smallcircles, to random
@smallcircles@social.coop avatar

Ultra weird. I pasted a toot by @arinbasu1 in #Google Translate. This one: https://social.arinbasu.online/objects/8af7f48d-ac82-47e8-9c3b-7e9cd691c4f9

And the auto-detect didn't work, and provided a totally BS Dutch translation more indicative of some dodgy #spam 😱

WTH happened? I might have some malign #Firefox extension injecting that, but I only installed official and trustworthy ones.
#AskFedi #Security

(Also in English translation for the img caption it capitalized one occurence of "How To Make Your Money" that was lower-case in Dutch)

Vivaldi, to productivity
@Vivaldi@vivaldi.net avatar

Which is the best browser for #productivity? #Privacy? Customization?
This comparison will help solve this mystery 💪

#Speed, #usability, and #security are important factors to consider when comparing web browsers. However, choosing the best #webbrowser requires taking more factors into consideration.

We’ve tested Vivaldi, Google #Chrome, #Firefox, #Safari, #Opera, and #Edge to help you find the best browser for your needs 👇

https://vivaldi.com/compare/

#browser #work #features

Edent, to random
@Edent@mastodon.social avatar

🆕 blog! “The limits of General Purpose Computation”

Should my bank be able to block me from using their Android app, just because my phone is rooted? I'm reluctantly coming to the conclusion that... yeah, it's fair that they get to decide their own risk tolerance. Sage of the Internet, and general Sooth Sayer, Cory Doctorow once gave an impassioned…

👀 Read more: https://shkspr.mobi/blog/2023/05/the-limits-of-general-purpose-computation/

patrickmcurry, to foss

Hey friends, do any of y’all have experience with either KaiOS or /e/ OS smartphones in the USA? I’m looking a for a less-corporate option for very privacy-sensitive friend. I’m open to other options for locking down mainstream iOS or Android phones if all else fails. THANK YOU!

kuketzblog, to security German
@kuketzblog@social.tchncs.de avatar

Tipp Nr.21: Aktiviere die Bildschirmsperre auf deinem Smartphone oder Tablet, um dein Gerät vor unbefugtem Zugriff zu schützen. Verwende eine längere PIN/Passwort (ab 8 Zeichen) oder biometrische Merkmale wie Gesicht oder Fingerabdruck. Verzichte auf Muster, die meist leicht zu erraten sind. Merke: Die Geräteverschlüsselung bzw. der Schutz, den sie bietet, ist nur so gut wie die verwendete Bildschirmsperre (PIN etc.).

#secprivacy2023 #sicherheit #security #schutz #pin #passwort #password

Theeo123, to apple
@Theeo123@mastodon.social avatar

https://www.techdirt.com/2023/12/11/apples-nonsensical-attack-on-beeper-for-making-apples-own-users-safer/

Apple’s "commitment to privacy" is much more a commitment to walled gardens and Apple’s bottom line, rather than the privacy of Apple’s users. and their attack on Beeper is proof of this, Beeper which simply brings full iMessage compatibility to Android is being attacked and sued by apple.

#Apple #Encryption #Security #Privacy #android #iPhone #beeper

kzimmermann, to security
@kzimmermann@fosstodon.org avatar

It's easy to point to dad and laugh at him in this case, but this got me thinking. What if the situation was different, and dad instead was a Linux user in his home PC - would you feel confident of the argument in that case?

In other words, in your own opinion, is "I use Linux, so I can download and open anything from the Internet without worrying about " acceptable?

hiramfromthechi, to privacy

💡 New startup idea that I wanna workshop publicly 👇

📲 SwapMyOS: a GrapheneOS installation service

#privacy #security #grapheneos #cybersecurity #startups #indiehacker #buildinpublic

reginagrogan, to privacy
@reginagrogan@mastodon.social avatar

I feel like we are living in ad world and its sickening. 2049 style.

Uber? Ads
Plane? Ads
Watch a movie? Ads
Tiktok? Ads
Smart tv in home? Ads
Alexa? Ads

Its enough. Its a violation of our boundaries. Sick of it. And sick of breaches caused by selling data.

What are some ideas to stop ad proliferation?

nixCraft, (edited ) to infosec
@nixCraft@mastodon.social avatar

Poll: Are you encrypting DNS traffic using protocols such as DoT (DNS over TLS) or DoH (DNS over HTTPS)? #infosec #security #DNS

matt, to random
@matt@isfeeling.social avatar

Google now lets you sign into your account with a #passkey. Go here to set it up on your account today! https://g.co/passkeys

And yes, you can use your iPhone to set up the passkey, which will sync to all your personal Apple devices nicely. #security

tdp_org, to webdev
@tdp_org@mastodon.social avatar

If you run a publicly available website/service, keep an eye on https://www.cve.org/CVERecord?id=CVE-2023-44487.

It'll be announced at midday UTC today (10th Oct 2023).

If there isn't an update you can deploy quickly for your affected services immediately (there should be for the better known software, they've had advance notice) then you should consider disabling the affected element until there is.

