Amazon Wishlist change doxxes users and shares your delivery address

Amazon announced a sweeping change to its Wishlist feature that will make users’ addresses available to third-party sellers, recommending they get a PO Box to protect their privacy.

Amazon’s Lists feature lets shoppers compile items they want to buy in easily accessible groups. These lists can be private (for personal use only), or public for anyone to see, as well as shared with other users for events like wedding showers or parties.

Previously, users could block items sold by third-party sellers from their Wishlists. But starting March 25, 2026, anyone can buy you items from any seller, including third-party sellers.

This means that when someone buys you something on Amazon from a third-party seller, your shipping address will be shared with them so they can ship the item to you. This also means that parts of your address will also be visible to them during shipping for tracking updates.

[...]

Source: https://www.dexerto.com/entertainment/amazon-wishlist-change-doxxes-users-and-shares-your-delivery-address-3324823

From Amazon's email to customers (with parts bolded for emphasis):

Important note: When gifts are purchased from your shared or public lists, Amazon needs to provide your shipping address to sellers and delivery partners to fulfill these orders. During the delivery process, your address may become visible to gift purchasers through delivery updates and tracking information. To help protect your privacy, we recommend using a PO Box or non-residential address for any list you share with public audiences.

Hey everyone. As a result of some internal discussions, we have decided to restrict the usage of VScript on JA. Going forward there will be a general ban on VScript on all JA servers.

VScript is a powerful tool, and in some cases too powerful. There are several contributing factors to this decision but the primary points of issue are security and maintainability. Since JA's founding, the main assumption about mapping is that maps are generally safe from the point of view of the server operators. VScript introduces a structural shift in what mappers are capable of.

As it stands we just don't have the manpower to review every single map that we add to JA for potential issues with their scripts. Going forward we would like to encourage all mappers to try more conventional systems for map logic first.

Q: My map uses VScript. What does this mean for me?
A: Your map is still allowed on JA and we won't require a separate version, just be aware that any scripts included will not run on JA servers.

Q: Why is this necessary?
A: VScript is extremely powerful with similar capabilities as sourcemod plugins. At JA, our developers have always reviewed any plugins or extensions we upload to our servers for security, performance, stability, and maintainability concerns. The VScript update introduced a totally new vector for code to be added to our servers that we weren't prepared for. We think this is the best way to ensure we are able to maintain oversight on external code on JA.

Q: My VScript code is critical to the functionality of my map. Does this mean my map can't be on Jump Academy?
A: Talk to our developers (AI or Squid) about your map so we can review your code and come to a decision. We will be handling whitelisted maps on a case by case basis.

Notepad++ v8.8.9 release: Vulnerability-fix

Some security experts recently reported incidents of traffic hijacking affecting Notepad++. According to the investigation, traffic from WinGUp (the Notepad++ updater) was occasionally redirected to malicious servers, resulting in the download of compromised executables.

The review of the reports led to identification of a weakness in the way the updater validates the integrity and authenticity of the downloaded update file. In case an attacker is able to intercept the network traffic between the updater client and the Notepad++ update infrastructure, this weakness can be leveraged by an attacker to prompt the updater to download and executed an unwanted binary (instead of the legitimate Notepad++ update binary). To mitigate this weakness and address the hijacking’s concerns raised by the security researchers, a new security enhancement is being introduced in this release of Notepad++.

Source: https://notepad-plus-plus.org/news/v889-released

The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the developer's signing keys, leading to a malicious update being pushed to users.

The compromise became known when multiple users reported that Play Protect, Android's built-in antivirus module, blocked SmartTube on their devices and warned them of a risk.

The developer of SmartTube, Yuriy Yuliskov, admitted that his digital keys were compromised late last week, leading to the injection of malware into the app.

Yuliskov revoked the old signature and said he would soon publish a new version with a separate app ID, urging users to move to that one instead.
[...]

Source: https://www.bleepingcomputer.com/news/security/smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update

Challenge jump maps this weekend with this year's Halloween gimmick by setting up explosive pumpkins in advance with your pumpkin rocket launcher and completing all the jumps with your shotgun in hand.

Available on our dedicated map and rotation servers! Toggle on or off with !boo.

Happy Halloween everyone.