Show newer

Going to the rabbit hole ... sat down to write a new blog post, as a result decided to transfer my blog to a new platform. Been using Blogger platform for a while, and wondered if it can be easier to use, as a result stumbled upon combination of Jekyll and GitHub Pages. After a transfer my blog it going to be just a code on a GitHub that can be managed from console. Here is quick glimpse.

Some one wrote malware in Delphi, such an unusual choice, I bet it was quite large and slow. However it explains connections, Delphi and Pascal are the languages kids usually study at school in post soviet countries. thehackernews.com/2020/12/russ

Facebook has a lot of weight, but it kind of fishy when they uncovering state sponsored hackers conviniently in the place where they having problems with government. reuters.com/article/facebook-v

I guess MS Teams going through some growing pains, more users it has more often people will attempt to exploit it. thehackernews.com/2020/12/zero

💜 TODAY! @ Dec 11, 18:00 UTC / 13:00 Eastern / 10:00 Pacific. Edward Snowden will host Tor’s third PrivChat, a fundraising livestream & conversation with human rights defenders + real-life Tor users Alison Macrina, Ramy Raoof, & Berhan Taye. #UseAMaskUseTor

📺 Set your reminder!
youtu.be/S2N3GoewgC8

MySQL is one of the widely used database servers, and it looks like has been an interesting target for cyber criminal. This year pandemic has changed the way we live and in many areas those changes are permanent, so many companies were faced with attacks on their data assets. threatpost.com/please_read_me-

Whether you will break some benemoth corporation into smaller piece or not that won't protect privacy of their users, those who are in behavioral advertisement business and want to exploit people can still do that just on a smaller scale, users have no other choice, but to run social network themselves. wired.com/story/facebook-ftc-a

Breaking into to steal tools is an interesting approach, however I think most importantly bad guys were after information on how to avoid detection by those tools or how to protect their systems against those tools. www-nytimes-com.cdn.ampproject

DuckDuckGo making a case for fair competition in mobile search, however there were some troubling notes in this article. I would say random order for search provider is a good start, but placing Goggle on the last screen is unfair to Google, I'd say stay random all the time. spreadprivacy.com/search-prefe

Interesting approach, going after firmware, sounds like holy grail once you can embed something into firmware it can stay on the system even after full rebuild from scratch. threatpost.com/trickbot-return

For developers who designing API here is good starting point. Remember it's just starting point there are way more items to think about especially on security side, as article only "touched" on that subject. stackoverflow.blog/2020/03/02/

Interesting writing about vulnerability in iOS devices ... I guess conclusion it's better to avoid proprietary protocols. thehackernews.com/2020/12/goog

If you are running Calibre on Ubuntu 20.04 and ran into error like: AttributeError: 'NoneType' object has no attribute 'cancel' here problem and solution for ya.

It seems media has new agenda, they creating narrative that Section 230 is only about those tech giants, however it covers any intermediary on the Internet and repealing it will have a dramatic affect of where people are able to freely express their opinions.

Hmmmm interesting, looks like mics in Alexa Echo, Google Home will react on light, or is there a photo element. For now move your smart speakers away from windows, ready more: threatpost.com/light-based-att

According to quick search on Shodan there are 3813 docker instances with exposed API responding on default port. I guess owners has to be on lookout threatpost.com/misconfigured-d

Salesforce buys Slack, interesting move, I am wondering what is the long term vision for such deal. entrepreneur.com/article/36080

This is just pure negligence apparently researchers attempted to contact developers since Aug and devs took no actions to protect their users and some of these users paid for this app threatpost.com/android-messeng

Show older
Mastodon

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!