Updates tagged with security on Hacker Poesy!
lnxw48a1: @aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
lnxw48a1's status on Thursday, 05-Nov-2020 12:03:48 EST
@aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
lnxw48a1: @geniusmusing See https://hackers.town/@devrandom/105136083240782878 #security
lnxw48a1's status on Sunday, 01-Nov-2020 12:06:34 EST
@geniusmusing See https://hackers.town/@devrandom/105136083240782878 #security
lnxw48a1: #Google discloses #Microsoft #Windows 10 #zero-day vulnerability that is currently being exploited in the wild. Also patched a #Chrome zero-day. https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/ [www zdnet com] #Win10 #security Patch incoming 2020-11-10, #Patch_Tuesday.
lnxw48a1's status on Saturday, 31-Oct-2020 12:32:38 EDT
#Google discloses #Microsoft #Windows 10 #zero-day vulnerability that is currently being exploited in the wild. Also patched a #Chrome zero-day. https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/ [www zdnet com] #Win10 #security Patch incoming 2020-11-10, #Patch_Tuesday.
lnxw48a1: FastCompany: Don't share #passwords with your GF or BF until you read this https://www.fastcompany.com/90556503/dont-share-passwords-with-your-gf-or-bf-until-you-read-this [www fastcompany com] I didn't know people still did this. #security #relationships
lnxw48a1's status on Sunday, 27-Sep-2020 22:43:43 EDT
FastCompany: Don't share #passwords with your GF or BF until you read this https://www.fastcompany.com/90556503/dont-share-passwords-with-your-gf-or-bf-until-you-read-this [www fastcompany com] I didn't know people still did this. #security #relationships
lnxw48a1: Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security
lnxw48a1's status on Tuesday, 22-Sep-2020 21:57:14 EDT
Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security
lnxw48a1: #ISC's #BIND continues to have security holes one after another. I do sometimes wonder why we (the world as a whole) haven't migrated to something descended from DJBDNS. #DNS #security
lnxw48a1's status on Friday, 21-Aug-2020 17:05:22 EDT
#ISC's #BIND continues to have security holes one after another. I do sometimes wonder why we (the world as a whole) haven't migrated to something descended from DJBDNS. #DNS #security
lnxw48a1: RT @geniusmusing VU174059 GRUB2 bootloader is vulnerable to buffer overflow http://status.hackerposse.com/url/21867 >Overview > >The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. I cannot say this is related but I updated grub last night on my backup server and it n https://nu.federati.net/notice/3326677
lnxw48a1's status on Thursday, 30-Jul-2020 11:29:34 EDT
RT @geniusmusing VU174059 GRUB2 bootloader is vulnerable to buffer overflow http://status.hackerposse.com/url/21867 >Overview > >The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. I cannot say this is related but I updated grub last night on my backup server and it n…
geniusmusing: VU174059 GRUB2 bootloader is vulnerable to buffer overflowhttps://www.kb.cert.org/vuls/id/174059 >Overview > >The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. I cannot say this is related but I updated grub last night on my backup server and it no longer boots. #security #buffer #overflow #grub2
geniusmusing's status on Thursday, 30-Jul-2020 11:21:28 EDT
VU174059 GRUB2 bootloader is vulnerable to buffer overflow https://www.kb.cert.org/vuls/id/174059 >Overview > >The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. I cannot say this is related but I updated grub last night on my backup server and it no longer boots. #security #buffer #overflow #grub2
