soc.octade.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
LibreOffice und OpenOffice: Warnung vor Codeschmuggel-Lücke, Updates kommen
Eine Lücke betrifft LibreOffice und OpenOffice gleichermaßen. Angreifer können mit präparierten Dokumenten Code einschleusen.
#IT #LibreOffice #OpenOffice #Security #Sicherheitslücken #Updates #news
WhatsApp keeps doing it: every a couple of months you wake up and suddenly you can't access your chats anymore, not possible to read important saved notes, etc. you are welcomed with this screen that forces you to update the app, you might be in vacations with expensive roaming data or very bad connectivity or if you are unlucky enough you might be in a country where the app store is not accessible, your data is not YOUR data in WhatsApp, and the reality is: you can lose it at any time they want to take it away from you
On the other side, ArcaneChat users can sleep without worries at night knowing that when they wake up they can keep accessing all their chats, messages and being able to search and use mini-apps, even while offline
With ArcaneChat you really own your data, it is in your pockets, not in the cloud of some corporation you have to beg access to
#ArcaneChat #autonomy #Europe #European #eu #privacy #encryption #WhatsApp #Meta #freedom #opensource #security #digitalindependence #diday #chat #messenger
"Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year."
"Chat Control 2.0 Trilogue Update: No mass scanning deal for now – European Parliament stands firm against “Search Plans”"
"Clearview AI Is Testing an AI Tool That Would Let Cops Unearth Your Life Online"
"Discord reveals age-check rollout with massive changes to how it works"
https://theprivacycloud.substack.com/p/september-2026-privacy-news-roundup
Ubuntu is shaking up its OpenPGP implementation, adding Rust-based Sequoia PGP to 26.10 installs.
GnuPG is still included, but Canonical plans to phase it out in a future release.
The software development community has a naysayer problem
https://iain.rocks/blog/the-software-development-community-has-a-naysayer-problem
I have some commentary about this article to share. Before you read my commentary you need to understand the meaning of 'marmaluke'. Really.
"... the entire point of the layered encryption is that you make it a lot harder to know when you’ve cracked the first layer."
We've gone over this idea many years in the past. The gatekeeper community ain't havin' it.
"Security via obfuscation in encryption? We’re done here. ..... “Hiding what you’re doing in encryption doesn’t make it any more secure.”" .... I got this response many times. Many people seem to fail to understand that encryption is literally obsfucating the data. You’re changing the data so people can’t understand it, and it can be un-obfuscated, aka decrypted which is the entire point. ..... The number of people who called this concept security via obscurity is shocking. It’s a new concept, but just because it’s a new idea doesn’t mean the point of it is to be obscure."
The author is right and wrong.
This is not the first time anyone has proposed the idea of chunking up encryption and cascading ciphers. He is mistaken about that claim.
However he is right about 'security through obscurity' and I will explain why.
The parrots love to shout about "Kerkchoff's Principle", which they say is a truism that security through obscurity is either bad or is not security at all. And this is a lie. The reason it is a lie is because that is not what Kerkchoff said. They have inverted Kerkchoff's Principle to read: "You must disclose the algorithms, or else you are playing security dice." This is totally false.
If obscurity of the method had no effect on security, then classified secrets would be pointless. Classified weapons would be pointless. Classified operations would be pointless. Hiding your location from a stalker would be pointless. If obscurity did not boost operational security, then every police detective would call the criminals in advance to let them know they are being investigated. The military would publish battle plans in advance on the six o'oclock news since 'security through obscurity' is bad.
Kerckhoff’s Principle states that security should not be dependent on the secrecy of the cipher but rather on the secrecy of the key. It is not a mandate to declare which cipher is being used. That is just stupid. Yet some 'cryptography experts' define it this way because they don't know what the hell they are talking about.
If I use a basket of ciphers, and choose a random cascade of them in a random order, that random choice is part of the key schedule, and obscuring the choice of ciphers DOES increase the mathematical hardness and security of the ciphertext. This is what the amateur author is instinctively grasping, and his detractors are wrong, and criticizing the wrong things for the wrong reasons. Without realizing it they are doing the bidding of gatekeepers who don't want widespread cascade ciphers because they require much more time and resources to crack. Just have a look at the recent drama at the crypto standards group trying to remove fallback ciphers in KEM system standards. The gatekeepers don't want us using baskets of ciphers. They want everyone using the same standard, singular lock model on every treasure chest.
