Sergey Shkundaleu @archit3ct@social.ssbx.dev

For all devs out there, if you are thinking on using self signed certificate on ".dev" domain, forget about it... it's not your server setting HSTS flag, for whatever reason that domain is special, so you can't use self signed you have to obtain real certificate.

Danger of trusting any company with cloud operated web cams/microphones. Cloud comes with a danger of disclosing your private information by company's personnel. The only way to avoid it is to encrypt data with your keys stored locally. https://gizmodo.com/a-home-security-worker-hacked-into-surveillance-systems-1846111569

Regardless of what you think about Parler they were shielded by law (Section 230) from liability of user generated content, no wonder there's significant push to take it down then government could decide what is allowed and not allowed on the internet, look at China, Russia, Belarus do we really want to go that route as a nation? https://gizmodo.com/house-oversight-committee-asks-fbi-to-investigate-parle-1846105887

QNAP is one of the most popular NAS servers, no wonder some folks were after it. https://www.zdnet.com/article/qnap-warns-users-of-a-new-crypto-miner-named-dovecat-infecting-their-devices/

Kindle owners beware and make sure you are on most recent update. https://securityaffairs.co/wordpress/113743/hacking/kindle-kindledrip-exploit.html

Strategical investments are past due, these days it's easy to write code, there are a lot of materials to teach people to code. Unfortunately experience matter in order to produce great code, and not many companies yet understood that investing into CI/CD will improve code their produce as well as overall security of their systems. Stop complaining about talent and empower your existing employees with CI/CD tools.

Ugh Nvidia cards are very popular. That not a good news for owners, off you use Nvidia make sure to update. https://threatpost.com/nvidia-gamers-dos-data-loss-shield-tv-bugs/163200/

That would be interesting to learn how Telegram wasn't affected by this one. https://threatpost.com/google-research-pinpoints-security-soft-spot-in-multiple-chat-platforms/163175/

Actual pice of information, especially in a light of changes to WhatsApp terms of use. https://gizmodo.com/how-to-take-your-messages-with-you-when-leaving-faceboo-1846078323

There are a lot of debates going on, while ago I wrote my take on Section 230 https://sergeysh.com/2020/12/14/Section-230/

This is really nice article about what your phone really is, Purism and Pine64 are two companies who trying to change that by bringing Linux to the front line. https://puri.sm/posts/your-phone-is-your-castle/

There is no cloud it's just somebody else's computer. Apple and Google trying to decive people into believing that by paying for it person actually buys the phone and gets private space in their cloud for backups, well not really ... https://www.reuters.com/article/us-apple-fbi-icloud-exclusive/exclusive-apple-dropped-plan-for-encrypting-backups-after-fbi-complained-sources-idUSKBN1ZK1CT

Such an interesting finding, simple link that is capable of BSOD, glad that it's not much more. https://www.bleepingcomputer.com/news/security/windows-10-bug-crashes-your-pc-when-you-access-this-location/

CNN panel advocates for ISP to start censoring traffic? Who are we? China, Russia? What happened to our country? https://www.youtube.com/watch?v=-wThP4i80Tw

Behavioral advertising doesn't work, it's been proven many times, here is WSJ report on paper that makes scientific reasoning https://www.wsj.com/articles/retailers-beware-shoppers-dont-like-to-be-watched-online-11596213167