Items tagged with: Security

Search

Items tagged with: Security

Lightweight open source Google reCaptcha alternative: ALTCHA leverages a proof-of-work mechanism to safeguard your website, APIs, and online services from spam and abuse. Unlike traditional solutions, ALTCHA is self-hosted, does not rely on cookies or fingerprinting, and ensures complete user privacy. It is fully compliant with GDPR, WCAG 2.2 AA-level, and the European Accessibility Act. github.com/altcha-org/altcha

#privacy #webdev #security #opensource


GitHub - altcha-org/altcha: GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism and advanced anti-spam filter.

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism and advanced anti-spam filter. - altcha-org/altcha
GitHub
#opensource #privacy #webdev #security

@Tutanota Last week I signed up for a premium #Tuta Email account. It was the easiest and quickest sign up process I've ever done. Thank you! #privacy #security
#privacy #security #tuta @Tuta

Who says you canā€™t have #privacy and #security in an OS?

Meet PureOS ā€” the #Linux OS that respects you.

āœ…No ads
āœ…No trackers
āœ…No #surveillance
āœ…No terms of service traps

Run it on Purismā€™s Librem 5 & Liberty Phone.

Link - What is #PureOS?: puri.sm/posts/what-is-pureos-aā€¦

What Is PureOS? A Beginnerā€™s Guide for iOS, Android, and Windows Users ā€“ Purism

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
Purism SPC
#linux #privacy #security #pureos #surveillance

#webdev #security #python #devsecops

#security #AI #tech #curl #hackerone #vulnerabilities #bugreports

#security #News #IT #kunstlicheintelligenz

Back when i studied #cryptography in the 1990ties, my wonderful professor gave an intro lecture and one of his first points was: "Security" by itself does not exist. You have to state the property you want to secure, and describe the attack model. Moreover, claiming #security as a generic absolute feature marks someone who does not really know what they are talking about. Can't get rid of remembering this lecture ;)
#cryptography #security

#android #security

Thanks to our #TurrisSentinel #security #research program, #CZNIC #CSIRT team discovered large scale #FTP #attack. Coming from 45.78.4.0/22, it is #bruteforcing #slowly - it takes it 19 day to get through it's #passwords. Big thanks to everybody who helps us by running our #minipots on their devices! Report in #Czech is available on CSIRT website csirt.cz/cs/kyberbezpecnost/akā€¦

DistribuovanĆ½ FTP bruteforcer - AktuĆ”lně z bezpečnosti - CSIRT

AktuĆ”lně z bezpečnosti
csirt.cz
#czech #security #research #passwords #ftp #cznic #TurrisSentinel #csirt #attack #bruteforcing #slowly #minipots

4Chan hacked; Taken down; Emails and IPs leaked

Apparently they were not only running an old, unsecure version of PHP their entire stack was outdated.

the-sun.com/tech/14029069/4chaā€¦

#news #tech #technology #security #privacy #4chan #hack #breach #databreach


4Chan down UPDATES: Thousands of users report issues accessing controversial website...

CONTROVERSIAL website 4Chan has gone down for thousands with users unable to access the message board. More than 1,000 users of the site have logged complaints on the Downdetector website, which meā€¦
Allan Glen (The US Sun)
#privacy #technology #security #News #hack #tech #databreach #breach #4chan

#technology #security #southafrica #databreaches

@Tutanota users!

"jonahrichie09@gmail.com" does 100% *not* work at Tuta.

Do not under any circumstances click on the attached pdf.

#phishing #security #email

PS. The e-mail was forwarded to abuse@tutao.de as well as marked as phishing. DS

Phishing e-mail
#email #security #Phishing @Tuta

#privacy #security #grapheneos

Getting started with XMPP/Jabber and PGP for federated, encrypted messaging

This is a short thread where I explain how I started using the XMPP protocol and PGP encryption for secure messaging. I am not a security expert, but I am a mathematician and I am confortable with the Linux command line. This guide is for people who want to use PGP for secure messaging easily. You will need to be okay with typing commands into the Linux command line in order to do this, but I will tell you exactly what to enter.