Yes, satan's little helpers love to shoot everyone down to make them fall in line with the gatekeeper agendas. These marmaluke parrots and popinjays have no idea that their 'thought leaders' are nowhere near as competent as they portray themselves. In order to keep the illusion going, they try to put others down to ensure their idols remain higher than and aloft over the crowd. Singular people are smart. Put a whole crowd of smart people in a [chat] room or forum and they all get dumb really quickly. IQ addition is a lossy operation.
Who cares that an amateur is experimenting and learning? What kind of dinkus tries to shout that down? What kind of maroon always has to jump in with unproductive whataboutery instead of playing along and helping improve the game play? An authoritarian marmaluke, that's what kind. It seems a lot of jackasses who over-rate their own knowledge ... want to use negativity and boundary policing to prevent the curious from exploration.
"This is probably the best example of how bad the software community actually is. It was a bunch of naysayers who GCHQ called “Script Kiddie cybersecurity experts” because they were just parroting things they’ve heard about security without truly understanding them."
He gets it. Don't cave to the naysayer marmaluke parrots. I say more power to the curious. Let them try and fail and try and fail as many times as they have the grit to bear. That is how we learn to walk, run ... and fly.
I do think some of the author's conclusions are mistaken, such as GCHQ finding his idea 'new' or 'useful', since they have actually used these kinds of cascades and segmented, fractionated, and 'railfence' ciphers since WW1. But let him figure that out and give him ideas to arrive at the right conclusions instead of parroting wrote social rules and mores that aren't even being correctly described.
If you are an ideological boundary cop, you are an enemy of basic humanity. Go away thought cop. Let the curious thrive, and live, and die as explorers.
#cryptography #cryptology #ciphers #encryption #naysayers #freethinkers #curiosity #marmalukes #gatekeepers #gatekeeping #math #cybersecurity #security
🚨 This Week In Privacy #72 will be live in 30 minutes, we'll be talking about F-Droid releasing their 2.0 update, the biggest update to the app in years.
We'll also be covering the latest #privacy & #security news!
👋 Come watch and join the Q&A!
Now it's confirmed as, watchTowr says two unpatched NetScaler RCE zero-days were found exploited during forensics. Citrix's advisory and patches are expected early next week.
https://www.cyberkendra.com/2026/09/netscaler-shutdown-warning-unverified-rce-flaws.html
#netscaler #citrix #zerodays #security #infosec
Get out of your comfort zone, don't sacrifice freedom for short-term convenience
#ArcaneChat #decentralization #freedom #security #WhatsApp #Telegram #Signal
Good to realize, with the current state of technology a voice can not be trusted. So when somebody calls you and wants something from you, remember voices can be perfectly cloned and faked nowadays. So maybe we should think about asking control questions when necessary?
https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-3-8-text-to-speech/
#TTS #Voice #AI #cloning #Security
WordPress 7.1.2 fixes CVE-2026-87902, a critical no-login file inclusion flaw in core that can lead to code execution on some servers.
https://www.cyberkendra.com/2026/09/cve-2026-87902-wordpress-file-inclusion-rce.html
ShinyHunters Claims FBI Hack, Theft of Employee Data
The group says it stole 2–3 TB via an Oracle PeopleSoft zero-day and wants the FBI to retract a May threat report within a week.
https://www.cyberkendra.com/2026/09/shinyhunters-claims-fbi-hack-theft-of-employee-data.html
Can you believe it? #SeaGL2026 is happening a month from today!!!
October 23rd and 24th @ UW in Seattle, WA
See you all there, tell your friends!
Free to attend, Registration is optional https://seagl.org/register
#linux #opensource #seattle #FLOSS #FOSS #OSS #oshw #security #privacy #tech #free #libre #open
Free Exchange Alternative: grommunio Web with OpenPGP
grommunio Web 5.0 brings OpenPGP support, a new command palette, and improved Outlook integration.
#EMail #Groupware #IT #MicrosoftExchange #OpenSource #Security #Verschlüsselung #news
if Dario Amodei and Sam Altman are acting like legitimate military targets without a government of their own, communities and whole countries need to treat them as the liabilities they are.
#aislop #dataCenters are the #techbros #broligarchy form of settler #colonialism. because, as someone else suggested, the #aibubble is a #realEstate bubble.
communities must defend themselves accordingly.
