![](\"https:\/\/media.wired.com\/photos\/5b9c16751ab9432d396266ea\/master\/pass\/gametracking-01.jpg\"\/)
<\/p>\n<\/p>\n
Credit to Author: Emily Dreyfuss| Date: Sat, 15 Sep 2018 13:00:00 +0000<\/strong><\/p>\n Tesla is in <\/span>the news again this week, but this time it has nothing to do with fires or Twitter or Elon Musk smoking weed<\/a>. Instead, it\u2019s because hackers figured out how to steal a Tesla Model S<\/a> by cloning its key fob. WIRED\u2019s resident car-hacking reporter Andy Greenberg broke that news, and explains why the attack might also work on cars from McLaren and Karma.<\/p>\n Lily Hay Newman has the behind-the-scenes story<\/a> on how hackers got past British Airways defenses in August, plus an alarming report<\/a> about how a decade-old technique can break the encryption of just about any computer. Yikes.<\/p>\n Former US Secretary of Defense Ash Carter wrote an op-ed in WIRED<\/a> Friday arguing that big tech and the government have to find a way to work together or everyone will be screwed. And Trump introduced a new executive order aimed at election interference, but we explain why it\u2019s more a bandaid<\/a> than a cure.<\/p>\n Plenty of other things happened in the security world this week, too. As always, we\u2019ve rounded up all the news we didn\u2019t break or cover in depth this week. Click on the headlines to read the full stories. And stay safe out there.<\/p>\n Data tracking is creepy. But data tracking children? Much worse. This week, New Mexico's attorney general filed a lawsuit against Tiny Lab, an app developer behind games like Fun Kid Racing<\/em>, as well as advertising companies including Google and Twitter, alleging that they violated children\u2019s privacy laws by tracking and sharing data for users under the age of 13. When New York Times<\/em> reporters looked at other apps aimed at young kids on both Google Android and Apple iOS, they found more examples that potentially violate privacy laws by sending children's data to tracking companies. All of this might not surprise you. As the Times<\/em> notes, it's also in line with academic research that found thousands of Android games and apps for kids shared their data with outside companies in possible violation of the Children\u2019s Online Privacy and Protection Act.<\/p>\n A bipartisan group of senators sent Secretary of State Mike Pompeo a letter this week asking him why on earth the State Department hasn\u2019t instituted basic cybersecurity best practices. According to CNET, the senators are concerned that a recent inspection found only 11 percent of the department's required devices have multi-factor authentication enabled. Which is crazy. Nation state hackers all over the world would love to get access to accounts and devices at State. The least American leaders could do to protect the country from prying eyes is follow some rudimentary security tips<\/a>.<\/p>\n A proposed law in the European Union would require social media platforms and tech companies to remove terror propaganda from their sites within one hour of it being reported to them. If they failed to do so, the companies would face fines up to 4 percent of their worldwide revenue, according to the Wall Street Journal<\/em>. That would be, uh, a lot: for Alphabet, $4.43 billion; Facebook, $1.63 billion. EU member states still need to sign off, as does the parliament. In the meantime, social networks like Facebook and YouTube are working to improve their moderation systems. Last May, Facebook reported<\/a> that in Q1 of 2018, nearly 100 percent of the terror-related content it removed had been flagged by the company before users reported it.<\/p>\n Last month, the Associated Press reported<\/a> that Google was still tracking you even after you turned off location tracking in Google Maps or on your Android device. (We explained how<\/a> to go about actually turning it off.) People were outraged and felt misled. Now the Arizona attorney general is investigating the matter, according to the Washington Post<\/em>.<\/p>\n The European Court of Human Rights ruled on Thursday that the UK\u2019s mass surveillance practices violated human rights law. Those practices came to light in 2013, when Edward Snowden revealed that intelligence agencies in the UK were collecting social media, messages, and phone calls, including people not under suspicion for any crimes. The court found that the program violated the right to privacy, according to Gizmodo, due to "insufficient oversight."<\/p>\n