#8 Story Points

Hello,

If coffee isn't enough on this Tuesday morning, we have something that will surely stimulate your thoughts!?

News sprint

1. Following the New York Times, eight prominent U.S. Newspapers are suing OpenAI and Microsoft for copyright infringement; they claim that using articles to train AI models wasn’t legal.? #AI
2. Dalton Caldwell offers guidance on determining whether to close down your startup or persevere. #business
3. The bankruptcy of the Newchip accelerator posed a threat to the capitalization tables of numerous startups. #startup
4. Android devices still leak DNS queries when switching VPN servers despite enabling the "Always-on VPN" feature with the "Block connections without VPN" option. #security
5. Cyber attackers are attempting to exploit a WordPress plugin vulnerability of the highest severity level.? #security

Retrospective

LLI's team comments on the Android DNS query leaks.

This recent revelation about Android devices leaking DNS queries, even with supposedly robust security features like "Always-on VPN" and "Block connections without VPN" enabled, serves as a stark reminder of the need for cautious skepticism in our digital lives. It's a sobering realization that dangers can sometimes emanate from the very systems meant to safeguard us. We must remember never to trust even the most advanced protections blindly, but rather adopt a principle of limited trust in everything we use, acknowledging that our online activities—from social media interactions to financial transactions—have tangible impacts on our lives.

The fact that this vulnerability exists at the core of the Android system, affecting numerous applications, underscores the critical importance of regular and timely updates. We must remain vigilant about updating our devices, preferably with automatic updates enabled, to mitigate such risks. However, it's crucial to recognize that Android's ecosystem places ultimate responsibility on Google. Therefore, if we suffer data breaches or financial losses due to this flaw, it's unlikely that Google will readily provide compensation. This stark reality highlights the need for users to consider additional safeguards and exercise caution until this issue is effectively addressed.

The Backlog

In software development, automation (letting computers do the work) can be helpful. But it’s important to know what should be automated and what shouldn’t. Our Software Developer, Dawid Boksa , talks about this in simple terms and shares why quickly fixing problems can sometimes be better than trying to stop them from happening.

Link to the article