gs.jonkman.ca
type: Site
name: Jonkman Microblog
space of: security

security
type: Container
type: channel
description: Updates tagged with security on Jonkman Microblog!
licence: https://creativecommons.org/licenses/by/3.0/
items: blacksam: https://www.bleepingcomputer.com/news/security/red-hat-warns-of-backdoor-in-xz-tools-used-by-most-linux-distros/ #linux #xz #backdoor #security
items: lnxw48a1: UK election registry breached from 2021 onward. https://www.bbc.co.uk/news/uk-politics-66441010 [www bbc co uk] #security
items: lnxw48a1: Tenable CEO slams #Microsoft for not being transparent and fast to act on #Azure #Active_Directory #security holes https://nu.federati.net/url/291175 [www databreachtoday com]
items: objectType=note
items: lnxw48a1: #Ubuntu #security notice: #Emacs flaw allows code execution. https://ubuntu.com/security/notices/USN-5781-1 [ubuntu com]
items: objectType=comment
items: lnxw48a1: #T-mobile #security From 2018: https://nu.federati.net/url/282487 /via @rysiek @rysiek@mastodon.technology
items: lnxw48a1: University of #Minnesota researchers apologize to the #Linux kernel community, ask to restore trust. https://nu.federati.net/url/280818 [lore kernel org] #MN #UMN #security
items: lnxw48a1: Detecting #curl-pipe-bash from the server-side: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ [www idontplaydarts com] #security #curl #wget #pipe #bash
items: lnxw48a1: #Mattermost devs discover unfixable (?) flaws in #Go-Lang library https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ #security
items: lnxw48a1: "So you want to get into Infosec?" https://hackers.town/@thegibson/105243991039588873 Some links to discounted or free training in that thread. #infosec #security #training #education
items: lnxw48a1: @aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
items: lnxw48a1: Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security

blacksam: https://www.bleepingcomputer.com/news/security/red-hat-warns-of-backdoor-in-xz-tools-used-by-most-linux-distros/ #linux #xz #backdoor #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1120007
description: blacksam's status on Friday, 29-Mar-2024 14:15:44 EDT
encoded: https://www.bleepingcomputer.com/news/security/red-hat-warns-of-backdoor-in-xz-tools-used-by-most-linux-distros/ #linux #xz #backdoor #security
date: 2024-03-29T14:15:44-04:00
creator: Brian Ó
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/573374
enclosure: Red Hat warns of backdoor in XZ tools used by most Linux distros
links to: Red Hat warns of backdoor in XZ tools used by most Linux distros
tagged: concept

Red Hat warns of backdoor in XZ tools used by most Linux distros
date: 2024-03-29T14:15:57-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: backdoor

concept
type: Tag
label: linux

concept
type: Tag
label: security

concept
type: Tag
label: xz

lnxw48a1: UK election registry breached from 2021 onward. https://www.bbc.co.uk/news/uk-politics-66441010 [www bbc co uk] #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1114213
description: lnxw48a1's status on Tuesday, 08-Aug-2023 13:50:18 EDT
encoded: UK election registry breached from 2021 onward. https://www.bbc.co.uk/news/uk-politics-66441010 [www bbc co uk] #security
date: 2023-08-08T13:50:18-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/570422
enclosure: Cyber-attack on UK's electoral registers revealed
links to: Cyber-attack on UK's electoral registers revealed
tagged: concept

Cyber-attack on UK's electoral registers revealed
date: 2023-08-08T13:51:49-04:00
length: 336002
type: text/html

lnxw48a1: Tenable CEO slams #Microsoft for not being transparent and fast to act on #Azure #Active_Directory #security holes https://nu.federati.net/url/291175 [www databreachtoday com]
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1114064
description: lnxw48a1's status on Thursday, 03-Aug-2023 14:35:45 EDT
encoded: Tenable CEO slams #Microsoft for not being transparent and fast to act on #Azure #Active_Directory #security holes https://nu.federati.net/url/291175 [www databreachtoday com]
date: 2023-08-03T14:35:45-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/570347
enclosure: Tenable CEO Slams Microsoft for Failing to Quickly Patch Bug
links to: Tenable CEO Slams Microsoft for Failing to Quickly Patch Bug
tagged: concept

Tenable CEO Slams Microsoft for Failing to Quickly Patch Bug
date: 2023-08-03T14:46:23-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: activedirectory

concept
type: Tag
label: azure

concept
type: Tag
label: microsoft

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: #US Senator: #Microsoft negligent in #security #breach that affected Syate Dept., #USDOJ and rest of #USGovt should hold them accountable. https://nu.federati.net/url/291129 [arstechnica com]
link: https://gs.jonkman.ca/notice/1113943
description: lnxw48a1's status on Sunday, 30-Jul-2023 22:14:30 EDT
encoded: #US Senator: #Microsoft negligent in #security #breach that affected Syate Dept., #USDOJ and rest of #USGovt should hold them accountable. https://nu.federati.net/url/291129 [arstechnica com]
date: 2023-07-30T22:14:30-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/570274
enclosure: US senator blasts Microsoft for “negligent cybersecurity practices”
links to: US senator blasts Microsoft for “negligent cybersecurity practices”
tagged: concept

US senator blasts Microsoft for “negligent cybersecurity practices”
date: 2023-07-30T22:19:20-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: breach

concept
type: Tag
label: us

concept
type: Tag
label: usdoj

concept
type: Tag
label: usgovt

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: #Security #Microsoft_365 breached by #China See thread starting at https://cyberplace.social/@GossiTheDog/110700908976946435 ... https://cyberplace.social/@GossiTheDog/110702046297147809 > For anybody interested - the “acquired Microsoft account (MSA) consumer signing key” used in this must have come from inside Microsoft’s internal network. -- https://cyberplace.social/@GossiTheDog/110702228469010595 Includes the following links: * https://nu.federati.net/url/290987 [msrc microsoft com] * https://nu.federati.net/url/290988 [edition cnn com] * https://nu.federati.net/url/290989 [www cisa gov | pdf] * https://www.wsj.com/articles/chinese-hackers-spied-on-state-department-13a09f03 [www wsj com] #US_Govt #Microsoft #MSFT #Azure #Office_365 #penetration #Outlook #Exchange #cloud
link: https://gs.jonkman.ca/notice/1113491
description: lnxw48a1's status on Wednesday, 12-Jul-2023 18:42:34 EDT
encoded: #Security #Microsoft_365 breached by #China See thread starting at https://cyberplace.social/@GossiTheDog/110700908976946435 ... https://cyberplace.social/@GossiTheDog/110702046297147809 > For anybody interested - the “acquired Microsoft account (MSA) consumer signing key” used in this must have come from inside Microsoft’s internal network. -- https://cyberplace.social/@GossiTheDog/110702228469010595 Includes the following links: * https://nu.federati.net/url/290987 [msrc microsoft com] * https://nu.federati.net/url/290988 [edition cnn com] * https://nu.federati.net/url/290989 [www cisa gov | pdf] * https://www.wsj.com/articles/chinese-hackers-spied-on-state-department-13a09f03 [www wsj com] #US_Govt #Microsoft #MSFT #Azure #Office_365 #penetration #Outlook #Exchange #cloud
date: 2023-07-12T18:42:34-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/570010
enclosure: https://cyberplace.social/@GossiTheDog/110700908976946435
links to: https://cyberplace.social/@GossiTheDog/110700908976946435
enclosure: https://cyberplace.social/@GossiTheDog/110702046297147809
links to: https://cyberplace.social/@GossiTheDog/110702046297147809
enclosure: https://cyberplace.social/@GossiTheDog/110702228469010595
links to: https://cyberplace.social/@GossiTheDog/110702228469010595
enclosure: microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email
links to: microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email
enclosure: China-based hackers breached US government email accounts, Microsoft and White House say | CNN Politics
links to: China-based hackers breached US government email accounts, Microsoft and White House say | CNN Politics
enclosure: aa23-193a joint csa enhanced monitoring to detect apt activity targeting outlook online.pdf
links to: aa23-193a joint csa enhanced monitoring to detect apt activity targeting outlook online.pdf
enclosure: Chinese Hackers Spied on State Department
links to: Chinese Hackers Spied on State Department
tagged: concept

