Nikola Lakić @nikolal@social.privacytools.io

Q: Why did Star Wars IV, V, and VI, precede Star Wars I, II, & III ?? A: Because in charge of sequence, Yoda was. -- via Bill Mullins

Worst DNS attacks and how to mitigate them

https://www.networkworld.com/article/3409719/worst-dns-attacks-and-how-to-mitigate-them.html

~Open Source Security Tool of the Day~

#OSSTotD

Anti-Adblock Killer helps you keep your Ad-Blocker active, when you visit a website and it asks you to disable.

http://reek.github.io/anti-adblock-killer/

'Go to bed, you'll feel better in the morning' is the human version of 'Did you turn it off and turn it back on again?'

US residents:

Jump on the Equifax leak claim wagon. You get $125 in the settlement, automatically. ALSO, you can be compensated at the rate of $25 per hour for time spend remediating their fuckup, and only have to provide documentation if you spent more than 10 hours unfucking them. The official claim site is https://www.equifaxbreachsettlement.com/

If you are using Firefox and YouTube seems slow to load you can speed it up (up to 5x) with this tweak in about:config.
-Open new tab and enter about:config (accept if prompted for warranty risk)
-Right click on any preference and go New>String
>As preference name copy/paste:
general.useragent.override.youtube.com
As preference value copy/paste:
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
For darkmode you can install Stylus addon and pick theme you like.

Still not sure about what 5G means for our privacy and security?

We wrote an article to help understanding this issue.

https://privacyinternational.org/long-read/3100/welcome-5g-privacy-and-security-hyperconnected-world-or-not

TIL: if you use “share my location with this site” in Firefox, your location is shared with that site and Google: https://www.google.com/privacy/lsf.html

Remote code execution vulnerability in VLC remains unpatched
https://www.zdnet.com/article/remote-code-execution-vulnerability-in-vlc-remains-unpatched/

The vulnerability is known to exist in the latest version of VLC on Windows, Linux, and Unix machines, but it is possible the bug is also present in past builds.

#privacy #security #vlc #vulnerability #infosec #unpatched #windows #linux #unix

So #GitLab Pages has finally rolled out their automatic #LetsEncrypt integration for hosted web sites. It's quite painless and automatically renews certs. So glad that I don't have to manually do this or maintain some brittle CI-based scripts anymore.

If you've got a GL-hosted site, take the next 90 seconds and go secure it!

#HTTPS #TLS #FOSS #FLOSS #FreeSoftware #OpenSource

~Open Source Security Tool of the Day~

#OSSTotD

rsp is a SSH client which implements SOCKS5 proxy feature of SSH protocol. Key feature of this implementation is use of multiple connections to overcome downsides of multiplexing many tunneled TCP connections in single SSH session. 

https://github.com/Snawoot/rsp