The Bank of Canada has released images of the new VERTICAL $20 note, featuring "a new portrait of the monarch on the front, a new image of the Canadian National Vimy Memorial, and brand new security features never seen before in Canada.
You’ll start seeing this $20 bill in circulation early next year." Text from facebook: https://www.facebook.com/TheBankofCanada/posts/pfbid07mZtQ53bHDhS7wag2uDL5EvrwkqztroCAxs8ijGQiM3LUULXjsHvpeRv3et3FUUdl

More details from the Bank of Canada: https://www.bankofcanada.ca/banknotes/vertical-20-note-security-features/vertical-20-note-design-elements/

#Numismatics #Banknote #Banknotes #New #Security #Canada

Alt...

Image of each side of the note which is vertical (taller than wide) and has teh denomination and country name at the top, then (on the obverse) Charles above some security features, and on the reverse, the Canadian National Vimy Memorial. The note is predominantly green with other colours (such as brown for the memorial)

Some of the most widely shared content from the Iran conflict so far has been AI-animated LEGO videos released as part of a government's messaging. This article calls it "slopaganda," and both the U.S. and Iran have been using it from official accounts.

We have laws of war for autonomous weapons, while governments posting AI-generated memes from official channels have no rules at all, and the author makes a good case that this is a form of militarized AI too. Just a non-lethal one. For years, security awareness training told people one simple thing: when in doubt, go to the official source. That advice stops working when the official source is posting memes.

A few things this changes for anyone running security or communications:

- Your employees are being trained, every day, to expect official accounts to be casual and unreliable. That makes impersonation easier and weakens the "does this sound right?" instinct.

- AI-generated content is now cheap enough that a nation-state, a scammer, and a bored teenager can produce it all at the same quality. The content itself tells you nothing about who made it.

- Verification has to move from "does this look real" to "did this come through a channel I can confirm?" That means signed messages, known domains, and a phone call when it matters.

I'd love to see the same energy that goes into AI weapons policy applied to AI messaging from official accounts. In the meantime, keep your own company's official channels boring and factual. Boring is a security feature.

https://philosophynews.com/the-ethics-of-slopaganda/

#Cybersecurity #AI #Disinformation #security #privacy #cloud #infosec #DeepFakes

Age Verification Company IDScan Hacked: 153 Million Drivers Licenses Compromised

IDScan had apparently been compromised for a year as hackers stole people's licenses live as they were added to the database.

https://www.freezenet.ca/age-verification-company-idscan-hacked-153-million-drivers-licenses-compromised/

#News #Privacy #Security #AgeVerification #DriversLicense #hack #IDScan #IDScannet #leak

Get a #Simplex #Domain from Simplex #Chat for you (personal) or your #business with your #investment

Invest in SimpleX Chat until Sep 22
to get a name for 7 years

Join the live #stream on Sept 15, 2026
simplex.chat/livestream

simplex.domains

simplex.chat

wefunder.com/SimplexChat

#privacy #security #data #metadata #surveillance #im #messenger #anonymity #chatcontrol #Bill-C22 #Canada #news #EU #UK #foss #fediverse #mastodon #hubzilla #bluesky #twitter #whatsapp #telegram #session #wire #teleguard #zangi #skred #twinme #deltachat #encryption #e2ee #wefunder #crowdfunding #linux #windows #mac #android #ios #cli #flatpak #appimage #selfhost #google #facebook #journalism #activisim #secret #p2p #decentralised #tech #usa #amazaon #zoom #video #wrtc

If you want a password manager that you can keep local-only, KeePassXC is a great option 🔐

It's free,
Open-source,
Easy to install and use,
Doesn't require an account,
Works on Linux, macOS, and Windows,
And the team is here! 👉 @keepassxc

Here's how to set up KeePassXC with a YubiKey: ‪https://www.privacyguides.org/articles/2025/03/18/installing-keepassxc-and-yubikey/

#PasswordManager #KeePassXC #Privacy #Security #Passwords #FOSS

Reading this, people could actually think Anthropic helps them keeping their data safe. However you still have to trust Anthropic itself that has access to all your data when using their AI or am i misreading it?
https://www.anthropic.com/news/enterprise-frontier-safeguards
#AI #Anthropic #EFS #privacy #security

Brian Krebs found his own driver's license for sale on a Russian crime forum this week. The timestamp on the scan matched the day he rented a car to attend a family funeral. His mom's license was there too, scanned a few seconds after his.