https://cyberplace.social/@GossiTheDog/110700908976946435
date: 2023-07-12T18:44:59-04:00
type: text/html; charset=utf-8

https://cyberplace.social/@GossiTheDog/110702046297147809
date: 2023-07-12T18:45:01-04:00
type: text/html; charset=utf-8

https://cyberplace.social/@GossiTheDog/110702228469010595
date: 2023-07-12T18:45:03-04:00
type: text/html; charset=utf-8

microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email
date: 2023-07-12T18:45:06-04:00
length: 137714
type: text/html; charset=utf-8

China-based hackers breached US government email accounts, Microsoft and White House say | CNN Politics
date: 2023-07-12T18:45:09-04:00
length: 1875303
type: text/html; charset=utf-8

aa23-193a joint csa enhanced monitoring to detect apt activity targeting outlook online.pdf
date: 2023-07-12T18:45:10-04:00
length: 424616
type: application/pdf

Chinese Hackers Spied on State Department
date: 2023-07-12T18:45:11-04:00
length: 580145
type: text/html; charset=utf-8

concept
type: Tag
label: china

concept
type: Tag
label: cloud

concept
type: Tag
label: exchange

concept
type: Tag
label: microsoft365

concept
type: Tag
label: msft

concept
type: Tag
label: office365

concept
type: Tag
label: outlook

concept
type: Tag
label: penetration

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: Seen via @clacke: https://nondeterministic.computer/@mjg59/110216984788495049 > If you installed a Linux system with disk encryption more than a couple of years ago, there's a decent chance it's using a weak key derivation function and someone who cares enough would be in a position to brute-force it. https://mjg59.dreamwidth.org/66429.html has more details and instructions on how to update to a better KDF. #Linux #LUKS #security #encryption #privacy
link: https://gs.jonkman.ca/notice/1110991
description: lnxw48a1's status on Tuesday, 18-Apr-2023 00:19:31 EDT
encoded: Seen via @clacke: https://nondeterministic.computer/@mjg59/110216984788495049 > If you installed a Linux system with disk encryption more than a couple of years ago, there's a decent chance it's using a weak key derivation function and someone who cares enough would be in a position to brute-force it. https://mjg59.dreamwidth.org/66429.html has more details and instructions on how to update to a better KDF. #Linux #LUKS #security #encryption #privacy
date: 2023-04-18T00:19:31-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/568585
enclosure: https://nondeterministic.computer/@mjg59/110216984788495049
links to: https://nondeterministic.computer/@mjg59/110216984788495049
enclosure: 66429.html
links to: 66429.html
tagged: concept

https://nondeterministic.computer/@mjg59/110216984788495049
date: 2023-04-18T00:51:03-04:00
type: text/html; charset=utf-8

66429.html
date: 2023-04-18T00:51:05-04:00
length: 10469
type: text/html; charset=utf-8

concept
type: Tag
label: encryption

concept
type: Tag
label: luks

concept
type: Tag
label: privacy

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: School district data breach involves student data, but law does not require notification https://infosec.exchange/@PogoWasRight/110005462926344518 https://nu.federati.net/url/289870 [www databreaches net] #security #ransomware #security_breach
link: https://gs.jonkman.ca/notice/1109881
description: lnxw48a1's status on Sunday, 12-Mar-2023 00:49:24 EST
encoded: School district data breach involves student data, but law does not require notification https://infosec.exchange/@PogoWasRight/110005462926344518 https://nu.federati.net/url/289870 [www databreaches net] #security #ransomware #security_breach
date: 2023-03-12T00:49:24-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/567950
enclosure: https://infosec.exchange/@PogoWasRight/110005462926344518
links to: https://infosec.exchange/@PogoWasRight/110005462926344518
enclosure: Highly sensitive files from Berkeley County Schools dumped by ransomware gang
links to: Highly sensitive files from Berkeley County Schools dumped by ransomware gang
tagged: concept

https://infosec.exchange/@PogoWasRight/110005462926344518
date: 2023-03-12T00:50:31-05:00
type: text/html; charset=utf-8

Highly sensitive files from Berkeley County Schools dumped by ransomware gang
date: 2023-03-12T00:50:34-05:00
type: text/html; charset=UTF-8

concept
type: Tag
label: ransomware

concept
type: Tag
label: securitybreach

lnxw48a1: #Ubuntu #security notice: #Emacs flaw allows code execution. https://ubuntu.com/security/notices/USN-5781-1 [ubuntu com]
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1107129
description: lnxw48a1's status on Wednesday, 14-Dec-2022 17:35:42 EST
encoded: #Ubuntu #security notice: #Emacs flaw allows code execution. https://ubuntu.com/security/notices/USN-5781-1 [ubuntu com]
date: 2022-12-14T17:35:42-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/566471
enclosure: USN-5781-1: Emacs vulnerability | Ubuntu security notices | Ubuntu
links to: USN-5781-1: Emacs vulnerability | Ubuntu security notices | Ubuntu
tagged: concept

USN-5781-1: Emacs vulnerability | Ubuntu security notices | Ubuntu
date: 2022-12-14T17:37:05-05:00
length: 55021
type: text/html; charset=utf-8

concept
type: Tag
label: emacs

concept
type: Tag
label: ubuntu

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: #Mastodon issue for #activitypub-troll denial-of-service vulnerability. https://github.com/mastodon/mastodon/issues/21977 with 2 pull requests. https://github.com/mastodon/mastodon/pull/22025 and https://github.com/mastodon/mastodon/pull/22026 #security
link: https://gs.jonkman.ca/notice/1106784
description: lnxw48a1's status on Sunday, 04-Dec-2022 22:15:33 EST
encoded: #Mastodon issue for #activitypub-troll denial-of-service vulnerability. https://github.com/mastodon/mastodon/issues/21977 with 2 pull requests. https://github.com/mastodon/mastodon/pull/22025 and https://github.com/mastodon/mastodon/pull/22026 #security
date: 2022-12-04T22:15:33-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/566292
enclosure: Any idea to stop activitypub-troll.cf or likewise attacks? · Issue #21977 · mastodon/mastodon
links to: Any idea to stop activitypub-troll.cf or likewise attacks? · Issue #21977 · mastodon/mastodon
enclosure: Fix unbounded recursion in account discovery by ClearlyClaire · Pull Request #22025 · mastodon/mastodon
links to: Fix unbounded recursion in account discovery by ClearlyClaire · Pull Request #22025 · mastodon/mastodon
enclosure: Fix unbounded recursion in account discovery (v3.5 backport) by ClearlyClaire · Pull Request #22026 · mastodon/mastodon
links to: Fix unbounded recursion in account discovery (v3.5 backport) by ClearlyClaire · Pull Request #22026 · mastodon/mastodon
tagged: concept

Any idea to stop activitypub-troll.cf or likewise attacks? · Issue #21977 · mastodon/mastodon
date: 2022-12-04T22:28:30-05:00
type: text/html; charset=utf-8

