#cybersecurity
Sun Apr 5 18:11:58 2020 <9e126bf3> Feels like I gotta put on a hazmat suit to use zoom
Sun Apr 5 18:11:58 2020 <9e126bf3> Feels like I gotta put on a hazmat suit to use zoom
Sun Apr 5 17:46:52 2020 <773ab1f1> <https://tidbits.com/2020/04/03/every-zoom-security-and-privacy-flaw-so-far-and-what-you-can-do-to-protect-yourself/> — Every Zoom Security and Privacy Flaw So Far, and What You Can Do to Protect Yourself – TidBITS — The videoconferencing service Zoom has seen a 20-fold increase in usage during the coronavirus pandemic. That extra attention has put a spotlight on poor technical and policy decisions […]
Sat Apr 4 04:37:07 2020 <773ab1f1> <https://www.theverge.com/2020/4/3/21207134/zoom-recordings-exposed-thousands-identical-naming-search> — Thousands of Zoom recordings exposed because of the way Zoom names recordings — One search turned up more than 15,000 recordings
Sat Apr 4 00:13:35 2020 <773ab1f1> <https://techcrunch.com/2020/04/03/zoom-calls-routed-china/> — Zoom admits some calls were ‘mistakenly’ routed through China – TechCrunch — The company said it’s fixed the issue, but won’t say how many users are affected.
Fri Apr 3 20:47:25 2020 <773ab1f1>
Fri Apr 3 17:33:54 2020 <9e126bf3> yikes
Fri Apr 3 17:19:08 2020 <773ab1f1> <https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/> — Move Fast & Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings – The Citizen Lab — This report examines the encryption that protects meetings in Zoom and finds that they have made their own encryption scheme and has significant weaknesses.
Wed Apr 1 21:29:50 2020 <9e126bf3> <https://techcrunch.com/2020/04/01/zoom-doom/> — Ex-NSA hacker drops new zero-day doom for Zoom – TechCrunch — The two flaws can be used to spy on a Zoom user’s webcam and microphone. <8f79fcda> It pays to not use popular softwares <8f79fcda> The threat matrix on attacking 10 users of an app vs. 10million […]
Sun Mar 29 19:09:07 2020 <5547a085> <https://github.com/tanrax/maza-ad-blocking/blob/master/README.md|https://github.com/tanrax/maza-ad-blocking/blob/master/README.md> — README.md — “` # Maza ad blocking – Like Pi-hole but local and using your operating system <img alt=”demo” src=”media/demo.gif”> Simple, native and efficient local advertising blocker. Compatible with OSX and Linux. <img alt=”maza logo” src=”media/maza.png” width=”500″> – You don’t have to install any browser extensions or […]
Tue Mar 24 18:42:25 2020 <773ab1f1> <https://www.forbes.com/sites/daveywinder/2020/03/23/covid-19-vaccine-test-center-hit-by-cyber-attack-stolen-data-posted-online/|https://www.forbes.com/sites/daveywinder/2020/03/23/covid-19-vaccine-test-center-hit-by-cyber-attack-stolen-data-posted-online/> — COVID-19 Vaccine Test Center Hit By Cyber Attack, Stolen Data Posted Online — A medical facility on standby to help test any coronavirus vaccine has been hit by a ransomware group that promised not to target medical organizations. <5547a085> Ooo I wonder what the data shows
Sun Mar 22 18:25:22 2020 <5547a085> <https://github.com/SadeghHayeri/GreenTunnel/blob/master/README.md|https://github.com/SadeghHayeri/GreenTunnel/blob/master/README.md> — README.md — “` # Green Tunnel <p align=”center”> <img src=”assets/logo.png” alt=”green tunnel logo” width=”200″> </p> <p align=”center”> <img src=”https://img.shields.io/github/license/SadeghHayeri/GreenTunnel.svg?color=Green&style=flat-square”> <img src=”https://img.shields.io/github/repo-size/SadeghHayeri/GreenTunnel.svg?color=Green&style=flat-square”> </p> GreenTunnel bypasses DPI (Deep Packet Inspection) systems found in many ISPs (Internet Service Providers) which block access to certain websites. <p align=”center”> <img src=”assets/demo.gif” alt=”green […]
Sat Mar 21 23:41:58 2020 <d666283b> I was about to post this lol
Fri Mar 20 17:27:58 2020 <773ab1f1> <https://www.zdnet.com/article/hackers-breach-fsb-contractor-and-leak-details-about-iot-hacking-project/>
Fri Mar 20 13:58:14 2020 <8f79fcda> <https://www.youtube.com/watch?v=saRvhzZRgyc|https://www.youtube.com/watch?v=saRvhzZRgyc> — Join the Mission to Prevent and Eradicate Cyberthreats <8f79fcda> This man’s meme army
Sun Mar 15 14:57:06 2020 <8f79fcda> <https://git.openprivacy.ca/sarah/ephemeral-garden|https://git.openprivacy.ca/sarah/ephemeral-garden> — ephemeral-garden — ephemeral-garden
Sun Mar 15 14:12:52 2020 <773ab1f1> <https://twitter.com/sarahjamielewis/status/1239032778718498817?s=21|https://twitter.com/sarahjamielewis/status/1239032778718498817?s=21>
Wed Mar 11 21:17:27 2020 <9e126bf3>
Wed Mar 11 21:03:18 2020 <773ab1f1> <https://nixintel.info/osint/signs-youre-following-a-fake-twitter-account/>
Tue Mar 10 22:47:07 2020 <58f4c611> will be interested to see the PoC for this. I’m still lost on 64bit buffer overflows escpecially with NX, ALSR, etc. enabled.
Tue Mar 10 22:31:30 2020 <5547a085> Yeah, smb has been a healthy target for decades