security

Our Summer Clearance Sale is happening now! Save 50% on select @adminmagazine and Linux Magazine back issues and products. Use the links at the top of the page to get to the shop system for your region/currency.
https://shop.linuxnewmedia.com/shop/category/summer-clearance-79
#Linux #sale #LibreOffice #RaspberryPi #OpenSource #security #hacks #FOSS

New from Francesca D'Annunzio: Under Governor Greg Abbott's multi-billion dollar border security bonanza, Operation Lone Star, the Rio Grande no longer holds back law enforcement efforts. Today's digital border reaches across Texas and beyond. https://www.texasobserver.org/texas-dps-surveillance-arsenal-artificial-intelligence-lege/

This story is presented in partnership with the Pulitzer Center.

#surveillance #tech #SocialMedia #GregAbbott #police #border #privacy #security #USpol #politics #news

🚨 Security Update: Hollo 0.6.5 Released

We've released #Hollo 0.6.5 with a critical #security fix for CVE-2025-53941, addressing an HTML injection vulnerability in federated posts.

Please #update immediately to protect your instance from potential phishing and XSS attacks.

How to update:

• Railway: Go to deployments → click three dots → Redeploy
• Docker: docker pull ghcr.io/fedify-dev/hollo:latest and restart
• Manual: git pull origin stable && pnpm install and restart server

Konform Browser 140.10.2-100 has been released and packages are available!

https://codeberg.org/konform-browser/source/releases/tag/140.10.2.100

See release notes for details.

Brings in latest security fixes from Firefox ESR 140.10.2 as described in https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/. Users of all Firefox-based browsers are advised to upgrade before loading untrusted content.

This Konform Browser release also changes the default appearance of scrollbars and makes building from source more straightforward.

In other news, Konform Browser now has source and binary ebuilds for Gentoo users.

https://codeberg.org/konform-browser/gentoo/

Check it our and spread the word by boosting ☮️ 🕉️

These announcements can be filtered using #konform_release hashtag.

https://konform-browser.codeberg.page/

#konformbrowser #browsers #security #privacy #release #opensource #mozilla #firefox #gentoo #linux #konfom_release

So Much Content At SUBSTACK! Head Over, Become A SUBSCRIBER!!

" #Trade & #security Aren't a GoFundMe! The #usa Wasn't Played—We Wrote the Rules!" https://www.blueamp.co/p/trade-and-security-arent-a-gofundme #news #press #politics #us #america #media #ai #elonmusk #musk #donaldtrump #tv #trump #tariffs #stockmarket #tech

Oh, your service logged me out for my security? Great, I'll just open up the vault that contains my private keys so that I can open up the password manager with the master password of my other vault, which has the credentials I'll use to log back into my account. And then to finish the login process you'll send me a one-time password in clear text through SMS or email because those are the only options you offer for a "second factor". I feel much more secure now thank you.

(For clarity this is a sardonic post).

#InfoSec #cybersecurity #security #web #dev #tech

Mood: Unhackable anti-surveillance tech/stickers from @eff. https://shop.eff.org/ #privacy #security #ElectronicFrontierFoundation #EFF #NowMoreThanEver

🎉 Congratulations to Linux Vendor Firmware Service (https://fwupd.org/) (@hughsie) for securing the win in the Security category, sponsored by ControlPlane at the OpenUK Awards 2025!
#openukawards #opensource #security

I have drafted an email critical of the #digitalomnibus proposal in #EU from a wide-reaching privacy, #technology sector protection and #geopolitical risk standpoint.

Read here:
https://nx82858.your-storageshare.de/s/sBFL5CxHY7Yf3XC

Send to EU representatives with this list of emails:
https://nx82858.your-storageshare.de/s/xQogH6dXKifXfS6

If you care about #souvereignty #security and #privacy, please boost and take part in this #campaign !

Not really an #introduction but here we go:

#Freelancing #Privacy and #Security #Coach & #Trainer (#Linux)

Ex #SoftwareDeveloper, #Consultant, #TeamLead, #HeadOfProductDevelopment #HeadOfIT

I care for #privacy #HumanRights #DEI #TransRightsAreHumanRights #Linux #FLOSS #DigitalSelfDefense

See bio for links & websites.

