Sergey Shkundaleu @archit3ct@social.ssbx.dev

Merry Christmas!!!

Surveillance capitalism at it's core, government should stop trying to regulate tech giants and start protecting people's privacy by requiring explicit consent for each transaction where personal information changes hands. https://gizmodo.com/your-credit-score-should-be-based-on-your-web-history-1845912592

As much as sales ppl from Cellebrite are trying to represent their system as real innovation it's nothing more than just an automation of manual work and only works when phone is fully unlocked. It's not even trying to break anything, by the way breaking into device without warrant is a crime and they know it. More details here in a blog post from Signal's team https://signal.org/blog/cellebrite-and-clickbait/

Interesting case, thought I have few questions, especially how SMS messages were stolen in real time, malware, or was it sim swaps at scale? https://www.wired.com/story/massive-fraud-operation-stole-millions-online-bank-accounts/

Just relaunched my blog on a new platform, which is GitHub Pages. As for URL it's still the same https://sergeysh.com/

Some more details of SolarWind's hack had surfaced recently, and those details aren't pretty. It shows how important it is to secure you software development life cycle and all aspects related to distribution of your software. https://thehackernews.com/2020/12/new-evidence-suggests-solarwinds.html

Example when bad guys use free tools to commit their crimes. https://thehackernews.com/2020/12/wormable-gitpaste-12-botnet-returns-to.html

One of my favorite quotes applicable to software development: "First solve the problem, then write the code" and it is sad when younger generation of devs can't grasp meaning of such quote. That's where many security problems arise from, devs pushing something out of the door, just to check a box, on the other hand at some companies had screwed up their KPI's , so fixing 2 defects in a week would appear better, than taking a week to properly resolve 1st without introducing 2nd.

Messaging is such a crowded space, however I believe Signal is doing work that important for everyone. Video chat group calling feature has become available recently. https://signal.org/blog/group-calls/

This unethical behavior is so typical for business these days, especially when there is no immediate ROI on effort to patch vulnerable systems ... I guess those people will never learn. https://threatpost.com/unpatched-iot-ot-devices-threaten-critical-infrastructure/162275/

I've been saying it out loud that supply chain attacks are the next big thing. You can ask me about what ethical audits are, if you are interested. Here is an example of several interconnected events tied to a single company SolarWinds https://thehackernews.com/2020/12/nearly-18000-solarwinds-customers.html

Jekyll if so much fun, thus far: Pagination only works on HTML files according to doc, moreover it only works on index.html based on my experience. Also make sure there is no permalink which will break it as well. More in documentation: https://jekyllrb.com/docs/pagination/

I guess that's another case where customers lured to questionable benefits of some service instead of transparency how that service works. More so called smart devices people have in their houses less control they'll have over them and then ... https://www.slashgear.com/amazon-sidewalk-is-coming-and-not-everyone-will-be-happy-24648652/