KubikPixel ✓
Since when has it become commonplace to take such a leap of #faith on the #developer that an #install #script is run directly without being asked. I see this more and more in many popular projects and anyone who knows anything about #IT #security shies away from this approach: 😲
curl -s script.random-guy.net | sh
ClaudioM
Opp... 🙊
I guess that's great and all, but the conspiracy theorist in me has to wonder if they placed any backdoors in the process.... 🧐🧐🧐🧐 #security #microsoft #exchange #fbi
FBI cleans web shells from hacked Exchange servers in rare active defense move | CSO Onlinehttps://www.csoonline.com/article/3615691/fbi-cleans-web-shells-from-hacked-exchange-servers-in-rare-active-defense-move.html
FOSSASIA
Join the #FOSSASIA Summit Online with lots of talks and hands-on workshops. Learn about #OpenSource #OpenHardware #FOSS #Linux #Python #Cloud #Javascript #AI #Security #Blockchain. 160+ speakers from 33 countries and 5 continents are already confirmed! Get your free ticket https://eventyay.com/e/fa96ae2c
FOSSASIA
We are starting tomorrow at 14:00 #Singapore time. Get your ticket now to join us at the #FOSSASIA #Virtual Summit 2021, March 13 - 21 #FOSS #OpenSource #OpenHardware #AI #Cloud #Robotics #Blockchain #DevOps #Linux #Database #PocketScienceLab #Python #Security #eventyay https://eventyay.com/e/fa96ae2c
Lobsters
Rust, Zig, and the Futility of "Replacing" C https://gavinhoward.com/2021/02/rust-zig-and-the-futility-of-replacing-c/ | https://lobste.rs/s/1iiifg #c #rust #security
Datenschutz
@kuketzblog Das ist der Grund, warum wir unseren Mitgliedern (Kunden) dringend empfehlen, auf Google-Hilfen komplett zu verzichten und keine Google-Domains in die Content Security Policy aufzunehmen.#csp #google #security
André Ockers
Thanks to all the developers working on #FreeSoftware #Security at #ClamAv, #GnuPG, #PrivacyBadger, #HTTPSEverywhere, #UBlockOrigin and many other groups who enable users to #StayConnected in a safe way - #ilovefs@eff
Novi Technology
Employees are the greatest security risk to any business. Hackers are getting smarter and using more sophisticated ways to fool and trick employees into giving away confidential information and access to networks.
Novi Technology
We help to maintain the balance between your networks with the internet which will be beneficial for filtering traffic. Novi firewall services can help to detect, analyse and reject threats intelligently before they reach your network and provide you complete internet protection.
Aral Balkan
If you specify subresource integrity in a script tag and then import that script also from a separate tag later on, and the source fails the integrity check, on
1. Firefox (Gecko): script doesn’t execute2. Ungoogled Chromium (Chromium): script doesn’t execute3. Epiphany (WebKit): script tag is blocked but script executes via the import
Not sure if Safari does the same but that’s not good.
kravietz 🦇
Fortunately, spread of trojanized packages is limited to newly built applications only because nobody updates NPM libs anyway 🤷♂️
So as long everyone sticks to the tried strategy of "lets hold and wait if others get infected" we don't need any package signatures etc #security
https://www.zdnet.com/article/malicious-npm-packages-caught-installing-remote-access-trojans/
Neil Brown
If true, URGH.
(Idly ponders the law on interception, and whether English law is even relevant here.)
QT sneakdotberlin: Google is now rewriting all URLs in gmail/gsuite email messages, *including those downloaded via IMAP*, to go via Google URL redirection, which is a HUGE privacy leak. they're editing the actual message bodies in your inbox.
KMJ 🇦🇹
#privacy #itsec #security #tor #cloudflare using Tor shows how much sites are hidden behind Cloudflare. Yesterdays DNS problem of them showed even more of this privacy problem.
With the EU making it clear that data transfer to US is not allowed this opens the question if transparent proxying traffic through Cloudflare is illegal now too. Especially where this opens MITM data collecting.
IMHO sites behind Cloudflare should be blocked making them learn that privacy is valued.
⚜ Ån̶t̶hiǝ¯₣ab̷r̷ε ⚜ 🔒
RT @Puri_sm@twitter.com
Last week we announced the all-new Librem 14
$300 off with early bird pricing!
https://puri.sm/products/librem-14/
- Core i7-10710U (Comet Lake) Processor, 6 cores & 12 threads- Up to 32GB DDR4 memory- Output 4K Video to two displays
Purism
A Wildly Powerful, Privacy-Focused Linux Laptop Appears…
https://www.omgubuntu.co.uk/2020/07/purism-librem-14-linux-laptop
"Suffice to say it's a beast based around a six-core Intel Core i7-10710U (1.10 GHz, 4.70 GHz turbo boost) processor."
Learn more about the all-new Librem 14: https://puri.sm/products/librem-14/
Strypey
Anyone got any comments on these claims about GNU/Linux security flaws?
https://madaidans-insecurities.github.io/linux.html
⚜ Ån̶t̶hiǝ¯₣ab̷r̷ε ⚜ 🔒
RT @HOCupdate@twitter.com
http://HackersOnlineClub.com (#HOC) Daily News is out! https://paper.li/HOCupdate/1379311992?edition_id=990d74b0-90f3-11ea-9b87-0cc47a0d15fd #security #infosec #hack #security #cybersecurity
🐦🔗: https://twitter.com/HOCupdate/status/1258642170631897088
yahananxie
When your National Government's #Health agency doesn't hire knowledgeable web #developers, this is what we get.
https://aleph.land/media/PETX-GxX5SUaucwJQOE
Thank you #Mozilla #Firefox for the warning. To DOH, use #LetsEncrypt if you no longer have a budget to buy a certificate, which is understandable considering current issues re: #COVID19
Lohan G
Free software for remote working https://wiki.fsfe.org/Activities/FreeSoftware4RemoteWorking
infosec-handbook.eu
Regarding Jitsi Meet servers:There is a recent trend to use Jitsi Meet, a JavaScript WebRTC application, for videoconferencing.
Please note that these video conferences aren't end-to-end encrypted. This means server-side parties can monitor your activity. If you want to use Jitsi hosted by others, look for a comprehensive privacy policy as always.
There could be additional legal requirements if you want to use third-party Jitsi servers for school or work.
GNU Social Club is a social network, courtesy of GNU.Support. It runs on GNU social, version 2.0.0-dev, available under the GNU Affero General Public License.
All GNU Social Club content and data are available under the Creative Commons Attribution 4.0 license.