Oha, das ist provokativ: Dieser Blogartikel sagt:

- Nutzt kein #PGP / #GPG
- Nutzt kein #XMPP + OMEMO
- Nutzt kein #Matrix (im Sinne: verlasst euch nicht auf die Verschlüsselung)
- E-Mails verschlüsseln ist sinnlos

Ich kenne den Autor nicht und würde ihn nicht erwähnen, würde der Artikel nicht in ernstzunehmenden ITSec-Newslettern zitiert

soatok.blog/2024/11/15/what-to…

Meinungen? #itsec #security

What To Use Instead of PGP - Dhole Moments

It’s been more than five years since The PGP Problem was published, and I still hear from people who believe that using PGP (whether GnuPG or another OpenPGP implementation) is a thing they s…

^{Dhole Moments}

I had quite a scary discussion with #Bing Chat which was hijacked by German security researchers and transformed into a pirate chatbot. Seconds later it asked for my personal information and sent it to the attacker. The thing is: Everyone can hijack Bing chat this way right now. It’s not even hard - you don't have to be a hacker.
Microsoft told me they had heard of the attack - and obviously weren't able to stop it from happen. My article (+German):

zeit.de/digital/2023-03/cybera…
#cybersecurity #ITSec

Hey people!

If you use #Microsoft #Office be extra careful when opening documents or files from unknown sources. On May 31st a #vulnerability was disclosed, that allows an attacker to execute code through MS Office via maliciously prepared documents. It's best to open only stuff which comes from people you know or implement the published mitigation strategies:

🇬🇧 EN:
msrc-blog.microsoft.com/2022/0…

🇩🇪 GER:
heise.de/news/Zero-Day-Luecke-…

Currently I am not aware of a security update, so be careful.

#itsec

Zero-Day-Lücke in MS Office: Microsoft gibt Empfehlungen

Microsoft gibt Handlungsempfehlungen gegen die Zero-Day-Schwachstelle in Office. Angreifer könnten diese zum Einschleusen von Schadcode missbrauchen.

^{Dirk Knop (heise online)}