Fix unbounded recursion in account discovery by ClearlyClaire · Pull Request #22025 · mastodon/mastodon
date: 2022-12-04T22:28:32-05:00
type: text/html; charset=utf-8

Fix unbounded recursion in account discovery (v3.5 backport) by ClearlyClaire · Pull Request #22026 · mastodon/mastodon
date: 2022-12-04T22:28:34-05:00
type: text/html; charset=utf-8

concept
type: Tag
label: activitypubtroll

concept
type: Tag
label: mastodon

objectType=comment
type: item
type: MicroblogPost
title: lnxw48a1: @administrator @aab I'm just guessing, but it could be related to an exploit someone launched against #Mastodon and #Misskey yesterday. From what I read, it brought several instances to their knees. Misskey released a #security patch yesterday.
link: https://gs.jonkman.ca/notice/1106773
description: lnxw48a1's status on Sunday, 04-Dec-2022 17:26:16 EST
encoded: @administrator @aab I'm just guessing, but it could be related to an exploit someone launched against #Mastodon and #Misskey yesterday. From what I read, it brought several instances to their knees. Misskey released a #security patch yesterday.
date: 2022-12-04T17:26:16-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/566285
tagged: concept

concept
type: Tag
label: misskey

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: Tagging this thread with #Fediverse #Security ... whomever made the script obviously read some protocol docs and some source code. With just a little #JavaScript, they were able to knock some #Misskey and #Mastodon instances to their knees. This isn't the first, and it won't be the last. Remember when someone posted a humongous image and locked up any #GNUSocial instance that tried to download the image? Remember when someone's instance was replaced by some sort of cryptocurrency site and PuSH es from your site to theirs would crash your site because of their site's response? (I'll bet I still have that domain blocked at the firewall.) We have to stop being naive about the intentions of those in the current migration. The overwhelming majority will have benign, if not good, intentions. But a select few will have bad intentions. Among those intentions is to colonize the Fediverse with #Twitter's culture, to come here and impose that culture of anger and disrespect upon the inhabitants here ... which already happened once with the first wave of people joining #Mastodon instance, except it was Twitter and #Tumblr at that time.
link: https://gs.jonkman.ca/notice/1106763
description: lnxw48a1's status on Sunday, 04-Dec-2022 11:22:39 EST
encoded: Tagging this thread with #Fediverse #Security ... whomever made the script obviously read some protocol docs and some source code. With just a little #JavaScript, they were able to knock some #Misskey and #Mastodon instances to their knees. This isn't the first, and it won't be the last. Remember when someone posted a humongous image and locked up any #GNUSocial instance that tried to download the image? Remember when someone's instance was replaced by some sort of cryptocurrency site and PuSH es from your site to theirs would crash your site because of their site's response? (I'll bet I still have that domain blocked at the firewall.) We have to stop being naive about the intentions of those in the current migration. The overwhelming majority will have benign, if not good, intentions. But a select few will have bad intentions. Among those intentions is to colonize the Fediverse with #Twitter's culture, to come here and impose that culture of anger and disrespect upon the inhabitants here ... which already happened once with the first wave of people joining #Mastodon instance, except it was Twitter and #Tumblr at that time.
date: 2022-12-04T11:22:39-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
reply of: https://gs.jonkman.ca/notice/1106755
has discussion: https://gs.jonkman.ca/conversation/566275
tagged: concept

concept
type: Tag
label: fediverse

concept
type: Tag
label: gnusocial

concept
type: Tag
label: javascript

concept
type: Tag
label: tumblr

concept
type: Tag
label: twitter

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: Oh, good grief, #Microsoft. https://thehackernews.com/2022/10/microsoft-confirms-server.html [thehackernews com] Source: https://infosec.exchange/@jerry/109213542275494102 #security #breach #Azure #cloud
link: https://gs.jonkman.ca/notice/1105491
description: lnxw48a1's status on Sunday, 23-Oct-2022 03:00:54 EDT
encoded: Oh, good grief, #Microsoft. https://thehackernews.com/2022/10/microsoft-confirms-server.html [thehackernews com] Source: https://infosec.exchange/@jerry/109213542275494102 #security #breach #Azure #cloud
date: 2022-10-23T03:00:54-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/565635
enclosure: microsoft-confirms-server.html
links to: microsoft-confirms-server.html
enclosure: https://infosec.exchange/@jerry/109213542275494102
links to: https://infosec.exchange/@jerry/109213542275494102
tagged: concept

microsoft-confirms-server.html
date: 2022-10-23T03:02:27-04:00
length: 95
type: text/plain;charset=UTF-8

https://infosec.exchange/@jerry/109213542275494102
date: 2022-10-23T03:02:28-04:00
type: text/html; charset=utf-8

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: If you are using #Element-iOS , #Element-Android , #Schildichat, or any other #Matrix client powered by matrix-sdk, upgrade now. #Security release is out. https://nu.federati.net/url/287969 [matrix org]
link: https://gs.jonkman.ca/notice/1104994
description: lnxw48a1's status on Wednesday, 28-Sep-2022 15:40:42 EDT
encoded: If you are using #Element-iOS , #Element-Android , #Schildichat, or any other #Matrix client powered by matrix-sdk, upgrade now. #Security release is out. https://nu.federati.net/url/287969 [matrix org]
date: 2022-09-28T15:40:42-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/565338
enclosure: Upgrade now to address E2EE vulnerabilities in matrix-js-sdk, matrix-ios-sdk and matrix-android-sdk2 | Matrix.org
links to: Upgrade now to address E2EE vulnerabilities in matrix-js-sdk, matrix-ios-sdk and matrix-android-sdk2 | Matrix.org
tagged: concept

Upgrade now to address E2EE vulnerabilities in matrix-js-sdk, matrix-ios-sdk and matrix-android-sdk2 | Matrix.org
date: 2022-09-28T15:42:19-04:00
type: text/html

concept
type: Tag
label: elementandroid

concept
type: Tag
label: elementios

concept
type: Tag
label: matrix

concept
type: Tag
label: schildichat

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: https://nu.federati.net/url/286651 [arstechnica com] > Researchers have unearthed a discovery that doesn’t occur all that often in the realm of malware: a mature, never-before-seen Linux backdoor that uses novel evasion techniques to conceal its presence on infected servers, in some cases even with a forensic investigation. > On Thursday, researchers from Intezer and The BlackBerry Threat Research & Intelligence Team said that the previously undetected backdoor combines high levels of access with the ability to scrub any sign of infection from the file system, system processes, and network traffic. Dubbed Symbiote, it targets financial institutions in Brazil and was first detected in November. /via @geniusmusing #security #linux #backdoor #malware
link: https://gs.jonkman.ca/notice/1100352
description: lnxw48a1's status on Saturday, 11-Jun-2022 16:57:15 EDT
encoded: https://nu.federati.net/url/286651 [arstechnica com] > Researchers have unearthed a discovery that doesn’t occur all that often in the realm of malware: a mature, never-before-seen Linux backdoor that uses novel evasion techniques to conceal its presence on infected servers, in some cases even with a forensic investigation. > On Thursday, researchers from Intezer and The BlackBerry Threat Research & Intelligence Team said that the previously undetected backdoor combines high levels of access with the ability to scrub any sign of infection from the file system, system processes, and network traffic. Dubbed Symbiote, it targets financial institutions in Brazil and was first detected in November. /via @geniusmusing #security #linux #backdoor #malware
date: 2022-06-11T16:57:15-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/562328
enclosure: New ultra-stealthy Linux backdoor isn’t your everyday malware discovery
links to: New ultra-stealthy Linux backdoor isn’t your everyday malware discovery
tagged: concept

