This is a pretty handy lookup tool.

https://dnsape.com/

#cososec

Earlier today [GitLab] experienced a "bot attack" leading to denial of service. @gitlab said the DoS was, ". . . a side effect of what is likely an attempt at a stealth bitcoin mining operation."
https://t.co/8O6iZKy66A https://t.co/u4v3obX6Db

#cososec

I just became unbound. It feels good.

#cososec

A list of tools @Bellingcat uses for verification and open source investigation. Updated regularly (see thread too). https://t.co/vtkxeNHQrm

#cososec

Signal Messenger Bug Lets Callers Auto-Connect Calls Without Receivers' Interaction

https://thehackernews.com/2019/10/signal-messenger-bug.html

#cososec

👋 Welcome, new CoSoNauts!

Time to crack those eggs: Upload a profile pic, fill out your profile and say hello. Follow @CoSoTips for help, or just ask.

Some tags to follow:
Infosec discussion at #cososec.
Music lovers and musicians: check out #cosomusic and #musictheory.
If you love good drinks, follow #caffeineclub #winetime #beerme #spirited and #mixmeup.
Animal lovers: #petsofcoso, #dogsofcoso, #catsofcoso.

We're glad you made it here. Enjoy the awesome, REAL conversation!

Just a GIF Image Could Have Hacked Your Android Phone Using WhatsApp

https://thehackernews.com/2019/10/whatsapp-rce-vulnerability.html

#cososec

👋 Welcome, new CoSoNauts!

Time to crack those eggs: Upload a profile pic, fill out your profile and say hello. Follow @CoSoTips for help, or just ask.

Some tags to follow:
Infosec discussion at #cososec.
Music lovers and musicians: check out #cosomusic and #musictheory.
If you love good drinks, follow #caffeineclub #winetime #beerme #spirited and #mixmeup.
Animal lovers: #petsofcoso, #dogsofcoso, #catsofcoso.

We're glad you made it here. Enjoy the awesome, REAL conversation!

^ #cososec

If possible, I'd like to avoid a political pileup. I'm just interested in the technical and legal aspects here.

Electronic door locks? No, thanks.
#cososec

https://twitter.com/cybergibbons/status/1176419262325501953?s=19

Cloudflare WARP is now out. It seems that to access their touted headline feature of routing traffic through their servers for a very fast mobile VPN experience, you need WARP+ data credits. You get credits through referrals, or you can pay $4.99/mo for unlimited data.

Speaking of those credits...

https://warp.plus/gu4xm

#cososec

Facebook is now doing online dating.
That smell you're detecting is a giant group of catfish.
#cososec

https://blog.f-secure.com/3-reasons-you-may-not-want-to-trust-facebook-dating/

Attention - Windows users:

Here is the best and simplest solution I've found to close many OS-based privacy and security loopholes all at once. I've been applying it to all of my Windows machines.
#cososec

https://getblackbird.net/

One word of caution:
Read the documentation to see what it disables by default - ex. One Drive, Cortana.

Someone else from CoSo recommended this to me while talking on another platform, but it slipped my mind. If it was you, please speak up so I can thank you.

Prevent SIM-Swapping Hackers From Stealing Your Phone Number—and the Rest of Your Identity

https://lifehacker.com/prevent-sim-swapping-hackers-from-stealing-your-phone-n-1838149833

#cososec

Israel accused of planting mysterious spy devices near the White House - POLITICO
https://www.politico.com/story/2019/09/12/israel-white-house-spying-devices-1491351

#cososec

Here's a look at one red teamer's kit. 14 is particularly interesting.

#cososec

https://blog.f-secure.com/a-red-teamers-tools-whats-in-toms-hacking-kit/

Exclusive: Feds Demand Apple And Google Hand Over Names Of 10,000+ Users Of A Gun Scope App

https://www.forbes.com/sites/thomasbrewster/2019/09/06/exclusive-feds-demand-apple-and-google-hand-over-names-of-10000-users-of-a-gun-scope-app/#55499d4d2423

#cososec

I keep reading about all these ransomware attacks where victims paid, because they didn't have backups.

Here's a thought:

Run regular backups.

It's not hard, nor is it expensive. Certainly cheaper that paying crypto ransom.

Automated nightly backups to local and/or off-site storage can be handled by any number of easy-to-run utilities.

Run monthly backups to optical media. Quality discs are reliable for decades. You can't say that about hard drives or tape.

#cososec

Someone I have great respect for pointed me to this thread.
#cososec

https://twitter.com/slanderable/status/1164266602122100736?s=19

#cososec

Any of you ever use this? I've had pi-hole on my home network for a while now, but this sounds like an interesting way of using it as a service.

https://www.nextdns.io/