Cypherpunk @cypherpunk@mastodon.social

The #SmallWeb is Beautiful: A Study of Web Development as if People Mattered. https://benhoyt.com/writings/the-small-web-is-beautiful

#Go #malware is now common, having been adopted by both APTs and e-crime groups

https://www.zdnet.com/article/go-malware-is-now-common-having-been-adopted-by-both-apts-and-e-crime-groups/

~Open Source Security Tool of the Day~

#osstotd

Tracee: Linux Runtime Security and Forensics using eBPF

Tracee is a Runtime Security and forensics tool for Linux. It is using Linux eBPF technology to trace your system and applications at runtime, and analyze collected events to detect suspicious behavioral patterns.

https://github.com/aquasecurity/tracee

"Developers and Open Source authors now have a massive amount of services offering free tiers, but it can be hard to find them all to make informed decisions.

This is a list of software (SaaS, PaaS, IaaS, etc.) and other offerings that have free tiers for developers."

https://free-for.dev/

NeoChat, KDE's native Matrix chat client, is out and comes with a new login page that detects the server configuration from your ID, stickers, message editing, and much more. Check out all that's new at https://carlschwan.eu/2021/02/23/neochat-1.1/

Online pcap file analyzer
Allow read pcap file and analyze IPv4/IPv6, HTTP, Telnet, FTP, DNS, SSDP, WPA protocols, build map of network structure and nodes activity graph, sniff and analyze network traffic and other pcap data.

Analyse pcap files to view HTTP headers and data, extract transferred binaries, files, office documents, pictures.

https://apackets.com/

In terms of scenarios I think we should be considering things like:

What would happen if LetsEncrypt went away tomorrow? Is it really true that there's an alternative which everyone could seamlessly move over to? If not, then what pressures would that create for the open web?

I suggest Bitwarden for those ready to migrate

LastPass’ free tier will become a lot less useful next month

https://www.theverge.com/2021/2/16/22285531/lastpass-free-tier-mobile-computer-device-premium-family

We're happy to support journalists together with DataJournalism and the European Journalism Centre to stay secure in today's online world! 😀
https://datajournalism.com/read/longreads/privacy-day-security-guide

What is the difference between shared clients DSA and shared clientshttps://www.reddit.com/r/i2p/comments/lkcnwg/difference_between_shared_clients_dsa_and_shared/

To all the priceless people, communities, organisers, speakers, volunteers, journalists, and participants of great #FOSS events around the world and online: Happy I love Free Software day!

#IloveFS @fsfe

This year's Free Software Day I send a big shout out to #andOTP maker @flocke and to the guys at password manager #Bitwarden. Both are building awesome software that keeps all of us safe. Thank you! #ilovefs

Heads up #Fediverse

@k9mail is looking for funding to maintain their popular #android mail app. #k9mail hopes to raise €1,000 p/w on #liberapay to be able to work fulltime on the project.

https://k9mail.app/2021/02/14/K-9-Mail-is-looking-for-funding

@PINE64 #PinePhone running @postmarketOS with #Phosh and #ModemManager will soon ring immediately when you get a call or text from suspend!

@dylanvanassche @PINE64 @postmarketOS #impressed

Mitigating Web Shells

This repository houses a number of tools and signatures to help defend networks against web shell malware. More information about web shells and the analytics used by the tools here is available in NSA and ASD web shell mitigation guidance Detect and Prevent Web Shell Malware.

https://github.com/nsacyber/Mitigating-Web-Shells

Try playing: https://www.maths.manchester.ac.uk/cryptography_competition/problem.php?index=1
1. and 2. should be easily solvable. 3. is harder, but solution is really awesome. I am attacking 4. now:)

@liaizon@social.wake.st @jalcine@todon.eu

...because too many people kept promoting Matrix

Sad and probably accurate.

On the other side, you have Disroot finally shutting down their Matrix server at the end of last year.