Notices by Michela Marie 🏳️‍🌈 (michelamarie@mastodon.social), page 10

Docker security breach exposes data of 190,000 users.

Hashed passwords, GitHub, and Bitbucket tokens exposed.

https://www.grahamcluley.com/docker-security-breach-exposes-data-of-190000-users/

2+ million IoT devices vulnerable to man-in-the-middle attacks, allowing attackers to steal passwords:

https://hacked.camera/

– the website contains a list, so you can check if your devices are vulnerable
– CVE-2019-11219, CVE-2019-11220
– mitigation: dispose your vulnerable devices, or block OUTBOUND traffic to 32100/udp

#iot #vulnerability #cve201911219 cve201911220 #infosec #mitm #cybersecurity #security

@alexl Wait until Tuesday, Fedora 30 is released then =) It's nice if you want a Gnome desktop without a ton of customisations made to it that's good for just getting stuff done

Bill Nye wants to educate the public about science with his new podcast https://t.co/IMZB9iISIu https://t.co/X94ukKMQyV
#thevergebot

Artists have descended on @VanConventions for #ArtVancouver, an international fair that brings together a global community of artists and galleries! This year’s show, #UnitingNationsThroughArt, features works from all corners of the !

#IaMghebrishvili via @Art_Vancouver

"WooCommerce Checkout Manager" plugin for WooCommerce (WordPress), used by 60,000+ websites, vulnerable to arbitrary file uploads:

https://thehackernews.com/2019/04/wordpress-woocommerce-security.html

– the latest version of WooCommerce Checkout Manager (4.2.6) is still vulnerable to this
– there is no patch available
– mitigation: disable the "Categorize Uploaded Files" option in the setting, or disable the plugin completely

#woocommerce #wordpress #vulnerability #0day #zeroday #infosec #cybersecurity #security

Interesting story from the Register. This shows why we need more #infosec researchers digging into VPNs. I assume that NordVPN isn't actually up to no good, but requiring that they prove it is important.

https://www.theregister.co.uk/2019/04/26/nordvpn_strange_traffic_domains/

The Django Software Foundation is looking for an advances beginner Python/Django developper for a 4 to 6 weeks paid internship.

This looks really interesting, you should have a look if you need to acquire experience, while contributing to free software (meaning you'll incidentally help Funkwhale too ;)
https://www.djangoproject.com/weblog/2019/apr/24/internship-opportunity-dsf-app/

North America's largest #documentary festival opens today in #Toronto!

An outstanding line-up of more than 250 documentaries from Canada and around the world will be screened during #HotDocs19 from today until May 5. http://hotdocs.ca 

Times #Discord has tried to track me in the past day: 500+

Times #Reddit has tried to track me in the past day: 1000+

Times #Google has tried to track me in the past day: 2000+

Times #Mastodon has tried to track me in the past day: 0

Times #Funkwhale has tried to track me in the past day: 0

Times #Matrix has tried to track me in the past day: 0

This is why we need to leave proprietary network services. They will *always* track you. #privacy #selfhosted

SuperTuxKart 1.0 is out!

Now with networking support - race against your friends online!

http://blog.supertuxkart.net/2019/04/supertuxkart-10-release.html

Trailer:
https://www.youtube.com/watch?v=Lm1TFDBiIIg