Part 1: XMPP

Mastodon is like email, but for social media. You sign up for an account with a server, and then you can talk with any other accounts that are signed up on other servers, as long as your servers are getting along. (No one wants emails from the sketchy spam server, and we want to be able to choose between Yahoo, Gmail, etc.) XMPP (a.k.a. Jabber) is the same thing for text messaging.

Just like signing up for an email/Mastodon account, you need to sign up for an account. You can find a list of servers at list.jabber.at/ and will probably at least need to provide an email addess when making an account.

Once you have made an account, you need a client. On Linux, I've been having a good time using Dino (dino.im/). You can then enter your account name and password to log into your XMPP account and start chatting! There are both public rooms and you can also message directly with your friends.

#security #PGP #XMPP #FOSS #Jabber #Dino #MonoclesChat

(1/4)


Dino. Communicating happiness.

A privacy-friendly messaging app for the desktop. It uses the XMPP protocol and provides a clean UI with modern features.
dino.im
#xmpp #foss #security #Jabber #dino #pgp #monocleschat

New Privacy Guides article šŸ”āœØ
by me:

If you want to keep your password manager local-only, KeePassXC is a great solution!

It's free,
Open-source,
Easy to install and use,
Doesn't require an account,
Works on Linux, macOS, and Windows,
And the team is here! šŸ‘‰ @keepassxc

Here's how to set it up with a YubiKey: privacyguides.org/articles/202ā€¦

#PrivacyGuides #KeePassXC #Privacy #Security #PasswordManager #Passwords #FOSS

Illustration of a laptop with the KeePassXC logo on it. There is a plus sign on the right, followed by a photo of a YubiKey.

KeePassXC + YubiKey: How to set up a local-only password manager

This tutorial demonstrates how to install the local-only password manager KeePassXC and secure a password database with YubiKey.
www.privacyguides.org
#foss #privacy #security #passwords #passwordmanager #keepassxc #privacyguides @Team KeePassXC

"Google refuses to deny it received encryption order from UK government"

The UKā€™s encryption-breaking order for a backdoor into iCloud isnā€™t a one-off.

The secret hearing happening RIGHT NOW is bigger than just Apple. If the government wins, our right to privacy and security falls.

Other services will be hit.

therecord.media/google-refusesā€¦

Sign our petition āž”ļø you.38degrees.org.uk/petitionsā€¦

#e2ee #encryption #apple #google #privacy #security #cybersecurity #ukpol #ukpolitics #tech


Google refuses to deny it received encryption order from UK government

U.S. lawmakers say Google has refused to deny that it received a Technical Capability Notice from the U.K. ā€” a mechanism to access encrypted messages that Apple reportedly received.
therecord.media
#apple #google #privacy #encryption #security #tech #cybersecurity #ukpol #e2ee #ukpolitics

šŸ“£ Break the silence: Save encryption!

The UK government wants to be able to access anything, anywhere, any time ā€” from your pics to your docs.

It begins with Apple. Other services will be next. That's why we must take a stand NOW!

Sign and share our petition ā¬‡ļø

you.38degrees.org.uk/petitionsā€¦

#encryption #e2ee #Apple #privacy #security #cybersecurity #ukpolitics #ukpol #icloud #tech


Keep our Apple data encrypted

It is reported that the Home Office has ordered Apple to build a backdoor into its encrypted services so that they can get hold of content that any Apple user has upload to the cloud. Encryption keeps our private information safe and secure.
38 Degrees
#apple #privacy #encryption #security #tech #cybersecurity #ukpol #icloud #e2ee #ukpolitics

The message is clear across the political divide: let's hear it!

The UK government should argue in open court why they want to make us less secure by ordering a backdoor into Apple encryption.

A secret Tribunal would be an affront to the privacy and security issues at stake. It must be held in public.

