home.social

Search

8 results for “securepaul”

  1. I'd like to announce two new libseccomp releases today: libseccomp v2.5.6 which is a minor maintenance release to the v2.5.z release stream, and libseccomp v2.6.0 which is a new feature release for libseccomp. More details in the link below, but libseccomp v2.6.0 adds support for new architectures, transactional filter updates, and more. Give it a try, you'll like it :)

    github.com/seccomp/libseccomp/

  2. A new minor release of libseccomp, version 2.5.5, is out with support for Linux v6.7-rc3's syscall table.

    github.com/seccomp/libseccomp/

  3. 🔐 Password Security Tip

    Using simple passwords like your name or birthdate makes your accounts easy targets for hackers. A strong password should be long, random, and unique for every account you

    Instead of trying to create and remember complex passwords yourself, you can use SecureVault Password

    Download the app play.google.com/store/apps/det

    #cybersecurity #passwordsecurity #passwordgenerator #passwordmanager #privacyprotection #onlineprivacy #securitytips #digitalsecurity #internetsecurity

  4. 🔐 Password Security Tip

    Using simple passwords like your name or birthdate makes your accounts easy targets for hackers. A strong password should be long, random, and unique for every account you

    Instead of trying to create and remember complex passwords yourself, you can use SecureVault Password

    Download the app play.google.com/store/apps/det

    #cybersecurity #passwordsecurity #passwordgenerator #passwordmanager #privacyprotection #onlineprivacy #securitytips #digitalsecurity #internetsecurity

  5. A really great list & explanation of several secure & private tools.

    ▶️ Use These Before They're Banned: 7 Encrypted Services - TechLore
    youtube.com/watch?v=USNy6fwJyM
    #VPN #securemail #privatemessaging

  6. @pake_preacher : I forgot the details of PAKE and SRP, but in the end the most secure client authentication requires:

    1️⃣ Strong, long term, human comprehensible, *serving endpoint* authentication;
    *AND*
    2️⃣ TLS channel binding (enforcing known endpoints).

    (Apart from those, both serving endpoint AND client MUST be trustworthy).

    🚨 The -corrupt- CA/B forum breaks 1️⃣ by:
    a) Advocating anonymous Domain Validated certificates, which render secure account creation IMPOSSIBLE;
    b) Continuously decreasing certificate lifetime.

    🚨 Furthermore, "legitimate" MitM's * break 2️⃣.

    * Man in the Middle, like on-device virusscanners and firewalls that "open" TLS tunnels (both requiring installation of a dedicated root certificate) and proxies such as (definitely not limited to) Cloudflare and Fastly.

    😱 Passkeys enforce NEITHER 1️⃣ NOR 2️⃣.

    😱😱 Worse, because passkeys (or FIDO2 hardware keys) can be easily irretrievably "lost", servers typically provide WAY EASIER phishable authentication methods (such as "rescue codes").

    @cendyne @soatok @chazh

    #AitM #MitM #SecureOnlineAuthIsHARD #SecureAuthentication #OnlineAuthentication #Authentication #Impersonation #ChannelBinding #TLSchannelBinding #UTM #TLS #TLSinterception #TLSscanning #Proxy #Proxies #GoogleIsEvil #CloudflareIsEvil