lnxw48a1: https://finance.yahoo.com/news/nintendo-now-says-300-000-165803999.html [finance yahoo com] #Nintendo now estimates almost twice as many accounts were breached as its previous estimate. 300K online accounts were compromised, exposing PII. According to the company, this is still less than 1% of its userbase. #security #breach #accounts #crack #compromise #repassword
lnxw48a1's status on Friday, 12-Jun-2020 16:18:23 EDT
https://finance.yahoo.com/news/nintendo-now-says-300-000-165803999.html [finance yahoo com] #Nintendo now estimates almost twice as many accounts were breached as its previous estimate. 300K online accounts were compromised, exposing PII. According to the company, this is still less than 1% of its userbase. #security #breach #accounts #crack #compromise #repassword
drak: How to get #security into the development workflow of your organization: https://www.youtube.com/watch?v=GsefBF_wECI #DevSecOps #programming
drak's status on Friday, 22-May-2020 12:55:13 EDT
How to get #security into the development workflow of your organization: https://www.youtube.com/watch?v=GsefBF_wECI #DevSecOps #programming
lnxw48a1: https://www.zdnet.com/article/huawei-denies-involvement-in-buggy-linux-kernel-patch-proposal/ [www zdnet com] #Huawei says the #HKSP project and its recently-submitted security patch for the #Linux kernel is not an official company project, but an employee's personal project. "Trivially exploitable" flaws found in patch. #security #patch #Linux_kernel #GRSecurity
lnxw48a1's status on Wednesday, 13-May-2020 01:20:56 EDT
https://www.zdnet.com/article/huawei-denies-involvement-in-buggy-linux-kernel-patch-proposal/ [www zdnet com] #Huawei says the #HKSP project and its recently-submitted security patch for the #Linux kernel is not an official company project, but an employee's personal project. "Trivially exploitable" flaws found in patch. #security #patch #Linux_kernel #GRSecurity
lnxw48a1: http://status.hackerposse.com/url/20705 [www theregister co uk] Yet another reason to wonder whether #Zoom’s management is just ignorant about #privacy and #security, or actively malicious. “End to end” encryption has a specific meaning, namely that messages sent from your device are encrypted until they arrive at your recipients’ devices, so that no one in between, in https://nu.federati.net/notice/3296445
lnxw48a1's status on Tuesday, 07-Apr-2020 19:30:12 EDT
http://status.hackerposse.com/url/20705 [www theregister co uk] Yet another reason to wonder whether #Zoom’s management is just ignorant about #privacy and #security, or actively malicious. “End to end” encryption has a specific meaning, namely that messages sent from your device are encrypted until they arrive at your recipients’ devices, so that no one in between, in…
lnxw48a1: US schools banning #Zoom and switching to #MSTeams https://betanews.com/2020/04/05/us-schools-ban-zoom/ [betanews com] due to widespread #harassment (“Zoombombing”) and #security and #privacy issues.
lnxw48a1's status on Monday, 06-Apr-2020 19:29:08 EDT
US schools banning #Zoom and switching to #MSTeams https://betanews.com/2020/04/05/us-schools-ban-zoom/ [betanews com] due to widespread #harassment (“Zoombombing”) and #security and #privacy issues.
lnxw48a1: Oh, wonderful. A #Zero-day with #RCE on #Windows ... currently unpatched. See: https://freeradical.zone/@tek/103874683857159931 #security #infosec
lnxw48a1's status on Monday, 23-Mar-2020 18:34:00 EDT
Oh, wonderful. A #Zero-day with #RCE on #Windows ... currently unpatched. See: https://freeradical.zone/@tek/103874683857159931 #security #infosec
lnxw48a1: https://thehackernews.com/2020/01/warning-quickly-patch-new-critical.html Emergency #security patch for #Win10. Update #Windows today!
lnxw48a1's status on Tuesday, 14-Jan-2020 14:38:54 EST
https://thehackernews.com/2020/01/warning-quickly-patch-new-critical.html Emergency #security patch for #Win10. Update #Windows today!