Read the joint letter from ORG, Big Brother Watch and Index on Censorship ā¬‡ļø

openrightsgroup.org/press-releā€¦

#Apple #encryption #e2ee #privacy #security #cybersecurity #ukpol #ukpolitics #tech


Make the Investigatory Powers Tribunal on Apple Encryption a Public Hearing

Rights groups call for Appleā€™s closed appeal against the Home Officeā€™s encryption-breaching order to be opened to the public.
Open Rights Group
#apple #privacy #encryption #security #tech #cybersecurity #ukpol #e2ee #ukpolitics

Bipartisan US Congress Members want the secrecy around the UK's encryption-breaking order to be lifted.

"It is imperative that the UK's technical demands of Apple - and of any other US companies - be subjected to robust, public analysis and debate."

ā€œSecret court hearings featuring intelligence agencies and a handful of individuals approved by them do not enable robust challenges on highly technical matters.ā€

wyden.senate.gov/news/press-reā€¦

#encryption #e2ee #Apple #privacy #security #cybersecurity

Letter from US Members of Congress about the secret tribunal over the UK government's demand for a backdoor into Apple encryption.
Letter from US Members of Congress about the secret tribunal over the UK government's demand for a backdoor into Apple encryption.
Letter from US Members of Congress about the secret tribunal over the UK government's demand for a backdoor into Apple encryption.

Bipartisan Members of Congress to UK Spy Court: UK Gag Orders for Surveillance Backdoors Threaten Americansā€™ Security and Privacy, Impede Congressional Oversight | U.S. Senator Ron Wyden of Oregon

The Official U.S. Senate website of Senator Ron Wyden of Oregon
www.wyden.senate.gov
#apple #privacy #encryption #security #cybersecurity #e2ee

UK MPs have joined the chorus of voices wanting the Apple case to be held in public.

"If the Home Office wants to have effectively unfettered access to the private data of the (innocent) general public, they should explain their case in front of the public."

šŸ—£ļø David Davis MP.

"People deserve to know what's happening to their private personal information."

šŸ—£ļø Victoria Collins MP.

news.sky.com/story/apple-vs-hoā€¦

#encryption #e2ee #Apple #privacy #security #cybersecurity #ukpolitics #ukpol


Apple vs Home Office encryption court battle must be held in public, say MPs

A row between the tech giant and the government over customer data will reportedly move to London's High Court this week ā€“ but the hearing will be held behind closed doors.
Tim Baker (Sky News)
#apple #privacy #encryption #security #cybersecurity #ukpol #e2ee #ukpolitics

šŸ“£ Make it public!

The call is getting louder for a public hearing of the appeal over the UK's order to break Apple encryption.

Alongside the joint letter from ORG, Big Brother Watch and Index on Censorship, UK MPs, US Congress Members and the BBC want the secrecy to end.

bbc.co.uk/news/articles/c4g0rrā€¦

#encryption #e2ee #privacy #security #cybersecurity #ukpol #ukpolitics #Apple #tech


Pressure grows to hold secret Apple privacy hearing in public

Civil liberties campaigners have joined US politicians and the BBC in saying Friday's hearing should not be secret.
Tom Singleton (BBC News)
#apple #privacy #encryption #security #tech #cybersecurity #ukpol #e2ee #ukpolitics

Nutzt ihr Antivirus-Apps auf eurem Android? Spart euch den unnƶtigen Ballast ā€“ sie bieten nur trĆ¼gerische Sicherheit und sind oft voller Tracker. šŸ‘‡

kuketz-blog.de/truegerische-siā€¦

#android #security #google #tracking #virus #antivirus #app


TrĆ¼gerische Sicherheit: Virenscanner-Apps sind schlichtweg Ć¼berflĆ¼ssig

Die Sicherheitsarchitektur von Android/iOS schrƤnkt die Funktionsweise von Virenscanner-Apps stark ein und macht sie im Grunde nutzlos. Schlimmer: Die vermeintlichen Sicherheits-Apps sind Datenschleudern.
www.kuketz-blog.de
#android #app #google #security #tracking #virus #antivirus

šŸšØBREAKINGšŸšØ The French National Assembly removed the backdoor section from the amendment to the #Narcotrafic law.