The service is called Nexus. It claims over 153 million driver's licenses from the US and Canada, and the count grew by nearly 400,000 in a single day. Krebs traced the scans back to an identity verification vendor that checks IDs for rental car companies, big retailers, and over 1,000 marijuana dispensaries. The FBI opened an investigation on Tuesday.

Most of the people in that database never dealt with the vendor. They handed a license to a clerk at a counter. The clerk ran it through a scanner. Nobody mentioned that the scanner belonged to a different company, or that a copy might stick around long enough to get stolen. If your company scans customer IDs, you own the risk of how your vendor uses those images, whether the contract says so or not.

Two things worth thinking about:

- Every new "show us your ID" rule, including the ones sold as protecting kids online, pushes more license scans into more vendors. Each one is another place to lose them.

- A driver's license is still what banks use to open credit. A scan with the photo, front and back, in infrared and ultraviolet, is close to a master key.

I would love to see ID scans deleted the moment a check is done. Until then, ask whether your license will be scanned or just looked at before you hand it over. And freeze your credit at all three bureaus. It's free. It takes about ten minutes.

https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/

#Cybersecurity #Privacy #IdentityTheft #security #privacy #cloud #infosec

24 npm Packages abuse unpkg Mirrors to host Fake Cloudflare CAPTCHA Pages.

IT-Security researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages.

⁉️"While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't do harm, the threat actor’s use of npm isn't to infect developers who install it, but to use the registry and its mirrors as a safe, validated storage for the malware," OX Security researchers Moshe Siman Tov Bustan and Vitalii Chepurko said.⁉️

https://www.ox.security/blog/research-clickfix-phishing-npm-packages/

The list of npm packages, some of which are still available for download, is below:

• bgzxcuite2
• prezdentkxheiw
• egair0810
• mnteckets
• airdzticket
• egypt0811
• passport811
• vxhjkseuiaqkb
• ndmushdkeqe
• ndmxchdjxn2
• ndmfguyhoxc3
• mjsdqwocvn
• m2fcsfyjkuxb
• m3fdfocdoewn
• @worrisome/reutil
• testdgdbcsd
• tesgfvbncsdbcv
• mndsxcusiwlk1
• mn2adskhweox
• mn3sadkoiewu
• mn4xcouzvhus
• mbxcnsuwgs1
• skxcmwuncbg2
• mobiwaefhxc3

The campaign specifically targets mirrors like unpkg. Once mirrored on these services, the HTML file [e.g., "unpkg[.]com/ndmxchdjxn2@1.0.0/index.html"] becomes a live, fully-rendered fake Cloudflare CAPTCHA page that's hosted on a trusted domain but redirects to ClickFix phishing infrastructure.

👾As a result, anyone who opens a link that's hosted on the npm mirror will be tricked into carrying out unintended actions that can lead to the deployment of malware. This involves displaying a fake Cloudflare verification page, which then sends the target to an external website controlled by the attacker.👾

#npm #secure #programming #developer #security #privacy #infosec #tech #media #news

Alt...