New ultra-stealthy Linux backdoor isn’t your everyday malware discovery
date: 2022-06-11T15:13:50-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: malware

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: https://nu.federati.net/url/285943 [it slashdot org] #Lenovo issues #security patches for over 100 Lenovo products. Source: https://shitposter.club/objects/6f578473-d458-464d-92a8-086d8ce96abb
link: https://gs.jonkman.ca/notice/1096693
description: lnxw48a1's status on Wednesday, 20-Apr-2022 19:49:38 EDT
encoded: https://nu.federati.net/url/285943 [it slashdot org] #Lenovo issues #security patches for over 100 Lenovo products. Source: https://shitposter.club/objects/6f578473-d458-464d-92a8-086d8ce96abb
date: 2022-04-20T19:49:38-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/559871
enclosure: Hackers Can Infect Over 100 Lenovo Models With Unremovable Malware - Slashdot
links to: Hackers Can Infect Over 100 Lenovo Models With Unremovable Malware - Slashdot
tagged: concept

Hackers Can Infect Over 100 Lenovo Models With Unremovable Malware - Slashdot
date: 2022-04-20T19:52:19-04:00
type: text/html; charset=utf-8

concept
type: Tag
label: lenovo

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: Some severe flaws in #Cisco small business routers. https://www.theregister.com/2022/02/04/cisco_smb_routers_critical_vulnerabilities/. [www theregister com] At publication time, some flaws and some models had not yet been patched. #security
link: https://gs.jonkman.ca/notice/1092294
description: lnxw48a1's status on Monday, 07-Feb-2022 18:26:06 EST
encoded: Some severe flaws in #Cisco small business routers. https://www.theregister.com/2022/02/04/cisco_smb_routers_critical_vulnerabilities/. [www theregister com] At publication time, some flaws and some models had not yet been patched. #security
date: 2022-02-07T18:26:06-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/556866
enclosure: Cisco reveals three critical flaws in small business routers
links to: Cisco reveals three critical flaws in small business routers
tagged: concept

Cisco reveals three critical flaws in small business routers
date: 2022-02-07T18:27:56-05:00
type: text/html; charset=UTF-8

concept
type: Tag
label: cisco

lnxw48a1: #T-mobile #security From 2018: https://nu.federati.net/url/282487 /via @rysiek @rysiek@mastodon.technology
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1078750
description: lnxw48a1's status on Wednesday, 18-Aug-2021 11:39:54 EDT
encoded: #T-mobile #security From 2018: https://nu.federati.net/url/282487 /via @rysiek @rysiek@mastodon.technology
date: 2021-08-18T11:39:54-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/547946
enclosure: T-Mobile Austria on Twitter
links to: T-Mobile Austria on Twitter
tagged: concept

T-Mobile Austria on Twitter
date: 2021-08-18T11:43:38-04:00
length: 474386
type: text/html;charset=utf-8

concept
type: Tag
label: tmobile

bkoehn: arstechnica.com/gadgets/2021/0… #security #foss
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1076768
description: bkoehn's status on Friday, 30-Jul-2021 11:20:19 EDT
encoded: arstechnica.com/gadgets/2021/0… #security #foss
date: 2021-07-30T11:20:19-04:00
creator: Brad Koehn ☑️
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/546693
tagged: concept

concept
type: Tag
label: foss

lnxw48a1: University of #Minnesota researchers apologize to the #Linux kernel community, ask to restore trust. https://nu.federati.net/url/280818 [lore kernel org] #MN #UMN #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1067517
description: lnxw48a1's status on Sunday, 25-Apr-2021 02:48:04 EDT
encoded: University of #Minnesota researchers apologize to the #Linux kernel community, ask to restore trust. https://nu.federati.net/url/280818 [lore kernel org] #MN #UMN #security
date: 2021-04-25T02:48:04-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/540750
enclosure: https://lore.kernel.org/lkml/CAK8KejpUVLxmqp026JY7x5GzHU2YJLPU8SzTZUNXU2OXC70ZQQ@mail.gmail.com/t/#u
links to: https://lore.kernel.org/lkml/CAK8KejpUVLxmqp026JY7x5GzHU2YJLPU8SzTZUNXU2OXC70ZQQ@mail.gmail.com/t/#u
tagged: concept

https://lore.kernel.org/lkml/CAK8KejpUVLxmqp026JY7x5GzHU2YJLPU8SzTZUNXU2OXC70ZQQ@mail.gmail.com/t/#u
date: 2021-04-25T02:50:44-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: minnesota

concept
type: Tag
label: mn

concept
type: Tag
label: umn

objectType=comment
type: item
type: MicroblogPost
title: lnxw48a1: Further info: https://news-web.php.net/php.internals/113838 And with the presumed compromise of git.php.net, all future development activities will take place on #GitHub. #code-hosting #vcs #scm #security #git #php
link: https://gs.jonkman.ca/notice/1066867
description: lnxw48a1's status on Sunday, 18-Apr-2021 11:41:27 EDT
encoded: Further info: https://news-web.php.net/php.internals/113838 And with the presumed compromise of git.php.net, all future development activities will take place on #GitHub. #code-hosting #vcs #scm #security #git #php
date: 2021-04-18T11:41:27-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
reply of: https://gs.jonkman.ca/notice/1066833
has discussion: https://gs.jonkman.ca/conversation/540311
enclosure: https://news-web.php.net/php.internals/113838
links to: https://news-web.php.net/php.internals/113838
tagged: concept

https://news-web.php.net/php.internals/113838
date: 2021-04-18T11:44:29-04:00
type: text/html; charset=utf-8

concept
type: Tag
label: codehosting

concept
type: Tag
label: git

concept
type: Tag
label: github

concept
type: Tag
label: php

concept
type: Tag
label: scm

concept
type: Tag
label: vcs

lnxw48a1: Detecting #curl-pipe-bash from the server-side: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ [www idontplaydarts com] #security #curl #wget #pipe #bash
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1063852
description: lnxw48a1's status on Wednesday, 24-Mar-2021 20:10:19 EDT
encoded: Detecting #curl-pipe-bash from the server-side: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ [www idontplaydarts com] #security #curl #wget #pipe #bash
date: 2021-03-24T20:10:19-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/538320
enclosure: detecting-curl-pipe-bash-server-side
links to: detecting-curl-pipe-bash-server-side
tagged: concept

detecting-curl-pipe-bash-server-side
date: 2021-03-24T20:14:00-04:00
length: 10783
type: text/html; charset=UTF-8

concept
type: Tag
label: bash

concept
type: Tag
label: curl

concept
type: Tag
label: curlpipebash

concept
type: Tag
label: pipe

concept
type: Tag
label: wget

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: https://nu.federati.net/url/278948 [thejournal com] Schools are now the most targeted segment for ransomware ... make up the majority of all ransomware attacks. #security #ransomware #k-12 #schools
link: https://gs.jonkman.ca/notice/1053140
description: lnxw48a1's status on Wednesday, 16-Dec-2020 22:32:37 EST
encoded: https://nu.federati.net/url/278948 [thejournal com] Schools are now the most targeted segment for ransomware ... make up the majority of all ransomware attacks. #security #ransomware #k-12 #schools
date: 2020-12-16T22:32:37-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/531206
enclosure: K–12 Has Become the Most Targeted Segment for Ransomware -- THE Journal
links to: K–12 Has Become the Most Targeted Segment for Ransomware -- THE Journal
tagged: concept

