Cypherpunk @cypherpunk@mastodon.social

OnionShare 2.2 is out of development and working nicely. I'm able to host my personal website as an onion hidden service! woohoo!

https://github.com/micahflee/onionshare

I did need a little help from @mig5 to install it on Kubuntu 18.04 though [1]

(1) https://github.com/micahflee/onionshare/issues/1052#issuecomment-541990563

刺激🌚👎🏿
https://www.sudo.ws/alerts/minus_1_uid.html

Sweet irony: "Ransomware Gang's Victim Cracks Their Server and Releases All Their Decryption Keys" https://slashdot.org/story/362038

How to Protect Your Domain Name System From Hijacking https://readwrite.com/2019/10/11/how-to-protect-your-domain-name-system-from-hijacking/

@cypherpunk Working on it!

Currently preparing a milter for OpenPGP that allows sending out encrypted emails when all recipient (which for automated emails is usually just one) has a qualified OpenPGP key published. For now that means WKD, but more is planned. It's early early alpha and breaks on lots of occasions, but slowly getting there:

https://git.shivering-isles.com/shivering-isles/openpgp-milter

😳 After reading the mailvelope issue about PGP/MIME, I'm amazed to see how little people think about interoperability for this extension. (The people in the issue, not necessarily the developers of mailvelope.)

Seems like a lot of people are "yeah, just make it work for Gmail, I don't care about the rest".

It's a sad thing to see .-.

https://github.com/mailvelope/mailvelope/issues/41

/e/ vil corp ?
La firme ewwlo qui produit une version modifié de LineageOS n'est pas exempte de critique, en particulier de censurer toute critique négative à son égard sur son chat Telegram et de faire un fallback sur les DNS de google.

https://ewwlo.xyz/evil.html

Found on :
https://shivering-isles.com/First-impression-on-e

via @amolith

Landing concept for https://friendi.ca 🐰

Loosely based on joinmastodon.org.

Source & comments: https://gitlab.com/lostinlight/per_aspera_ad_astra/tree/master/friendica-landing

#Friendica in #Fediverse in #design | #alienswithears

Simjacker – 29 affected countries released:

https://www.adaptivemobile.com/blog/simjacker-frequently-asked-questions (question 3)

– In Europe, at least 1 mobile operator in Italy, Cyprus, and Bulgaria is/was affected.
– At least 61 mobile operators are/were affected worldwide.
– ~861 million SIM cards are affected according to the report.

#simjacker #vulnerability #smartphone #security #infosec #cybersecurity

Funny how nobody warning about DoH ever notices that "organisations" could indeed run their own DoH/DoT servers and implement any policy they like https://www.bleepingcomputer.com/news/security/dutch-govt-explains-the-risks-behind-dns-over-https-move/

Main limitation being of course that it would require ten year long transition program as your whole "organisational" DNS runs on some ancient crap commercial or cloud nameserver, who only heard about DoH/DoT in 2019 and it's just as new to them as say IPv6

Centralised #DoH is bad for privacy, in 2019 and beyond
https://blog.powerdns.com/2019/09/25/centralised-doh-is-bad-for-privacy-in-2019-and-beyond/

'Attorney General Bill Barr Will Ask Zuckerberg To Halt Plans For End-To-End Encryption Across Facebook's Apps' (via BuzzFeed News)

"We are writing to request that Facebook does not proceed with its plan to implement end-to-end encryption across its messaging services without ensuring that there is no reduction to user safety."

https://www.buzzfeednews.com/article/ryanmac/bill-barr-facebook-letter-halt-encryption

Choose a secure and private DNS provider

DNS / Domain Providers | privacytools.io

Don't let Google see all your DNS traffic. Discover privacy-centric alternatives to the traditional DNS providers.

https://www.privacytools.io/providers/dns/

~Open Source Security Tool of the Day~

#OSSTotD

Gather Open-Source Intelligence using PowerShell.

https://github.com/ecstatic-nobel/pOSINT/blob/master/README.md

7 Ways VPNs Can Turn from Ally to Threat https://www.darkreading.com/cloud/7-ways-vpns-can-turn-from-ally-to-threat/d/d-id/1335833

Intro to ActivityPub Conference Praha 2019 by Morgan Lemmer Webber #apconf https://conf.tube/videos/watch/ff347f97-eac2-41fa-90fa-74098fcd7029

Nextcloud – Android client 3.8 comes with new security features:

https://nextcloud.com/blog/nextcloud-android-client-3.8-with-u2f-tls-1.3-remote-wipe-and-more/

– U2F support for login
– support for TLS 1.3
– Remote Wipe: users can delete all the data of their devices from the Nextcloud web UI

#nextcloud #tls13 #u2f #wipe #security #infosec #cybersecurity