» Dario Amodei and Sam Altman to brief #UN #Security Council on #AI https://thenextweb.com/news/dario-amodei-sam-altman-un-security-council-ai
Comment2Shell (CVE-2026-93485) lets an anonymous WordPress comment reach RCE via an admin session. Fixed in 7.1.1 — update now.
https://www.cyberkendra.com/2026/09/comment2shell-wordpress-cve-2026-93485-xss-rce.html
Voor iedereen die het nog niet kent, OWASP AI exchange, "300+ pages of free, constantly-evolving, practical guidance on securing AI systems"
https://owaspai.org/
#AI #owasp #security
💥 ❤️ 📣 NEW RELEASE 📣 ❤️ 💥 #Shufflecake v0.6.2 brings various bugfixes, better error handling and unit tests, and polishing of the libsflc interface.
https://codeberg.org/shufflecake/shufflecake-c
#linux #foss #floss #opensource #libre #cypherpunk #security #cryptography #privacy
It is true, the bill is said to be founded on necessity; but what is this? Is it not necessity, which has always been the plea of every illegal exertion of power, or exercise of oppression? Is not necessity the pretence of every usurpation? Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
William Pitt (1759–1806) British Prime Minister (1804–06) [William Pitt the Younger]
Speech (1793-11-18), House of Commons, London
More about this quote: wist.info/pitt-william/3164/
#quote #quotes #quotation #qotd #williampitt #williampitttheyounger #control #emergency #excuse #government #imperative #justification #necessity #need #oppression #power #pretense #security #servility #tyranny
There's this infographic on the train. A guy's connecting to the open WiFi network on the train and then logging in to a bank, and apparently another guy sitting nearby with a laptop (and an evil grin) intercepts that password. The infographic goes on to say that you should use a #VPN to protect against that.
Do I want to point out that not only this is bullshit, but for most people a "VPN" actually means installing some spyware?
Angreifer attackieren Acronis Backup für cPanel/WHM und Plesk
Aufgrund von laufenden Attacken müssen Admins Acronis Backup für cPanel/WHM und Plesk aktualisieren.
#Cyberangriff #Hosting #IT #Patchday #Security #Sicherheitslücken #Updates #news
Google Search is making it harder to see where links actually lead.
Some search results are now routed through encoded google[.]com/goto?url= redirects instead of linking directly to the destination. That means hovering over a result may no longer reveal the real website before you click.
This matters for spotting phishing pages, fake downloads, and malicious ads.
Full article: https://digitalescapetools.com/2026/09/google-search-redirects-hide-destination-links.html
Heads up to anyone security-minded who's upgrading to iOS 27. I just did, and I couldn't enable iMessage afterwards. It told me that I need to sign into the same Apple Account because I use Contact Key Verification.
Must be a bug, because I turned off CKV and then I could enable iMessage. CKV turned itself back on and all is well, but that was slightly annoying.
#Apple #iOS27 #iPadOS27 #iMessage #iPhone #iPad #iOS #iPadOS #security #privacy #ContactKeyVerification
ifn » 🌐
@ifn@ieji.de
RE: https://mastodon.social/@BuyFromEU/116006424625049354
@session is the absolute best for #Anonymity, #Privacy and #Security ( #APS )!
ifn » 🌐
@ifn@ieji.de
The need for #diversification and gradually moving away from #USA #dependence and #influence is fundamental for the long-term #security, #sovereignty, strategic #autonomy and #prosperity of both #EU and #Canada. United we stand, divided we fall. Or as #Carney (2026) put it: United we 'are at the table', divided 'we are on the menu'.
The US is a #predator Superpower. Only united can we protect ourselves from sooner or later falling #prey to it. 🇪🇺🤝🇨🇦
Want more control over Windows telemetry and tracking?
WindowsSpyBlocker is an open-source tool that helps block spying and tracking on Windows using network filtering rules. Written in Go and available as a single executable, it’s licensed under MIT.
More details & alternatives: https://digitalescapetools.com/tools/tool.html?id=windowsspyblocker
#Privacy #Windows #OpenSource #Telemetry #PrivacyTools #Security
I want to know: how much vetting do #Linux repo maintainers do of the software they host w.r.t. malware?
My current chain of preference is
1. Official repos for my distro (currently OpenSUSE Tumbleweed)
2. FlatHub (with occasional fiddling with the permissions using Flatseal)
3. Find official downloads page via article on Wikipedia or other "trusted" source such as F-Droid (for apps that have an official Android version) (better than trusting the top results in a search engine IMO)
US agencies warn of AI knowledge drain to China
US agencies warn: Chinese AI providers like DeepSeek and Alibaba are massively siphoning knowledge from US models like those from OpenAI or Google.
#Datenschutz #FBI #IT #KünstlicheIntelligenz #NSA #Security #Spionage #news
🆕 blog! “ActivityPub - Is it worth defending against replay attacks and message/signature time skew?”