👾The HTML page embeds the logic to serve the bogus CAPTCHA verification prompt, as well as JavaScript necessary to send a request to a remote server. Initial iterations of the malware were found to send the request to a typosquat domain that impersonates the Microsoft login page ["login[.]microsofte[.]live"].👾 But after the domain was added to Google Chrome's Safe Browsing blocklist, the threat actor behind the campaign is said to have responded by switching to KeyVal ["api.keyval[.]org"], a free, public key-value store that allows developers to set a key-value pair or retrieve a value given a key using a REST API. <https://keyval.org/#> In doing so, it turns the legitimate service into a dead drop resolver [DDR] and uses it to extract and decode the URL to which the victim is redirected to. <https://www.cc.gatech.edu/news/hiding-plain-sight-disrupting-malwares-secret-web-dead-drops> ⁉️"Currently the remote logic transfers the user to the legitimate ChatGPT website, but it could be weaponized to deliver ClickFix or any other phishing domains when configured to by the attacker," the researchers said.⁉️

Ganz scharrrfe neue RRRegeln!

Also „Sonnenschein123456“ statt „Sonnenschein13“
und „Ahabostsee123456“ statt „Ahabostsee123“

und „MaxMustermann123456“ statt „MaxMustermann123“

Wie wäre es mit Zwei Faktorauthentifizierung, OpenDesk einführen, Zero Trust? Irgendwas mit Sinn?

https://www.tagesspiegel.de/berlin/anweisung-an-alle-berliner-behorden-nach-hackerangriff-senat-verhangt-vorsorglich-verscharfte-passwortregeln-16008124.html

#berlin #security #rhysida #2fa #opendesk #zerotrust #securitybydesign

ID verification schemes are going as expected:

https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/

#privacy #security #cybercrime

🪪 The recent idscan.net (&more?) breach exposed over 153M Driver's Licenses + 10m IDs + 579k Medical Cards mostly from the #US & #Canada.

Age verification aka ID verification proponents should really think about how unsafe data is once it's collected en masse.

Citizens' #Security & #Privacy need to be prioritized and considered BEFORE implementing any form of verification for anything.

Are the Western courts in charge of protecting the people sleeping right now? 💤

https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/

Porting issues: GrapheneOS advises against buying the Pixel 11

The GrapheneOS team advises against buying the Pixel 11 if users want to flash the custom ROM onto the device. An important security component is missing.

https://www.heise.de/en/news/Porting-issues-GrapheneOS-advises-against-buying-the-Pixel-11-11435208.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Android #Datenschutz #Google #GrapheneOS #IT #Mobiles #Security #Sicherheitslücken #news

Zoom on Linux sucks. Well, yes, I know Zoom suck in general but so many work/care related meetings I need to attend use it -- but for me the last few months, it's breaking by freezing on joining/adjusting settings, or booting me at being assigned to a breakout room, and this is via all kinds of installation methods on Linux (software centre, terminal, Snap, Flatpak etc) and even the guidance out there about fixes for Debian-based distros hasn't helped. It's a good thing I don't host workshops on Zoom these days, but when I do again, an open source, privacy-respecting alternative that provides live captioning would be great (feel free to share your recommendations!) #Zoom #Linux #VideoMeetings #VideoConferencing #accessibility #privacy #security

@futurebird I do , my neighbour do , most homes on my lock has a #security camera it used to not be like this but people have less trust in strangers then they used to

@futurebird it depends on risk & if you value #security or #privacy more & many people feel at risk enough to put security first

A quotation from Eisenhower

   The way chosen by the United States was plainly marked by a few clear precepts, which govern its conduct in world affairs.
   First: No people on earth can be held, as a people, to be enemy, for all humanity shares the common hunger for peace and fellowship and justice.
   Second: No nation’s security and well-being can be lastingly achieved in isolation but only in effective cooperation with fellow-nations.
   Third: Any nation’s right to form of government and an economic system of its own choosing is inalienable.
   Fourth: Any nation’s attempt to dictate to other nations their form of government is indefensible.
   And fifth: A nation’s hope of lasting peace cannot be firmly based upon any race in armaments but rather upon just relations and honest understanding with all other nations.
   In the light of these principles the citizens of the United States defined the way they proposed to follow, through the aftermath of war, toward true peace.