Read here how Politicians tried to undermine everybody's #security: tuta.com/blog/france-surveillaā€¦

šŸ™ And thank you for fighting against this with us. This is a great win for privacy, yet, the battle is not over. Together we are strong! šŸ’Ŗ

#backdoor #encryption #privacy #security

Remind Legislators: "A backdoor for the good guys only is not possible."

France is about to pass the worst surveillance law in the EU. We must stop them now! | Tuta

An amendment to the ā€œNacrotraficā€ law is moving to the French National Assembly. Remind your legislators that a backdoor for the good guys only is not possible.
Tuta
#privacy #encryption #security #backdoor #narcotrafic

I manage my own e-mail server. I occasionally have outbound messages rejected because my hosting provider's entire network sometimes appears on block/deny lists. I also have an e-mail account hosted by Microsoft Exchange Online. Yesterday, an outbound message from that account was rejected by a receiving server because the IPv4 address of one or more of Microsoft's servers was on a public block list.

Perhaps having multiple addresses hosted by different providers is now becoming a practical necessity.
#email #smtp #security

#email #security #smtp

#linux #privacy #gpg #encryption #security #cybersecurity #pgp #gnupg

I've switched to lurking here for a while due to the effects the current political situation in the US is having on me. I am making some big changes to how I do things, including how I livestream and host various products of my math research. I'll be posting about the steps I take as I take them.

I have switched from #Firefox to #Librewolf on my desktops. This was pretty easy since I have been storing my bookmarks as a plain text file on my desktop for a while now. Very portable. I just wish #VideoDownloadHelper worked on Librewolf.

I am looking into #XMPP now and trying to find a server to sign up for. Does anyone know any with open registration?

I have also recently gotten into #IRC again, and am excited to get more familiar with the #Pidgin client on desktop.

#math #privacy #security #federation #software

#xmpp #firefox #privacy #librewolf #security #software #federation #irc #math #pidgin #VideoDownloadHelper

#security #encrypted #2fa #passwordmanagers #trinity @Bitwarden

#privacy #encryption #security #backdoor

Here are some of our main takeaways from the EU Open Source Policy Summit 2025:šŸ’” šŸ‘Øā€šŸ’»

ā€” Open and collaborative innovation solves the dilemma of #competitiveness and #sovereignty
ā€” Now is the time to invest in open source #maintenance and #security
ā€” Building sustainable open source ecosystems remains challenging but necessary
ā€” Open source is being increasingly regulated in Europe, and the new challenge is #implementation and #compliance

Read more in our new blog: šŸ‘‡ šŸ”—

openforumeurope.org/the-eu-opeā€¦

#security #maintenance #compliance #competitiveness #sovereignty #implementation

With the Amazon Appstore shutting down, it's becoming even more important to invest in sustainable alternative stores you can trust.

See how you can invest in Accrescent's future! A little help goes a long way:

accrescent.app/faq#contributinā€¦

More information on the Amazon Appstore discontinuation on Android:

amazon.com/appstoreonandroidFAā€¦

#privacy #security #appstore #accrescent #android


Accrescent Frequently Asked Questions

Answers to frequently asked questions about Accrescent.
Accrescent
#android #privacy #security #AppStore #accrescent

Please be aware that there is a nefarious e-mail targeting @Tutanota users.

The sender is "tuta@tuta.io" (or variations thereof), and there is a pdf attached.

Do *NOT* download and/or open the pdf.
Mark as spam/phishing and delete.

#tutanota #tuta #security

#security #tutanota #tuta @Tuta

Tuta email, located in Germany, Europe, now uses quantum computers to encrypt their emails.

(Technically, they are using algorithms determined to be safe against attacks from quantum computers. And they don't actually have a quantum computer running 24/7, but that is good enough for me.)