Have you checked out our Summer Clearance Sale yet? Select back issues and products are 50% off through July 31st! Get 2024 and older issues of Linux Magazine, @adminmagazine, Special Issues, and select products. Follow the link for the shop for your region/currency.
https://shop.linuxnewmedia.com/shop/category/summer-clearance-79
#Linux #OpenSource #security #FOSS #LibreOffice #hacks #RaspberryPi

Do this now! In all your web browsers, go to https://emudhra.we-have-a-problem.com/ and go to the section titled "Does your client still trust the compromised intermediates?" and look at the right-most "Result" column. If any say "❌ Connected", you need to update your SSL/TLS certificates now. This can affect email, banking, software updating, and anything that uses #SSL, #TLS, and #HTTPS.
Edit: You can also go to https://bgp.tools/ and see if it says "Your SSL/TLS stack is accepting certificates from a #CertificateAuthority tree that is totally #compromised" I think/hope that browsers and operating systems will auto update certificates ASAP but don't do anything private until you're sure they're updated #IMHO!
#sysadmin #cybersecurity #security #privacy #CA #eMudhra #certificates

Are you interested in a different kind of security conference?

Then take a look at the Open Security Conference (@OSCo). #osco25 takes place from October 2 to 5 in Rückersbach (Germany near Frankfurt) and registration is still open at https://opensecurityconference.org/.
(this is an English version of the original German thread https://infosec.exchange/@realn2s/114936419689473030)

Why?

The Open Security Conference aims to be diverse and inclusive. This also includes different levels of knowledge and experience.
It is therefore not only for security experts or for people who have (already) worked in the security sector for a long time,
but also for people who are interested in security or want to get into the field.

The #OpenSpace format not only enables expert presentations,
but also non-expert topics or questions as session topics. Sessions are not resticted to presentations, they can be interactive, collaborative, workshops or basically anything else.

Since topics do not have to be submitted months in advance,
but the agenda is created jointly by the participants, hot topics can also be covered.

The conference is non-commercial, i.e. the total costs are shared between the participants (including the organizers).
The costs include accommodation and meals in the conference hotel.

And yes, there are also sponsors who cover part of the costs.

But not everything is different.

There are great keynotes e.g. by @bkastl ("History repeating itself") and Mireia Cano ("Building an AppSec Program from Scratch").

#CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity

The war on crypto never ends. The war on privacy, civil rights, security and freedom of speech never ends.

This time we are dangerously close to lose. The "Child Sexual Abuse" (CSA) EU regulation proposal, more aptly nicknamed "ChatControl", will be voted AGAIN this October, and many countries who opposed it last year are now undecided. The proposal at its roots aims at allowing authorities to break end-to-end encryption for the usual reason: "because of the children". As a father of two, I am disgusted by this recurring, cheap rhetoric.

What you can do: https://www.patrick-breyer.de/en/posts/chat-control/#WhatYouCanDo

#eu #CSA #CSAM #ChatControl #privacy #security #surveillance #authoritarianism #crypto #cryptography #civilrights

Meine IT Sicherheits-Privatsphäre Übersicht für alle :-)

( 05.08.2025
Die weiterentwicklung von #GalyxOS stagniert
wohl erstmal...)

als PDF:

https://cryptpad.digitalcourage.de/file/#/2/file/Kvo0eIWc8SfCJYXTxujy+YlD

sachliches-Feedback wie immer, erwünscht :-)

#Privatsphäre #Datenschutz #sicherheit
#security
#AppStore
#Kryptografie
#Passwort #PasswortManager #Informationssicherheit #Informationsfreiheit #IFG #Politik #Gaming #gog #Lutris #Android
#Mail #Cloud #Browser #WebBrowser #Verschlüsselung #DNS #VeraCrypt #Fdroid #Messenger #Threema #Signal #Linux #Foss #OpenSource #UnplugTrump #Fediverse #Menschenrechte #Community #LinuxHelden
#GamingonLinux #VPN #GegenRechtsHilfe #FediLZ #Mastodon #Shopping #PreppingforFuture #Prepping #Katastrophenvorsorge #Schutzmaßnahmen #supportyourhinterland #Mobilfunk #NewPipe #uBlock #Medienkompetenz #Facebook #Instagram #Meta #YouTube #Chatkontrolle #überwachung #Matrix #Suchmaschine #Tastatur #2FA #Nichtszuverbergen

🔒 Security Update for BotKit Users

We've released #security patch versions BotKit 0.1.2 and 0.2.2 to address CVE-2025-54888, a security #vulnerability discovered in #Fedify. These updates incorporate the latest patched version of Fedify to ensure your bots remain secure.