Dwight David Eisenhower (1890–1969) American general, US President (1953–61)
Speech (1953-04-16), “The Chance for Peace,” American Society of Newspaper Editors, Hotel Statler, New York City

More about this quote: wist.info/eisenhower-dwight/28…

#quote #quotes #quotation #qotd #eisenhower #dwighteisenhower #dwightdeisenhower #America #armsrace #autonomy #control #cooperation #defense #diplomacy #domination #enemy #foreignpolicy #humanity #imperialism #independence #isolationism #military #neighbor #security #sovereignty

New Zealand Pushing for Failed Age Verification Law

New Zealand lawmakers have announced that they are stupid enough to table age verification legislation.

https://www.freezenet.ca/new-zealand-pushing-for-failed-age-verification-law/

#Censorship #News #Privacy #Security #AgeVerification #fail #legislation #NewZealand

Gemini API is no better. sometimes ago I went to create an APi key, and it said that the attempt looked suspicious. which is funny because no one had hacked into my account. I looked at my accounts logs, everything was good. plus, I have 2FA , Google advanced protection turned on, etc, etc. and I don't have a cookie credential theft.
what the fuck is going on?

Signal Introduces Automatic Key Verification. This will further prevent MITM attacks

https://signal.org/blog/automatic-key-verification/

#tech #technology #news #technews #security #privacy #signal #messaging

Guys, MAJOR update for PH4NTXM...
I've been working long for this one, using all the technical knowledge can be found offline/online, with specialized tools, automations and more.

PH4NTXM now is on v2.0.0

A lot of things changed, from UI, to fail-closed mechanisms, and strict boot verification pilot.

Philosophy remained as always THE SAME.

It's a big step, cause we filled so many gaps, and automated things to be adaptive, like the purpose of the Operating System.

Go try it, build it, break it, repeat.

Thank you, as usual, PH4NTXM.

#ph4ntxm #linux #debian #os #live #privacy #security #opsec #infosec #research #tech #technology

cPanel Patches CVE-2026-65643 Root Code Execution Flaw
https://www.cyberkendra.com/2026/08/cpanel-patches-cve-2026-65643-root-code.html
#security #cpanel #update #infosec #webhosting

Next.js Patches Two Critical RCE Flaws in 15.5.24, 16.3.3
https://www.cyberkendra.com/2026/08/nextjs-patches-two-critical-rce-flaws.html
#security #nextjs #Vercel

What a character. I loved the book, and Cliff Stoll is delivering masterfully here in this talk:

https://www.youtube.com/watch?v=656058JxTM0

#security #hacking

AI-generated passwords look like they would be bombproof. But tech writer Kim Key discovered just how easy the repetitive character sequences are to hack. Read more from PC Mag:

https://flip.it/aj7VE2

#Tech #AI #Security

@PrivacyDigest Don't forget to install the same proprietary spying apps from the same abusing companies, but with a different account. Surely they won't track your device model and IP to add more data to the same unique personal profile. Much #privacy such #security

when they come asking for user identities and data at arcanechat.me

we don't even have any billing information since it is all completely anonymous and free

#ArcaneChat #security #privacy #encryption #email #europe

I need to go out and stare at moss in the forest before getting back to your message

#ArcaneChat #privacy #security #encryption #anonymity #family #digitalindependence #Europe #European #android #openSource

🔴 Apple sent mercenary spyware threat notifications to users in 110 countries, and the alert now appears on the iPhone Lock Screen.

Read Details- https://www.cyberkendra.com/2026/08/apple-threat-notification-mercenary-spyware.html

#Apple #iphone #lockdown #Mercenary #spyware #security

𝗛𝗮𝘃𝗲 𝗜 𝗯𝗲𝗲𝗻 𝗽𝘄𝗻𝗲𝗱?:

#Security #Passwords #Pwned

https://thewhale.cc/posts/have-i-been-pwned

Check if you have an account that has been compromised in a data breach.

