Just received this phone phish. I suppose there are people who fall for this, but hopefully not many. I have heard that some of these are waiting for a "yes" confirmation, but I'm doubtful what just that could open you up to. Best advice is DO NOT RESPOND; HANG UP.

Obvious recording goes:

Hello?

This is Sarah Lawson, from the department of Visa and MasterCard. How are you doing today?

Hello?

Can you hear me?

#cososec

Your Smart TV is probably ignoring your PiHole

https://labzilla.io/blog/force-dns-pihole

#cososec

Credit card stealing malware hides in social media sharing icons
https://www.bleepingcomputer.com/news/security/credit-card-stealing-malware-hides-in-social-media-sharing-icons/

#cososec

Maybe today's AWS outage and the recent CF outages should be telling us we need more diversity in CDN options.

I get that the infrastructure costs are... quite large, but look at what happens when do many things running on the same CDN go down all at once.

We better solve this soon.

#cososec

Beware of buying cryptocurrency on Paypal | Boing Boing
https://boingboing.net/2020/11/12/beware-of-buying-cryptocurrency-on-paypal.html

#cososec

Heads up: You should disable those "smart" compose, reply, etc. features in Google apps. They are a vector for Google to track you.

How to Turn Off Gmail's 'Smart' Features
https://lifehacker.com/turn-off-gmails-smart-features-to-avoid-tracking-1845691806 nosanitize

#cososec​

FTR, I think ephemeral auto-deleting posts are a good thing... in an encrypted MUC app. On public social media, I'm not so sure. -V

//

Twitter Debuts Fleeting, Which Is Tweeting But Auto-Deleting
https://gizmodo.com/twitter-debuts-coward-mode-1845698692

#cososec

Nothing to see here.

Apple lets some Big Sur network traffic bypass firewalls | Ars Technica
https://arstechnica.com/gadgets/2020/11/apple-lets-some-big-sur-network-traffic-bypass-firewalls/

#cososec

DNS cache poisoning, the Internet attack from 2008, is back from the dead | Ars Technica
https://arstechnica.com/information-technology/2020/11/researchers-find-way-to-revive-kaminskys-2008-dns-cache-poisoning-attack/

#cososec

Police Are Tapping Into Ring Cameras to Expand Surveillance Network In Mississippi - VICE
https://www.vice.com/en/article/v7memd/police-are-tapping-into-ring-cameras-to-expand-surveillance-network-in-mississippi

#cososec

US Government Continues Encryption War
https://blog.privacytools.io/us-government-continues-encryption-war/

#cososec

I think it's quite remarkable that this election went as smoothly as it did, given the enormous threat of foreign interference. Things could have gone very differently.

All of the federal agencies and anyone else in the infosec community who helped repel these attacks deserves our greatest thanks.

#cososec

All of these people engaging in intimidation on the roads must not know how easy it is to find out their names and addresses from their license plates.

Shh. Don't tell them.
#cososec

AP News: FBI warns ransomware assault threatens US healthcare system
https://apnews.com/article/politics-crime-elections-presidential-elections-548634f03e71a830811d291401651610

#cososec

That "random" picture that will get you tracked - Natalia Explains The Apocalypse
https://nataliaantonova.substack.com/p/that-random-picture-that-will-get

#cososec

This is one of the biggest reasons I use Authy. #cososec

Lost in TOTP
https://blog.sean-wright.com/lost-in-totp/

'Proud Boys' Emails Threatening Florida Voters Appear to Use Spoofed Email Address - VICE
https://www.vice.com/en/article/88a43b/proud-boys-emails-threatening-florida-voters-appear-to-use-spoofed-email-address

#cososec

Obscurix

Obscurix is an open source, live operating system based on Arch Linux that is heavily configured for privacy, security and anonymity. It safely forces all traffic through the Tor network, has support for many other networks such as I2P and Freenet and is hardened a lot for security. All data is lost at shutdown as it is run from RAM.

https://obscurix.github.io/

#cososec

That's kind of a lot. It has crossed into the 60s a few times. #cososec

Introducing Cloudflare One
https://blog.cloudflare.com/introducing-cloudflare-one/

#cososec