rozzin: #Termbin is a nice #pastebin !hack https://termbin.com/ Obvious down side: no #TLS #security. But it's also #nonobvious if any of the other pastebin tools use TLS—where TLS is easily added in front of #termbin and clients just swap #netcat for #socat or #gnutls. #transparency
rozzin's status on Wednesday, 25-Sep-2019 05:32:22 EDT
#Termbin is a nice #pastebin !hack https://termbin.com/ Obvious down side: no #TLS #security. But it's also #nonobvious if any of the other pastebin tools use TLS—where TLS is easily added in front of #termbin and clients just swap #netcat for #socat or #gnutls. #transparency
mmn: RT @bjoern In January, the #EU is launching bug bounties on #FreeSoftware projects to increase the #security of the #Internet! https://juliareda.eu/2018/12/eu-fossa-bug-bounties #FOSSA
mmn's status on Wednesday, 02-Jan-2019 06:46:06 EST
RT @bjoern In January, the #EU is launching bug bounties on #FreeSoftware projects to increase the #security of the #Internet! https://juliareda.eu/2018/12/eu-fossa-bug-bounties #FOSSA
bjoern: In January, the #EU is launching bug bounties on #FreeSoftware projects to increase the #security of the #Internet! https://juliareda.eu/2018/12/eu-fossa-bug-bounties #FOSSA
bjoern's status on Wednesday, 02-Jan-2019 04:49:23 EST
In January, the #EU is launching bug bounties on #FreeSoftware projects to increase the #security of the #Internet! https://juliareda.eu/2018/12/eu-fossa-bug-bounties #FOSSA
rozzin: Conversations with kids, about #umwelt, #superpowers, and #infosec: "Why are they looking at me?" "Because they heard you fart." "Whhhhat do you mean?!?!" "Hearing people can hear farts." … https://www.jwz.org/blog/2018/11/tell-them-to-stop-listening-to-my-farts/ !education !parenting #poop !security
rozzin's status on Wednesday, 21-Nov-2018 13:55:42 EST
Conversations with kids, about #umwelt, #superpowers, and #infosec: "Why are they looking at me?" "Because they heard you fart." "Whhhhat do you mean?!?!" "Hearing people can hear farts." … https://www.jwz.org/blog/2018/11/tell-them-to-stop-listening-to-my-farts/ !education !parenting #poop !security
mmn: Recently I had to bypass the Factory Reset Protection on a #Nexus6 #Android. I'm astounded how badly #Google engineers implement security considering the reputation of their excellence: http://status.hackerposse.com/url/17861 !security !umehack
mmn's status on Wednesday, 10-Oct-2018 11:16:40 EDT
Recently I had to bypass the Factory Reset Protection on a #Nexus6 #Android. I'm astounded how badly #Google engineers implement security considering the reputation of their excellence: https://umeahackerspace.se/2018/10/08/bypassing-frp-factory-reset-protection-on-nexus-6-and-other-relatively-modern-android-phones/ !security !umehack
mmn: Recently I had to bypass the Factory Reset Protection on a #Nexus6 #Android. I'm astounded how badly #Google engineers implement security considering the reputation of their excellence: http://status.hackerposse.com/url/17861 !security
mmn's status on Wednesday, 10-Oct-2018 11:15:39 EDT
Recently I had to bypass the Factory Reset Protection on a #Nexus6 #Android. I'm astounded how badly #Google engineers implement security considering the reputation of their excellence: https://umeahackerspace.se/2018/10/08/bypassing-frp-factory-reset-protection-on-nexus-6-and-other-relatively-modern-android-phones/ !security
qbi: Welche Anleitung für die Einrichtung von #GnuPG würdet ihr Einsteigern in das Thema empfehlen? !verschluesselung !security
qbi's status on Friday, 23-Feb-2018 15:40:38 EST
Welche Anleitung für die Einrichtung von #GnuPG würdet ihr Einsteigern in das Thema empfehlen? !verschluesselung !security
