Notices by x0rz (x0rz@mastodon.social)

https://t.co/4jeg4UOUPf

Interesting: you can fingerprint people based on their browser extensions, and LinkedIn has been doing so for years https://github.com/dandrews/nefarious-linkedin #privacy

Cool data viz: most mentioned country each month since 1900 in New York Times headlines (source: https://www.reddit.com/r/dataisbeautiful/comments/a7zykj/countries_that_appeared_most_frequently_in_nyt/) https://t.co/Ro87kbofLi

US Ballistic Missile Defense System (BMDS) Audit Report https://assets.documentcloud.org/documents/5634601/181217-DoD-Cybersecurity.pdf (PDF) #vulnerability #pentest https://t.co/AYmEyGtsfk

Images speak a thousand words https://t.co/yUGk0jfI4x

Nginx off-by-slash vulnerability, cool trick presented by @orange_8361 at #hacklu https://t.co/QKjK4Cwol7

Wow, @njal_la automatically detecting your PGP key to encrypt emails is the sweetest thing I've seen this week! More providers should do this, especially for sensitive emails. https://t.co/mUbuJssxga

> Adblock Browser for Android
> 4 trackers
> asking 32 permissions (half being 'dangerous')
> 10,000,000+ downloads
https://reports.exodus-privacy.eu.org/reports/13675/ #privacy https://t.co/fTf58402m9

Ah! US military documents leaked because some officer did not change default password on his FTP server... although he completed the Cyber Awareness Challenge! So much for that 🤦♂️ https://www.recordedfuture.com/reaper-drone-documents-leaked/ #leak #infosec #opsec #fail https://t.co/vlnXOQ8LfW

Extracting the Private Key from a TREZOR with a $70 Oscilloscope https://jochen-hoenicke.de/trezor-power-analysis/ #bitcoin https://t.co/XPGfDhkbKG

Good guy researcher, didn't make any logo/website to hype its paper 👌
SEVered: Subverting AMD’s Virtual Machine Encryption https://arxiv.org/pdf/1805.09604.pdf (PDF) #AMD #security https://t.co/ViUBo1g5Br

2000: User data is a business
2018: Privacy is a business

Great write-up of what happens behind the scenes of #malware traffic distribution https://malware.dontneedcoffee.com/hosted/anonymous/kotd.html https://t.co/Ik2wEpxKal

How to break #ransomware encryption https://blog.malwarebytes.com/threat-analysis/2018/03/encryption-101-how-to-break-encryption/ #malware #encryption #crypto https://t.co/pRvwCnFVLj

Also, that is why .docx with macros or phishing will be on the rise, relying on the human weaknesses to get access is waaaaay more cost effective today

Stalking random Citymapper users via bruteforcable short IDs http://www.darkport.co.uk/online-stalking-london-paris-new-york/ #privacy #leak https://t.co/WLl8T8zVSR

Does Siri use a secret microphone? I don't know what to think about this one... https://vimeo.com/255254752 #apple #iphone #siri #privacy

And it's a legit service, who would have thought... 😬 https://doesmycreditcardwork.com/ #wtf https://t.co/TpyJnr0DQO

All #34C3 talks https://media.ccc.de/c/34c3

In a few weeks, Chrome will show the "Not secure" warning when users enter data on any HTTP page (not just password) https://blog.chromium.org/2017/04/next-steps-toward-more-connection.html https://t.co/NnaklX9bUm