- Representing one of the biggest known data security lapses of the year by scale, second to a massive data leak of 1 billion records from a Shanghai police database in June.
- Exposed data belongs to a tech company called Xinai Electronics.
- The company builds systems for controlling access for people and vehicles to workplaces, schools, construction sites, and parking garages across China. Its website touts its use of facial recognition for a range of purposes beyond building access, including personnel management, like payroll, monitoring employee attendance and performance, while its cloud-based vehicle license plate recognition system allows drivers to pay for parking in unattended garages that are managed by staff remotely.
- Security researcher Anurag Sen found the company’s exposed database on an Alibaba-hosted server in China.
- The database included links to high-resolution photos of faces, including construction workers entering building sites and office visitors checking in, and other personal information, such as the person’s name, age and sex, along with resident ID numbers, which are China’s answer to national identity cards. The database also had records of vehicle license plates collected by Xinai cameras in parking garages, driveways and other office entry points.
- Neither the database nor the hosted image files were protected by passwords and could be accessed from the web browser by anyone who knew where to look.
Alexey Pertsev, a Tornado Cash developer arrested in August by Dutch authorities over allegations of facilitating money laundering, is to stay in jail for at least another two months after his appeal was rejected.
We are supporting USDC with an eye on a number of use cases that make it easy for developers to build on top of Block’s tbDEX protocol and its Web5 decentralized identity platform.
This quarterly free magazine in PDF format allows you to digest all of the information on your time in polished written form. Possessing your own PDF copy of each issue allows offline reading without distraction and easy archiving.