X_Cli @x_cli@infosec.exchange

Never forget

"The first rule of PAKE is: nobody ever wants to talk about PAKE. The second rule of PAKE is that this is a shame, because PAKE — which stands for Password Authenticated Key Exchange — is actually one of the most useful technologies that (almost) never gets used. It should be deployed everywhere, and yet it isn’t."

https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/

Easily and securely send things from one computer to another

croc is a tool that allows any two computers to simply and securely transfer files and folders. AFAIK, croc is the only CLI file-transfer tool does all of the following:

allows any two computers to transfer data (using a relay)

provides end-to-end encryption (using PAKE)

enables easy cross-platform transfers (Windows, Linux, Mac)

allows multiple file transfers

https://github.com/schollz/croc

Please remember that the coronavirus has not gone away just because people are bored with it now

@isagalaev @deutrino Come to think of it, I feel this is going to be very interesting: Europe is planing on forcing social networks to be interoperable. I wonder how this will impact Signal :)

https://github.com/signalapp/Signal-Desktop/issues/815

The #Signal dev process in a nutshell

Does anyone in Fediland have any experience using the new Mozilla VPN?

Please boost.

https://vpn.mozilla.org/

"Should I use KeePass 2, KeePassX, or KeePassXC?"

✔️ Use KeePass 2 – this is the original KeePass, primarily developed for Windows. However, it can be used on Linux, too.
https://keepass.info/

✔️ Use KeePassXC – this password manager indirectly originates from KeePass 2. Most features are similar to KeePass 2.
https://keepassxc.org/

❌ Don't use KeePassX – development ceased in 2016.

#KeePass #KeePassXC #KeePassX #PasswordManagement #Passwords #InfoSec #Security

A lengthy and very detailed blog post by Matthew Green on why #Signal PINs are problematic: https://blog.cryptographyengineering.com/2020/07/10/a-few-thoughts-about-signals-secure-value-recovery/

#Linux will no longer refer to masters, slaves or blacklists.

In their place coders will use alternatives such as “primary” & “secondary”, or “leaders” & “followers”, or even “directors” & “performers”.

Blacklists are to become either “denylists” or “blocklists” and whitelists will become “allowlists” or “passlists”.

This is illuminating...and potentially frightening.

https://iknowwhatyoudownload.com/en/peer/

This is a fascinating read. Let this sink in: law enforcement compromised the network of a secure chat solution and pushed malware to all endpoints in order to read all the messages. All that on the premise that the majority of the users were criminals, even though some weren't.

https://www.vice.com/en_us/article/3aza95/how-police-took-over-encrochat-hacked