Je me demande s'ils sont débiles et négligeants ou malveillants. Je vois pas de troisième voie.

Show thread

Je me demande combien de sites ont une ressource active (html ou js) de media.interieur.gouv.fr qui permettrait de dumper l'identité d'un utilisateur pour désanonymiser du trafic

infosec.exchange/media/gkNdVQ-

X_Cli boosted

Alternative éthique aux événements, groupes et pages Facebook, #Mobilizon est un outil qui permet de trouver, créer et organiser des événements

Une instance Stop #Specisme pour l' organisation d'actions #antispécistes a été créé !

➡️ stop.specis.me

#ParcequEux

That's the second time this year that some researchers find something close or identical to something *I* found 6/7 years ago. At least, the first one had mentionned my work and explained the difference.

Show thread

Always nice to read a paper and find a full page about a "discovery" that the authors stole/"rediscovered" from the work you did 7 years ago. And with no attribution or quote.

X_Cli boosted

Companies House, the British registrar of newly formed companies, has forced a firm to rename itself from

""><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD

On the grounds that merely including the name of the company on a web-page (including the Companies House website) could trigger cross-site scripting attacks.

theguardian.com/uk-news/2020/n

1/

X_Cli boosted

The EU Council is pushing for encryption backdoors to messenger apps such as WhatsApp and Signal to fight terrorism (German article): fm4.orf.at/stories/3008930/

Despite the fact that errors of investigation in Austrian authorities had made the attack possible in the first place and not a lack of digital surveillance powers. Politicians must start to understand that more surveillance will not lead to more security. That's why we fight any attempt for an encryption backdoor: tutanota.com/blog/posts/why-a-

X_Cli boosted

The French people as a whole once again under house arrest by its authoritarian government. Liberty (not), Equality (not), Fraternity (not gender neutral). Fuck France. Fuck its gov. I fucking hate this country.

X_Cli boosted

After several months, @mobilizon is out!

It seems to be a very good fit in these times of protests when people need to self-organize to fight for their rights, away from large companies which can and have already censored them!

Have a look at the guided tour @Framasoft offers in their blog, it’s full of great ideas.

Congrats to them, I’m happy to support you financially, and it was well worth the wait 🎉

framablog.org/2020/10/27/photo

X_Cli boosted

La V1 de Mobilizon officiellement lancée !

Mobilizon. Vos événements. Vos groupes. Vos données.
Mobilizon est un outil libre et fédéré pour libérer nos événements et nos groupes des griffes de Facebook. Après deux ans de travail, la première version de ce logiciel sort aujourd’hui, accompagnée de toute une série d’o

les-communs-dabord.org/la-v1-d

#communsnumériques #Framasoft #mobilisation #mobilizon #pratiquescommunautaires #communs

X_Cli boosted
X_Cli boosted

Je recrute un stagiaire pour de la modélisation des interactions entre machines au travers du protocole Kerberos.

Compétences : C et Python. Système Windows et Linux. Wireshark et bases de réseau.
Bonus pour Rust et Go.

Uniquement dernière année de cursus bac+5.

Poste à la défense. Société Gatewatcher.

X_Cli boosted
X_Cli boosted

"The first rule of PAKE is: nobody ever wants to talk about PAKE. The second rule of PAKE is that this is a shame, because PAKE — which stands for Password Authenticated Key Exchange — is actually one of the most useful technologies that (almost) never gets used. It should be deployed everywhere, and yet it isn’t."

blog.cryptographyengineering.c

X_Cli boosted

Easily and securely send things from one computer to another

croc is a tool that allows any two computers to simply and securely transfer files and folders. AFAIK, croc is the only CLI file-transfer tool does all of the following:

allows any two computers to transfer data (using a relay)

provides end-to-end encryption (using PAKE)

enables easy cross-platform transfers (Windows, Linux, Mac)

allows multiple file transfers

github.com/schollz/croc

X_Cli boosted

Please remember that the coronavirus has not gone away just because people are bored with it now

Show more
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.