BlackBox (Security) Archiv
4.1K subscribers
183 photos
393 videos
167 files
2.67K links
๐Ÿ‘‰๐Ÿผ Latest viruses and malware threats
๐Ÿ‘‰๐Ÿผ Latest patches, tips and tricks
๐Ÿ‘‰๐Ÿผ Threats to security/privacy/democracy on the Internet

๐Ÿ‘‰๐Ÿผ Find us on Matrix: https://matrix.to/#/!wNywwUkYshTVAFCAzw:matrix.org
Download Telegram
Proofpoint sues Facebook

Proofpoint is filing a lawsuit to stop Facebook from seizing domain names used for security testing and training.

https://beta.documentcloud.org/documents/20476844-proofpoint-facebook-lawsuit

#proofpoint #facebook #DeleteFacebook #lawsuit
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Media is too big
VIEW IN TELEGRAM
The Great Firewall of...America? WTZ!

This past week on Feb 2 - Feb 7, 2021 a massive attack was conducted on encrypted services, particular VPN's. VPN traffic was throttled to near unusability.

Basically in 2021, the Great Firewall of the USA was turned on. And then abrubtly turned off.

Purpose of the action was unknown. No party stepped up to acknowledge and aside from me, no one has stepped up to call any Internet Provider of their egregious action against privacy minded people.

Why did this attack happen?
Why did the attack stop?

https://www.youtube.com/watch?v=38za1LYj2XQ&t=1

#usa #greatfirewall #firewall #internet #attack #privacy #thinkabout #video
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
โ€˜Windows is sh*t:โ€™ Linux Users and The Technical Superiority Problem

โ€œWindows is shit.โ€ โ€œThatโ€™s garbage, donโ€™t use it.โ€ โ€œI donโ€™t understand why anyone uses that crap.โ€ ~Toxic nerds on the internet, since forever.

https://medium.com/linuxforeveryone/windows-is-sh-t-linux-users-and-the-technical-superiority-problem-196a597aa860

#linux #windows #thinkabout
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Will smartwatch shoppers trust Facebook?

Facebook is apparently working on its own wearable, but there are big obstacles.

It looks like the next major player looking to take the Apple Watchโ€™s crown may have the resources to seriously compete, even if it has other hurdles to overcome. According to a new report in The Information, Facebook is planning on releasing its first smartwatch, and the company may have something available as early as next year.

The story, corroborated by four anonymous sources at the company, claims that the wearable will have its own cellular connection, ensuring it can work independently of a smartphone, and itโ€™s likely to play heavily to the companyโ€™s social appeal with Facebook Messenger baked in.

https://www.tomsguide.com/news/facebook-watch-reportedly-coming-next-year-and-apple-watch-is-laughing

#fb #facebook #DeleteFacebook #smartwatch
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Jam

Jam is an Open Source alternative to Clubhouse, Twitter Spaces and similar audio spaces.

With Jam you can create Jams which are audio rooms that can be used for panel discussions, jam sessions, free flowing conversations, debates, theatre plays, musicals and more. The only limit is your imagination.

https://gitlab.com/jam-systems/jam

https://jam.systems/

#jam #alternatives #alternative #clubhouse #twitter #audio #spaces #opensource
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
How they harvest our data

TL;DR: everything is very bad. Prognosis is not comforting; if we do nothing all the distopias we read in fiction novels will look like a happy holiday at granny's.

It's hard to be in IT, cause your friends have no idea what you do. Engineer, product manager, QA โ€” how does it all differ from fixing a printer in the office? (tip: you don't get $150k/year for fixing printers).

You also can't really talk to normal people about IT, because they use this industry, but they don't get it. But there's a topic you can raise with any mortal, that will get their attention: data privacy.

How do they gather data about us? Will VPN and incognito mode save us? Maybe we should all just pack our stuff and go into the woods and make friends with wolves and bears?

https://dkzlv.com/en/how-they-harvest-data/

#data #bigdata #thinkabout
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Optimizer

Portable utility that helps you to restore your privacy and increase your security.

Optimizer is recommended after a fresh, clean installation of Windows to achieve maximum privacy and security.

Depending on your version of Windows, Optimizer will also allow you to perform some specific tweaks.

https://github.com/hellzerg/optimizer

Downloads:
https://github.com/hellzerg/optimizer/releases

#windows #optimizer #utility #tweaks #privacy #security
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
pgpp-arxiv20.pdf
7.1 MB
Pretty Good Phone Privacy

To receive service in todayโ€™s cellular architecture, phones uniquely identify themselves to towers and thus to operators. This is now a cause of major privacy violations, as operators sell and leak identity and location data of hundreds of millionsof mobile users.

