Aggregator

三菱電機製GENESIS64およびMC Works64には、インストール時の不適切なファイルアクセス権設定の脆弱性が存在します。

情報通信審議会　総会（第54回）の開催について

「電気通信事業分野における競争状況等の調査及び評価の実施に関する方針（案）」　に対する情報通信行政・郵政行政審議会からの答申

今後発生が想定される首都直下地震発生時の応援職員派遣に係るアクションプラン策定のためのワーキンググループ（第1回）

情報通信行政・郵政行政審議会　電気通信事業部会（第158回）配布資料・議事概要・議事録

This statement can be attributed to EFF Senior Staff Technologist Cooper Quintin

It was recently reported by Jack Poulson on Substack that ICE has reactivated its 2 million dollar contract with Paragon Solutions, a cyber-mercenary and spyware manufacturer. 

The reactivation of the contract between the Department of Homeland Security and Paragon Solutions, a known spyware vendor, is extremely troubling.

This end run around the executive order both ignores the spirit of the rule and does not actually do anything to prevent misuse of Paragon Malware for human rights abuses

Paragon's “Graphite” malware has been implicated in widespread misuse by the Italian government. Researchers at Citizen Lab at the Munk School of Global Affairs at the University of Toronto and with Meta found that it has been used in Italy to spy on journalists and civil society actors, including humanitarian workers. Without strong legal guardrails, there is a risk that the malware will be misused in a similar manner by the U.S. Government.

These reports undermine Paragon Solutions’s public  marketing of itself as a more ethical provider of surveillance malware. 

Reportedly, the contract is being reactivated because the US arm of Paragon Solutions was acquired by a Miami based private equity firm, AE Industrial Partners, and then merged into a Virginia based cybersecurity company, REDLattice, allowing ICE to circumvent Executive Order 14093 which bans the acquisition of spyware controlled by a foreign government or person. Even though this order was always insufficient in preventing the acquisition of dangerous spyware, it was the best protection we had. This end run around the executive order both ignores the spirit of the rule and does not actually do anything to prevent misuse of Paragon Malware for human rights abuses. Nor will it prevent insider threats at Paragon using their malware to spy on US government officials, or US government officials from misusing it to spy on their personal enemies, rivals, or spouses. 

The contract between Paragon and ICE requires all US users to adjust their threat models and take extra precautions. Paragon’s Graphite isn’t magical, it’s still just malware. It still needs a zero day exploit in order to compromise a phone with the latest security updates and those are expensive. The best thing you can do to protect yourself against Graphite is to keep your phone up to date and enable Lockdown Mode in your operating system if you are using an iPhone or Advanced Protection Mode on Android. Turning on disappearing messages is also helpful that way if someone in your network does get compromised you don’t also reveal your entire message history. For more tips on protecting yourself from malware check out our Surveillance Self Defense guides.

Related Cases: AlHathloul v. DarkMatter Group

In 1992 EFF presented our very first awards recognizing key leaders and organizations advancing innovation and championing civil liberties and human rights online. Now in 2025 we're continuing to celebrate the accomplishments of people working toward a better future for everyone with the EFF Awards!

All are invited to attend the EFF Awards on Wednesday, September 10 at the San Francisco Design Center. Whether you're an activist, an EFF supporter, a student interested in cyberlaw, or someone who wants to munch on a strolling dinner with other likeminded individuals, anyone can enjoy the ceremony!

REGISTER TODAY!

GENERAL ADMISSION: $55 | CURRENT EFF MEMBERS: $45 | STUDENTS: $35

If you're not able to make it, we'll also be hosting a livestream of the event on Friday, September 12 at 12:00 PM PT. The event will also be recorded, and posted to YouTube and the Internet Archive after the livestream.

We are honored to present the three winners of this year's EFF Awards: Just Futures Law, Erie Meyer, and Software Freedom Law Center, India. But, before we kick off the ceremony next week, let's take a closer look at each of the honorees. First up—Just Futures Law, winner of the EFF Award for Leading Immigration and Surveillance Litigation:

Just Futures Law is a women-of-color-led law project that recognizes how surveillance disproportionately impacts immigrants and people of color in the United States. In the past year, Just Futures sued the Department of Homeland Security and its subagencies seeking a court order to compel the agencies to release records on their use of AI and other algorithms, and sued the Trump Administration for prematurely halting Haiti’s Temporary Protected Status, a humanitarian program that allows hundreds of thousands of Haitians to temporarily remain and work in the United States due to Haiti’s current conditions of extraordinary crises. It has represented activists in their fight against tech giants like Clearview AI, it has worked with Mijente to launch the TakeBackTech fellowship to train new advocates on grassroots-directed research, and it has worked with Grassroots Leadership to fight for the release of detained individuals under Operation Lone Star.

