Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  • privacydigest@mas.toundefined

    Why #ICE Can #Kill With Impunity

    Uncategorized trump rights security criminal immigration kill ice
    1
    0 Votes
    1 Posts
    7 Views
    privacydigest@mas.toundefined
    Why #ICE Can #Kill With ImpunityOver the past decade, US #immigration agents have shot and killed more than two dozen people. Not a single agent appears to have faced #criminal charges.#ice #security #rights #Trump https://www.wired.com/story/why-ice-can-kill-with-impunity/
  • kubikpixel@chaos.socialundefined

    Free Open-Source Whistleblower Platform Without Self-Hosting

    Uncategorized whisteleblower hashline security free report e2ee encryption selfhosting
    2
    0 Votes
    2 Posts
    9 Views
    kubikpixel@chaos.socialundefined
    Securedrop — Share and accept documents securely.SecureDrop is an open source whistleblower submission system news organizations can install to safely and anonymously receive documents and tips from sources. It is used at over 60 news organizations worldwide.📦 https://securedrop.org @securedrop#securedrop #whisteleblower #hashline #security #free #report #e2ee #encryption #selfhosting #anonymous #journalism #lawers #employ #opensource #freedom
  • tutanota@mastodon.socialundefined

    In 2025, the German #BSI launched the Year of #Email #Security recommending Tuta Mail.🇩🇪 ❤️

    Uncategorized bsi email security privacy
    1
    1
    0 Votes
    1 Posts
    4 Views
    tutanota@mastodon.socialundefined
    In 2025, the German #BSI launched the Year of #Email #Security recommending Tuta Mail.🇩🇪 ❤️In 2026, we call for a year on end-to-end encryption in email - so they stop recommending Gmail & Co as well. 🔒 #privacy #security
  • mklahs@mastodon.socialundefined

    #introduction Hello fedi!

    Uncategorized introduction risk compliance security privacy foss cats pizza
    1
    0 Votes
    1 Posts
    6 Views
    mklahs@mastodon.socialundefined
    #introduction Hello fedi! Used a "lurking" account for about a year now, decided to start over properly. #Risk, #compliance, #security, #privacy guy by day, #foss, #cats, #pizza, #grunge by night. #Polish #European So far, I found this place to be what a healthy community should look like - inclusive, diverse, and passionate. Just a bunch of wonderful humans exchanging knowledge, thoughts, and views, without the toxicity, tribalism, or algorithms.Let's see what troubles we get into! ❤️
  • flub@mastodon.socialundefined

    From somewhere at #39c3

    Uncategorized 39c3 quantum cryptography security
    1
    1
    0 Votes
    1 Posts
    4 Views
    flub@mastodon.socialundefined
    From somewhere at #39c3#quantum #cryptography #security
  • pitrh@mastodon.socialundefined

    Friends, at the end of a horrible year, please let's talk about something *nice*.

    Uncategorized freesoftware openbsd freebsd bookofpf networking security deveops development
    1
    0 Votes
    1 Posts
    4 Views
    pitrh@mastodon.socialundefined
    Friends, at the end of a horrible year, please let's talk about something *nice*.My EUR 0.02: You Have Installed OpenBSD. Now For The Daily Tasks. https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html (tracked https://bsdly.blogspot.com/2024/09/you-have-installed-openbsd-now-for.html)Bonus track: Yes, The Book of PF, 4th Edition Is Coming Soon https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html (tracked https://bsdly.blogspot.com/2025/07/yes-book-of-pf-4th-edition-is-coming.html)#freesoftware #openbsd #freebsd #bookofpf #networking #security #deveops #development #sysadmin @nostarch
  • wuzzy@cyberplace.socialundefined

    The #Rowhammer talk at #CCC is basically a tradition at this point.

    Uncategorized rowhammer ccc 39c3 hacking security
    1
    0 Votes
    1 Posts
    1 Views
    wuzzy@cyberplace.socialundefined
    The #Rowhammer talk at #CCC is basically a tradition at this point.So obviously it has returned to #39C3 and if I understood it right their conclusion was that 12.5% of RAMs (that they tested) are vulnerable to automated #Rowhammer attacks. Ouch!#CCC #hacking #security
  • oots@infosec.exchangeundefined

    The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too.