In this paper, we take an end-to-end perspective on thecellular architecture and find key points of decoupling that enable us to protect user identity and location privacy with no changes to physical infrastructure, no added latency, and no requirement of direct cooperation from existing operators.

https://raghavan.usc.edu/papers/pgpp-arxiv20.pdf

#phone #privacy #study #pdf
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Nigeria's Central Bank has now prohibited banks from processing #bitcoin and cryptocurrency transactions.

The country ranks second in P2P
#bitcoin volume.

https://nitter.nixnet.services/DocumentingBTC/status/1357679262908694529

#nigeria #bitcoin #cryptocurrency #thinkabout #why
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
New EFF Report Shows Cops Used Ring Cameras to Monitor Black Lives Matter Protests

LAPD Wanted Unknown Amount of Video for Unknown Reasons โ€“ Raising First Amendment Concerns

San Francisco -
The Electronic Frontier Foundation (EFF) has obtained emails that show that the Los Angeles Police Department (LAPD) sent at least one requestโ€”and likely many moreโ€”for Amazon Ring camera video of last summerโ€™s Black-led protests against police violence. In a report released today, EFF shows that the LAPD asked for video related to โ€œthe recent protests,โ€ and refused to disclose to EFF what crime it was investigating or how many hours of footage it ultimately requested.

โ€œThe emails we received raise many questions about what the LAPD wanted to do with this video,โ€ said EFF Policy Analyst Matthew Guariglia. โ€œPolice could have gathered hours of footage of people engaged in First-Amendment-protected activity, with a vague hope that they could find evidence of something illegal. LAPD should tell the public how many hours of surveillance footage it gathered around these protests, and why.โ€

EFF filed its public records request with LAPD after widespread complaints about police tactics during the protests in May and June of 2020. After receiving the emails in response to our request, we asked for clarification from the LAPD about what it was looking for and how much video it wanted. The agency said simply that it was attempting to โ€œidentify those involved in criminal behavior.โ€

https://www.eff.org/press/releases/new-eff-report-shows-cops-used-ring-cameras-monitor-black-lives-matter-protests

https://www.eff.org/deeplinks/2021/02/lapd-requested-ring-footage-black-lives-matter-protests

#usa #lapd #amazon #ring #surveillance #blm #eff #thinkabout
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Spy pixels in emails have become endemic

The use of "invisible" tracking tech in emails is now "endemic", according to a messaging service that analysed its traffic at the BBC's request.

Hey's review indicated that two-thirds of emails sent to its users' personal accounts contained a "spy pixel", even after excluding for spam.

Its makers said that many of the largest brands used email pixels, with the exception of the "big tech" firms.

Defenders of the trackers say they are a commonplace marketing tactic.

And several of the companies involved noted their use of such tech was mentioned within their wider privacy policies.

โ€ผ๏ธ Emails pixels can be used to log:

โŒ
if and when an email is opened

โŒ how many times it is opened

โŒ what device or devices are involved

โŒ the user's rough physical location, deduced from their internet protocol (IP) address - in some cases making it possible to see the street the recipient is on

This information can then be used to determine the impact of a specific email campaign, as well as to feed into more detailed customer profiles.

Hey's co-founder David Heinemeier Hansson says they amount to a "grotesque invasion of privacy".

https://www.bbc.com/news/technology-56071437

#spy #pixels #email #invisible #tracking #bigtech #BigData #thinkabout
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
Password manager: LastPass restricts free version

Users of the free version of LastPass will only be able to use the password manager across devices to a limited extent from March.

Starting in March and then again in May, the LastPass developers want to reduce the functionality of the free version. The password manager is available for popular systems such as Android, iOS and Windows. Users have access to their passwords stored in the password vault on all devices.

https://blog.lastpass.com/2021/02/changes-to-lastpass-free/

#LastPass #password #manager
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
The last search engine

Gigablast is the only non-Big Tech search engine in the U.S. that still crawls the web.

Big Tech is censoring Gigablast from indexing the "public" web.

๐Ÿ’ก Cloudflare, Google, Bing Destroying the Infrastructure of the Free Web
https://www.gigablast.com/blog.html#anti

https://www.gigablast.com/

#gigablast #search #engine #cloudflare #google #bing #thinkabout
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
China steps up online controls with new rule for bloggers

TAIPEI, Taiwan (AP) โ€”
Ma Xiaolin frequently wrote about current affairs on one of Chinaโ€™s leading microblogging sites, where he has 2 million followers. But recently, he said in a post, the Weibo site called and asked him not to post original content on topics ranging from politics to economic and military issues.

โ€œAs an international affairs researcher and a columnist, it looks like I can only go the route of entertainment, food and beverage now,โ€ the international relations professor wrote on Jan. 31.

