Dennis @dennis@social.bankmann.name

The greatest trick the devil ever pulled is how JavaScript got 100x more complex from 2009 to 2019 and yet web apps look exactly the same, except that they’re often slower now.

Follow-up on tool that extracts GPG secret keys of Nitrokey Start tokens:

https://github.com/Nitrokey/nitrokey-start-firmware/issues/14

https://github.com/Nitrokey/nitrokey-start-firmware/issues/15

– obviously, the Nitrokey Start wasn't protected
– owners should update their firmware to release RTM.7 or above

Original toot: https://mastodon.at/@infosechandbook/102016334111560440

#gpg #nitrokey #infosec #cybersecurity #security

Just saw an interesting post from a major cosmetics manufacturer:

"An audit of our social content and strategy demonstrated that on average, only 6% of our followers are serviced with our content in their newsfeed because we don’t pay to play. "

...they have millions of followers on Facebook etc, but almost no one sees their posts.

Their response is to try promoting their own websites instead of ad-based third parties'.

https://uk.lush.com/article/were-switching-social

(Article name is a coincidence!)

It does prove the usefulness of #federation that through all the #Matrix outage, my account was not affected at all. Most of the people I chat to are on other servers than the one affected.

Federate <3

Autumn remnants #photography

Those were the days...

#DOS #1992

Matrix.org publishes timeline after security breach:

https://matrix.org/blog/2019/04/11/security-incident/

– the attacker exploited vulnerabilities in Jenkins
– the attacker had full database access, including access to unencrypted content like private messages, passwords hashes, access tokens
– Matrix.org recommends changing your password (including NickServ password)

#matrix #breach #infosec #cybersecurity #security

A reminder of how far we have come - a 1973 map of the ARPANet - https://kottke.org/19/03/a-map-of-the-internet-from-may-1973

Oh my goodness I've just learned a thing about The Matrix that causes it to make a lot more sense: In the original script the humans were used as neural network compute clusters by the Machines and as a crucial component of The Matrix itself.

Which is why humans who were aware of the simulation could control aspects of The Matrix - their minds were part of its foundation.

Unfortunately the test audiences had trouble understanding this concept so the studio changed the human role to "batteries".

Looks like 0-RTT in TLS1.3 comes with a quite high price: Vulnerability to replay attacks.

If you are one of the early adopter, check that your application is not affected as this is a fundamental problem on protocol level.

"What Application Developers Need To Know About TLS Early Data (0RTT)" by Paul Kehrer:

https://blog.trailofbits.com/2019/03/25/what-application-developers-need-to-know-about-tls-early-data-0rtt/

#TLS #TLS13 #infosec #security #HTTPS #0RTT

Favourite photo from my day ·

hey so!!! are you asking a specific question online and not getting any help?

make a second account and answer your own question incorrectly

people will be piling on to correct you with specific explanations within an hour

it works literally every time ive been doing it for years

Falsche Behauptungen der Initiative Urheberrecht zur Uploadfilter-Kritik des BfDI https://www.bfdi.bund.de/DE/Infothek/Pressemitteilungen/2019/12_BehauptungderInitiativeUrheberrecht.html

There's an exciting new feature for our Librem 5 phone we are calling "Lockdown Mode": https://puri.sm/posts/lockdown-mode-on-the-librem-5-beyond-hardware-kill-switches/

https://mastodon.social/media/1JwoaKJVurWjGTqE3nM

Every flat-panel display should come with a built in leveler.