What your Oura ring won't tell you
MentionsGitHub
Runs 53:06. Streams from op3.dev only when you press play.
CISA, the US government agency whose entire job is keeping America's critical infrastructure safe from hackers, has had a contractor publish dozens of plain-text credentials to a public GitHub profile. Meanwhile, your Oura ring is quietly transmitting some of its data unencrypted - and when one journalist asked the company how often it hands user data to law enforcement, the answer was quite telling.
Show notes from Smashing Security.
Explained
The technology and terms in this story. Learn more
- AttackDDoS · Distributed denial of serviceFlooding a service with traffic from many machines until it can't respond.
- AttackBotnetA network of hijacked devices that an attacker controls remotely, often routers and cameras.
- ConceptCISA · Cybersecurity and Infrastructure Security AgencyThe US government's cybersecurity agency, which issues alerts and runs the KEV catalog.