosp1] pointed to a video they watched that uses something called iDye Poly. Irritating name aside, this stuff looks like it does a fine job of dyeing keycaps evenly and vibrantly.

It’s important that you realize there is both iDye and iDye Poly out there, and the latter is what you want. The difference is mainly in the extra lump of stuff which is dubbed the color intensifier. You will also want a PBT keycaps for sure, not ABS, and a big strainer if you want to dye them more like Easter eggs.

Once you’ve gathered a pot to dye them in and some water, just turn up the heat to a simmer and stir in the iDye gunk until it dissolves. Throw in the keycaps, wait 10-15 minutes, and then rinse them off and let them dry and Bob’s your proverbial uncle. The chap in the video below only did a handful of caps, which looks pretty snazzy.

youtube.com/embed/rHV-c6XeN-o?…

The Centerfold: Six Sides of Miss Fifi

Image by [pascuajr] via redditDespite all the angles presented here (and more here), we don’t know a lot about [pascuajur]’s keyboard, but that’s okay. We do know that it’s a Fifi, which is open source, or you can buy one already made. It’s nice to imagine that those switches are whatever color you want, isn’t it?

Do you rock a sweet set of peripherals on a screamin’ desk pad? Send me a picture along with your handle and all the gory details, and you could be featured here!

Historical Clackers: The Helios Typewriter

Image via Antikey Chop
Some people like their keyboards small, like really small. So small that they end up with more layers than a fancy restaurant dessert. Apparently this has pretty much always been the case, as evidenced by the Helios typewriter introduced in 1908.

With just two rows of ten keys each, Justin Wilhelm Bamberger & Co.’s machine could output 80 characters total, thanks to a four-tier, cast-aluminium typewheel and three shift keys located to the left of the keyboard. You can get a closer look here, on a late model of the typewriter.

Operation looked like this: whenever a key was pressed, the typewheel would spin and move forward to strike the paper. Not a whole lot seems to be known about these little machines. By 1909, production had been taken over by the Kanzler typewriter factory in Berlin. Both companies eventually dissolved, and by 1915, the rights were acquired by A. Ney & Co. who renamed it the Helios-Klimax.

Via reddit

ICYMI: ErgO, Computer Interactions Can Be Comfortable

Image by [Sophia] via Hackaday.IOOkay, so this is not a keyboard. But it’s definitely an input of interest. ErgO is a smart ring that acts as an HID to extend your keyboard and mouse with something much, much cooler. No longer will you be tied to the home row. Imagine sitting or standing in any position you want, controlling your computer with ease.

ErgO is built out of breakout boards, so it’s simple to recreate. It has a lot of features that you don’t get with standard equipment, like ultra portability and device-switching capability.

At the heart of this ring is the Seeed Xiao nRF52840, which of course controls Bluetooth communication with your computer. Add to that a clickable Pimoroni trackball and some capacitive touch sensors, and you have a really capable smart ring that should be fairly easy to build or remix thanks to [Sophia]’s detailed instructions.

Got a hot tip that has like, anything to do with keyboards? Help me out by sending in a link or two. Don’t want all the Hackaday scribes to see it? Feel free to email me directly.