soc.octade.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Admin email
social@octade.net

Search results for tag #cybersecurity

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]Negative PID SL » 🌐
@negativepid@mastodon.social

[?]ChiefGyk3D » 🌐
@chiefgyk3d@social.chiefgyk3d.com

Ever feel like online privacy is more than just clicking a button? 🤔 This short dives into why a VPN alone isn't enough – it's about rethinking your whole approach. Brisket and VPNs? Trust me, you'll want to know why. Check it out! 💻

youtube.com/watch?v=0ScSF_0YRYQ

🔴 LIVE

Alt...🔴 LIVE

    [?]Negative PID SL » 🌐
    @negativepid@mastodon.social

    [?]Negative PID SL » 🌐
    @negativepid@mastodon.social

    [?]Negative PID SL » 🌐
    @negativepid@mastodon.social

    [?]Negative PID SL » 🌐
    @negativepid@mastodon.social

    [?]Negative PID SL » 🌐
    @negativepid@mastodon.social

    [?]Voxel [they/them] » 🌐
    @voxel@infosec.space

    If you're going to bash the competition, at least be honest about it. @simplex

    I can't speak to the other points here, but Session does have message padding, though only for attachments up to 10 MB. This is highlighted in section 6.2 of their whitepaper, which is linked on the first page of their website; they also mentioned it in multiple interviews. So they deserve a yellow check mark.

    This is achieved by first padding each attachment to fit within a fixed number of constant sizes between 0 and 10 megabytes, then encrypting the attachment with a random symmetric AES key.

    It should be a no-brainer to read the whitepaper of the competition before making any claims about them.

    I'm happy to be proven wrong.

    Whitepaper: arxiv.org/pdf/2002.04609
    Session website: getsession.org/
    SimpleX presentation: youtube.com/watch?v=UhW8AuoRgxg

    Also: Checklists Are The Thief Of Joy

    @session

    Presentation by a SimpleX employee discussing the differences between SimpleX and Session, Briar, Element, Cwtch, and Signal. The chart lists multiple security factors, and next to them are crosses, yellow check marks, and green check marks.

    Alt...Presentation by a SimpleX employee discussing the differences between SimpleX and Session, Briar, Element, Cwtch, and Signal. The chart lists multiple security factors, and next to them are crosses, yellow check marks, and green check marks.

      [?]Negative PID SL » 🌐
      @negativepid@mastodon.social

      [?]Negative PID SL » 🌐
      @negativepid@mastodon.social

      [?]Miguel Afonso Caetano 🦾 🌹 » 🌐
      @remixtures@tldr.nettime.org

      "This technical analysis provides the most detailed view yet into the inner workings of the Pegasus spyware system. This includes confirmation of key technical capabilities such as the infection vectors and methodologies used to infect devices, supported by analysis of internal NSO Group documents, that until now had only been identified via forensic investigations. It also presents new material further validating the accuracy and significance of the dataset underpinning the original Pegasus Project investigation. Finally, this research provides an updated analysis, drawing on previously published Pegasus forensic evidence and newly released materials, to validate the technical methodology used to forensically link Pegasus spyware attacks targeting different victims as originating from the same Pegasus customer.

      A key aim of this publication is to document and demystify the functionality and operations of technological systems like Pegasus. We hope that it will inform the wider spyware accountability community on how complex surveillance systems such as Pegasus are used by government customers, and also illustrate the key and ongoing role of spyware vendors in keeping such systems operational. We believe this public understanding is of critical value to technologists, researchers, and policy makers and others with an interest in understanding the targeted surveillance ecosystem and threats posed to human rights by surveillance technologies.

      The contents of this technical research draw heavily on a large pool of confidential NSO Group training material, presentations and internal technical documentation which were disclosed as part of a long-running civil case taken by WhatsApp and Meta against NSO Group in U.S. court. This new material provides an unprecedented insight into the evolution of NSO Group’s spyware."

      securitylab.amnesty.org/latest

        [?]Miguel Afonso Caetano 🦾 🌹 » 🌐
        @remixtures@tldr.nettime.org

        "Health data is increasingly an important part of law enforcement or government investigations. Wearable data has been critical in a number of cases, where information about heart rate and steps was used to determine the whereabouts of individuals. And the surveillance company Penlink calls fitness trackers and wearables an “overlooked source” for law enforcement since they tend to show movement patterns and changes in heart rates. Law enforcement can try to get access to this data through subpoenas or warrants.

