Hello and welcome to the Wednesday, April 3, 2024 edition of the Sandsenet Storms on a Stormcast. My name is Johannes Ulrich and I'm recording from Jacksonville, Florida.

Yesterday, I promised a presentation by Boyan about some of his reverse engineering efforts with the XC Utils backdoor. This is now

scheduled to be broadcast on Thursday, 10 a.m. Eastern. There will be links in the show notes,

also links on the United Storm Center website. They may at first link to his blog post until we got all the locations that worked

out for the actual presentation. It will be part of the Wait Justin Infosec podcast that

Stephen Hart publishes four cents.

And if you're a user of Google Chrome, you may be interested in some of the details that came to light about Google's Chrome's incognito mode. There was a lawsuit that was

just settled with Google, and essentially, the way I sort of think Google thinks about privacy is that as incognito mode is protecting your privacy, it's really protecting you from websites you are visiting.

It's not protecting you from Google itself.

So even in incognito mode, the browser, Google Chrome here, did still report back to Google

what websites you were visiting, was reporting back content you were looking at, and that

data was collected by Google.

Earlier this year, they actually introduced a banner as you enable incognito mode that

explains a little bit what's going on here.

Data collected before the banner was implemented is apparently now being deleted as part

of the settlement.

I'll link to an article by Vired that explains a little bit more in detail what exactly

happened here.

And let's stick with Google here and the next story is about Google Gmail.

And I think that's an issue that I have talked about in the past, but a good reminder about

it here because things are changing now in April

with Gmail. The ultimate problem here is that, of course, companies like Google with Gmail are

...