Openly Operated

Privacy Policies today are meaningless because they lack any real, verifiable proof. Openly Operated is the free transparency standard that gives users *proof* of Privacy Policy, instead of relying on blind faith in the apps. Read more: theverge.com/2019/6/18/1868…

Without transparency, trusting any app (even popular ones) is a gamble. 9to5mac.com/2020/02/20/ios…

Lack of transparency in apps you use means your data can be sold and otherwise abused without your knowledge. 9to5mac.com/2020/02/10/ios…

Openly Operated Case Study 👓 Lockdown is an Openly Operated firewall for iOS that blocks tracking/badware and encrypts connections. It's used by over 100,000 people, and has blocked over 1 billion tracking attempts. And today, it's available for Mac.

🤔 theverge.com/2019/11/12/209…

It's increasingly common for apps to cash in on tracking their users by secretly hijacking their devices, and very few apps are caught. If your apps aren't Openly Operated, they could be hiding malware, and there's no way to tell. bleepingcomputer.com/news/security/…

Every security expert knows you shouldn't store passwords in cleartext. But not every company optimizes for security -- even when it comes to financial firms. bleepingcomputer.com/news/security/…

It shouldn't take a special investigative effort to unmask criminal acts by Nacho Analytics's browser extensions, which put viruses on 4 million computers. Everything should be Openly Operated, preventing this from happening in the first place. arstechnica.com/information-te…

Why you can't trust apps today  -  and how you can fix this problem freecodecamp.org/news/why-you-c…

Absolutely, @scottbudman— But even if FaceApp *told* you what it did with your photos, it still isn’t the same as providing *proof* of what they’re doing with your photos. Openly Operated is the transparency standard that helps apps create reliable trust through proof.

This manipulative exploitation of lower income people would have been caught early if TurboTax were Openly Operated. Unfortunately, TurboTax is completely closed, without even a *single audit*, despite being a $70 billion dollar company. theverge.com/2019/7/16/2069…

Openly Operated's first requirement is "Identify Operation" (which independent auditors later must verify), preventing these types of abuses from happening: #identify-operation" target="_blank" rel="nofollow noopener">openlyoperated.org/how-to#identif…

This is a simple and common configuration error that exposed the personal genetic health information of thousands of people, and it would have been caught by any basic audit. Services handling sensitive health information need to be Openly Operated. bloomberg.com/news/articles/…

@.zoom_us installs a secret server on *every* computer that *any* website can interact with, and it led to 4 million webcams exposed. If Zoom were Openly Operated and publicly audited, this obviously huge security hole likely wouldn't have happened. link.medium.com/QyQQauCOaY

Yet another case (or thousands of them) for why verifiable, audited transparency is important. With Openly Operated apps, you have up-front, clear proof of *exactly* what's happening with your data, both on the client and on the server.

We're always looking for auditors to help make the web safer. If you're interested in learning about how apps work while getting compensated for it, read more about being an OO auditor and apply here: openlyoperated.org/auditors

Why be Openly Operated? More secure infrastructure by finding and fixing configuration errors such as these. Learn about the free transparency standard here: #secure-infrastructure" target="_blank" rel="nofollow noopener">openlyoperated.org/for-companies#…

@AJBlue98 @SGgrc We are definitely down to chat about open, verifiable transparency on the web: hi@openlyoperated.org -Johnny

@SGgrc Have you heard about OpenlyOperated? I think #SecurityNOW listeners would love to hear your take — I know I would! theverge.com/2019/6/18/1868… Thanks for all you & Leo & guest hosts have done all these years!