Cypherpunk @cypherpunk@mastodon.social

Tonight: #FreeBSD workshop

Topic of the day is CBSD and Reggae projects and services

We start at 20h CET at https://tilda.center/live (the link will be active from 19:45)

Workshop language: English

See ya!

ALPACA: Security Alert New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites

Additional Info
the victim needs to fall for some sort of trick, getting them to open a malicious website

Source:
https://alpaca-attack.com/

#infosec #netsec #security #tls

Global Law Enforcement Convention Weakens #Privacy & Human Rights

https://www.eff.org/deeplinks/2021/06/global-law-enforcement-convention-weakens-privacy-human-rights

We are hiring!
Are you an expert at JavaScript? Would like to work on cryptocurrency integration with Node.js? Passionate about Basic Income and Decentralization? If so, find out how you can apply to join @Group_Income 🙌

Job description: groupincome.org/pos-crypto-integration

#hiring #job #JavaScript #NodeJS #cryptocurrency #basicincome
#decentralization

Experts unclear how Australian encryption laws were used in global crime bust

https://www.theage.com.au/politics/federal/experts-unclear-how-australian-encryption-busting-laws-were-used-in-global-crime-bust-20210609-p57zga.html

Thousands of Chrome extensions are tampering with security headers
https://web.archive.org/web/20210527043951/https://therecord.media/thousands-of-chrome-extensions-are-tampering-with-security-headers/

25th Anniversary of Onion Routing https://invidious.snopyta.org/watch?v=-wbivkG8TcU #Tor

🚀 CryptPad 4.6.0 is now live on cryptpad.fr!

This version increases overall stability and addresses many minor issues. No major new features as the team is busy with initial work for our upcoming Forms app.

Some improvements for instance administrators: better diagnostics on the /checkup/ page, more settings moved from config files to the admin panel. Full details in the release notes: https://github.com/xwiki-labs/cryptpad/releases/tag/4.6.0

~Open Source Security Tool of the Day~

#osstotd

dockerscan: A Docker analysis & hacking tools

https://github.com/cr0hn/dockerscan/

~Open Source Security Tool of the Day~

#osstotd

Jenkins Attack Framework

Accenture has released Jenkins Attack Framework (JAF), a new tool aimed at pen testers and red teamers that can reveal ways in which the popular automation server can be abused.

Jenkins is an open source CI/CD pipeline that allows developers to rapidly build, test, and deploy their code. The DevOps tool often stores powerful credentials, proprietary code, and more.

https://portswigger.net/daily-swig/jenkins-attack-framework-new-tool-helps-uncover-little-known-vulnerabilities-in-ci-cd-environments

Cryptography Dispatches: OpenSSH 8.2 Just Works with U2F/FIDO2 Security Keys • Buttondown

https://buttondown.email/cryptography-dispatches/archive/cryptography-dispatches-openssh-82-just-works/

Too little, too late. Just use Bitwarden.

The wait is over. 1Password for Linux is officially here.

https://blog.1password.com/welcoming-linux-to-the-1password-family/

Security keys are now supported for SSH Git operations

You can now use FIDO2 security keys to authenticate over SSH for remote Git operations, providing a higher level of account security.

https://github.blog/2021-05-10-security-keys-supported-ssh-git-operations/

The newly published WiFi FragAttacks are worrisome, but folks can protect themselves somewhat until devices get patched/replaced.

"Using a VPN can prevent attacks where an adversary is trying to exfiltrate data. It will not prevent an adversary from bypassing your router's NAT/firewall to directly attack devices."

And use TLS *everywhere*

https://arstechnica.com/gadgets/2021/05/farewell-to-firewalls-wi-fi-bugs-open-network-devices-to-remote-hacks/

Researchers Uncover Stealthy Linux Malware That Went Undetected for 3 Years https://thehackernews.com/2021/04/researchers-uncover-stealthy-linux.html

- Fediverse.Party - explore federated networks

Making social media free, federated and fun!

https://fediverse.party/en/miscellaneous

excellent article about counting possible passwords and excellent python code too

https://mathspp.com/blog/counting-passwords-with-automatons

https://github.com/RojerGS/projects/tree/master/automatons