Notices tagged with infosec, page 7

Even after you turn off Facebook location tracking, Facebook tracks your location https://boingboing.net/2018/12/19/compulsive-liars.html #tooptoutjustdon'tbelocatedanywhere #locationalprivacy ##deletefacebook #facebook #security #infosec #privacy #Safety #Post

Encrypted Server Name Indication is becoming a thing:
https://datatracker.ietf.org/doc/draft-ietf-tls-esni/?include_text=1

https://www.eff.org/deeplinks/2018/09/esni-privacy-protecting-upgrade-https

#SysAdmin #Web #Privacy #Infosec

LineageOS for microG, a secure open-source Android OS for phones

https://lineage.microg.org/

#SolarpunkResource #infosec #foss

I just heard (in a training session) “Data guarantees that artificial intelligence work”
Yesterday I saw: https://www.youtube.com/watch?v=ajGX7odA87k about #infosec #ia pitfalls

O, the biting irony.
+ @aral @laura

Benefits of our experimental Dat mirror:

– you don't need to connect to a centralized hosting provider
– you can seed all files of our blog by yourself and support P2P hosting
– you can download a full local copy of our blog
– you can read our content even if our blog is down (e.g. due to maintenance)

#p2p #dat #datproject #blog #decentralized #infosechandbook #infosec #cybersecurity

A data only Sim card which won't function unless it's through #Tor. Genius idea for the #privacy conscious folks out there! #infosec #security
https://motherboard.vice.com/en_us/article/d3qqj7/sim-card-forces-data-through-tor-brass-horn-communications

So the typical #infosec tactic of hiding people's traffic is great, but can you go a step further and actively sabotage automated market analysis and such with false data?

Like, have your email service throw a couple randomly-picked product and candidate names in the #encryption , removed at the other end. Flood the bots with so much white noise that info gained from ANYONE becomes worthless

Hey #InfoSec people, we need help. @OCCRP is hiring a Security Analyst:
https://www.occrp.org/en/occrp-jobs/security-analyst

Help us keep journalists safe so they can work on projects like Panama Papers, Laundromat, or Daphne Project:
https://www.occrp.org/en/panamapapers/
https://www.occrp.org/en/laundromat/
https://www.occrp.org/en/thedaphneproject/

If you feel you might not be experienced enough, talk to us anyway. We're happy to help people grow on the job.

Mastodon :mastodon: security:

864 out of 2050 Mastodon instances (which report their version according to instances.social) are still running vulnerable Mastodon server software (< 2.4.4).

See also:
https://mastodon.at/@infosechandbook/100597698990522530

#mastodon #security #vulnerability #infosec #security #cybersecurity

Time to rebuild a ton of docker images:

https://justi.cz/security/2018/09/13/alpine-apk-rce.html

If you used anything alpine based and used apk to install packages it's may compromised. You are advised to rebuild the image to fix it. If you use an image that is an intermediate image that is based on alpine linux, may wait a day until they are rebuild as well.

#infosec #alpinelinux #docker #container #security

For new users here are my interests just incase you have the same interests:

#lgbt
#feminism
#anarchism
#communism
#medicine
#neuroscience
#neuroinformatics / #bioinformatics
#unix
#infosec
#machinelearning / #artificialinteligence
#meteorology
#vulcanology
#geology
#neurodiversity
#autism

More of a reason to use Linux for the security conscious.
#linux #spyware #webcam #infosec

I guess I'll go ahead and post an #introduction. I'm a Philosophy student that was a bit sick of network models like Twitter and such and is looking into other hubs to pursue their interests, among which are #activism (anti-capitalist and lgbt), #infosec, #minimalism and #linguistics.

There's plenty more to me, I suppose, I'm just bad at coming up with self descriptors when shoved into the spotlight. But I'm very glad to be here, and I can't wait to meet you all 😊

GOD MODE UNLOCKED: hardware backdoors in some x86 CPUs
https://github.com/xoreaxeaxeax/rosenbridge
White paper coming tomorrow.

@BlackHatEvents

xposted from the hellbird / work chat.

#infosec

Here is a list of good #security / #infosec / #privacy podcasts:

Cyberwire
https://www.thecyberwire.com/podcasts/daily-podcast.html

Hacking Humans https://www.thecyberwire.com/podcasts/hacking-humans.html

Defensive Security (@jerry)
https://defensivesecurity.org/

Recorded Future
https://www.recordedfuture.com/resources/podcasts/

The Complete Privacy & Security Podcast
https://inteltechniques.com/podcast.html

7 Minute Security
https://7minsec.com/projects/podcast/

Social Engineer Podcast
https://www.social-engineer.org/category/podcast/

Hackable
https://hackablepodcast.com

Root Access
https://www.rootaccesspodcast.com/

Breach
https://www.carbonite.com/podcasts/breach/

IRC_Buddy : "My Wordpress websites are again infected !"

As a reminder, I wrote a website protection software based on the Python Watchdog library.

That's why I wrote Chiwawa, to counter security problems in those CMS (Wordpress, Joomla, Drupal etc...)
https://framagit.org/Brunus/chiwawa

#Security #Infosec #Wordpress #Joomla #Drupal #CMS #Webdev #Web #Python

"A Formal Security Analysis of the Signal Messaging Protocol", Extended Version November 2017 (University of Oxford, MacMaster University)

https://eprint.iacr.org/2016/1013.pdf

#signal #protocol #infosec #cybersecurity #security

@rysiek Yeah, embargo has just been broken: https://efail.de/

HTML parsing in email clients is to blame, no problems when working in plain-text mode.

#infosec #gpg #pgp