K–12 Has Become the Most Targeted Segment for Ransomware -- THE Journal
date: 2020-12-16T22:35:04-05:00
type: text/html; charset=utf-8

concept
type: Tag
label: k12

concept
type: Tag
label: schools

lnxw48a1: #Mattermost devs discover unfixable (?) flaws in #Go-Lang library https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1052875
description: lnxw48a1's status on Monday, 14-Dec-2020 17:42:47 EST
encoded: #Mattermost devs discover unfixable (?) flaws in #Go-Lang library https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ #security
date: 2020-12-14T17:42:47-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/531062
enclosure: Coordinated disclosure of XML round-trip vulnerabilities in Go XML
links to: Coordinated disclosure of XML round-trip vulnerabilities in Go XML
tagged: concept

Coordinated disclosure of XML round-trip vulnerabilities in Go XML
date: 2020-12-14T17:44:39-05:00
type: text/html; charset=UTF-8

concept
type: Tag
label: golang

concept
type: Tag
label: mattermost

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: US #cybersecurity firm #FireEye discloses breach, theft of tools https://finance.yahoo.com/news/u-cybersecurity-firm-fireeye-discloses-210424354.html [finance yahoo com] #SEC #security #breach #filing
link: https://gs.jonkman.ca/notice/1052139
description: lnxw48a1's status on Tuesday, 08-Dec-2020 21:15:44 EST
encoded: US #cybersecurity firm #FireEye discloses breach, theft of tools https://finance.yahoo.com/news/u-cybersecurity-firm-fireeye-discloses-210424354.html [finance yahoo com] #SEC #security #breach #filing
date: 2020-12-08T21:15:44-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/530584
enclosure: U.S. cybersecurity firm FireEye discloses breach, theft of hacking tools
links to: U.S. cybersecurity firm FireEye discloses breach, theft of hacking tools
tagged: concept

U.S. cybersecurity firm FireEye discloses breach, theft of hacking tools
date: 2020-12-08T21:17:31-05:00
type: text/html; charset=utf-8

concept
type: Tag
label: cybersecurity

concept
type: Tag
label: filing

concept
type: Tag
label: fireeye

concept
type: Tag
label: sec

objectType=note
type: item
type: MicroblogPost
title: geniusmusing: OpenSSL Releases Security Update CISA https://us-cert.cisa.gov/ncas/current-activity/2020/12/08/openssl-releases-security-update >OpenSSL has released a security update to address a vulnerability affecting all versions of 1.0.2 and 1.1.1 released before version 1.1.1i. An attacker could exploit this vulnerability to cause a denial-of-service condition. openssl.org/news/secadv/20201208.txt https://www.openssl.org/news/secadv/20201208.txt >EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971) >====================================================== > >Severity: High > >The X.509 GeneralName type is a generic type for representing different types >of names. One of those name types is known as EDIPartyName. OpenSSL provides a >function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME >to see if they are equal or not. This function behaves incorrectly when both >GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash >may occur leading to a possible denial of service attack. > >OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: >1) Comparing CRL distribution point names between an available CRL and a CRL > distribution point embedded in an X509 certificate >2) When verifying that a timestamp response token signer matches the timestamp > authority name (exposed via the API functions TS_RESP_verify_response and > TS_RESP_verify_token) > >If an attacker can control both items being compared then that attacker could >trigger a crash. >... #OpenSSL #Security #Update
link: https://gs.jonkman.ca/notice/1052134
description: geniusmusing's status on Tuesday, 08-Dec-2020 20:06:10 EST
encoded: OpenSSL Releases Security Update CISA https://us-cert.cisa.gov/ncas/current-activity/2020/12/08/openssl-releases-security-update >OpenSSL has released a security update to address a vulnerability affecting all versions of 1.0.2 and 1.1.1 released before version 1.1.1i. An attacker could exploit this vulnerability to cause a denial-of-service condition. openssl.org/news/secadv/20201208.txt https://www.openssl.org/news/secadv/20201208.txt >EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971) >====================================================== > >Severity: High > >The X.509 GeneralName type is a generic type for representing different types >of names. One of those name types is known as EDIPartyName. OpenSSL provides a >function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME >to see if they are equal or not. This function behaves incorrectly when both >GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash >may occur leading to a possible denial of service attack. > >OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: >1) Comparing CRL distribution point names between an available CRL and a CRL > distribution point embedded in an X509 certificate >2) When verifying that a timestamp response token signer matches the timestamp > authority name (exposed via the API functions TS_RESP_verify_response and > TS_RESP_verify_token) > >If an attacker can control both items being compared then that attacker could >trigger a crash. >... #OpenSSL #Security #Update
date: 2020-12-08T20:06:10-05:00
creator: GeniusMusing
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/530582
enclosure: openssl-releases-security-update
links to: openssl-releases-security-update
enclosure: 20201208.txt
links to: 20201208.txt
tagged: concept

openssl-releases-security-update
date: 2020-12-08T20:06:49-05:00
type: text/html; charset=UTF-8

20201208.txt
date: 2020-12-08T20:06:49-05:00
type: text/plain; charset=UTF-8

concept
type: Tag
label: openssl

concept
type: Tag
label: update

objectType=note
type: item
type: MicroblogPost
title: geniusmusing: Multiple Embedded TCP/IP Stacks CISA https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 >1. EXECUTIVE SUMMARY > > CVSS v3 9.8 > ATTENTION: Exploitable remotely/low skill level to exploit > Vendor: Multiple (open source) > Equipment: uIP-Contiki-OS, uIP-Contiki-NG, uIP, open-iscsi, picoTCP-NG, picoTCP, FNET, Nut/Net > Vulnerabilities: Infinite Loop, Integer Wraparound, Out-of-bounds Read, Integer Overflow, Out-of-bounds Write, Improper Input Validation, Improper Null Termination > >CISA is aware of a public report, known as “AMNESIA:33” that details vulnerabilities found in multiple open-source TCP/IP stacks. CISA is issuing this advisory to provide early notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks. > >The various open-source stacks may be implemented in forked repositories. >2. RISK EVALUATION > >Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache. >3. TECHNICAL DETAILS >3.1 AFFECTED PRODUCTS > >The following are affected: > > uIP-Contiki-OS (end-of-life [EOL]), Version 3.0 and prior > uIP-Contiki-NG, Version 4.5 and prior > uIP (EOL), Version 1.0 and prior > open-iscsi, Version 2.1.12 and prior > picoTCP-NG, Version 1.7.0 and prior > picoTCP (EOL), Version 1.7.0 and prior > FNET, Version 4.6.3 > Nut/Net, Version 5.1 and prior >... #Security
link: https://gs.jonkman.ca/notice/1052049
description: geniusmusing's status on Tuesday, 08-Dec-2020 12:32:50 EST
encoded: Multiple Embedded TCP/IP Stacks CISA https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 >1. EXECUTIVE SUMMARY > > CVSS v3 9.8 > ATTENTION: Exploitable remotely/low skill level to exploit > Vendor: Multiple (open source) > Equipment: uIP-Contiki-OS, uIP-Contiki-NG, uIP, open-iscsi, picoTCP-NG, picoTCP, FNET, Nut/Net > Vulnerabilities: Infinite Loop, Integer Wraparound, Out-of-bounds Read, Integer Overflow, Out-of-bounds Write, Improper Input Validation, Improper Null Termination > >CISA is aware of a public report, known as “AMNESIA:33” that details vulnerabilities found in multiple open-source TCP/IP stacks. CISA is issuing this advisory to provide early notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks. > >The various open-source stacks may be implemented in forked repositories. >2. RISK EVALUATION > >Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache. >3. TECHNICAL DETAILS >3.1 AFFECTED PRODUCTS > >The following are affected: > > uIP-Contiki-OS (end-of-life [EOL]), Version 3.0 and prior > uIP-Contiki-NG, Version 4.5 and prior > uIP (EOL), Version 1.0 and prior > open-iscsi, Version 2.1.12 and prior > picoTCP-NG, Version 1.7.0 and prior > picoTCP (EOL), Version 1.7.0 and prior > FNET, Version 4.6.3 > Nut/Net, Version 5.1 and prior >... #Security
date: 2020-12-08T12:32:50-05:00
creator: GeniusMusing
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/530539
enclosure: icsa-20-343-01
links to: icsa-20-343-01
tagged: concept