We're excited to celebrate Just Futures Law and the other EFF Award winners in person in San Francisco on September 10! We hope that you'll join us there.

Thank you to Fastly, DuckDuckGo, Corellium, and No Starch Press for their year-round support of EFF's mission.

Want to show your team’s support for EFF? Sponsorships ensure we can continue hosting events like this to build community among digital rights supporters. Please visit eff.org/thanks or contact tierney@eff.org for more information on corporate giving and sponsorships.

EFF is dedicated to a harassment-free experience for everyone, and all participants are encouraged to view our full Event Expectations.

Questions? Email us at events@eff.org.

日本で暮らす外国人に対するヘイトスピーチが社会問題となる中、仮放免者の支援活動に取り組む団体等は9月5日、入管庁による「不法滞在者ゼロプラン」の廃止などを訴える緊急アクションを国会正門前で実施する予定だ。（藤ヶ谷魁）

発達障害児が増え続けている。文部科学省の２０１２年の全国調査で発達障害とみられる小学生の割合は７・７％、中学生は４・０％だったが、22年の調査では小学生が10・４％、中学生は５・６％と増加傾向が続いている。　発達障害も「個性の一つ」ではある。発達障害児の中には特定の分野で稀有な才能を示したり、成人後はうまく社会に適応していく者も少なくない。ただ、発達障害児は生涯にわたって「生きづらさ」を抱えるケースが多いことも事実だ。また、発達障害児増加の影響は発達障碍児を持つ親、保育士、学校教師らにも及んでいる。　これまで、発達障害の原因としては遺伝説、食物など環境要因説などさまざまな仮説が唱えられてきたが、「最大の原因はお産の現場にある」と断言し、産婦人科医や精神科医の間で波紋を広げている医師がいる。佐賀県で長年にわたり、久保田産科麻酔科医院を運営してきた久保田史郎医師（80）だ。（石山永一郎）

School is back in session! Perfect timing to hit the books and catch up on the latest digital rights news. We've got you covered with bite-sized updates in this issue of our EFFector newsletter.

This time, we're breaking down why Wyoming’s new age verification law is a free speech disaster. You’ll also read about a big win for transparency around police surveillance, how the Trump administration’s war on “woke AI” threatens civil liberties, and a welcome decision in a landmark human rights case.

Prefer to listen? Be sure to check out the audio companion to EFFector! We're interviewing EFF staff about some of the important issues they are working on. This time, EFF Legislative Activist Rindala Alajaji discusses the real harms of age verification laws like the one passed in Wyoming. Tune in on YouTube or the Internet Archive.

LISTEN TO EFFECTOR

EFFECTOR 37.11 - This Censorship Law Turns Parents Into Content Cops

Since 1990 EFF has published EFFector to help keep readers on the bleeding edge of their digital rights. We know that the intersection of technology, civil liberties, human rights, and the law can be complicated, so EFFector is a great way to stay on top of things. The newsletter is chock full of links to updates, announcements, blog posts, and other stories to help keep readers—and listeners—up to date on the movement to protect online privacy and free expression. 

Thank you to the supporters around the world who make our work possible! If you're not a member yet, join EFF today to help us fight for a brighter digital future.

　高山正之氏が連載「変見自在」（『週刊新潮』７月３１日号）で「創氏改名２・０」と題して徐浩予氏や東北大教授の明日香壽川氏を差別し、作家の深沢潮氏や俳優の水原希子氏に対して「日本名で日本人をあたかも内部告発するような言い方」「日本名を使うな」と恫喝して、外国にルーツを持つ人々を差別し、人権を侵害する文章を発表した。　新潮社からデビューした深沢潮氏は8月４日、都内で記者会見し、同社に謝罪を求めた。第一に新潮社がコラムの問題点を総括して差別と人権侵害について文書で謝罪すること、第二..

Delta Electronicsが提供するEIP Builderには、XML外部エンティティ参照（XXE）の不適切な制限の脆弱性が存在します。

富士電機が提供するFRENIC-Loader 4には、信頼できないデータのデシリアライゼーションの脆弱性が存在します。

NTT東日本株式会社（NTT東日本）およびNTT西日本株式会社（NTT西日本）が提供するWeb Caster V130には、クロスサイトリクエストフォージェリの脆弱性が存在します。