Here's a problem that I've found with ActivityBot - my little ActivityPub server. Sometimes it receives messages which were originally sent months ago. Why does that happen and is it risky to accept and…
👀 Read more: https://shkspr.mobi/blog/2026/09/activitypub-is-it-worth-defending-against-replay-attacks-and-message-signature-time-skew/
⸻
#ActivityBot #ActivityPub #http #security
Switzerland launches open-source workplace for 3,000 employees
The Swiss Federal Chancellery is launching a program for sovereign workplace software. Around 3,000 employees are expected to use it.
#Datenschutz #DigitaleSouveränität #IT #Security #Microsoft #Netzpolitik #OfficeSuite #OpenSource #Software #news
GrapheneOS plans its own messenger solution with RCS and E2EE
GrapheneOS plans its own messenger solution with RCS support and end-to-end encryption. In addition, outdated AOSP default apps are to be replaced.
#Android #Datenschutz #GrapheneOS #IT #Messaging #Motorola #Security #news
Linux Snippets #11: Run It Once, Contain It, Forget It
Some jobs are too important for nohup, yet far too temporary to deserve permanent accommod
https://schulz.dk/2026/09/08/linux-snippets-11-run-it-once-contain-it-forget-it/?utm_campaign=blogpost&utm_medium=twitter&utm_source=twitter
#cli #linux #security #shell
BSI erklärt ersten Angriffsvektor auf Berliner Behörden
Erst Phishing, dann ein Fake-Captcha und ein Terminal-Befehl – so einfach lief nach ersten Analysen die Cyberattacke auf Berlin ab.
#Cybercrime #IT #Journal #PowerShell #Ransomware #Security #news
I watched the 2hr video this morning. Things are *so so so bad*, it is unbelievable. #LG is just exemplaric of what happens all over the place. In the video a whole network of complicit corporations is exposed.
https://www.youtube.com/watch?v=6IFVTcM28KA
CC @EUCommission See toot above ☝️ .. Speed up regulation and enforcement please, before it is too late.
#Freedom #Democracy #technology #privacy #security #SurveillanceCapitalism #TechnoFascism
This is why I always isolate my smart home devices on a separate guest network.
Many modern routers allow you to enable "client isolation" or "AP isolation" on the guest band, which ensures that connected devices can access the internet but cannot see or communicate with each other, nor with your main private network.
Smart plugs, bulbs, and cameras often have weaker security than computers or phones. If a malicious actor hacks one smart device, client isolation stops them from moving laterally to your laptop, phone, or NAS drive.
Overall, it prevents devices from scanning your local network to snoop on your private traffic or personal files. So even sneaky and greedy corporations like LG see and know nothing you don't want them to see or know.
You can still get full remote control of your smart home via the cloud — if that is what you're doing — without sacrificing your home network's overall security perimeter.
Post 1 of 2
"EU Age Verification Project Mandates Hardware-Bound Attestation"
"Flock Pitched a Plan To Turn Uber and Lyft Drivers Into Roaming Surveillance Vehicles"
"Illinois Just Told Every Operating System to Start Reporting Your Kid’s Age"
"Meta’s $17 Billion Settlement is a Bad Deal for Teens and All Social Media Users"
Check out the August news roundup for the full list of headlines.
https://theprivacycloud.substack.com/p/august-2026-privacy-news-roundup
Reading this, people could actually think Anthropic helps them keeping their data safe. However you still have to trust Anthropic itself that has access to all your data when using their AI or am i misreading it?
https://www.anthropic.com/news/enterprise-frontier-safeguards
#AI #Anthropic #EFS #privacy #security
Porting issues: GrapheneOS advises against buying the Pixel 11
The GrapheneOS team advises against buying the Pixel 11 if users want to flash the custom ROM onto the device. An important security component is missing.
#Android #Datenschutz #Google #GrapheneOS #IT #Mobiles #Security #Sicherheitslücken #news
Zoom on Linux sucks. Well, yes, I know Zoom suck in general but so many work/care related meetings I need to attend use it -- but for me the last few months, it's breaking by freezing on joining/adjusting settings, or booting me at being assigned to a breakout room, and this is via all kinds of installation methods on Linux (software centre, terminal, Snap, Flatpak etc) and even the guidance out there about fixes for Debian-based distros hasn't helped. It's a good thing I don't host workshops on Zoom these days, but when I do again, an open source, privacy-respecting alternative that provides live captioning would be great (feel free to share your recommendations!) #Zoom #Linux #VideoMeetings #VideoConferencing #accessibility #privacy #security
@futurebird I do , my neighbour do , most homes on my lock has a #security camera it used to not be like this but people have less trust in strangers then they used to
@futurebird it depends on risk & if you value #security or #privacy more & many people feel at risk enough to put security first
The way chosen by the United States was plainly marked by a few clear precepts, which govern its conduct in world affairs.