    Uncategorized 39c3 bluetooth phone whatsapp amazon youcannotbeparanoideno security
    1
    0 Votes
    1 Posts
    6 Views
    oots@infosec.exchangeundefined
    The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the #Bluetooth address and "master" encryption keys used for the communication with paired devices (e.g. a #phone).Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.Then they started recovering access a #WhatsApp account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.As the cherry on top, they escalated into the victim's #Amazon account.Scary shit. #YouCannotBeParanoidEnough #security
  • gtbarry@mastodon.socialundefined

    Amazon Catches North Korean IT Worker by Tracking Tiny 110ms Keystroke Delays

    Uncategorized amazon northkorea security cybersecurity hackers hacking
    1
    0 Votes
    1 Posts
    6 Views
    gtbarry@mastodon.socialundefined
    Amazon Catches North Korean IT Worker by Tracking Tiny 110ms Keystroke Delays A slight delay in keystrokes from a supposed U.S.-based IT worker alerted Amazon to a North Korean infiltrator accessing a corporate laptop.Latency analysis, behavioral monitoring, and traffic forensics aren’t just for threat hunters—they’re frontline defenses against nation-state grifters.#amazon #northkorea #security #cybersecurity #hackers #hackinghttps://cybersecuritynews.com/amazon-catches-north-korean-it-worker/
  • grahamperrin@mastodon.bsd.cafeundefined

    Escaping Containment: A Security Analysis of FreeBSD Jails

    Uncategorized freebsd security jails ccc
    1
    0 Votes
    1 Posts
    6 Views
    grahamperrin@mastodon.bsd.cafeundefined
    Escaping Containment: A Security Analysis of FreeBSD Jails16:15 GMT, UCT, UTC Saturday 2025-12-27https://events.ccc.de/congress/2025/hub/en/event/detail/escaping-containment-a-security-analysis-of-freebsd-jails @CCC #FreeBSD #security #jails #ccc
  • hollo@hollo.socialundefined

    ### Security Update: Hollo 0.6.19 Released

    Fediverso hollo security fediverse activitypub
    3
    0 Votes
    3 Posts
    15 Views
    hollo@hollo.socialundefined
    セキュリティアップデート: Hollo 0.6.19 リリース FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。 この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。 すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。 項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード #Hollo #セキュリティ #fediverse #ActivityPub
  • fedify@hollo.socialundefined

    ### 🚨 Security Advisory: CVE-2025-68475

    Fediverso fedify fedidev security fediverse activitypub
    1
    1 Votes
    1 Posts
    6 Views
    fedify@hollo.socialundefined
    🚨 Security Advisory: CVE-2025-68475 A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses. CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ≤1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2 If you're running Fedify in production, please upgrade to one of the patched versions immediately. For full details, see the security advisory: https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93 Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability. #Fedify #ActivityPub #security #fediverse #fedidev
  • jprjr@mastodon.socialundefined

    I think I was just the target of a fairly sophisticated phishing attempt.

    Uncategorized security phishing
    5
    0 Votes
    5 Posts
    1 Views
    jprjr@mastodon.socialundefined
    Dude had my phone number, my name, sounded really nice and everything. Spoke professionally, no crackly audio from being in a cheap data center, nothing.But also - since when does Google call you? And over trying to add a recovery address? The email itself says "if this doesn't look familiar just ignore it."Scary stuff.
  • tutanota@mastodon.socialundefined

    The German #BSI has made 2025 the Year of #Email #Security

    Uncategorized bsi email security
    1
    1
    0 Votes
    1 Posts
    3 Views
    tutanota@mastodon.socialundefined
    The German #BSI has made 2025 the Year of #Email #SecurityGreat initiative - and great rating for Tuta ❤️ - your secure email provider from Germany. 🇩🇪 https://www.bsi.bund.de/DE/Themen/Kampagne-einfach-absichern/EMSJ/Eckpunkte_EMSJ/Eckpunkte-EMSJ.html
  • generalx@freeradical.zoneundefined

    Calyx Institute is hiring an Android BSP engineer.

