Avoid the Hack!

An initiative promoting the intersection of internet #privacy and #cybersecurity for all users.

 Based in the USA. 🇺🇸

You’re more than just a data point.

Operated by: @ashwrites

Established in 2020.

#fedi22 #infosec #opsec

Public Key

npub1jckv509uv0vsxe8d2z7rezc8juhtsqt95dal4q7uwfgezpy0svyq9yj4ps

NIP-05 Address

avoidthehack_at_infosec.exchange@mostr.pub

Profile Code

nprofile1qqsfvtx28j7x8kgrvnk4p0pu3vrewt4cq9j6x7l6s0w8y5v3qj8cxzqpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qz9thwden5te0v35hgar09ec82c30wfjkccteekvkl6

Publishing to

relay.mostr.pub

ditto.pub/relay

Author Public Key

npub1jckv509uv0vsxe8d2z7rezc8juhtsqt95dal4q7uwfgezpy0svyq9yj4ps

Show more details

Last Notes

2024-07-31 16:20:00

About the #security content of #iOS 17.6 and iPadOS 17.6
iOS 17.6 contains a multiple security fixes for various aspects of iOS. Most vulnerabilities addressed were in #WebKit (#Safari rendering engine).
Users are encouraged to update their devices ASAP.
#apple #cybersecurity
https://support.apple.com/HT214117

2024-07-19 13:29:30

Crowdstrike: just boot into safe mode bro

2024-07-17 18:05:02

#Google #Chrome Stable Channel Update for Desktop
(Includes #Chromium)
This update, 126.0.6478.182, fixes 10 #security vulnerabilities. Most Chromium based forks have probably incorporated the fixes or will soon.
#cybersecurity
https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html

2024-07-16 18:37:25

Rite Aid says June #databreach impacts 2.2 million people
Their network was breached using employee credentials… no #mfa?
Data leaked is associated the purchase of specific retail products and includes:
- name
- address
- DOB
- government ID numbers
#security #cybersecurity #infosec
https://www.bleepingcomputer.com/news/security/rite-aid-says-june-data-breach-impacts-22-million-people/

2024-07-13 21:16:02

Mozilla’s #PPA should have been opt-in. :ablobcatknitsweats:

2024-07-12 20:43:35

- reply

@npub1fm4…f7sx :ablobcatheartbroken:

2024-07-03 16:04:02

ICYMI: Lawsuit Claims #Microsoft Tracked Sex Toy Shoppers With 'Recording in Real Time' #Software
Pretty much invasive site analytics (Microsoft Clarity) provided by Microsoft and implemented by the site owners uniquely identified users and collected information about product searches and purchases.
#privacy #privacymatters
https://www.404media.co/lawsuit-claims-microsoft-tracked-sex-toy-shoppers-with-recording-in-real-time-software/

2024-07-02 16:01:00

Hijacked: How hacked #YouTube channels spread scams and #malware
Creator/influence accounts are increasingly targeted by threat actors. Often the end goal is reach (spread their scams and info-stealers) and abusing the "trust" between creators and their audiences.
#security #cybersecurity
https://www.welivesecurity.com/en/scams/hijacked-hacked-youtube-channels-scams-malware/

2024-06-28 17:30:03

Former IT employee accessed data of over 1 million US patients
Insider threats are real threats.
Compromised data of patients include:
- Name
- Phone number
- DOB
- Physical address
- Demographic information
- Medical record number
#databreach #privacy
https://www.bleepingcomputer.com/news/security/former-it-employee-accessed-data-of-over-1-million-us-patients/

2024-06-26 18:00:00

#Apple Patches AirPods #Bluetooth Vulnerability That Could Allow Eavesdropping
Apple: "When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.”
Tracked as CVE-2024-27867
https://thehackernews.com/2024/06/apple-patches-airpods-bluetooth.html?m=1