We strongly recommend all #BotKit users update to the latest patch version immediately. Thank you for keeping the #fediverse safe! 🛡️

#fedidev

We've released #security updates for #Hollo (0.4.12, 0.5.7, and 0.6.6) to address a #vulnerability in the underlying #Fedify framework. These updates incorporate the latest Fedify security patches that fix CVE-2025-54888.

We strongly recommend all Hollo instance administrators update to the latest version for their respective release branch as soon as possible.

Update Instructions:

• Railway users: Go to your project dashboard, select your Hollo service, click the three dots menu in deployments, and choose “Redeploy”
• Docker users: Pull the latest image with docker pull ghcr.io/fedify-dev/hollo:latest and restart your containers
• Manual installations: Run git pull to get the latest code, then pnpm install and restart your service

***infosec specialists are needed in the resistance ***

The world needs tech security specialists to run workshops at public libraries for all ages & abilities to remove spyware, AI, reduce surveillance, understand the issues, & for more advanced, move to Linux, degooglefy, etc.

Libraries will pay good wages for these workshops.
If you have these skills, please consider offering them.

#libraries #library #tech #infosec #privacy #security #activism #antifa #resistance

Following the success (sarcasm!) of my previous post "Battle of IMs", I decided it's time to write another post where I try to articulate in a technical but snarky way my view on the wonderful world of social media, and which one is best among the mainstream and non-mainstream ones. This is a long post, reviewing 14 different "socials".

https://gagliardoni.net/#20250818_battle_of_socials

#socialmedia #social #privacy #selfsovereignty #security #digitalsovereignty #mastodon #nostr #bluesky #ssb #securescuttlebutt #facebook #meta #tiktok #threads #x #twitter #diaspora #friendica #linkedin #xing #instagram

Peter Firmstone continues his series on #Security on the #JVM.

Part 1 declared constraints on a remote call. Part 2 vetted code before a client loaded it. Part 3 and 4 established who is calling and carried that chain across the wire. Part 5 decided what the combination is allowed to do. This last part is about what all of it costs.

#DirtyChai scales vertically, inside one JVM. #JGDMS scales horizontally, across a fleet of them.

https://blog.frankel.ch/security-baked-into-jvm/6/

Don't #Hang Up On #AI #Scammers. Do THIS Instead. #Kitboga #yt #satire #comedyGold #privacy #security

https://youtu.be/lk3jCuITwcE 🤣🤣🤣🤣🤣🤣

PHP2Shell: Analyse der kritischen RCE-Schwachstellen (CVE-2026-109618 und CVE-2026-109619)

“Das PHP-Projekt hat am 21. Oktober 2026 außerplanmäßige Sicherheitsupdates veröffentlicht, um zwei kritische Schwachstellen auf Interpreter-Ebene zu s...”

https://derlemue.com/blog/?id=1792591200&lang=de

#security #php #rce #cve #kritisch #server #homelab

Is it just me, or has the number of captcha challenges significantly increased over the past few months? Nowadays I feel like I'm being hit with captchas all day every day, where before it was relatively rare. It is especially noticeable on sites I visit frequently, have accounts with, and presumably have cookies for.

#captcha #SecurityTheater #infosec #CyberSecurity #security #tech #dev #internet #web

🔒 Security Release: BotKit 0.3.1

We've released BotKit 0.3.1 with an important security fix.

This update addresses CVE-2025-68475 (High severity, CVSS 7.5), a ReDoS vulnerability in Fedify's HTML parsing that could cause denial of service.

If you're using BotKit 0.3.x, please upgrade to 0.3.1 as soon as possible.

• 📦 Release notes
• 🔐 Security advisory

#BotKit #Fedify #ActivityPub #fediverse #security

Security Update: Hollo 0.6.19 Released

We have released Hollo 0.6.19 to address a security vulnerability in Fedify's HTML parsing code.

This vulnerability (CVE-2025-68475) is a ReDoS (Regular Expression Denial of Service) issue that could allow an attacker to cause service unavailability by sending specially crafted HTML responses during federation operations. The malicious payload is small (approximately 170 bytes) but can block the Node.js event loop for extended periods.

We strongly recommend all Hollo operators upgrade to version 0.6.19 immediately.

FieldDetailsCVECVE-2025-68475SeverityHigh (CVSS 7.5)ActionUpgrade to Hollo 0.6.19

#Hollo #Security #Fediverse #ActivityPub