Encrypt all the things!

God damn iVPN running like a pig. Is every ISP trying to block VPNs

Does anyone here use a VPN / SOCKS5 proxy with Firefox / Chrome?

I've just realised that most of the FF / Chrome addons that allow you to switch proxies will not actually send DNS requests over the proxy, and send them through whatever network interface you are using.

If you set up the proxy manually via the browser network settings, though, it does seem to work

Unsurprisingly the Ubiquiti breach was way worse than they originally reported because, you know, stock price:

https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

Includes some gems such as:-

"
... the attacker(s) had access to privileged credentials that were previously stored in the LastPass account of a Ubiquiti IT employee, and gained root administrator access to all Ubiquiti AWS accounts, including all S3 data buckets, all application logs, all databases, all user database credentials, and secrets required to forge single sign-on (SSO) cookies.

'Adam' says Ubiquiti’s security team picked up signals in late December 2020 that someone with administrative access had set up several Linux virtual machines that weren’t accounted for.
"

Lol

Ouch

set up several Linux virtual machines that weren’t accounted for

Who isn't using their employer's cloud accounts to spin up coin miners these days?

"Oh, hi boss"

Used to be Seti@Home back in the day.

*ministry_of_serendipity laughs in bitcoin*

I ran that when I was into overclocking and had a unlimited ADSL account (they weren't common back then in Oz)

When the world was more innocent

looks like Zuck and the FB founders are all in the latest FB leak, and Zuck is an active Signal user 🤣

edit: working link
https://twitter.com/Daviey/status/1378645798439768064?s=20

With the FB dB breach is it worth getting a new mobile? Saldy mine was compromised.

Hey all,

in know its not encryption, but more about protecting my pc, but whats the best, simpliest, free sandbox program? Sandboxie? Every now and again, i download something but it makes me feel uncomfortable

This is fun https://signal.org/blog/cellebrite-vulnerabilities/

You could spin up a virtual environment using VirtualBox, or run a Live CD

I emailed that to myself to read this morning.

"fell off the back of a truck"

I love this though:
"In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage. These files are never used for anything inside Signal and never interact with Signal software or data, but they look nice, and aesthetics are important in software. Files will only be returned for accounts that have been active installs for some time already, and only probabilistically in low percentages based on phone number sharding. We have a few different versions of files that we think are aesthetically pleasing, and will iterate through those slowly over time. There is no other significance to these files."

This is fun https://signal.org/blog/cellebrite-vulne­rabilities/

great read

You could spin up a virtual environment using VirtualBox, or run a Live CD

thanks buddy

Beautiful stuff!

Took a while to understand back of a lorry.

But the dongle to prevent copying....

Signal doing the good Signal thing: https://signal.org/bigbrother/central-california-grand-jury/

Also... to those who recommended staying on WhatsApp, or moving to Telegram... is it not somewhat clear why those in tech and tech security recommend Signal? It is a different breed altogether even if it just appears to be another messaging app.

I understand all of the technical arguments for using Signal, but I have less than 10 contacts using it, whereas everyone else uses WhatsApp.

For me, and I suspect a majority of 'lay' users, it's a numbers game.

Yep. A few more joined a couple of months ago when the Whatsapp privacy policy was updated but no more for months. It's a hard sell for a product that isn't as good in terms of functionality.

Is it much different?

Apart from the quirky background and friendly shade of green, I've never noticed WhatsApp doing anything special in the field of actual messaging.

Ppl are lazy

Yeah, sure, absolutely.

But it's useful to distinguish between inertia and functionality. If WhatsApp really does something special (apart from advertising), it'd be interesting to know what.

But if Signal is just as good in terms of functionality, we should be saying that clearly and correcting claims to the contrary.

(with apologies for the unintentional tongue twister)