icsa-20-343-01
date: 2020-12-08T12:34:46-05:00
type: text/html; charset=UTF-8

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: https://pluralistic.net/2020/12/05/trusting-trust/ > WARNING WARNING WARNING WARNING > Security researchers are alarmed: the already-notorious Trickbot malware has been spottied probing infected computers to find out which version of UEFI they're running. This is read as evidence that Trickbot has figured out how to pull off a really scary feat. Source: https://mamot.fr/@pluralistic/105329139472008620 #Security #UEFI #BIOS #TPM #Trusted-Computing CC: @mangeurdenuage @geniusmusing @musicman It's a long article, but well worth your time.
link: https://gs.jonkman.ca/notice/1051498
description: lnxw48a1's status on Saturday, 05-Dec-2020 14:42:34 EST
encoded: https://pluralistic.net/2020/12/05/trusting-trust/ > WARNING WARNING WARNING WARNING > Security researchers are alarmed: the already-notorious Trickbot malware has been spottied probing infected computers to find out which version of UEFI they're running. This is read as evidence that Trickbot has figured out how to pull off a really scary feat. Source: https://mamot.fr/@pluralistic/105329139472008620 #Security #UEFI #BIOS #TPM #Trusted-Computing CC: @mangeurdenuage @geniusmusing @musicman It's a long article, but well worth your time.
date: 2020-12-05T14:42:34-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/530261
enclosure: Pluralistic: 05 Dec 2020
links to: Pluralistic: 05 Dec 2020
enclosure: https://mamot.fr/@pluralistic/105329139472008620
links to: https://mamot.fr/@pluralistic/105329139472008620
tagged: concept

Pluralistic: 05 Dec 2020
date: 2020-12-05T14:44:40-05:00
type: text/html; charset=UTF-8

https://mamot.fr/@pluralistic/105329139472008620
date: 2020-12-05T14:44:42-05:00
type: text/html; charset=utf-8

concept
type: Tag
label: bios

concept
type: Tag
label: tpm

concept
type: Tag
label: trustedcomputing

concept
type: Tag
label: uefi

hypolite: No, <website>, I do not want to mark this device as "trusted". I enabled two-factor authentication exactly because I do not trust my devices. #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1051270
description: hypolite's status on Thursday, 03-Dec-2020 14:03:51 EST
encoded: No, <website>, I do not want to mark this device as "trusted". I enabled two-factor authentication exactly because I do not trust my devices. #security
date: 2020-12-03T14:03:51-05:00
creator: Hypolite Petovan
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/530103
tagged: concept

lnxw48a1: "So you want to get into Infosec?" https://hackers.town/@thegibson/105243991039588873 Some links to discounted or free training in that thread. #infosec #security #training #education
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1048968
description: lnxw48a1's status on Friday, 20-Nov-2020 18:49:34 EST
encoded: "So you want to get into Infosec?" https://hackers.town/@thegibson/105243991039588873 Some links to discounted or free training in that thread. #infosec #security #training #education
date: 2020-11-20T18:49:34-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/528683
enclosure: https://hackers.town/@thegibson/105243991039588873
links to: https://hackers.town/@thegibson/105243991039588873
tagged: concept

https://hackers.town/@thegibson/105243991039588873
date: 2020-11-20T18:51:25-05:00
type: text/html; charset=utf-8

concept
type: Tag
label: education

concept
type: Tag
label: infosec

concept
type: Tag
label: training

lnxw48a1: @aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1046464
description: lnxw48a1's status on Thursday, 05-Nov-2020 12:03:48 EST
encoded: @aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
date: 2020-11-05T12:03:48-05:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/527069
links to: ufw-fail2ban-portscan.html
tagged: concept

concept
type: Tag
label: notetoself

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: #Google discloses #Microsoft #Windows 10 #zero-day vulnerability that is currently being exploited in the wild. Also patched a #Chrome zero-day. https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/ [www zdnet com] #Win10 #security Patch incoming 2020-11-10, #Patch_Tuesday.
link: https://gs.jonkman.ca/notice/1045604
description: lnxw48a1's status on Saturday, 31-Oct-2020 12:32:38 EDT
encoded: #Google discloses #Microsoft #Windows 10 #zero-day vulnerability that is currently being exploited in the wild. Also patched a #Chrome zero-day. https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/ [www zdnet com] #Win10 #security Patch incoming 2020-11-10, #Patch_Tuesday.
date: 2020-10-31T12:32:38-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/526552
enclosure: Google discloses Windows zero-day exploited in the wild | ZDNet
links to: Google discloses Windows zero-day exploited in the wild | ZDNet
tagged: concept

Google discloses Windows zero-day exploited in the wild | ZDNet
date: 2020-10-31T12:34:58-04:00
length: 525711
type: text/html; charset=UTF-8

concept
type: Tag
label: chrome

concept
type: Tag
label: google

concept
type: Tag
label: patchtuesday

concept
type: Tag
label: win10

concept
type: Tag
label: windows

concept
type: Tag
label: zeroday

objectType=note
type: item
type: MicroblogPost
title: lnxw48a1: FastCompany: Don't share #passwords with your GF or BF until you read this https://www.fastcompany.com/90556503/dont-share-passwords-with-your-gf-or-bf-until-you-read-this [www fastcompany com] I didn't know people still did this. #security #relationships
link: https://gs.jonkman.ca/notice/1039458
description: lnxw48a1's status on Sunday, 27-Sep-2020 22:43:43 EDT
encoded: FastCompany: Don't share #passwords with your GF or BF until you read this https://www.fastcompany.com/90556503/dont-share-passwords-with-your-gf-or-bf-until-you-read-this [www fastcompany com] I didn't know people still did this. #security #relationships
date: 2020-09-27T22:43:43-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/522738
enclosure: Don’t share passwords with your GF or BF until you read this
links to: Don’t share passwords with your GF or BF until you read this
tagged: concept

