Ars Technica | As a leading vulnerability reporting platform, HackerOne has paid hackers more than $23 million on behalf of more than 100 customers, including Twitter, Slack, and the US Pentagon. The company’s position also gives it access to unimaginable amounts of sensitive data. Now, the company has paid a $20,000 bounty out of its own pocket after accidentally giving an outside hacker the ability to read and modify some customer bug reports.

Krebs on Security | One of the more curious behaviors of Apple’s new iPhone 11 Pro is that it intermittently seeks the user’s location information even when all applications and system services on the phone are individually set to never request this data. Apple says this is by design, but that response seems at odds with the company’s own privacy policy.

ZDNet | Microsoft's plan to turn Office 365 consumer subscriptions into 'Microsoft 365 Life' ones is continuing to take shape. The new reveal date is looking like spring 2020.

Android Police | Chrome's new tab page is always undergoing design changes and improvements. One day you see shortcuts to downloads and bookmarks there, the next they're gone. The latest change involves article recommendations, which are now showing up for many users as larger thumbnails with text snippets.

How-To Geek | There are more competing web browsers than ever, with many serving different niches. One example is Brave, which has an unapologetic focus on user privacy and comes with a radical reimagining of how online advertising ought to work. Brave is based on Chromium, the open-source code that forms the basis for Google Chrome. But is it any good? And for those using Google Chrome, is it worth switching to Brave?

Computerworld | Reclaim control of your email—and your life—with the flip of a single virtual switch.

G Suite Updates | Google is adding a Cloud Search integration in new Google Sites. Site editors can now replace in-site search with Cloud Search, or add an always-open Cloud Search box to the header, body, or footer of the site itself. Adding Cloud Search to your new Google Sites will give site viewers more powerful search, allowing them to find content across other Google Sites as well as other G Suite content. Search results are available to the site viewers directly from within the new Google Site itself.

G Suite Updates | Google is giving you another option to determine how security codes can be used in your organization. A security code is a one-time use code, generated using a security key, that can be used to log in on legacy platforms where security keys aren’t supported directly. With this launch they’re adding an option to restrict the use of codes to the same device or network that they were generated on.

G Suite Updates | Before publishing changes to your new Google Sites, you can now compare the currently published site with the soon-to-be-published draft site in an annotated, side-by-side view.