First: No people on earth can be held, as a people, to be enemy, for all humanity shares the common hunger for peace and fellowship and justice.
Second: No nation’s security and well-being can be lastingly achieved in isolation but only in effective cooperation with fellow-nations.
Third: Any nation’s right to form of government and an economic system of its own choosing is inalienable.
Fourth: Any nation’s attempt to dictate to other nations their form of government is indefensible.
And fifth: A nation’s hope of lasting peace cannot be firmly based upon any race in armaments but rather upon just relations and honest understanding with all other nations.
In the light of these principles the citizens of the United States defined the way they proposed to follow, through the aftermath of war, toward true peace.
Dwight David Eisenhower (1890–1969) American general, US President (1953–61)
Speech (1953-04-16), “The Chance for Peace,” American Society of Newspaper Editors, Hotel Statler, New York City
More about this quote: wist.info/eisenhower-dwight/28…
#quote #quotes #quotation #qotd #eisenhower #dwighteisenhower #dwightdeisenhower #America #armsrace #autonomy #control #cooperation #defense #diplomacy #domination #enemy #foreignpolicy #humanity #imperialism #independence #isolationism #military #neighbor #security #sovereignty
Gemini API is no better. sometimes ago I went to create an APi key, and it said that the attempt looked suspicious. which is funny because no one had hacked into my account. I looked at my accounts logs, everything was good. plus, I have 2FA , Google advanced protection turned on, etc, etc. and I don't have a cookie credential theft.
what the fuck is going on?
cPanel Patches CVE-2026-65643 Root Code Execution Flaw
https://www.cyberkendra.com/2026/08/cpanel-patches-cve-2026-65643-root-code.html
#security #cpanel #update #infosec #webhosting
Next.js Patches Two Critical RCE Flaws in 15.5.24, 16.3.3
https://www.cyberkendra.com/2026/08/nextjs-patches-two-critical-rce-flaws.html
#security #nextjs #Vercel
What a character. I loved the book, and Cliff Stoll is delivering masterfully here in this talk:
AI-generated passwords look like they would be bombproof. But tech writer Kim Key discovered just how easy the repetitive character sequences are to hack. Read more from PC Mag:
@PrivacyDigest Don't forget to install the same proprietary spying apps from the same abusing companies, but with a different account. Surely they won't track your device model and IP to add more data to the same unique personal profile. Much #privacy such #security
when they come asking for user identities and data at arcanechat.me
we don't even have any billing information since it is all completely anonymous and free
I need to go out and stare at moss in the forest before getting back to your message
#ArcaneChat #privacy #security #encryption #anonymity #family #digitalindependence #Europe #European #android #openSource
🔴 Apple sent mercenary spyware threat notifications to users in 110 countries, and the alert now appears on the iPhone Lock Screen.
Read Details- https://www.cyberkendra.com/2026/08/apple-threat-notification-mercenary-spyware.html
𝗛𝗮𝘃𝗲 𝗜 𝗯𝗲𝗲𝗻 𝗽𝘄𝗻𝗲𝗱?:
https://thewhale.cc/posts/have-i-been-pwned
Check if you have an account that has been compromised in a data breach.
WIRED - The Latest in Technology, Science, Culture and Business [Unofficial] » 🌐
@wired.com@web.brid.gy
Flock’s surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by some police, to confirm it goes much further than tracking license plates.
A neat security vulnerability in Python caused by str.lower(). Also includes lots of RFCs so I’m having a good time :)
https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability
WIRED - The Latest in Technology, Science, Culture and Business [Unofficial] » 🌐
@wired.com@web.brid.gy
After Noel Pichardo called out his city's embrace of Flock surveillance cameras, he was subjected to five internal affairs investigations in less than two years.
Meet #ArcaneChat
No phone numbers required for registration.
No strangers discovering and contacting your family members.
All your conversations end-to-end encrypted.
it is magic! ✨
#privacy #security #family #encryption #autonomy #europe #european #android
We’ve all been there before — waiting in the lobby for your dentist appointment and thinking “I’ll just log in to my banking app real quick.” Well, think twice. Hackers are targeting Wi-Fi networks at hotels and other places in ever sneakier ways. PC World has more, including tips to avoid getting hacked on public Wi-Fi:
A quick look at zero-knowledge proofs
https://bernsteinbear.com/blog/zkp/
Comments: https://news.ycombinator.com/item?id=49303776
#HackerNews #zero-knowledge-proofs #cryptography #privacy #security #technology