2024-06-25 19:35:01

#Telegram says it has ‘about 30 engineers’; #security experts say that’s a red flag
I've been saying for _years_ Telegram should not be treated as a "secure messenger" if only solely for the fact it does not have end-to-end encryption enabled by default.
#privacy #messengers
https://techcrunch.com/2024/06/24/experts-say-telegrams-30-engineers-team-is-a-security-red-flag/

2024-06-25 15:06:28

Has #Facebook Stopped Trying?
I guess once upon a time, Facebook did things to make it look like they cared about safety (not at all convinced they ever did) on its platform. Now, apparently, they don't even bother.
#socialmedia #meta #privacy
https://www.404media.co/has-facebook-stopped-trying/

2024-06-19 18:02:20

- reply

@npub1rnq…7anc I'm a pleb, I just use the flatpak. :ablobcatrave:

2024-06-15 14:10:00

#YouTube looks to be testing server-side ad injection to counter ad blockers
Google’s war on adblockers continues. This appears to still be in testing.
Server-side injection (related: server side tracking) is far harder for adblockers to detect.
#google #privacy #adblocker
https://9to5google.com/2024/06/12/youtube-ad-injection/

2024-06-11 13:20:16

Patch Tuezday is upon us. Brace your package handlers.

2024-05-29 13:45:00

#PayPal is building an ad network based on your #Venmo data
Quoting: “If you’re someone who’s buying products on the web, we know who is buying the products where, and we can leverage the #data..."
They will collect this data by default - users will have to opt-out.
#privacy #privacymatters
https://www.theverge.com/2024/5/28/24166381/paypal-building-ad-network-transaction-data

2024-05-09 14:47:57

- reply

@npub1zw2…2aln thanks for the explainer! It looks like this bug is for Android though and not exactly connected to the TunnelVision disclosure.

2024-05-07 17:23:50

BetterHelp to pay $7.8 million to 800,000 in health #data sharing settlement
#BetterHelp shared collected user information with third parties like #Facebook, Snapchat, and Pinterest _after_ they promised users they will not disclose their data outside "limited circumstances."
#privacy #privacymatters #mentalhealth
https://www.bleepingcomputer.com/news/security/betterhelp-to-pay-78-million-to-800-000-in-health-data-sharing-settlement/

2023-08-26 13:45:01

#Instagram Throttles 404 Media Investigation Into Drug Ads on Instagram, Continues to Let People Advertise Drugs
What I read: "Hey, their money is green too. Don't call us out for taking it!"
These are more or less the same people who want to have a presence on the #fediverse and went (still are?) on a campaign to establish support for federation with #threads. :D
https://www.404media.co/instagram-throttles-404-media-investigation-into-drug-ads-on-instagram-continues-to-let-people-advertise-drugs/

2023-08-18 20:45:01

How to encrypt and #password protect your Excel files
From @npub1wjw…ue5t
#security #opsec #cybersecurity
https://proton.me/blog/encrypt-excel-file

2023-08-14 20:00:00

Black Hat USA 2023 – Bitdefender #macOS Threat Report Reveals Key Dangers for #Mac Users
Three key threats: Trojans, #adware, and PuPs
#cybersecurity #security #opsec #blackhat
https://www.bitdefender.com/blog/hotforsecurity/black-hat-usa-2023-bitdefender-macos-threat-report-reveals-key-dangers-for-mac-users/

2023-08-12 18:10:40

- reply

@npub1gzl…kk4u now I expect the masses to use thunderbird by default. 😃

2023-08-05 15:00:03

“Absurd”: #Google, #Amazon rebuked over unsupported Chromebooks still for sale
Apparently, Chromebook support from Google ends after an expiration date (not due to EOL hardware). 👀 These are being listed as new on Amazon/Walmart marketplaces, despite approaching EOL status… without any notice that they are approaching EOL.
Chrombooks are really popular among students and teachers (including schools who may purchase these in bulk)… even if purchasing “new,” without looking at the specific model details, they may be purchasing a device that will not receive security updates in the near-future…
#security #cybersecurity #update
https://arstechnica.com/gadgets/2023/08/no-discounts-or-warnings-for-people-shopping-eol-chromebooks-on-amazon-walmart/