Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

I'm back in #Zimbabwe for work.

Uncategorized
4 2 17

Gli ultimi otto messaggi ricevuti dalla Federazione
Post suggeriti
  • 0 Votes
    1 Posts
    7 Views
    The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the #Bluetooth address and "master" encryption keys used for the communication with paired devices (e.g. a #phone).Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.Then they started recovering access a #WhatsApp account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.As the cherry on top, they escalated into the victim's #Amazon account.Scary shit. #YouCannotBeParanoidEnough #security
  • 0 Votes
    1 Posts
    3 Views
    Others could learn a lot from this. 🤓https://itsfoss.com/news/german-state-ditch-microsoft/#opensource #germany #microsoft
  • 0 Votes
    1 Posts
    11 Views
    A surprising amount can be read from the data, and for some users, it can be life-threatening.The entire WhatsApp profile database (including correlatable phone numbers and face photos) leaked.https://www.heise.de/en/news/3-5-Billion-Accounts-Complete-WhatsApp-Directory-Retrieved-and-Evaluated-11083244.html#Privacy #WhatsApp #Databreach
  • 0 Votes
    1 Posts
    13 Views
    Microsoft Azure blocca un attacco DDoS di 15,72 terabit al secondo📌 Link all'articolo : https://www.redhotcyber.com/post/microsoft-azure-blocca-un-attacco-ddos-di-1572-terabit-al-secondo/Un #attacco DDoS di enormi proporzioni, è stato neutralizzato da #Microsoft Azure il 24 ottobre. Un solo #endpoint situato in Australia è stato preso di mira dall’attacco, che ha raggiunto una velocità massima di 15,72 terabit al secondo (Tbps) e ha comportato la #gestione di quasi 3,64 miliardi di pacchetti al secondo. A cura di Redazione RHC#redhotcyber #news #microsoftazure #attacchoddos #recordditrafficodannoso #botnetaisuru #malwaremirai #difesacibernetica #cybersecurity #hacking #malware #ddosattack #azuresecurity #cibernetica