Alt...

Check if you have an account that has been compromised in a data breach.

Flock’s surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by some police, to confirm it goes much further than tracking license plates.

Alt...

Flock Has a Powerful New AI Tool for Police. We Got Its Code

After Noel Pichardo called out his city's embrace of Flock surveillance cameras, he was subjected to five internal affairs investigations in less than two years.

Alt...

The Cop Who Took On Flock

Meet #ArcaneChat

No phone numbers required for registration.

No strangers discovering and contacting your family members.

All your conversations end-to-end encrypted.

it is magic! ✨

#privacy #security #family #encryption #autonomy #europe #european #android

Hello, I just pushed something new for users want extra privacy.

PH4NTXM AI LockGuard is a local AI-powered camera monitor for Linux.

It uses your webcam to detect whether you’re still present in front of your machine. If you leave or another person appears in the frame, it can automatically lock the session.

Everything runs locally. No cloud. No telemetry. No remote image processing.

Built for privacy, physical security, and people who want their workstation to lock itself when something looks wrong.

https://github.com/PH4NTXMOFFICIAL/PH4NTXM-AI-LOCKGUARD

#ph4ntxm #linux #debian #os #live #privacy #security #opsec #infosec #research #tech #technology

We’ve all been there before — waiting in the lobby for your dentist appointment and thinking “I’ll just log in to my banking app real quick.” Well, think twice. Hackers are targeting Wi-Fi networks at hotels and other places in ever sneakier ways. PC World has more, including tips to avoid getting hacked on public Wi-Fi:

https://flip.it/ByjdML

#Tech #Security #Technology

Canada’s Age Verification Bill Was Always an Unconstitutional Mess

On the heels of the French court ruling, some are wondering is Canada's version is going to share the same fate. Yes.

https://www.freezenet.ca/canadas-age-verification-bill-was-always-an-unconstitutional-mess/

#Censorship #LawAndTechnology #News #Privacy #Security #AgeVerification #BillC34 #Canada #CanadianCharterOfRightsAndFreedoms #court #France

737 Chrome VPN Extensions caught routing Traffic through Proxies. [Check If You Have One]

The extensions, published across at least 40 Chrome Web Store developer accounts, racked up 75,486 installs. Of those identified, 274 have been found to impersonate 66 established VPN and privacy brands, including Proton VPN, NordVPN, Surfshark, AdGuard VPN, Browsec, ExpressVPN, CyberGhost, Windscribe, TunnelBear, Cloudflare's 1.1.1.1 and Google's Outline.

The censorship circumvention extensions "route the user's entire browser session through SOCKS5 proxies operated by a single provider," security researcher Kush Pandya said. "520 of the 522 in the bulk corpus route browser traffic through the same SOCKS5 infrastructure."

https://socket.dev/blog/chrome-vpn-extension-impersonation

⁉️"For each affected user, while the extension is connected, every request passes through a server the threat actor controls," Pandya said. "Whether the threat actor owns those proxy servers or resells capacity from an upstream provider is not resolvable from the extension code. If it resells, a further party is in the same position."⁉️

"What is established from the packages and from public infrastructure is the impersonation, the undisclosed proxy configuration, the non-existent premium servers, the false statements submitted to store reviewers, and the post-approval code substitution."

#google #chrome #browser #security #privacy #infosec #tech #media #news

Alt...

👾The vast majority of the extensions have been found to route users entire browser sessions by setting "chrome.proxy.settings" to a fixed SOCKS5 server on port 1082, placing the threat actor in an adversary-in-the-middle [AitM] position to observe browser destinations, source IP addresses, TLS SNI values and any request body sent over plain HTTP.👾 Every extension that configures a proxy also comes with a bypass list that only includes loopback addresses [i.e., the localhost or 127.0.0.1"], meaning every other browser request is funnelled through the SOCKS5 relay on port 1082 once the user connects to the purported VPN service. ⁉️As many as 221 browser add-ons have been removed from the Chrome Web Store, while the remaining 516 extensions have been listed as active. The threat actor is said to be running a subscription VPN business in Russia, based on a 12-digit taxpayer number and the fact that some of them leak their Windows build path ("C:\Users\ollob\OneDrive\Документы\1.myxa-work\08.06.26\<domain>\<product>\<product>-release.zip").⁉️

Alt...

