#infosec

Cat 🐈‍⬛🛰️ @catbailey and family are still in the direst situation.

Cat has been out of work for almost a full year and no one is hiring in her fields. Their home is in foreclosure, all the bills are past due.

For now, about $1200 is needed to help pay off some of the past due bills and save storage.

And then there's the vehicle situation...

Please help if you can. Anything at all is appreciated.

🧡🧡🧡🧡🧡 🧡🧡🧡🧡🧡
Thank you to all who have helped Cat and family make it this far.

Thank you for the $200 recently donated via GFM! It really helped!!!
🧡🧡🧡🧡🧡 🧡🧡🧡🧡🧡

And please, please, PLEASE, hire Cat! Cat can do project management, writing, commissions, contract work, editing, and more. (ping Cat for more info)

Cat has a Ko-fi: https://ko-fi.com/catacruthachadh !
(Please do read and share Cat's Ko-Fi posts!)
Subscribe for unique subscriber-only stories and content.

cc: @mutualaid

Venmo/PayPal/CashApp are best, Ko-Fi PayPal is immediate and Stripe takes 1-2 business days, and GoFundMe ( which takes about a week ) is also appreciated and good for higher latency needs.

GoFundMe: https://www.gofundme.com/f/aid-for-cat-and-her-kids-in-crisis
PayPal: https://paypal.me/catalystediting
Ko-Fi: https://ko-fi.com/catacruthachadh
Venmo: @BlackCatHackers
CashApp: https://cash.app/$BlackCatOps

#MutualAidRequest #Infosec #HelpCatAndCo #GetFediHired #FediHire

🧬 Ethical question for the Fediverse: Do you have the right to upload your DNA if it exposes your non-consenting relatives?

In Episode 8, we argue that genetic privacy is collective. Your genome isn't a personal diary; it's a shared password for your entire family tree. By uploading it, you might be doxxing them to insurers and law enforcement.

Where do you draw the line?

🎧 Listen: https://impracticalprivacy.com

#Privacy #Ethics #Genealogy #Infosec #DNA

As I suspected it probably would be, my bug bounty submission of using an AI email summarizer was closed as being 'infeasible' and an 'acceptable risk' with AI.

But still - I think it's an interesting finding, so I have written it up thus: https://mike-sheward.medium.com/recruiting-google-geminis-email-summarizer-as-a-phishing-aid-417055295ba7

TL;DR = I discovered how you can use Google Workspace's Google Gemini Email Summarizer to make a phishing attack seem more convincing, because it summarizes hidden content.

#infosec #ai #llm

PSA: If you are running Laravel 12.x you should probably consider updating to 12.45 asap.

@Synchro has discovered and fixed a vulnerability with the remember me cookie, which may leak the password hash.

As I understand it (please correct me if I’m wrong!), I wouldn't consider this catastrophic (unless you disabled encrypted cookies, maybe) but I'd say you should prioritise fixing it nonetheless.

Personally I'm a little disappointed that this took Taylor almost a month to merge, and that it wasn't given any publicity by the team, but there we go …

#Laravel #infosec

New year, new password reset at work...

My new password is "NCSC advises against regular password expiry"

Actually TBF that was my old one, my new one is "NCSC advises against regular password expiry2"

#NCSC #passwords #InfoSec

Hello world.

I finally decided to park my digital dinosaur bones here on chaos.social.

I’ve been roaming the internet since 1996 and started breaking things around 2000, but honestly, after all these years, I still feel like I have no clue what I'm doing half the time.

I’m always up for a chat, so feel free to reach out if you want to talk shop or just complain about broken configs.

Currently tinkering with eInk devices

#introduction #demoscene #infosec #homelab #arteultra #fractalfm9 #0x90

Another NZ #DataBreach I'd missed - #Neighbourly! #InfoSec

The allegedly compromised data includes:
- Full names
- Email addresses
- Phone numbers
- Physical addresses and verified Neighborhood IDs
- GPS Coordinates (Latitude and Longitude)
- Biographies
- Account status details (isActive, isRegistered, isVerified)
- Private messages and forum posts (including subjects and body text)
- User timestamps (registeredAt, createdAt)

https://dailydarkweb.net/neighbourly-data-breach-150gb-of-user-data-and-messages-put-for-sale/