marc0s @marc0s@mastodon.social

We have some exciting news! The team at Purism are thrilled to announce the launch of Librem One https://librem.one Private and secure email, chat, social and VPN. #LibremOne

Our Primary account is now https://social.librem.one/@purism

RT @odtorson@twitter.com

My new hobby: launching vim in full screen mode at the Apple store

🐦🔗: https://twitter.com/odtorson/status/1122504267733065730

Mozilla is shutting down their IRC servers and moving to Discord, a proprietary chat service.

Hey Mozilla, aren't we forgetting something here? Our very own "Mozilla Pledge for a Healthy Internet” states:

> Principle 2 The internet is a global public resource that must remain open and accessible.

> Principle 6 The effectiveness of the internet as a public resource depends upon interoperability (protocols, data formats, content), innovation and decentralized participation worldwide.

Docker Hub Hacked – 190k accounts, GitHub tokens revoked, Builds disabled https://news.ycombinator.com/item?id=19763413

2+ million IoT devices vulnerable to man-in-the-middle attacks, allowing attackers to steal passwords:

https://hacked.camera/

– the website contains a list, so you can check if your devices are vulnerable
– CVE-2019-11219, CVE-2019-11220
– mitigation: dispose your vulnerable devices, or block OUTBOUND traffic to 32100/udp

#iot #vulnerability #cve201911219 cve201911220 #infosec #mitm #cybersecurity #security

Heads up to all #Riot users: with the recent attack on @matrix' infrastructure, it's possible that Riot's Google Play version got compromised. This doesn't affect Riot's F-Droid version. Just as Riot started to do now, F-Droid has always signed all its apps on an inaccessible, offline machine. For more information, see https://riot.im/reinstall

To avoid maintenance overhead, however, it's likely to happen that F-Droid users must also change the app in near future. Still, there's no need to act now.

Hi, here's our April Progress Update for the Librem 5:
https://puri.sm/posts/april-progress-update-librem-5-hardware/

Introducing Node.js 12 https://medium.com/p/76c41a1b3f3f

Goffi
@goffi

#XMPP should not be seen as a single protocol "for IM", but as a coordination of coherent protocols, see my FOSDEM talk about it

https://mirror.as35701.net/video.fosdem.org/2019/H.1309/xmpp_beyond_im.webm

someone tell this to the infosec industry please
image.png

More #matrix troubles, now w/ the #French government's instance,

https://thehackernews.com/2019/04/france-Tchap-secure-messenger.html

#hacking #messaging

OpenSSH 8.0 available:

https://www.openssh.com/txt/release-8.0

– contains mitigations for an scp vulnerability (CVE-2019-6111)
– adds experimental post-quantum key exchange method, based on a combination of Streamlined NTRU Prime 4591^761 and X25519
– increases the default RSA key size to 3072 bits
– includes several bug fixes

#openssh #ssh #infosec #security #cybersecurity #postquantum #crypto #x25519 #rsa

It's Follow Friday! #ff #followFriday

@ansuz - Creator of @cryptpad, an awesome open source encrypted alternative to Google Docs!

@tom79 - Fedilab developer who is adding first class pixelfed support to the mobile app!

@Curator - Curator/Admin of https://mastodon.art, a great instance for artists of the fediverse!

@switchingsocial@mastodon.at - An amazing collection of ethical, easy-to-use and privacy-conscious alternatives

Facebook always in the news. This time: Millions of passwords of Instagram users stored in plaintext:

https://thehackernews.com/2019/04/instagram-password-plaintext.html

– millions of plaintext passwords of Instagram and Facebook users were accessible to Facebook
– besides, Facebook stored 1.5 million records of users without their consent or knowledge

#facebook #instagram #privacy #password #infosec #cybersecurity #security

Ola Bini #softwarelibre​aren, #pribatutasuna​ren eta #jakintzaaskea​ren aldeko ekintzalea da. Ekuadorreko poliziak apirilaren 11an atxilotu zuen Japoniara zihoan hegazkin bat hartu behar zuenean eta irregulartasun nabarmenak aurkitu dituzte bere atxiloketan. Software librearen aldeko komuniateak bere askatasuna exijitzeko kanpaina hasi du: https://freeolabini.org/es/statement/

Ola Bini (ere) gure laguna da eta gaur egun Ekuadorreko injustiziaren preso politikoa da! Bihar gu izan gintezke #freeolabini

Check out what's on PeerTube's 2019 Roadmap

There's a lot of cool stuff in the works for PeerTube's 2019 development plans. https://wedistribute.org/2019/04/check-out-whats-on-peertubes-2019-roadmap/

PSA: If the solution does not involve pizza and beer I'm not interested in the problem.