[ImageSource: socket.dev] ⁉️Ideally, the functionality is no different from a legitimate VPN or proxy service. The defining aspect of this activity is its attempt to impersonate established brands as opposed to offering it under their own name. Some of the other red flags include:⁉️ • Advertising paid tiers [or premium locations] that do not exist • DNS-over-HTTPS blocklist evasion • Failing every connection attempt while showing a complete fake interface, including a working connecting animation and status indicator • Shipping an internal manual named "Промт для сотрудников" [translated to "Prompt for employees"] that instructs them to avoid putting the domain directly into "chrome.proxy.settings" (and instead provide only the resolved IP) and refrain from using a domain from another extension without separate instructions • Presence of comments that indicate a deliberate attempt to evade Chrome Web Store policies • Adding a new remote-configuration layer after extension approval • Attempts to game the Chrome Web Store review process by submitting identical justifications, stating "No data transmitted to external servers" or "No user tracking or logging"

"Stop Using #Discord Right Now..."

https://inv.nadeko.net/watch?v=J1-Gfi2KNlc #Video #Privacy #Security

It took them 4 years to require cops to need a reason to use it?

Flock tries to make its cameras harder for cops to misuse - Engadget

https://www.engadget.com/2236415/flock-tries-to-make-its-cameras-harder-for-cops-to-misuse/

#Flock #Cameras #Cops #ACAB #Security #Surveillance #Tech

this is really super cool:

https://likebutter.app/blog/butterbox-deltachat

quite some other projects try to solve "offline communications" by using Bluetooth but I think this is very unpractical for anything that is not looking like an IRC or SMS app

but if people setup local interconnected wifi hotspots and build a mesh network in the cities/towns then you can have a something much more interesting while not draining everyone's battery

enabling people to do things like this and becoming truly resilient and autonomous

things like this you can never do with centralized messengers like #WhatsApp, #Telegram, #Signal, etc. if you really care about digital independence, centralized alternatives are just NOT an option at all

#mesh_network #mesh #offlinefirst #deltachat #autonomy #privacy #security #freedom #resilience #decentralization #opensource #europe #european #digitalindependence #diday #butterbox

#TutaMail and #ProtonMail are by far the world's two best email providers/services for #Anonymity, #Privacy and #Security (#APS).

I have recently (12th August 2026) carried out a thorough research into this as I am planning to migrate to whichever is the best email provider/service for APS and move away and ditch US Big Tech.

Between the two, the one that comes on top depends on what you value most on aggregate. In individual edge terms, here is how they compare:

Tuta Mail: cheaper; more custom domains; more email addresses; more established/robust Post-Quantum (PQ) Security;

ProtonMail:

@Tutanota
@ProtonMail
@protonprivacy

Apple iCloud Private Relay can expose Real IPs through WebKit Proxy Bypasses.

IT-Security researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address.

https://mysk.blog/2026/08/04/webkit-proxy-icloud-private-relay-ip-leak/

Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users privacy by routing their Safari web traffic through two relays so that no single third-party, including Apple, can determine where the request is originating from and what sites are being visited. It's available as part of the iCloud+ subscription.

https://support.apple.com/102602

⚠️Researchers Talal Haj Bakry and Tommy Mysk, who found the issue, said the problem is rooted in three features in Apple's WebKit: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. WebKit is the default web browser engine used by Safari and all third-party browsers on iOS and iPadOS, such as Google Chrome, Microsoft Edge, Mozilla Firefox, Brave and others.⚠️