Don’t share passwords with your GF or BF until you read this
date: 2020-09-28T01:58:45-04:00
length: 1578797
type: text/html; charset=utf-8

concept
type: Tag
label: passwords

concept
type: Tag
label: relationships

lnxw48a1: Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1038250
description: lnxw48a1's status on Tuesday, 22-Sep-2020 21:57:14 EDT
encoded: Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security
date: 2020-09-22T21:57:14-04:00
creator: lnxw48a1
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/522036
enclosure: chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack
links to: chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack
tagged: concept

chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack
date: 2020-09-22T22:00:23-04:00
type: text/html; charset=UTF-8

https://pirati.ca/objects/ec054ce7-215f-4f98-ebbc-616327869042
type: item
type: MicroblogPost
title: miradlo: ♲ @golem@squeet.me: Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.deDer Mobilfunkbetreiber Telefónica Deutschland setzt bei seinem 5G-Kernnetz auf Server in Deutschland. Doch der Betreiber ist Amazon aus den USA. Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de https://www.golem.de/news/trotz-cloud-act-telefonica-o2-vertraut-sein-5g-kernnetz-amazon-an-2009-150632.html #AWS #Datenschutz #Datensicherheit #MarkusHaas #Privatsphäre #WebService #Server #Microsoft #Internet #Security
link: https://gs.jonkman.ca/notice/1034253
description: miradlo's status on Wednesday, 02-Sep-2020 09:06:51 EDT
encoded: ♲ @golem@squeet.me: Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de Der Mobilfunkbetreiber Telefónica Deutschland setzt bei seinem 5G-Kernnetz auf Server in Deutschland. Doch der Betreiber ist Amazon aus den USA. Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de https://www.golem.de/news/trotz-cloud-act-telefonica-o2-vertraut-sein-5g-kernnetz-amazon-an-2009-150632.html #AWS #Datenschutz #Datensicherheit #MarkusHaas #Privatsphäre #WebService #Server #Microsoft #Internet #Security
date: 2020-09-02T09:06:51-04:00
creator: Ute Hauth
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/519690
enclosure: Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de
links to: Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de
tagged: concept

Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de
date: 2020-09-02T09:09:39-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: aws

concept
type: Tag
label: datenschutz

concept
type: Tag
label: datensicherheit

concept
type: Tag
label: internet

concept
type: Tag
label: markushaas

concept
type: Tag
label: privatsphare

concept
type: Tag
label: server

concept
type: Tag
label: webservice

https://pleroma.site/objects/e155cb9d-c235-4520-bbbf-8bf66be78c7c
type: item
type: MicroblogPost
title: schestowitz: #clownComputing = #security is already compromised completely https://translate.google.com/translate?depth=1&hl=en&prev=search&rurl=translate.google.co.uk&sl=de&u=https://www.heise.de/news/CCC-hackt-digitale-Corona-Liste-mit-87-000-Eintraegen-4881198.html see e.g. http://techrights.org/2019/07/20/slack-is-dead/
link: https://gs.jonkman.ca/notice/1033697
description: schestowitz's status on Sunday, 30-Aug-2020 05:09:33 EDT
encoded: #clownComputing = #security is already compromised completely https://translate.google.com/translate?depth=1&hl=en&prev=search&rurl=translate.google.co.uk&sl=de&u=https://www.heise.de/news/CCC-hackt-digitale-Corona-Liste-mit-87-000-Eintraegen-4881198.html see e.g. http://techrights.org/2019/07/20/slack-is-dead/
date: 2020-08-30T05:09:33-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/519362
enclosure: Slack Committed a Very Major Crime That Can Cost Many Billions If Not Trillions in Damages for Years to Come
links to: Slack Committed a Very Major Crime That Can Cost Many Billions If Not Trillions in Damages for Years to Come
enclosure: https://translate.google.com/translate
links to: https://translate.google.com/translate
tagged: concept

Slack Committed a Very Major Crime That Can Cost Many Billions If Not Trillions in Damages for Years to Come
date: 2020-01-05T16:56:25-05:00
type: text/html; charset=UTF-8

https://translate.google.com/translate
date: 2020-08-30T08:32:23-04:00
type: text/html; charset=ISO-8859-1

concept
type: Tag
label: clowncomputing

https://pleroma.site/objects/0cbcfce4-ec20-4808-a60f-def4a3d7d510
type: item
type: MicroblogPost
title: schestowitz: #BleepingComputer is an anti- #gnu #linux site. Whenever it mentions "LINUX" it's an attack (a #security FUD angle usually), now #microsoft EEE against it! "How to run Linux programs from a Windows 10 command prompt"
link: https://gs.jonkman.ca/notice/1033604
description: schestowitz's status on Saturday, 29-Aug-2020 23:16:23 EDT
encoded: #BleepingComputer is an anti- #gnu #linux site. Whenever it mentions "LINUX" it's an attack (a #security FUD angle usually), now #microsoft EEE against it! "How to run Linux programs from a Windows 10 command prompt"
date: 2020-08-29T23:16:23-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/519269
tagged: concept

concept
type: Tag
label: bleepingcomputer

concept
type: Tag
label: gnu

schestowitz: #Security and FUD (Fear, Uncertainty, Doubt) Leftovers http://www.tuxmachines.org/node/141501 #fud #freesw #gnu #linux
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1033216
description: schestowitz's status on Friday, 28-Aug-2020 22:54:02 EDT
encoded: #Security and FUD (Fear, Uncertainty, Doubt) Leftovers http://www.tuxmachines.org/node/141501 #fud #freesw #gnu #linux
date: 2020-08-28T22:54:02-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518916
enclosure: http://www.tuxmachines.org/node/141501
links to: http://www.tuxmachines.org/node/141501
tagged: concept

http://www.tuxmachines.org/node/141501
date: 2020-08-29T08:24:57-04:00
type: text/html; charset=utf-8

concept
type: Tag
label: freesw

concept
type: Tag
label: fud

https://pleroma.site/objects/3cb0ff3a-c56c-426e-b8de-a1575852659e
type: item
type: MicroblogPost
title: schestowitz: That's not even counting the deliberate #backdoors , as the goal seems to be #remoteaccess for spies rather than real #security (and they've become shameless about this) https://www.darkreading.com/vulnerabilities---threats/vulnerability-volume-poised-to-overwhelm-infosec-teams/d/d-id/1338776
link: https://gs.jonkman.ca/notice/1033174
description: schestowitz's status on Friday, 28-Aug-2020 21:35:44 EDT
encoded: That's not even counting the deliberate #backdoors , as the goal seems to be #remoteaccess for spies rather than real #security (and they've become shameless about this) https://www.darkreading.com/vulnerabilities---threats/vulnerability-volume-poised-to-overwhelm-infosec-teams/d/d-id/1338776
date: 2020-08-28T21:35:44-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518881
enclosure: Vulnerability Volume Poised to Overwhelm Infosec Teams
links to: Vulnerability Volume Poised to Overwhelm Infosec Teams
tagged: concept

Vulnerability Volume Poised to Overwhelm Infosec Teams
date: 2020-08-29T00:50:25-04:00
type: text/html

concept
type: Tag
label: backdoors

concept
type: Tag
label: remoteaccess

https://pleroma.site/objects/48493234-cc34-49b1-8f89-345ffde49bfc
type: item
type: MicroblogPost
title: schestowitz: ● NEWS ● #TechDirt #Bridgefy ☞ Bridgefy , A Messaging App Hyped As Great For Protesters, Is A #Security Mess https://www.techdirt.com/articles/20200825/07384045173/bridgefy-messaging-app-hyped-as-great-protesters-is-security-mess.shtml
link: https://gs.jonkman.ca/notice/1033009
description: schestowitz's status on Friday, 28-Aug-2020 11:19:26 EDT
encoded: ● NEWS ● #TechDirt #Bridgefy ☞ Bridgefy , A Messaging App Hyped As Great For Protesters, Is A #Security Mess https://www.techdirt.com/articles/20200825/07384045173/bridgefy-messaging-app-hyped-as-great-protesters-is-security-mess.shtml
date: 2020-08-28T11:19:26-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518749
enclosure: Bridgefy, A Messaging App Hyped As Great For Protesters, Is A Security Mess
links to: Bridgefy, A Messaging App Hyped As Great For Protesters, Is A Security Mess
tagged: concept