kaveh: Automated Twitter phishing tool. https://github.com/omergunal/PoT !infosec !security
kaveh's status on Friday, 23-Feb-2018 07:42:32 EST
Automated Twitter phishing tool. https://github.com/omergunal/PoT !infosec !security
kaveh: PinMe, a novel user-location mechanism that exploits non-sensory/sensory data stored on the smartphone, e.g., the environment's air pressure, along with publicly-available auxiliary information, e.g., elevation maps, to estimate the user's location when all location services, e.g., GPS, are turned off. https://arxiv.org/abs/1802.01468 !infosec !security
kaveh's status on Friday, 23-Feb-2018 07:33:26 EST
PinMe, a novel user-location mechanism that exploits non-sensory/sensory data stored on the smartphone, e.g., the environment's air pressure, along with publicly-available auxiliary information, e.g., elevation maps, to estimate the user's location when all location services, e.g., GPS, are turned off. https://arxiv.org/abs/1802.01468 !infosec !security
kaveh: SSH-Audit, checks your SSH config and suggests improvements.https://github.com/arthepsy/ssh-audit !infosec !security
kaveh's status on Friday, 16-Feb-2018 14:37:43 EST
SSH-Audit, checks your SSH config and suggests improvements. https://github.com/arthepsy/ssh-audit !infosec !security
kaveh: What will the warrior-guardian of the future look like? !infosec !security https://mblog.kavehmoravej.com/attachment/2821
kaveh's status on Friday, 16-Feb-2018 14:31:38 EST
What will the warrior-guardian of the future look like? !infosec !security https://mblog.kavehmoravej.com/attachment/2821
rozzin: RT @qbi Call for action: Please send me an encrypted file! http://yaturl.net/1ce0 !security #encryption
rozzin's status on Thursday, 01-Feb-2018 12:26:28 EST
RT @qbi Call for action: Please send me an encrypted file! http://yaturl.net/1ce0 !security #encryption
qbi: Call for action: Please send me an encrypted file! http://yaturl.net/1ce0 !security #encryption
qbi's status on Thursday, 01-Feb-2018 10:43:07 EST
Call for action: Please send me an encrypted file! http://yaturl.net/1ce0 !security #encryption
qbi: Aufruf: Verschlüsselt eine Datei und schickt mir diese! War das leicht oder schwer? http://yaturl.net/1e1 !verschluesselung !security
qbi's status on Thursday, 01-Feb-2018 10:23:30 EST
Aufruf: Verschlüsselt eine Datei und schickt mir diese! War das leicht oder schwer? http://yaturl.net/1e1 !verschluesselung !security
qbi: #XSS mit einem #TLS-Zertifikat https://binaryfigments.com/2017/12/11/dont-trust-all-ssl-tls-certificates/ !security
qbi's status on Tuesday, 12-Dec-2017 06:35:12 EST
#XSS mit einem #TLS-Zertifikat https://binaryfigments.com/2017/12/11/dont-trust-all-ssl-tls-certificates/ !security
kuro: Gar nicht so sicher: Immer mehr #Phishing- Webseiten setzen auf #HTTPS https://is.gd/hVFBhE !security HTTPS richtig einschätzen
kuro's status on Friday, 08-Dec-2017 04:30:07 EST
Gar nicht so sicher: Immer mehr #Phishing- Webseiten setzen auf #HTTPS https://is.gd/hVFBhE !security HTTPS richtig einschätzen
kuro: Kommentar: Weg mit PGP, her mit alltagstauglicher Mail-Verschlüsselung https://is.gd/f85V0W !security
kuro's status on Saturday, 02-Dec-2017 05:11:25 EST
Kommentar: Weg mit PGP, her mit alltagstauglicher Mail-Verschlüsselung https://is.gd/f85V0W !security
qbi: Nutzt ihr #Exim als Mailserver? Macht schnellstens ein Update: http://seclists.org/oss-sec/2017/q4/325 !security !linux #RCE
qbi's status on Monday, 27-Nov-2017 03:05:58 EST
Nutzt ihr #Exim als Mailserver? Macht schnellstens ein Update: http://seclists.org/oss-sec/2017/q4/325 !security !linux #RCE
