#compsec — Public Fediverse posts

You Have Been LaTeXpOsEd: A Systematic Analysis of Information Leakage in Preprint Archives Using Large Language Models
https://arxiv.org/abs/2510.03761

Research uncovered thousands of personally identifiable information (PII) leaks, GPS-tagged EXIF files, publicly available Google Drive and Dropbox folders, editable private SharePoint links, exposed GitHub and Google credentials, and cloud API keys. They also uncovered confidential author communications, internal disagreements, and conference submission credentials, exposing information that poses serious reputational risks to both researchers and institutions.

(Real-world credential leakages
from comments are manually reviewed and verified)

#netsec #compsec #science #research #arxiv

@fesshole
I guess it's all part of natural selection weeding out the idiots who go with default passwords.
#compsec

@pawanjswal
On a related subject, has anyone else noticed that #Proton seem to be blocking their own Onion address today?!
🤪
#JustSaying #email #ProtonMail #compsec #comsec

@pawanjswal
On a related subject, has anyone else noticed that #Proton seem to be blocking their own Onion address today?!
🤪
#JustSaying #email #ProtonMail #compsec #comsec

I think my mail greylisting saved me from a scam.

I received lot of mails today about accounts someone supposedly created for my mail address on dozens of sites and about as many newsletter subscription confirmation mails.

I also received two mails from PayPal, that a SEPA direct debit mandate had been confirmed. The PayPal mail arrived 8 minutes before the first of the flooded mails and 12 minutes before the last arrived.

Obviously this flood was supposed to hide the PayPal mail.

#compsec

@jos1264 ☝️ #CompSec

Hmmm ... 🤔

Commercial Vehicle Electronic Logging Device (ELD) Security: Unmasking the Risk of Truck-to-Truck Cyber Worms [PDF] https://www.ndss-symposium.org/wp-content/uploads/vehiclesec2024-47-paper.pdf #paper #compsec #security #malware #ELD

GTFOBins is a curated list of #Unix binaries that can be used to bypass local #security restrictions in misconfigured systems https://gtfobins.github.io/ #compsec

Tiens... Des cyber-mercenaires russes qui débarquent aux Émirats.

→ https://reflets.info/articles/cyber-mercenaires-russes-le-peril-rouge

#Russie #EAU #Infosec #cybersecurity #compsec

maybe some #compsec #infosec people could weigh in on this, but wouldn't it be nice if you had a "stub" (for lack of a better word) which you append or prepend to all your password manager generated passwords, but which they didn't actually store?
For example, let's say my password manager generates a new amazon password of pwd123, but I append Wink69 to all my passwords, so I tell amazon that my actual password is pwd123Wink69.
If my password vault is compromised (looking at no-one in 1/n

Is the concern over TikTok and nefarious use by China a serious concern? Is the danger more, less or the same as any other privately-owned social media platform?
#TikTok
#Biden
#China
#Technology
#compsec

hey #infosec people, One area not getting the same coverage from the other site are national certs. I can see the EU's https://mastodon.ie/@[email protected]rk.europa.eu but not having luck locating any others. If you know of any then perhaps leave a reply with a link. Much appreciated. #cyber #compsec #infosec #CERT #nationalCyber

"Cyber-liability insurance comes with a catch, however: It may make you more vulnerable to a ransomware attack. When cyber-criminals target cyber-insurance companies, they then have access to a list of their insured clients, which cyber-criminals can then use to their advantage to demand a ransom payment that mirrors the limit of a company’s coverage."

"Attacker Target Selection" at:

https://www.cs.columbia.edu/~smb/blog/2021-07/2021-07-05.html

#compsec