Avoid The Hack! / is on Nostr

An initiative promoting the intersection of internet #privacy and #cybersecurity for all users.

MOVED to infosec.exchange -> @[email protected]

Last Notes

2023-07-07 20:21:11

- reply

It looks like Meta could use the #fediverse to collect metadata on… a lot of people. In my opinion, it’s similar to the Facebook Pixel - which allows Meta to collect data on users who are off its platforms.
This could seem like no big deal (and I guess it could be), but let’s face it: Meta isn’t exactly #privacy friendly and has been accused (with proof) of abusing collected information.
#threads

2023-07-07 20:21:10

- reply

#threads also has a supplemental #privacy policy to the #meta privacy policy: (caution this is an Instagram link) https://help.instagram.com/515230437301944
There’s a section, “Information From Third Party Services and Users,” where it states “we collect information about Third Party Services and Third Party Users who interact with Threads.”
(Third Parties would naturally include other Fediverse instances and their users.)
Federated Fediverse platforms share some data, but this seems to be a whole other level.

2023-07-07 20:21:10

- reply

In this section of their #privacy policy, it’s stated “We collect information about the Third Party Services and a third party users who interact with threads…”
Interaction includes following #threads users, interacting with threads content, and especially threads users following/interacting with your “third party” content.
Data collected includes IP address, instance info, profile information
So, in theory, any interaction with a Threads user would subject you to this data collection…

2023-07-07 20:21:09

I’m not going to sit here and pretend like the current #fediverse without Threads is “perfect” for #privacy … But just look at the data #threads collects.
This is insane.
https://files.mastodon.social/media_attachments/files/110/674/023/151/058/300/original/2abb91f10572ff1d.jpeg

2023-06-24 17:12:00

Avoidthehack updates mobile browser recommendations.
Tried to simplify recommendations for #ios and #android, removing some previously recommended #browsers.
iOS: https://avoidthehack.com/best-privacy-browsers-ios
Android: https://avoidthehack.com/best-privacy-browsers-android
#privacy #security #opsec #privacymatters

2023-06-14 14:43:00

CISA Adds One Known Exploited #Vulnerability to Catalog
CVE-2023-27997 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Another zero-day possibly exploited in the wild.
#cybersecurity #infosec #security #update
https://www.cisa.gov/news-events/alerts/2023/06/13/cisa-adds-one-known-exploited-vulnerability-catalog

2023-06-05 15:32:55

- reply

@npub1q94…tm7y That’s awesome and I hope you’re proud of your great research. :) also as a side note… LOL at specializing in PUPs. I guess everything is possible.
Put me on the shortlist of notification for when it goes live. I would like to add considerable updates for my own post for adblocking, stressing the need to vet adblocking software.

2023-06-03 18:14:10

- reply

@npub1q94…tm7y A case where I absolutely do not want to be right.
In any case, thanks for your work. I like your posts. :)

2023-06-01 22:09:34

- reply

@npub1q94…tm7y thanks for the additional; I had read it when it was 18.
Honestly, if they take the same approach they do for the Play Store and their paid search ads, then they will probably only purge the reported/named ones. Doubt they will go hunting based on their track record.

2023-06-01 21:20:01

More malicious extensions in #Chrome Web Store
At least 18 different malicious extensions (as of 30 MAY and this post) identified by @npub1q94…tm7y
Remember extensions have privileged access to the browser (and data in the browser). Choose your extensions wisely... they could be #spyware or #malware in disguise.
#cybersecurity #infosec #security #opsec #privacy
https://palant.info/2023/05/31/more-malicious-extensions-in-chrome-web-store/

2023-05-18 17:50:01

Avoid the Hack: 6 Best Secure Messaging Alternatives to WhatsApp
Updated the secure messenger/#whatsapp alternatives.
Added @npub1mcg…zdpy
Added @npub1rut…xsk5
Introduced addition to criteria: #security audit of protocols.
What's the messaging app you use?
#opsec #privacy #privacymatters #encryption
https://avoidthehack.com/best-secure-messengers

2023-05-03 18:05:23

Some of you might have noticed I launched a Ko-Fi page. Some users have expressed wanting to tip/support without using affiliate links (totally understandable) in the past, so I set this up. It also let's me give extras!
Couldn't in my conscious mind use Patreon, despite it's popularity. I still haven't forgiven them for firing their entire #security team. 😱
https://ko-fi.com/avoidthehack/tiers
#cybersecurity #privacy

2023-04-12 15:38:00

iPhones hacked via invisible calendar invites to drop QuaDream #[0]
So, this has affected iPhones running iOS 1 to 14.
Backdated iCloud calendar invitiations are automatically added to user's calendar without notification... #[1] runs without user interaction.
Primarily weaponized against journalists, political figures as of posting.
#[2] #[3] #[4]
https://www.bleepingcomputer.com/news/security/iphones-hacked-via-invisible-calendar-invites-to-drop-quadream-spyware/