kravietz 🦇 @kravietz@social.privacytools.io
- OpenPGP
- 6F7B6BB9A9B632555E1A03C132AF1F39C4EE03F2
- Website
- https://krvtz.net
- Matrix
- @kravietz:krvtz.net
Polish expat into UK. Information security engineer. Caver & cave rescuer (thus the bat). NHS volunteer & blood donor.
Joined May 2019
Endurance racing is chess among equine sports. Requires a lot of planning and preparation, and the race takes plenty of time
Euston Park #uk #endurance #horse racing support doesn't come without benefits!
Spoofing #pgp and #smime digitally signed emails https://www.usenix.org/system/files/sec19-muller.pdf #cryptography
The more I read, the more incredible it looks!
https://meduza.io/en/feature/2019/08/15/295-feet-to-save-233-lives "Why the Russian cornfield landing was even harder to pull off than ‘the miracle on the Hudson’"
Breaking the encryption scheme of the Moscow internet voting system https://arxiv.org/abs/1908.05127 #cryptography
В московской системе голосования по Интернету нашли серёзные криптографические уязвимости https://arxiv.org/abs/1908.05127 @rf
@gabek precisely, it's a completely different story when I read about what they've done in general terms, and see actual CA people's testimonies...
kravietz 🦇
boosted
Ever seen an ad so accurate you think your phone is listening to you? While that's not the case, the reality is even creepier.
Here's how Google & Facebook collect your data & use it to auction you off to advertisers for profit: https://vimeo.com/352982094 https://video.buffer.com/v/5d516f99cb137e1e4e76fd38
Ban Driven Grouse Shooting #uk #wildlife
https://petition.parliament.uk/petitions/266770
Galileo GNS monitoring https://galmon.eu/ #galileo
kravietz 🦇
boosted
PSA if your like me and would like to use a ROM but keep buying the wrong phones for lineage or /e/foundation. Now /e/foundation sells their own phones. They are coming out with a system where you could mail in your phones also. Here is the shop. https://e.foundation/e-pre-installed-refurbished-smartphones/
@c1t1z3n0n3 @nikolal I had /e/ on my Nexus 5 but then upgraded to Pixel and /e/ ROM didn't flash so installed LineageOS for MicroG, works like a charm, zero Google apps. But will switch to /e/ when it works
kravietz 🦇
boosted
I spent all day looking for vulns in a IoT clothes dryer. What did I find?
* HTTPS to talk to backend service
* XMPP w/ STARTTLS to steam events
* Cert pinning so no MitM
* Android app obfuscated w/ no obvious backend URLs or certs
* Dryer runs an AP for initial setup w/ DHCP and HTTPS servers
* That HTTPS requires auth with a password printed on a label near the door
Best I could do was get the DHCP server to serve the same IP to every request.
Well done GE.
kravietz 🦇
boosted
My Recommended Services
Messenger: #Signal #Wire
Email: #ProtonMail #Tutanota
Search Engines: #DuckDuckGo #Qwant #Startpage
VPN: #ProtonVPN #NordVPN
Password Managers: #Bitwarden #KeePass
Browser: #Firefox #Brave #TorBrowser
SNS: #Mastodon
Cloud Storage: #Nextcloud #MEGA
Note: #StandardNotes
Encryption Software: #VeraCrypt #Cryptomator
Send File: #FirefoxSend
File Sync: #Syncthing
kravietz 🦇
boosted
~Open Source Security Tool of the Day~
Cabot is a free, open-source, self-hosted infrastructure monitoring platform that provides some of the best features of PagerDuty, Server Density, Pingdom and Nagios without their cost and complexity.
@nikolal @c1t1z3n0n3 LineageOS comes with no Google apps & no Play Store by default
- OpenPGP
- 6F7B6BB9A9B632555E1A03C132AF1F39C4EE03F2
- Website
- https://krvtz.net
- Matrix
- @kravietz:krvtz.net
Polish expat into UK. Information security engineer. Caver & cave rescuer (thus the bat). NHS volunteer & blood donor.
Joined May 2019
kravietz 🦇's choices:
