Sergey Shkundaleu @archit3ct@social.ssbx.dev

This is just pure censorship, neither Twitter nor Facebook had any "rights" to disable account of the US President. Though on the other hand they are private corporations, as such you can never be free on their platforms, they just milking you for profit, that's why you reading this post as a picture from s platform where I can freely express my opinion. https://www.theguardian.com/us-news/2021/jan/06/facebook-twitter-youtube-trump-video-supporters-capitol

Apparently NYSE think they are above all laws, they just decided to openly defy goverment of the country where they operate. So what's next? https://apnews.com/article/donald-trump-business-beijing-hong-kong-china-62d75b7e694351be46d7e27039709bf6

That's interesting, according to researchers they had all sound effects and vibrations disabled on tested devices. https://threatpost.com/hey-alexa-who-messaging/162587/

Here we go again, ages before Zyxel was considered a good manufacturer of 56K modems :) very stable and now fast forward to 2020 ... default admin account hardcoded in firmware, seriously after incident back in 2016 ... https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/

Here is really nice project that is intended to create database of trackers, i.e. companies that track people for profits https://guardianproject.info/2020/12/11/%CE%B5xodus-etip-the-canonical-database-for-tracking-trackers/

@purism I would say it has been concern for several years, it's just has been ignored by entire industry and with SolarWind it has made it to a front page and companies started to pay attention to people who has previously raised those concerns.

Merry Christmas!!!

Surveillance capitalism at it's core, government should stop trying to regulate tech giants and start protecting people's privacy by requiring explicit consent for each transaction where personal information changes hands. https://gizmodo.com/your-credit-score-should-be-based-on-your-web-history-1845912592

As much as sales ppl from Cellebrite are trying to represent their system as real innovation it's nothing more than just an automation of manual work and only works when phone is fully unlocked. It's not even trying to break anything, by the way breaking into device without warrant is a crime and they know it. More details here in a blog post from Signal's team https://signal.org/blog/cellebrite-and-clickbait/

Interesting case, thought I have few questions, especially how SMS messages were stolen in real time, malware, or was it sim swaps at scale? https://www.wired.com/story/massive-fraud-operation-stole-millions-online-bank-accounts/

Just relaunched my blog on a new platform, which is GitHub Pages. As for URL it's still the same https://sergeysh.com/

Some more details of SolarWind's hack had surfaced recently, and those details aren't pretty. It shows how important it is to secure you software development life cycle and all aspects related to distribution of your software. https://thehackernews.com/2020/12/new-evidence-suggests-solarwinds.html

Example when bad guys use free tools to commit their crimes. https://thehackernews.com/2020/12/wormable-gitpaste-12-botnet-returns-to.html

One of my favorite quotes applicable to software development: "First solve the problem, then write the code" and it is sad when younger generation of devs can't grasp meaning of such quote. That's where many security problems arise from, devs pushing something out of the door, just to check a box, on the other hand at some companies had screwed up their KPI's , so fixing 2 defects in a week would appear better, than taking a week to properly resolve 1st without introducing 2nd.

Messaging is such a crowded space, however I believe Signal is doing work that important for everyone. Video chat group calling feature has become available recently. https://signal.org/blog/group-calls/

This unethical behavior is so typical for business these days, especially when there is no immediate ROI on effort to patch vulnerable systems ... I guess those people will never learn. https://threatpost.com/unpatched-iot-ot-devices-threaten-critical-infrastructure/162275/