Notices by infosec-handbook.eu (infosechandbook@mastodon.at), page 3

Solo: Open-source security key which supports U2F.

https://solokeys.com/

#solokey #security #token #gpg #u2f #infosec #cybersecurity

While we zero in on 300 followers on Mastodon :mastodon:, we want to thank all of you for the friendly and open Mastodon community. We had productive discussions and talked about very interesting InfoSec topics.

Thank you. :blobcheer:

#infosechandbook #infosec #cybersecurity #security #mastodon #thanks

Details about zero-day vulnerability in :tor: Tor Browser 7.x published on Twitter by security company:

https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/

– full bypass of the "Safest" security level of the NoScript extension
– allows malicious code to run inside the Tor Browser
– Tor Browser 8.x is not affected
– update to NoScript "Classic" version 5.1.8.7 / Tor Browser 8.x

#tor #vulnerability #anonymity #privay #security #zeroday #noscript #infosec #cybersecurity #update

I just came across an interesting observation: According to the tool Exodus, Orfox (Tor browser for Android) contains 4 trackers:

- Adjust
- Google Ads
- Google DoubleClick
- Google Firebase Analytics

https://reports.exodus-privacy.eu.org/reports/11967/

https://guardianproject.info/apps/orfox/

#orfox #exodus #privacy #tracking #google #tor #android

Tails 3.8 brings update for Enigmail (EFAIL mitigation).

https://tails.boum.org/news/version_3.8/index.en.html

(Tails 3.9 is scheduled for September 5.)

#tails #tailsos #privacy #tor #anonymity #enigmail #efail

SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTools and python-gnupg

https://neopg.io/blog/gpg-signature-spoof/

#sigspoof #gnupg #enigmail #gpg #vulnerability #security #infosec #cybersecurity