kravietz 🦇 @kravietz@social.privacytools.io

Ever seen an ad so accurate you think your phone is listening to you? While that's not the case, the reality is even creepier.

Here's how Google & Facebook collect your data & use it to auction you off to advertisers for profit: https://vimeo.com/352982094 https://video.buffer.com/v/5d516f99cb137e1e4e76fd38

🤔

PSA if your like me and would like to use a ROM but keep buying the wrong phones for lineage or /e/foundation. Now /e/foundation sells their own phones. They are coming out with a system where you could mail in your phones also. Here is the shop. https://e.foundation/e-pre-installed-refurbished-smartphones/

I spent all day looking for vulns in a IoT clothes dryer. What did I find?

* HTTPS to talk to backend service
* XMPP w/ STARTTLS to steam events
* Cert pinning so no MitM
* Android app obfuscated w/ no obvious backend URLs or certs
* Dryer runs an AP for initial setup w/ DHCP and HTTPS servers
* That HTTPS requires auth with a password printed on a label near the door

Best I could do was get the DHCP server to serve the same IP to every request.

Well done GE.

#defcon27 #iotvillage

My Recommended Services

Messenger: #Signal #Wire
Email: #ProtonMail #Tutanota
Search Engines: #DuckDuckGo #Qwant #Startpage
VPN: #ProtonVPN #NordVPN
Password Managers: #Bitwarden #KeePass
Browser: #Firefox #Brave #TorBrowser
SNS: #Mastodon
Cloud Storage: #Nextcloud #MEGA
Note: #StandardNotes
Encryption Software: #VeraCrypt #Cryptomator
Send File: #FirefoxSend
File Sync: #Syncthing

#Privacy #Security

~Open Source Security Tool of the Day~

#OSSTotD

Cabot is a free, open-source, self-hosted infrastructure monitoring platform that provides some of the best features of PagerDuty, Server Density, Pingdom and Nagios without their cost and complexity. 

https://github.com/arachnys/cabot/blob/master/README.md

A big step for privacy in Arizona! The state ruled that "police & govt agencies cannot obtain [a persons' online data] without a search warrant, [which] requires a showing of some criminal activity," reports @azcapmedia.

As it should be in all regions. https://azcapitoltimes.com/news/2019/07/31/court-rules-arizona-residents-have-right-to-internet-privacy/

Google Researcher: The iPhone Is Not Exactly a Paragon of Security

At Black Hat, a Google security researcher details numerous bugs in iMessage that could be exploited remotely without interaction from the victim.

https://www.pcmag.com/news/370065/google-researcher-the-iphone-is-not-exactly-a-paragon-of-se