A proof-of-concept (PoC) website named "leaks.psylo[.]app" has been made available for anyone to check if their real IP address leaks, even when Private Relay is on.

https://leaks.psylo.app/

⁉️Apple did not immediately respond to a request for comment. But the company told 404 Media that it's investigating the researchers' report.⁉️

https://www.404media.co/apples-private-relay-is-exposing-users-real-ip-addresses/

#apple #icloud #security #privacy #infosec #tech #media #news

Encrypted AI “Reasoning Process” Hacked: Weaker Models Reveal Secrets

Security flaw allows AI reasoning logs (GPT-5, Claude) to be read in plain text via smaller models from same provider.

https://www.heise.de/en/background/Encrypted-AI-Reasoning-Process-Hacked-Weaker-Models-Reveal-Secrets-11412110.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#ChatGPT #Claude #IT #KünstlicheIntelligenz #OpenAI #Security #Verschlüsselung #news

Decentralized Identifier Resolution (DID Resolution) v1 retrieves a DID document for a given DID, while DID URL dereferencing retrieves a resource for a given DID URL. This @w3c specification defines a standard interface for both, independent of the DID method, along with implementation, #security and #privacy requirements #timetoimplement
▶️ https://www.w3.org/TR/did-resolution-1.0/

Feedback welcome! https://github.com/w3c/did-resolution/issues

Signal introduces Automatic Key Verification 🔑

It provides an easier solution for confirming end-to-end encryption between you and your contact

👉 https://aboutsignal.com/news/signal-introduces-automatic-key-verification/

#signal #signalapp #signalmessenger #aboutsignal #security #privacy #tech #news

"The #BBC has spoken to several headteachers and staff at #Jewish #schools. All asked not to be named because of concerns over their #security and that of their schools.

One headteacher said: "In recent years [security] has become an overwhelming priority and increased a significant amount. There have been weeks where approximately 90% of my time has been spent on security-related matters.

"Security concerns can become one of the many things that headteachers carry with them beyond the school day and, quite literally, can be among the things that keep me awake at night."

Another headteacher, who has led a different Jewish school for 13 years, told the BBC: "I've never spent so much of my time and so much energy dealing with security issues, talking to governors and parents, and above all making daily decisions about how to ensure #children in our school are safe."

https://www.bbc.com/news/articles/c98vm1n64ljo

A cybersecurity researcher covered a Toyota in an AI-generated pattern to confuse Flock cameras

https://www.techspot.com/news/113418-cybersecurity-researcher-covered-toyota-ai-generated-pattern-confuse.html

#news #tech #technology #AI #flock #aislop #nvidia #AIPsychosis #security #privacy

Meet #ArcaneChat

No phone numbers required for registration.

No strangers discovering and contacting your family members.

All your conversations end-to-end encrypted.

it is magic! ✨

#privacy #security #family #encryption #autonomy #europe #european #android

Do mini PCIe hardware security modules or standalone cryptographically strong pRNGs exist? If they do, where can I get one? NetBSD is complaining about low entropy (laptop from 2011) & suggests I keysmash, use an entropy file, or get a USB pRNG. I would prefer to have all of my USB ports free.

I have no idea where to find such a thing & I can't even find USB HSMs besides the one that YubiCo sells. The closest thing I have found is a bunch of TPM2 chips with SPI headers on them & I don't think I have any free SPI connectors in the laptop. For now I'll use an entropy file but I would rather do something better like using a proper RNG device.

I think people watching these tags might know more than I can find with a search engine. Thank you.

#Security #BSD #NetBSD #Linux #Cryptography

VPNs, or virtual private networks, are among the best tools for protecting yourself online. They’re generally best when paid for, but you can still keep your privacy without forking over the cash. Here are PC World’s top five:

https://flip.it/6B3waM

#Tech #Security #VPN

Happy Sunday!

The weekend is not over yet: you still have time to recommend #ArcaneChat to a friend or family and help them get in contact with you here.

