Scott Mortimer @ScottMortimer@infosec.exchange

Naming & Shaming Web Polluters: Xiongmai

In late 2016, the world witnessed the sheer disruptive power of Mirai, a powerful botnet strain fueled by Internet of Things (IoT) devices like DVRs and IP cameras that were put online with factory-default passwords and other poor security settings.

https://krebsonsecurity.com/2018/10/naming-shaming-web-polluters-xiongmai/

I wonder what kind of bump Mastodon will get now that G+ is shutting down. 🤔

Draw.io for threat modeling | michenriksen.com

http://michenriksen.com/blog/drawio-for-threat-modeling/

Achieving a high security score for TLS

I thought Mastodon was already secure?

Well, it depends. You see, a Mastodon instance is just a web server, like any other on the internet. It's only as secure as how the sto...

https://write.as/runningmastodon/i-thought-mastodon-was-already-secure

States- Rights seem to only be acceptable when they conform to certain political agendas for some in this era. Good on California for asserting protections for their citizens in this time of division.

Calif. enacts net neutrality law—US gov’t immediately sues to block it [Updated]

Justice Department sues California—Ajit Pai called state rules "illegal."

https://arstechnica.com/tech-policy/2018/09/california-governor-signs-net-neutrality-rules-into-law/

Attackers Take Over 50 Million Accounts in Facebook Breach

Attackers exploited vulnerabilities in Facebook’s code to gain access to at least 50 million Facebook user accounts. Those accounts could have been used for information gathering campaigns, as attackers had full access to the user’s profile, friends list, and usage history.

Attackers Take Over 50 Million Accounts in Facebook Breach https://duo.com/decipher/attackers-take-over-50-million-accounts-in-facebook-breach

Google actually listens to users, hands back cookies and rethinks Chrome auto sign-in

https://www.theregister.co.uk/2018/09/26/google_backtrack_chrome/

Getting Closer to a Surveillance-Free Internet

Cloudflare has been working with the likes of Google, Mozilla, Fastly and Apple to make it harder for ISPs and other network operators from being able to see what sites users are visiting. Cloudflare has rolled out ESNI on its systems to see how well the experimental technical specification works to hide user activity online.
https://duo.com/decipher/getting-closer-to-a-surveillance-free-internet

Tor Browser Bundle 8.0 Sends OS+kernel+TOTAL_PING_COUNT in Update Queries to Mozilla

Tor Browser Bundle 8.0 Sends OS+kernel+TOTAL_PING_COUNT in Update Queries to Mozilla https://soylentnews.org/article.pl?sid=18/09/25/2257233&from=rss

French Government Open Sources Secure Operating System - Security Boulevard

The French government's national cybersecurity agency has released an operating system built using open source components internally over the course of The French government's national cybersecurity agency has released an open source operating system built internally over more than 10 years.

https://securityboulevard.com/2018/09/french-government-open-sources-secure-operating-system/

Introducing the Librem Key – Purism

https://puri.sm/posts/introducing-the-librem-key/

Cloudflare Makes InterPlanetary File System Globally Accessible

Cloudflare has released a gateway and browser extension to make the distributed IPFS network easily and securely accessible.

https://duo.com/decipher/cloudlfare-makes-interplanetary-file-system-globally-accessible