kuro: Zero Day Initiative: The November 2017 !Windows !Security Update Review https://is.gd/9qT36m comprehensive table of MS patchday
kuro's status on Wednesday, 15-Nov-2017 08:31:51 EST
Zero Day Initiative: The November 2017 !Windows !Security Update Review https://is.gd/9qT36m comprehensive table of MS patchday
kuro: Manipulating software to rig elections http://qttr.at/1zye via @ccc !security
kuro's status on Monday, 13-Nov-2017 07:59:25 EST
Manipulating software to rig elections http://qttr.at/1zye via @ccc !security
ghostdancer: The best single sentence explanation of what Intel ME is and the recent !security discovery : http://qttr.at/1zwe #hackernews
ghostdancer's status on Saturday, 11-Nov-2017 07:36:22 EST
The best single sentence explanation of what Intel ME is and the recent !security discovery : http://qttr.at/1zwe #hackernews
ghostdancer: Penetration testing has a new meaninghttps://gizmodo.com/if-your-vibrator-is-hacked-is-it-a-sex-crime-1820007951 !security #internetofshit
ghostdancer's status on Thursday, 02-Nov-2017 04:59:15 EDT
Penetration testing has a new meaninghttps://gizmodo.com/if-your-vibrator-is-hacked-is-it-a-sex-crime-1820007951 !security #internetofshit
aw's status on Wednesday, 01-Nov-2017 00:46:51 EDT
cc !security and !privacy
qbi: Warum HTTPS verwenden, wenn es auch anders geht … !security #tls https://twitter.com/troyhunt/status/925462678516019200
qbi's status on Tuesday, 31-Oct-2017 18:05:23 EDT
Warum HTTPS verwenden, wenn es auch anders geht … !security #tls https://twitter.com/troyhunt/status/925462678516019200
ghostdancer: #KRACK Wi-Fi #Attack: How to Protect our ESP8266 and ESP32? http://qttr.at/1zie !security
ghostdancer's status on Tuesday, 31-Oct-2017 11:01:44 EDT
#KRACK Wi-Fi #Attack: How to Protect our ESP8266 and ESP32? http://qttr.at/1zie !security
qbi: TLS fingerprints: https://tlsfingerprint.io/top/ !security !crypto
qbi's status on Monday, 30-Oct-2017 17:49:46 EDT
TLS fingerprints: https://tlsfingerprint.io/top/ !security !crypto
kuro: Firefox will nun endlich gegen Canvas-Fingerprinting vorgehen https://is.gd/jxwXZD !privacy !security
kuro's status on Monday, 30-Oct-2017 09:23:45 EDT
Firefox will nun endlich gegen Canvas-Fingerprinting vorgehen https://is.gd/jxwXZD !privacy !security
qbi: AORTA, ein transparenter Tor-Proxy für !Linux. !security !privacy https://hoevenstein.nl/aorta-a-transparent-tor-proxy-for-linux-programs
qbi's status on Saturday, 28-Oct-2017 10:59:51 EDT
AORTA, ein transparenter Tor-Proxy für !Linux. !security !privacy https://hoevenstein.nl/aorta-a-transparent-tor-proxy-for-linux-programs
qbi: Chromium will Public Key Pinning wieder abschaffen. !security https://quitter.se/url/4708490
qbi's status on Saturday, 28-Oct-2017 06:49:46 EDT
Chromium will Public Key Pinning wieder abschaffen. !security https://quitter.se/url/4708490
ao: !security Appearantly Google #ReCAPTCHA doesn't want e-mail and there is no contact form, so I can't report.
ao's status on Friday, 27-Oct-2017 11:57:36 EDT
!security Appearantly Google #ReCAPTCHA doesn't want e-mail and there is no contact form, so I can't report.
ao: !security Thanks to #uMatrix I hacked a #ReCAPTCHA test.
ao's status on Friday, 27-Oct-2017 11:41:46 EDT
!security Thanks to #uMatrix I hacked a #ReCAPTCHA test.
ghostdancer: !lineageos beats Google to the punch, fixes #KRACK WPA2 vulnerability in #android http://qttr.at/1z3o !security
ghostdancer's status on Wednesday, 18-Oct-2017 12:52:43 EDT
!lineageos beats Google to the punch, fixes #KRACK WPA2 vulnerability in #android http://qttr.at/1z3o !security
aw's status on Tuesday, 17-Oct-2017 19:33:35 EDT
!security