Can't share more right now but it's important so don't forget (& tell your friends!).

#WebDev #InfoSec #Security

avoidthehack, to infosec

More malicious extensions in #Chrome Web Store

At least 18 different malicious extensions (as of 30 MAY and this post) identified by @WPalant

Remember extensions have privileged access to the browser (and data in the browser). Choose your extensions wisely... they could be #spyware or #malware in disguise.

#cybersecurity #infosec #security #opsec #privacy

https://palant.info/2023/05/31/more-malicious-extensions-in-chrome-web-store/

vwbusguy, to android
@vwbusguy@mastodon.online avatar

Well, I contacted #Asus support about my #Zenfone. I bought the Zenfone 9 in March of last year, when it was the latest model available. Support confirmed that both #Android and #security patches will case for it this year. I've owned this phone for less than a year and absolutely love it, but this is a complete fumble on Asus' part.

They also took down their unlock tool for it, so running an alternative Android is out of the question for now as well. Very disappointed.

Caveat emptor.

sordid, to landlords

Smart locks securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can open them remotely.

https://web.archive.org/web/20240415235929/https://krebsonsecurity.com/2024/04/crickets-from-chirp-systems-in-smart-lock-key-leak/

The lock's maker Chirp Systems remains unresponsive, even though it was first notified about the critical weakness in March 2021. Meanwhile, Chirp's parent company, RealPage, Inc., is being sued by multiple U.S. states for allegedly colluding with landlords to illegally raise rents.

P.S. never give cybersecurity spooks clicks even after they go "freelance" or whatever

#realestate #landlords #latestagecapitalism #security #enshittification #cybersecurity @latestagecapitalism

jtb, to security

I have been experimenting with the Mullvad browser, a product of #tor and I wondered if the fact that a browser can update itself is a risk to #security as any malware which gets into the browser from the web would have the same access so could update the browser. I normally get around this problem by changing the ownership, but the permissions on Mullvad make that difficult, i.e. it is all owner permissions only. Your thoughts? #browser #linux #firefox

danie10, to security
@danie10@mastodon.social avatar

Proton launches its password manager Proton Pass: But you may still want to consider Bitwarden for these reasons

The company plans to open source Proton Pass so that security experts can verify the security model. There will be security audits, security reports and a bug bounty program as well.

Credit card autofilling would be useful too. But the basic version of Pro ...continues

See https://gadgeteer.co.za/proton-launches-its-password-manager-proton-pass-but-you-may-still-want-to-consider-bitwarden-for-these-reasons/

#passwordmanagers #ProtonPass #security #technology

nixCraft, to linux
@nixCraft@mastodon.social avatar

With firefox on X11 (#Linux and #Unix machines), any page can pastejack you anytime https://www.openwall.com/lists/oss-security/2023/10/17/1 #security #infosec

nixCraft, to privacy
@nixCraft@mastodon.social avatar
nixCraft, to random
@nixCraft@mastodon.social avatar

Ask Microsoft: Are you using our personal data to train AI? https://foundation.mozilla.org/en/campaigns/microsoft-ai/ I have a good guess: Microsoft will use your personal data to train AI, even if you use an alternative OS. We are doomed with big tech now. Please boost for reach.

eugenialoli, to GNOME
@eugenialoli@mastodon.social avatar

WTF? Is #Tenacity on the #Flatpak store #MALWARE? Apparently it was running in the bg AS IF it was an invincible #Gnome extension so SystemMonitor/htop would NOT see it as a process. But #MissionCenter (also from flatpak store) saw it as it is: an app running on startup! Killing it killed Gnome session! It was also spiking wifi, and was leaking the Gnome gjs service from 4MB RAM to 120MB. Uninstalling fixed the prob

Third party flatpak/snaps should be vetted.

#security #opensource #linux #foss

dethos, to security
@dethos@s.ovalerio.net avatar

"Firefox 115 can silently remotely disable (any) extension on any site"

https://lapcatsoftware.com/articles/2023/7/1.html

#security #privacy #firefox #wtf

DM_Ronin, to Canada
@DM_Ronin@mstdn.social avatar

Canada is banning FlipperZero :woozy_clown: extremelu stupid decision, considering that Flipper is extremely low-powered for actual car thefts (unless you add hardware modules – which isn't the same) https://www.canada.ca/en/public-safety-canada/news/2024/02/federal-action-on-combatting-auto-theft.html

#FlipperZero #Canada #Hardware #InfoSec #Security

nixCraft, to random
@nixCraft@mastodon.social avatar
  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • mdbf
  • ngwrru68w68
  • tester
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • InstantRegret
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • DreamBathrooms
  • megavids
  • tacticalgear
  • osvaldo12
  • normalnudes
  • cubers
  • cisconetworking
  • everett
  • GTA5RPClips
  • ethstaker
  • Leos
  • provamag3
  • anitta
  • modclub
  • lostlight
  • All magazines