Spread purple love 💜✨
Keep the family safe 🤗

#privacy #encryption #europe #european #OpenSource #android #security

"#Synagogues across the #US are having congregants train to be volunteer #security teams as #antisemitic #assaults hit record levels and #Jewish gathering places face increasing threats.

Driving the news: The front doorways of many synagogues are becoming both a place of welcome and a security checkpoint — a sign of how #antisemitism is reshaping Jewish life in #America.

The traditional practice of hiring a guard for High Holy Days services, installing cameras and calling police if something happens, is giving way to more complex, layered security systems.

It doesn't mean that we're ninjas ... [or] law enforcement officers, but everybody can have a role to play," said Rusty Rosenthal, a retired FBI agent who leads #JShield, the #JewishFederation of Greater Washington's security arm in the D.C. area."

https://www.axios.com/2026/08/08/synagogues-security-teams-jews

am I the only one annoyed by so frequent #GrapheneOS updates???

I am already pissed off one can not disable automatic download of updates, one can disable the updates app completely, but I would prefer to manually check for updates and review available update before downloading not to completely disable updates

then after applying updates it takes ages "optimizing apps" see this screenshot, only 8 optimized apps out of 35 and it has taken 19 minutes already and in the meantime the phone is very slow and overheated :(

#android #degoogled #degoogle #privacy #security #opensource

Harley, a Proton privacy expert, shares 7 physical privacy gadgets her team actually uses when passwords aren’t enough: BusKill laptop theft kill switch, IMSI catcher detectors, Faraday pouches, security keys, privacy screen protectors, USB data blockers, and yes—cash. 🔐🛡️📵 https://proton.me/blog/privacy-gadgets #privacy #security #ProtonTeam #Proton

RE: https://mastodon.llyxx.me/@BenDoubleU/117050965305202891

so the vender was metabase. this is their post on their data breach

https://www.metabase.com/blog/security-update
#databreach #MetaBaseDataBreach #security #framework

Ben W » 🌐 2026-08-06
@BenDoubleU@mastodon.llyxx.me

yikes. data breach of framework customer data.
no blog post from https://frame.work but emails were just sent out.

https://frame.work/

Flock posted videos on its YouTube channel highlighting at least four police departments whose officers have faced allegations of misusing the company’s tech.

Alt...

Flock Highlighted Police Departments Using Its Tech. Now 4 Face Allegations of Misuse

Meet ArcaneChat: a secure and #decentralized private messenger

Anonymous: No SIM card needed! No phone numbers required for registration, just set a name and start chatting!

Private: All your conversations are end-to-end encrypted

Discreet: No one can discover you or know that you are using the app! only people you share your invitation link or QR with can contact you

#digitalindependence #privacy #security #family #encryption #autonomy #european #openSource #europe #diday #decentralization

And another #GenAI on GenAI hack case. This time Meta AI is the culprit:

https://www.reuters.com/technology/metas-ai-model-hacked-another-company-during-testing-information-reports-2026-08-05/

I guess it's for street creds that your #AI needs to be at least good enough to take out another one's security.

#LLM #Meta #security

https://proton.me/blog/privacy-gadgets

The tools that a privacy expert uses to protect themselves, Article and video past the link

- BusKill: a kill switch for laptop theft
- IMSI catcher detectors
- Faraday Pouches
- Security Keys
- Privacy Screen Protectors
- USB Data Blocker
- Cash

#Privacy #Security

we are happy to hear reports from parents that say the small ones of the family like a lot ArcaneChat and the in-chat mini-apps

#ArcaneChat #family #kids #privacy #security #encryption #android #Europe #European #OpenSource #decentralization #digitalindependence

"I just despise... having to buy multiple phones to test shit on another android version on occasion without it being highly time consuming and inconvenient (esp. for stuff like banking apps breaking even when reverted)..."

#Quote Klaus Frank / @agowa338

#Mobile #Phone #Working #Testing #Apps #Banking #Security #Quotes