Ma, who often posted on developments in the Mideast, is one of many popular influencers working within the constraints of Chinaโ€™s heavily censored web who is finding that their space to speak is shrinking even further with the latest policy changes and a clean-up campaign run by the countryโ€™s powerful censors. He declined an interview request.

Beginning next week, the Cyberspace Administration of China will require bloggers and influencers to have a government-approved credential before they can publish on a wide range of subjects. Some fear that only state media and official propaganda accounts will get permission. While permits have been needed since at least 2017 to write about topics such as political and military affairs, enforcement has not been widespread. The new rules expand that requirement to health, economics, education and judicial matters.

โ€œThe regulators want to control the entire procedure of information production,โ€ said Titus Chen, an expert in Chinese social media policy at National Sun Yat-Sen University in Taiwan.

https://apnews.com/article/taiwan-china-coronavirus-pandemic-blogging-50170ca73ed1f25ae769723e86c4d169

#china #blogging #microblogging #rules #netpolitics #thinkabout #why
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
LibreOffice team say they are working on a WebAssembly port

Developers hope to deliver a working example in the next few months.

Developers are reportedly getting close to bringing LibreOffice, the popular open source alternative to Microsoft Office, to the web browser using WebAssembly (WASM).

The project already offers LibreOffice Online as a collaborative, web-based version of LibreOffice. However, you can only really use it through its Collabora Online commercial variant.

Even as the Documentation Foundation (TDF), which helps develop and maintain LibreOffice, claims that it โ€œis not planning to develop and fund a cloud solution similar to existing products from Google and Microsoft,โ€ the developers of the WASM port hope to deliver a working demo by summer 2021.

https://www.techradar.com/news/libreoffice-team-say-they-are-working-on-a-webassembly-port

#libreoffice #opensource #webassembly #wasm #tdf
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
85: Cam the Carder
Darknetdiaries - EP 85: Cam the Carder

This is the story of Cam Harrison, aka โ€œkilobitโ€ and his rise and fall as a prominent carder.

https://darknetdiaries.com/episode/85/

#truecrime #darknetdiaries #podcast
๐ŸŽ™@cRyPtHoN_INFOSEC_FR
๐ŸŽ™
@cRyPtHoN_INFOSEC_EN
๐ŸŽ™
@cRyPtHoN_INFOSEC_DE
๐ŸŽ™
@BlackBox_Archiv
๐ŸŽ™
@NoGoolag
Behind the scenes of CityBee customer data leak

Introduction

All of this is obviously for educational and informative purpose. And I do not support any sort of crime either.

All of the information below comes from the researcher himself from his interview and some of my own tests obviously. :D

Well what even is CityBee you may ask?
It is a car, bike and scooter rental service in Lithuania.

And oh yes they store some data (can tell that just by looking at their homepage).

https://kernal.eu/posts/citybee-leak/

#citybee #lithuania #data #leak
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag
When did "privacy issues" start to mean "too much privacy"?

Clubhouse draws the ire of journalists

I understand that every social media platform has to deal with misinformation, but I was surprised by the harassment and privacy issues the subtitle referred to.

My understanding of Clubhouse was that it was for pseudo-private conversations. Unless the app is leaking out information, I canโ€™t imagine privacy to be an issue.

The NY Times article has one brief mention about privacy:

"This month, German and Italian regulators publicly questioned whether Clubhouseโ€™s data practices complied with European data protection laws. And China blocked the app after political conversations popped up on it outside the countryโ€™s tight internet controls."

In another article linked to by the NY Times article provides more clarity regarding privacy:

"On Clubhouse, however, there are no screenshots. There is no way to drag up old Clubhouse posts years later like a user might do on Twitter. There is no way to record conversationsโ€”meaning there is no way to prove that someone said anything controversial at all. Thereโ€™s no path to accountability. Users on Clubhouse know, or at least believe, that they can openly speak their mind with zero repercussions. Platforms like Twitter and Facebook have implemented robust moderation programs in recent years, a move that has been both praised and criticized by many."

This sounds like a feature, not a bug. Just between you and me, I donโ€™t record any of my Zoom calls with friends. Just donโ€™t mention it to any journalists.

https://mleverything.substack.com/p/when-did-privacy-issues-start-to

https://datenschutz-hamburg.de/assets/pdf/2021-02-02-press-release-clubhouse.pdf

#clubhouse #privacy
๐Ÿ“ก@cRyPtHoN_INFOSEC_FR
๐Ÿ“ก
@cRyPtHoN_INFOSEC_EN
๐Ÿ“ก
@cRyPtHoN_INFOSEC_DE
๐Ÿ“ก
@BlackBox_Archiv
๐Ÿ“ก
@NoGoolag