Notices by marc0s (marc0s@mastodon.social)

We have some exciting news! The team at Purism are thrilled to announce the launch of Librem One https://librem.one Private and secure email, chat, social and VPN. #LibremOne

Our Primary account is now https://social.librem.one/@purism

RT @odtorson@twitter.com

My new hobby: launching vim in full screen mode at the Apple store

🐦🔗: https://twitter.com/odtorson/status/1122504267733065730

Docker Hub Hacked – 190k accounts, GitHub tokens revoked, Builds disabled https://news.ycombinator.com/item?id=19763413

2+ million IoT devices vulnerable to man-in-the-middle attacks, allowing attackers to steal passwords:

https://hacked.camera/

– the website contains a list, so you can check if your devices are vulnerable
– CVE-2019-11219, CVE-2019-11220
– mitigation: dispose your vulnerable devices, or block OUTBOUND traffic to 32100/udp

#iot #vulnerability #cve201911219 cve201911220 #infosec #mitm #cybersecurity #security

Heads up to all #Riot users: with the recent attack on @matrix' infrastructure, it's possible that Riot's Google Play version got compromised. This doesn't affect Riot's F-Droid version. Just as Riot started to do now, F-Droid has always signed all its apps on an inaccessible, offline machine. For more information, see https://riot.im/reinstall

To avoid maintenance overhead, however, it's likely to happen that F-Droid users must also change the app in near future. Still, there's no need to act now.

Hi, here's our April Progress Update for the Librem 5:
https://puri.sm/posts/april-progress-update-librem-5-hardware/

Introducing Node.js 12 https://medium.com/p/76c41a1b3f3f

More #matrix troubles, now w/ the #French government's instance,

https://thehackernews.com/2019/04/france-Tchap-secure-messenger.html

#hacking #messaging

OpenSSH 8.0 available:

https://www.openssh.com/txt/release-8.0

– contains mitigations for an scp vulnerability (CVE-2019-6111)
– adds experimental post-quantum key exchange method, based on a combination of Streamlined NTRU Prime 4591^761 and X25519
– increases the default RSA key size to 3072 bits
– includes several bug fixes

#openssh #ssh #infosec #security #cybersecurity #postquantum #crypto #x25519 #rsa

Did you know that #Fedilab automatically removes UTM parameters in URLs? https://en.m.wikipedia.org/wiki/UTM_parameters

If you post a URL with utm parameters, they will be automatically removed by the app. If you click on a URL with UTM parameters, they will be removed before visiting the link.

It's Follow Friday! #ff #followFriday

@ansuz - Creator of @cryptpad, an awesome open source encrypted alternative to Google Docs!

@tom79 - Fedilab developer who is adding first class pixelfed support to the mobile app!

@Curator - Curator/Admin of https://mastodon.art, a great instance for artists of the fediverse!

@switchingsocial - An amazing collection of ethical, easy-to-use and privacy-conscious alternatives

Facebook :facebook: always in the news. This time: Millions of passwords of Instagram users stored in plaintext:

https://thehackernews.com/2019/04/instagram-password-plaintext.html

– millions of plaintext passwords of Instagram and Facebook users were accessible to Facebook
– besides, Facebook stored 1.5 million records of users without their consent or knowledge

#facebook #instagram #privacy #password #infosec #cybersecurity #security