    Uncategorized calyx calyxos android foss hiring getfedihired privacy security
    1
    0 Votes
    1 Posts
    4 Views
    generalx@freeradical.zoneundefined
    Calyx Institute is hiring an Android BSP engineer. $80-90k full-time salaried.Act fast! Application deadline is 5PM EST Wed December 10, 2025. Start date February 2026.(I have no connection to the hiring manager, just passing along the opening)https://job-boards.greenhouse.io/calyxinstitute/jobs/4934856007#calyx #calyxos #android #foss #hiring #getfedihired #privacy #security
  • privacydigest@mas.toundefined

    We’re Doubling Down on #DigitalRights.

    Uncategorized security privacy donation rights surveillance encryption freedom authoritarian
    1
    0 Votes
    1 Posts
    5 Views
    privacydigest@mas.toundefined
    We’re Doubling Down on #DigitalRights. You Can, Too.Technology can uplift #democracy , or it can be an #authoritarian weapon. @eff is making sure it stays on the side of #freedom. We’re defending #encryption , exposing abusive #surveillance tech, fighting government overreach, and standing up for free expression. But we need your help to protect digital #rights —and right now, your #donation will be matched dollar-for-dollar.#privacy #securityhttps://www.eff.org/deeplinks/2025/11/power-your-donation-week
  • nostarch@mastodon.socialundefined

    Your offensive-security library, ready to go.

    Uncategorized hacking books offensive security
    1
    1
    0 Votes
    1 Posts
    5 Views
    nostarch@mastodon.socialundefined
    Your offensive-security library, ready to go.18 DRM-free books. $700+ value. Pay what you want (as little as $36).Includes Black Hat Bash, Serious Cryptography, Practical Malware Analysis, and more.Support the @eff and level up your lab. Link in bio.https://www.humblebundle.com/books/hacking-no-starch-books #hacking #books #offensive #security
  • tomgag@infosec.exchangeundefined

    Oh, this is so f***ing gold.

    Uncategorized matrix jabber xmpp signal privacy security enshittification
    1
    0 Votes
    1 Posts
    6 Views
    tomgag@infosec.exchangeundefined
    Oh, this is so f***ing gold. This post is a juice concentrate of the many reasons why Matrix sucks:https://yaky.dev/2025-11-30-self-hosting-matrix/Among others:Users cannot be deletedThis is simply not an option in the API. Server admin can perform a "deactivate" (disable login) and "erase" (remove related data, which claims to be GDPR-compliant) on user accounts, but the accounts themselves stay on the server forever.LOL.Here is my take on why you should trash Matrix and use XMPP, or ta least Signal instead:https://gagliardoni.net/#im_battle_2025#im #matrix #jabber #xmpp #signal #privacy #security #enshittification #cypherpunk
  • freebsdfoundation@mastodon.socialundefined

    FreeBSD Now Builds Reproducibly and Without Root Privilege

    Uncategorized freebsd reproduciblebuilds opensource security
    1
    1
    0 Votes
    1 Posts
    9 Views
    freebsdfoundation@mastodon.socialundefined
    FreeBSD Now Builds Reproducibly and Without Root PrivilegeWe’re pleased to share that the FreeBSD Project now supports builds without requiring root privileges, removing elevated access from the release pipeline and improving overall security. This work was completed as part of a program commissioned by the Sovereign Tech Agency.Read more: https://freebsdfoundation.org/blog/freebsd-now-builds-reproducibly-and-without-root-privilege/#FreeBSD #ReproducibleBuilds #OpenSource #Security
  • simplenomad@rigor-mortis.nmrc.orgundefined

    Yet another #security related job opening at my employer, #GitLab.

    Uncategorized security gitlab infosec allremote
    1
    0 Votes
    1 Posts
    6 Views
    simplenomad@rigor-mortis.nmrc.orgundefined
    Yet another #security related job opening at my employer, #GitLab. Apply if interested, and if we know each other let me know and I can pass on a recommendation.https://job-boards.greenhouse.io/gitlab/jobs/8295708002#infosec #AllRemote

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti