XORcat 🍵 @xorcat@infosec.exchange

Chilly (relatively) morning here in Brisbane!

Dissection of COVIDSafe (Android) by @geoffreyhuntley@twitter.activitypub.actor

Good to know that it doesn't currently appear to be a trashfire.

https://docs.google.com/document/d/17GuApb1fG3Bn0_DVgDQgrtnd_QO3foBl7NVb8vaWeKc/preview#

Zoom should quietly introduce unique passwords per invited user (and the ability to see whose code an offender used) to really stomp down on zoombombing...

Hope you all had a great long weekend 🐕 ❤️

Just listened to @chidgey’s Pragmatic episode titled “FOSS Social” - loving the pixelfed idea - I think I’ll need to check that out and maybe spin up an instance for my family and I to use 😊

Great podcast John!

Bit of cool vuln chaining in detail by Xerubus@TSS

https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee

Fun with SEH - @xerubus@twitter.com: https://www.mogozobo.com/?p=3548

It is proven! I am xorcat on Keybase: https://keybase.io/xorcat/sigchain#8984a52db7b9bf50454ed95033995dd0a2131c247d64e4c63afecb2409b6b5380f

/etc/init.d/rcS: “date > /dev/urandom”
Me:
# date
Thu Jan 1 01:01:10 CET 1970

🤦‍♂️