Another day another rootkit. There was an interesting exploit made public couple days ago, that allows attacker to stay hidden from view point of Windows subsystems in charge of security while having quite a bit of an access to that PC and of course company that identified ability to exploit offering their services to protect PC's ... quite suspicious ... https://thehackernews.com/2021/09/a-new-bug-in-microsoft-windows-could.html
If anyone still had an illusion that social media platforms are about purpose, social good, here is article for you. They only care about ways to exploit networking effect for as long as it increases their bottom line, thus people with large audience, politicians and etc are exempts from rules defined by platforms. Rules are for regular people and people are just a product being packaged and sold to advertisers. Ethiork helps you break free of those giants. https://www.wsj.com/articles/facebook-files-xcheck-zuckerberg-elite-rules-11631541353?st=g3pys94rcdk8h9r&reflink=share_mobilewebshare
Microsoft disclosed Zero-Day vulnerability 2 days ago about remote code execution that is exploited through specially crafted MS Office documents. Please be careful and better refrain from opening any docs from untrusted sources. It sounds like actively exploited targeted attack. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444
I've been a fan of #Mycroft for a while now, but I recently learned some things they're involved with that I was completely unaware of. Maybe that's my fault for not paying attention, or maybe they could use some help in the PR department.
They've scored a contract with #NASA for various "space" related projects which sound interesting.
They've been working with Tree Industries on #Ezra EA to develop voice technologies for classrooms.
Security poverty line. Many organizations fell behind it with more sophisticated threat actors out there. However organizations can buy their way out of it with more investments. What about individual consumers? Are the products that suitable for consumers? Are they stuck with big tech companies and their "free" products. That's why we started Ethiork project, to give individuals a hand to raise above security poverty line. https://www.ethiork.com/
Holidays are usually sweet spot for threat actors, because it's easy to go undetected over extended holidays. There is no sleep people involved in cybersecurity :( here is advisory from CISA and FBI https://us-cert.cisa.gov/ncas/alerts/aa21-243a
... accidental typo in nmap scan leads to scanning of majority of network infrastructure, which leads to finding some unexpected ports on several host, which leads to a witch hunt unleashing wide variety of tools on to those hosts ... just to confirm that everything runs as expected ... as a result all tools on offensive security box has gotten most recent updates and skills brushed off ...
Those who still live under impression that data anonymization which tech giants tooting while selling your data left and right works read this article: https://nypost.com/2021/07/25/reporting-that-outed-catholic-priest-reveals-data-is-not-private/
Just pay close attention to "how" they investigate rather than what is reported. There are also articles from NY Times
Your data is valuable, stop giving it away for free. #privacy
Doing what's right is always more expensive that just brushing symptoms on the surface.
ICYMI: We just had our August 2021 Community Update!
We announced the PineNote: a high-end e-ink device powered by the same SoC as the Quartz64.
We also went into detail on upcoming hardware and software updates for PinePhone, Pinebook Pro, and Pinetime.
Humanity as a whole is really good at finding solutions, but a terrible at root cause analysis, so we often would end-up remediating symptoms rather than solving problem. Private companies are quick to come up with new product and keep progress running at a stunning pace, but they can't solve the problems as their focus will be on symptoms that are on the surface, because those are visible to their shareholders, which put company and directors under high pressure.
At the beginning of the century we as a society accepted that internet is our future and now it has become irreplaceable. Today coffee makers, dishwashers and other devices from our home are connected to the Internet, so it's time for Zero Trust. Government already realized importance of this concept hard way, time to take embrace it on a personal level. https://info.summit7systems.com/blog/the-evolution-to-zero-trust #cybersecurity #zerotrust
We've also submitted it to Product Hunt 😃
The official #Mastodon app for iOS is now on the App Store! Get it here:
"The Federal Trade Commission unanimously voted Wednesday to pursue policies that will make it easier for people to repair their own things." https://www.vice.com/en/article/k78xbn/ftc-formally-adopts-right-to-repair-platform
What are the alternatives to the walled garden of big tech? Have your own castle where you and your rights are respected. Read why Purism is built with security, privacy and freedom in mind 🌎 https://puri.sm/posts/defending-against-spyware-like-pegasus/