Bridgefy, A Messaging App Hyped As Great For Protesters, Is A Security Mess
date: 2020-08-28T19:37:50-04:00
type: text/html; charset=utf-8

concept
type: Tag
label: bridgefy

concept
type: Tag
label: techdirt

schestowitz: #Security Leftovers http://www.tuxmachines.org/node/141468
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032956
description: schestowitz's status on Friday, 28-Aug-2020 09:01:01 EDT
encoded: #Security Leftovers http://www.tuxmachines.org/node/141468
date: 2020-08-28T09:01:01-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518711
enclosure: http://www.tuxmachines.org/node/141468
links to: http://www.tuxmachines.org/node/141468
tagged: concept

http://www.tuxmachines.org/node/141468
date: 2020-08-28T18:25:47-04:00
type: text/html; charset=utf-8

schestowitz: Use this command-line tool to find #security flaws in your code https://opensource.com/article/20/8/static-code-security-analysis
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032948
description: schestowitz's status on Friday, 28-Aug-2020 08:38:25 EDT
encoded: Use this command-line tool to find #security flaws in your code https://opensource.com/article/20/8/static-code-security-analysis
date: 2020-08-28T08:38:25-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518703
enclosure: Use this command-line tool to find security flaws in your code
links to: Use this command-line tool to find security flaws in your code
tagged: concept

Use this command-line tool to find security flaws in your code
date: 2020-08-28T18:15:39-04:00
type: text/html; charset=utf-8

schestowitz: Spotting /tmp related vulnerabilities with #TmpWatcher https://ubuntu.com//blog/spotting-tmp-related-vulnerabilities-with-tmpwatcher #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032945
description: schestowitz's status on Friday, 28-Aug-2020 08:25:59 EDT
encoded: Spotting /tmp related vulnerabilities with #TmpWatcher https://ubuntu.com//blog/spotting-tmp-related-vulnerabilities-with-tmpwatcher #security
date: 2020-08-28T08:25:59-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518700
enclosure: Spotting /tmp related vulnerabilities with TmpWatcher | Ubuntu
links to: Spotting /tmp related vulnerabilities with TmpWatcher | Ubuntu
tagged: concept

Spotting /tmp related vulnerabilities with TmpWatcher | Ubuntu
date: 2020-08-28T18:08:57-04:00
length: 59308
type: text/html; charset=utf-8

concept
type: Tag
label: tmpwatcher

schestowitz: #Netcraft Extension adds credential leak detection https://news.netcraft.com/archives/2020/08/28/netcraft-extension-adds-credential-leak-detection.html #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032942
description: schestowitz's status on Friday, 28-Aug-2020 08:12:00 EDT
encoded: #Netcraft Extension adds credential leak detection https://news.netcraft.com/archives/2020/08/28/netcraft-extension-adds-credential-leak-detection.html #security
date: 2020-08-28T08:12:00-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518697
enclosure: netcraft-extension-adds-credential-leak-detection.html
links to: netcraft-extension-adds-credential-leak-detection.html
tagged: concept

netcraft-extension-adds-credential-leak-detection.html
date: 2020-08-28T18:03:47-04:00
length: 63029
type: text/html; charset=UTF-8

concept
type: Tag
label: netcraft

https://pleroma.site/objects/b91103b5-8bea-4e55-8851-14c502a82d3b
type: item
type: MicroblogPost
title: schestowitz: ● NEWS ● #TheHill #Surveillance ☞ #DNC warns campaign staffers of dating app #security concerns: report https://thehill.com/policy/cybersecurity/514050-democratic-party-warns-campaign-staffers-of-dating-app-security-concerns
link: https://gs.jonkman.ca/notice/1032807
description: schestowitz's status on Friday, 28-Aug-2020 02:32:48 EDT
encoded: ● NEWS ● #TheHill #Surveillance ☞ #DNC warns campaign staffers of dating app #security concerns: report https://thehill.com/policy/cybersecurity/514050-democratic-party-warns-campaign-staffers-of-dating-app-security-concerns
date: 2020-08-28T02:32:48-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518565
enclosure: DNC warns campaign staffers of dating app security concerns: report
links to: DNC warns campaign staffers of dating app security concerns: report
tagged: concept

DNC warns campaign staffers of dating app security concerns: report
date: 2020-08-28T08:32:23-04:00
length: 133834
type: text/html; charset=utf-8

concept
type: Tag
label: dnc

concept
type: Tag
label: surveillance

concept
type: Tag
label: thehill

schestowitz: #Security Leftovers http://www.tuxmachines.org/node/141436
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032570
description: schestowitz's status on Thursday, 27-Aug-2020 11:17:36 EDT
encoded: #Security Leftovers http://www.tuxmachines.org/node/141436
date: 2020-08-27T11:17:36-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518389
enclosure: http://www.tuxmachines.org/node/141436
links to: http://www.tuxmachines.org/node/141436
tagged: concept

http://www.tuxmachines.org/node/141436
date: 2020-08-27T16:34:21-04:00
type: text/html; charset=utf-8

schestowitz: #Ubuntu To Try Again In Switching #IPTables To Use #Nftables Backend http://www.tuxmachines.org/node/141422 #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032346
description: schestowitz's status on Thursday, 27-Aug-2020 00:24:04 EDT
encoded: #Ubuntu To Try Again In Switching #IPTables To Use #Nftables Backend http://www.tuxmachines.org/node/141422 #security
date: 2020-08-27T00:24:04-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518171
enclosure: http://www.tuxmachines.org/node/141422
links to: http://www.tuxmachines.org/node/141422
tagged: concept

http://www.tuxmachines.org/node/141422
date: 2020-08-27T10:30:56-04:00
type: text/html; charset=utf-8

concept
type: Tag
label: iptables

concept
type: Tag
label: nftables

schestowitz: #DigitalOcean & Others Still Working On Core Scheduling To Make Hyper Threading Safer https://www.phoronix.com/scan.php?page=news_item&px=Core-Scheduling-2020 #kernel #linux #security
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032330
description: schestowitz's status on Wednesday, 26-Aug-2020 22:55:08 EDT
encoded: #DigitalOcean & Others Still Working On Core Scheduling To Make Hyper Threading Safer https://www.phoronix.com/scan.php?page=news_item&px=Core-Scheduling-2020 #kernel #linux #security
date: 2020-08-26T22:55:08-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518156
enclosure: https://www.phoronix.com/scan.php
links to: https://www.phoronix.com/scan.php
tagged: concept

https://www.phoronix.com/scan.php
date: 2020-08-27T09:15:17-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: digitalocean

concept
type: Tag
label: kernel

schestowitz: #Security Leftovers http://www.tuxmachines.org/node/141409
type: item
type: MicroblogPost
link: https://gs.jonkman.ca/notice/1032316
description: schestowitz's status on Wednesday, 26-Aug-2020 22:17:25 EDT
encoded: #Security Leftovers http://www.tuxmachines.org/node/141409
date: 2020-08-26T22:17:25-04:00
creator: Dr. Roy Schestowitz (罗伊)
has creator: acct
licence: https://creativecommons.org/licenses/by/3.0/
has discussion: https://gs.jonkman.ca/conversation/518142
enclosure: http://www.tuxmachines.org/node/141409
links to: http://www.tuxmachines.org/node/141409
tagged: concept

http://www.tuxmachines.org/node/141409
date: 2020-08-27T08:24:05-04:00
type: text/html; charset=utf-8

Dr. Roy Schestowitz (罗伊)
type: Agent
nick: schestowitz
holds account: acct