☠️ Mr. Ramirez 👻 @seeyouindisneyland@infosec.exchange

Our lead developer was recently laid off from his job, your support via Patreon, Open Collective and other platforms means a lot during this difficult time.

We've come too far to give up now, progress may be slower for the next few weeks.

How to tell a true friend: they strip the tracking identifiers and amp junk from a url before sharing it with you.

I came up with a single pass O(n) sort algorithm I call StalinSort. You iterate down the list of elements checking if they're in order. Any element which is out of order is eliminated. At the end you have a sorted list.

NordVPN users’ passwords exposed in mass credential-stuffing attacks https://arstechnica.com/information-technology/2019/11/nordvpn-users-passwords-exposed-in-mass-credential-stuffing-attacks/ #InfoSec

@seeyouindisneyland It haunts my dreams https://arstechnica.com/information-technology/2019/08/snake-oil-or-genius-crown-sterling-tells-its-side-of-black-hat-controversy/

😂 #infosec

@ScottMortimer @chidgey @jerry @seeyouindisneyland @crowd42

Wasn't "military-grade encryption" ROT-13 at some times?
I'm pretty sure Julius Caesar used it for military communications...

@chidgey

@jerry @seeyouindisneyland
U
Military grade encryption is usually just AES-256. I always wondered why people thought there was some secret sauce that was more

NordVPN experienced a security breach when one of their data centers exposed a private key and an outside (unidentified) party retrieved it. The breach happened in March of 2018 and wasn't discovered until a few months ago.

Nord is only now commenting on it because Tech Crunch found the white hat hacker report detailing the breach and called them out on it. https://techcrunch.com/2019/10/21/nordvpn-confirms-it-was-hacked/

This isn't Nord's only issue. Cancel your subscription and switch to someone else.

NordVPN breach was worse than I thought.

'TechCrunch took NordVPN to task on the somewhat dismissive tone of its breach disclosure, noting that the company suffered a significant breach that went undetected for more than a year.

Kenneth White, director of the Open Crypto Audit Project, said on Twitter that based on the dumped Pastebin logs detailing the extent of the intrusion, “the attacker had full remote admin on their Finland node containers.” '

https://krebsonsecurity.com/2019/10/avast-nordvpn-breaches-tied-to-phantom-user-accounts/

@chartier The current standards are a shitshow. So:

- USB Type C is just the physical connector
- USB 3.1 gen 2 is the current fastest version of the USB protocol and uses the Type C connector
- Thunderbolt 3 is an entirely separate protocol from USB 3.1 gen 2 that _also_ uses the Type C connector

USB 4 merges the two protocols, so USB 4 is a superset of TB3 (still using the Type C connector).

(then there's also USB 3.2 Gen 2x2, which is a protocol that is also over the Type C connector, but is _not_ Thunderbolt)

So USB4 will be substantially better than the current situation, but still not great because of old devices/cables and backwards compatibility needs.