        There are many potential privacy issues with these sorts of devices, including whether the companies who make them share or sell information to third-parties. But here we are choosing to focus on two facets we’re concerned with around health data itself: 1) whether the company shares information with law enforcement and governments and 2) if they offer end-to-end encryption, which means the company itself can’t access that health data to begin with."

        eff.org/deeplinks/2026/07/most

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]Negative PID SL » 🌐
          @negativepid@mastodon.social

          [?]spaf » 🌐
          @spaf@mstdn.social

          This is a great distillation of some important points about risk, cybersecurity, and the NIST CSF. If your work touches on any of those, this is worth a read.

          cyberriskbook.com/ai-wont-save

            AA boosted

            [?]Metacurity » 🌐
            @metacurity@infosec.exchange

            I sat down with cybersecurity pioneer and distinguished professor of computer science at Purdue University, Gene Spafford -- who wrote the foreword to my book on the NIST Cybersecurity Framework -- to discuss why we need stalwart frameworks such as the NIST CSF more than ever in the AI era.

            One fascinating point he made: AI isn't uncovering new vulnerabilities; it's exposing old ones, which Gene calls a form of willful tech debt.

            Willful debt is the security investment an organization, mostly vendors, chose to skip, the same way you'd choose a new TV over paying the electric bill. AI just makes the consequences show up faster.

            Watch his explanation below and read more about our full conversation at cyberriskbook.com/ai-wont-save

            Alt...Gene Spafford talking about willful tech debt.

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]WIRED - The Latest in Technology, Science, Culture and Business [Unofficial] » 🌐
              @wired.com@web.brid.gy

              A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance

              The SFPD’s exposure of hours of videos from drone platform Skydio reveals how broadly it’s watching the city from above—and how the results can spill online.

              A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance

              Alt...A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]Negative PID SL » 🌐
              @negativepid@mastodon.social

              [?]DigitalEscapeTools » 🌐
              @xabd@mastodon.social

              Fort Firewall gives you detailed control over which Windows apps can access the network with custom rules, blocklists, bandwidth limits, and traffic statistics.

              ⚠️ Note: On Windows 10+, it currently requires disabling HVCI (Memory Integrity), so check the requirements first.

              More details: digitalescapetools.com/tools/t

              Screenshot of the Fort Firewall project page showing the app logo, release badges, a description, and the Windows interface with per-application firewall rules for allowing or blocking internet access.

              Alt...Screenshot of the Fort Firewall project page showing the app logo, release badges, a description, and the Windows interface with per-application firewall rules for allowing or blocking internet access.

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                [?]Negative PID SL » 🌐
                @negativepid@mastodon.social

                CyberFrog boosted

                [?]BrianKrebs » 🌐
                @briankrebs@infosec.exchange

                New, by me: Felons, Fraudsters Flog Offensive Cybersecurity Startup

                A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names.

                krebsonsecurity.com/2026/07/fe

                A screenshot of two Twitter/X posts from the IRIS C2 account. One features a still shot from a video of a Dallas Cowboy cheerleader standing on a green field waving pom-poms and looking to the left. The caption reads: POV: You stopped screwing around with vendor bug bounties and make a lucrative living selling to Western exploit brokers instead. The post below that says, "Mom, how did we get so rich?" The reply: "Your father stopped d*cking around with bug bounty programs and sold his exploits to western governments."

                Alt...A screenshot of two Twitter/X posts from the IRIS C2 account. One features a still shot from a video of a Dallas Cowboy cheerleader standing on a green field waving pom-poms and looking to the left. The caption reads: POV: You stopped screwing around with vendor bug bounties and make a lucrative living selling to Western exploit brokers instead. The post below that says, "Mom, how did we get so rich?" The reply: "Your father stopped d*cking around with bug bounty programs and sold his exploits to western governments."

                A photo of Burkman (left) and Wohl) outside his Arlington, Va. in a 2020 press conference where they made up sexual assault allegations against public figures. Burkman is and standing at a podium in a blue suit. Wohl, also in a blue suit and tie, stands to the right of Burkman, looking down.

                Alt...A photo of Burkman (left) and Wohl) outside his Arlington, Va. in a 2020 press conference where they made up sexual assault allegations against public figures. Burkman is and standing at a podium in a blue suit. Wohl, also in a blue suit and tie, stands to the right of Burkman, looking down.

                  [?]Negative PID SL » 🌐
                  @negativepid@mastodon.social

                  [?]Negative PID SL » 🌐
                  @negativepid@mastodon.social

                  Back to top - More...