#security

🚨 #Google is collecting phone numbers /SIM from your phone by default now without asking for consent, here is how to disable it

I have a test phone with stock Android (and hence Google services) to test how the apps I develop behave there etc.

The other day I woke up with a notification in that phone, out of the blue Google was telling me they "verified my phone number" basically they stole/collected my phone number from my phone and sent it to their servers without any consent.

I know the trust bar is very low, but even then I didn't expect Google to do this.

Here is how you can disable the collecting of your phone numbers which is on by default:

Go to Settings -> Google -> All services -> Privacy & security -> Phone number verification. See attached screenshot.

Or even better: switch to #GrapheneOS #LineageOS or other #degoogled systems

Please boost and spread with your not-so-techie friends that might be using stock Google phones

EDIT: corrected typo: it is "all services" not "all devices"

#boost #boost4reach #security #privacy #android

I wrote a blog that explains why why the new #curl security policy to not embargo low and medium vulnerabilities is a great idea and other open source projects should adopt this policy

https://opensourcesecurity.io/2026/10-embargo/

#OpenSourceSecurity #vulnerability #embargo #security #opensource

📣 Announcing the immediate availability of:

- PHP 8.2.35
- PHP 8.3.36
- PHP 8.4.27
- PHP 8.5.12

‼️ These address the following critical security issues:

- Remote Code Execution via Out of Memory corruption (CVE-2026-109618)
- Remote Code Execution via Stale Global State (CVE-2026-109619)

📝 https://www.php.net/ChangeLog-8.php
🎁 https://www.php.net/downloads?source=Y
Windows: https://www.php.net/downloads.php?os=windows

Read more: https://www.php.net/archive/2026.php#2026-10-21-5

#PHP #Release #Security #CVE

The PHP #security issue shows once again how much our society relies on mostly volunteer work.

Look at PHP Foundation @thephpf finances:
https://opencollective.com/phpfoundation#category-BUDGET

- Reimbursed $67K on development work this year
- Received: $642,755 last year

Compare these numbers with the amounts companies have made with products & services built upon #PHP. Our digital foundations are built on the backs of #opensource volunteers. Governments & companies need to invest in our common digital infrastructures.

@nextcloud
Thx 🤓

CC @Chaotica
CC @selfhtml

#php2shell #nextcloud #webadmin #serveradmin #security #php

High-severity vulnerability in PHP. No patch yet. It’s coming (see @php). It’s recommended to simply shutdown your PHP applications until the patches land (as it involves remote code execution).

#php #security https://fosstodon.org/@php/117474977977509509

@pluralistic I asked FD if they supported it and they said they did not and that I would have to use an authenticator.

They shouldn’t have locked you out of the account and their security is shit. Bunch of dumbass jobsworths.

And to say it is not secure that alone worries me :/

#firstdirect #bank #banking #opensource #security #grapheneos

Please upgrade certifi in all Python applications to the latest version (2026.10.19) following emSign CA certificate security incident:

https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2

#security #python

October is #CybersecurityAwarenessMonth. Let's spread #Privacy & #Security together. 💪

Let us know what your favourite cybersecurity tool is in the comments.

@firefox @torproject @yubico @duckduckgo @signalapp @bitwarden @ecosia @nextcloud @StartpageSearch @ublockorigin