THEHACKCITY

     The Department of Telecommunications (DoT) has issued new directives requiring app-based communication platforms to ensure their services cannot be used without an active SIM card. This move follows the introduction of the Telecommunication Cybersecurity Amendment Rules, 2025 , which expand telecom regulations to include a new category called Telecommunication Identifier User Entity (TIUE) . Under these amended rules, TIUEs must meet several cybersecurity requirements. One major requirement is the mandatory use of a Mobile Number Validation (MNV) Platform to verify users linked to a mobile number. Additionally, the government now has the authority to instruct TIUEs to stop using specific telecom identifiers for user verification or service delivery if needed. Why these rules matter When the TIUE framework was first proposed, experts raised concerns that the definition was too broad. Because TIUE includes any organisation that uses mobile numbers to identify or se...

In a recent ruling, the Supreme Court of Canada affirmed the significance of privacy rights concerning internet addresses. The court declared that police cannot simply obtain a suspect’s IP address without a court order, emphasizing the expectation of privacy that Canadian residents hold for such information. The court's decision stemmed from a case in 2017 involving Calgary police investigating fraudulent online activities at a liquor store. Initially, police demanded IP addresses from a credit card processor, which eventually led to obtaining subscriber information from Telus. This information was pivotal in making arrests and securing convictions in multiple offenses. Despite previous convictions, the accused contested the legality of obtaining IP addresses without proper authorization. The Supreme Court, in a 5-4 decision, asserted that IP addresses carry a reasonable expectation of privacy, necessitating judicial approval before access. The ruling emphasizes that obtaining jud...

In September 2023, WordPress.com quietly updated a developer page about accessing a "Firehose" of around a million daily WordPress posts, clarifying that these feeds are intended for search engines, AI products, and market intelligence providers. This change, which was not previously noted, has sparked discussion, especially after revelations that Automattic, the owner of WordPress.com and Tumblr, plans to share user data with OpenAI and Midjourney. The recent buzz surrounds questions about which WordPress blogs are included, data retroactivity for opt-outs, and the lack of transparency from Automattic. This company has been selling access to post data for years, including through the Jetpack plugin, but has recently announced exclusions for select AI partners. Automattic's deals with OpenAI and Midjourney are particularly contentious as they aim to enhance generative AI tools. This data sharing, facilitated by partners like SocialGist and DataStreamer, offers insights in...

Signal, the encrypted messaging service, is launching a new feature in the coming weeks: support for usernames. This beta feature allows users to establish unique usernames, enabling connections without divulging phone numbers. source: Signal Blog To create a username, navigate to your settings and select "Profile." Once you've chosen a unique username, generate a QR code or link to share with others. Recipients can connect by entering your username into the chat bar. Usernames can be changed at any time, though previous usernames may be claimed by others. Signal began testing usernames last fall. Unlike social media platforms, Signal usernames do not serve as logins or public handles. They offer a discreet means of communication without revealing personal phone numbers. While a phone number is required to register for Signal, sharing it is optional. Usernames remain private and do not appear on profiles or in chats unless shared explicitly. As Randall Sarafa, Signal'...

  WhatsApp's locked chat feature adds an extra layer of privacy by letting users protect their personal conversations with a PIN or fingerprint. Even though WhatsApp already encrypts messages end-to-end, some users want more security for certain chats. Right now, locked chats only work on mobile devices. If you use WhatsApp on a web browser, those locked chats can be seen by anyone. WhatsApp has mentioned that locked chats don't work on desktops, but not everyone might have noticed. If you go to your account settings and scroll down, WhatsApp tells you that the chat is locked on your phone, which happens when you enable chat lock on Android or iPhone. The good news is that WhatsApp is testing locked chats for the web version, so it might be available to everyone soon.

WhatsApp on iPhone to Get Secure Passkey Login Soon WhatsApp is finally bringing** passkey support **to iPhones! This means you'll soon be able to ditch weak passwords and log in using secure face or fingerprint biometrics instead. This news comes after Android users enjoyed this feature for some time, and reports suggest it's on the way to iPhones with the upcoming iOS 17 update. What are Passkeys? Passkeys are a new, more secure way to log in to online accounts. Developed by Apple, Google, and Microsoft, they eliminate the need for traditional passwords and offer improved security against phishing and hacking. How Will It Work on iPhones? With the new update, you'll be able to set up a passkey for WhatsApp during installation or when reinstalling the app. Simply use Face ID or Touch ID to confirm, and you're good to go! Benefits of Passkeys: Enhanced Security: Say goodbye to remembering complex passwords and the risks of phishing attacks. Convenie...