Removing your information from these databases should be a priority. #cososec

https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List

Anyone here at Hacker Summer Camp?
Maybe you might consider mentioning CoSo when social networks come up in discussion.

#BlackHat #cososec

People are losing more money to scammers than ever before.
Here's how to keep yourself safe.

https://apnews.com/article/scams-phishing-robocalls-facebook-marketplace-291255fc54f4bef161cb6155af562d96

#cososec

Looking for a great encrypted messenger that protects your privacy far better than Signal?

SimpleX Chat is what you're looking for. Several of us here have been using it for months. Highly recommended.

https://simplex.chat

#cososec

$5 billion Google lawsuit over ‘Incognito mode’ tracking moves a step closer to trial / Judge Yvonne Gonzalez Rogers denied Google’s push for a summary judgment in a lawsuit over the way it tracked internet activity even after users switched to ‘Incognito mode.’

https://www.theverge.com/2023/8/7/23823878/google-privacy-tracking-incognito-mode-lawsuit-summary-judgment-denied

#cososec

@rootsecdev
Welcome! It's good to see you here.
#cososec has a lot of content that may interest you.

Did you ever think about how posting current weather conditions could potentially reveal a lot about your location? This probably isn't a concern for most people, but if you are trying to remain anonymous online this could compromise you.

#cososec #osint

I posted earlier today (mistakenly) about Amazon being down. It turns out one of my network filter lists had updated and was causing my problem. Checked my #pi-hole logs, and it was blocking:

www.amazon.com
and
unagi-na.amazon.com

The first was obvious, but the second must be part of their regional CDN or something. Not sure why those domains were put on an ad filter list.

Anyway, lesson learned.
Always check your filters first, kids.

#InfosecFail
#cososec

Hackers manage to unlock Tesla software-locked features worth up to $15,000

A group of hackers have exposed an exploit that can unlock Tesla’s software-locked features worth up to $15,000.

Free heated seats and Full Self-Driving package, anyone?

https://electrek.co/2023/08/03/hackers-manage-unlock-tesla-software-locked-features/

#cososec

What's your hacker name? Reply below.
#cososec

MOVEit body count closes in on 400 orgs, 20M+ individuals
'One of the most significant hacks of recent years,' we're told

https://www.theregister.com/2023/07/20/moveit_victim_count/

#cososec

Serious question: Are there any legit reasons to be on darknets? Because I can't think of any reasons outside of doing illegal things and trying to catch the people doing those illegal things.

Just to be clear, I am not recommending all of you go test this theory for me. There's a lot of awful there, and you have to take certain steps to insulate yourself.

#cososec

Here’s a reminder to make your Venmo transactions private, courtesy of Clarence Thomas / Lawyers appearing before the Supreme Court sent money to a Clarence Thomas aide via Venmo, according to the aide’s profile. Don’t be like him.

https://www.theverge.com/2023/7/12/23792922/venmo-transactions-privacy-security-risks-clarence-thomas

#cososec

Who's down with WPA3?
Yeah, you know, me.

#cososec

Mastodon fixes critical “TootRoot” vulnerability allowing node hijacking

Most critical of the bugs allowed attackers to root federated instances.

https://arstechnica.com/security/2023/07/mastodon-fixes-critical-tootroot-vulnerability-allowing-node-hijacking/

#cososec

Watching a bunch of notable infosec accounts jumping on board the #Threads bandwagon makes me want to scream.

If you would expect anyone to carefully read privacy policies and app permissions, you'd think it would be these people.

They did the same thing with #Bluesky and I lost respect for those people when that happened. This one is even worse.

#cososec

#ThrowbackThursday
#cososec

I made a reference sheet that links to privacy policies for various social networks. The next time someone asks if their privacy is being protected by a certain network or app, you can point them here.

https://rentry.co/socialnetworkprivacy

#cososec
#cstips

#Threads has a very long list of requested app permissions. Screenshot below from Play store.

If you install this, you're opening yourself up to a lot of invasive data mining. Still think it's a good idea?
#cososec

For the new people, here are my top 5 hashtags, submitted for approval:

#cosomusic
#cosoclassical
#cosoteachers
#musictheory
#cososec