Scott Mortimer @ScottMortimer@infosec.exchange

Controlling your smart phone's ability to leak information is a high priority for me. That's why I was so pleased to find Bouncer. Have a look.

https://www.makeuseof.com/tag/grant-temporary-permissions-android-app/

Now if I could only get my contacts to stop using Whatsapp and use Signal instead. 😑

Signal >> Blog >> Setback in the outback https://signal.org/blog/setback-in-the-outback/

20 Years after OpenSSH is created.... better late than never....

Windows Server 2019 Officially Supports OpenSSH For the First Time

Windows Server 2019 Officially Supports OpenSSH For the First Time http://rss.slashdot.org/~r/Slashdot/slashdot/~3/of0b4SKIqys/windows-server-2019-officially-supports-openssh-for-the-first-time

Edge goes Chromium, and open source wins the browser wars | ZDNet

Decades after starting the web browser wars, Microsoft has given up its proprietary Edge web browser in favor of its open-source based rival Chromium.

https://zd.net/2UqczWX

Am I the only one that hopes that crypto-currency mining dies to save the planet from ridiculous wastes of energy usage?

FireHOL is a language (and a program to run it) which builds secure, stateful firewalls from easy to understand, human-readable configurations. The configurations stay readable even for very complex setups.

https://firehol.org/

It's OK Google: nobody will even notice.

https://m.slashdot.org/story/349288

Coming soon from your favorite botnet

https://www.zdnet.com/article/the-coap-protocol-is-the-next-big-thing-for-ddos-attacks/#ftag=RSSbaffb68

https://www.us-cert.gov/ncas/alerts/TA18-331A

This is quite an interesting cybercrime campaign.

"The ad fraud scheme that utilizes the Kovter botnet runs a hidden Chromium Embedded Framework (CEF) browser on the infected machine that the user cannot see. A C2 server tells the infected machine to visit counterfeit websites. When the counterfeit webpage is loaded in the hidden browser, requests are made for ads to be placed on these counterfeit pages. The infected machine receives the ads and loads them into the hidden browser."

Holiday Shopping Safety Tips: LastPass 2018 Online Retailer Security List

Keep your information safe this holiday season! LastPass ranks 2018’s top 10 online retailers from most to least secure and shares what to lookout for.

https://blog.lastpass.com/2018/11/2018-e-retailer-naughty-and-nice-list.html/?&stream=technology

Many free mobile VPN apps are based in China or have Chinese ownership | ZDNet

Chinese affiliation raises a sign of alarm in light of China's recent clampdown of "unauthorized" VPN services.

https://www.zdnet.com/article/many-free-mobile-vpn-apps-are-based-in-china-or-have-chinese-ownership/#ftag=RSSbaffb68