#Tuta #Email #QuantumComputers #Quantum #Privacy #Security

#email #privacy #security #quantum #tuta #quantumcomputers

I tried to find when #Signal has published the most recent #security audit, and it turns out they either never published an audit or their code was never audited at all.

The closest thing I found is the list
community.signalusers.org/t/ovā€¦
which only cites research papers and some evidence that in 2018 Signal paid Doyensec, but nothing got published as the result. Even then, it looks like the apps were not audited for more than 5 years since then.


Overview of third-party security audits

Letā€™s collect past security audits here: Formal audits Year Auditor(s) Sponsor App/Component Published Link Last update / extended 2013 iSEC Partners (NCC Group) Open Technology Fund RedPhone and TextSecure āŒ Blog post 2014 Frosch et al.
Signal Community
#signal #security

The world needs secure communication more than ever, as a bulwark against the surveillance, authoritarianism, and oppression increasingly enabled by Big Tech. Matrix seeks to meet that need, as an open source, decentralised, encrypted comms protocol.

But Trust & Safety is more difficult in a decentralised environment. How are we building a safer Matrix?

matrix.org/blog/2025/02/buildiā€¦

#Matrix #Security #Privacy #TrustAndSafety #OpenSource #FOSS


Building a Safer Matrix

Matrix, the open protocol for secure decentralised communications
Jim Mackenzie, VP Trust & Safety ā€” The Matrix.org Foundation (matrix.org)
#foss #matrix #opensource #privacy #security #TrustAndSafety

#privacy #security #biometrics #article #privacyguides

"The UKā€™s war on encryption affects all of us" via @verge.

Indeed, the UK's actions imperil security across the globe.

It's worth highlighting that open source comms tools, like @matrix and @signalapp, empower researchers and users: you'll _see_ if a backdoor is added.

Not so with proprietary tools. Do you really trust Meta, Apple, or Google not to roll over on you?

theverge.com/policy/612136/uk-ā€¦

#FOSS #SoftwareFreedom #OpenSource #Security #Privacy #Encryption


The UKā€™s war on encryption affects all of us

The UK is using its Investigatory Powers Act to demand backdoor access to iCloud usersā€™ encrypted backups worldwide.
Gaby Del Valle (The Verge)
#foss #opensource #privacy #encryption #security #softwarefreedom @The Matrix.org Foundation @The Verge @Signal

If Apple complies with this, the UK government will gain access to all iCloud data globally. The only way Apple comes out of this with any integrity is to leave the UK market. If they give in to this, every regime in the world will demand the same thing. And thatā€™s before we even get to the fact that thereā€™s no such thing as a ā€œbackdoorā€ for just so-and-so. Either there is a door or there isnā€™t and if there is, anyone who obtains the key can use it.

theguardian.com/technology/202ā€¦

#apple #backdoor #UK #encryption #privacy #security #personhood #data #democracy #humanRights #iCloud


UK demands ability to access Apple usersā€™ encrypted data

Expert says government has ā€˜lit the blue touch paper on a truly enormous fightā€™ as it challenges firmā€™s privacy stance
Dan Milmo (The Guardian)
#apple #privacy #encryption #security #uk #HumanRights #democracy #data #personhood #icloud #backdoor

Six times so far ... is how often important parts of #deltachat were independently #security audited and analyzed. Thanks to IncludeSecurity, Cure53, Applied Crypto Team at ETH Zuerich and Radical Open Security.

Last audit is from December 2024 covering @rpgp , the minimal #OpenPGP Rust library that is gaining traction with others projects as well.
Shout-out to dignifiedquire and @hko for their excellent maintenance! For more info on Delta Chat related security audits: delta.chat/en/help#security-auā€¦


Delta Chat: FAQ

What is Delta Chat? Delta Chat is a reliable, decentralized and secure messaging app, available for mobile and desktop platforms. Delta Chat feels like Whatsapp or Telegram but you can also use and...
delta.chat
#openpgp #security #deltachat @Heiko @rPGP

ā‡§