home.social

#encrypt — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #encrypt, aggregated by home.social.

  1. Światowy Dzień Backupu – dlaczego warto zadbać o bezpieczeństwo swoich kopii zapasowych? Według opublikowanego w 2025 przez IBM Security badania „Cost of a Data Breach Report”, jeszcze 20 lat temu aż 45% wycieków danych wynikało z utraty urządzeń takich jak laptopy czy pendrive’y. Obecnie skala tego zjawiska... linuxiarze.pl/swiatowy-dzien-b #cybersecurity #encrypt #kingston #backup

  2. #TIL Always #encrypt all your #drives! In case the device fails, you then do not need to use drill and hammer to render the data unusable for someone else...

  3. Local-Only File Encryption with JavaScript.

    I've been exploring the #WebCryptoAPI and I'm impressed!

    When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

    I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

    Live Demo: dim.positive-intentions.com/?p

    Demo Code: github.com/positive-intentions

    About the Dim framework:
    positive-intentions.com/docs/c

    IMPORTANT NOTES (PLEASE READ!):
    * This is NOT a product. It's for #testing and #demonstration purposes only.
    * It has NOT been reviewed or audited. Do NOT use for sensitive data.
    * The password encryption currently uses a hardcoded password. This is for demonstration, not security.
    * This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

    #Encryption #Cryptography #JavaScript #Frontend #Privacy #Security #WebDevelopment #Coding #Developer #Tech #FOSS #OpenSource #GitHub #MastodonDev #Programming #WebStandards #FileSystem #WebAPI #ProofOfConcept

  4. Как защитить ключи LUKS с помощью Рутокен ЭЦП 3.0 и алгоритмов ГОСТ Р 34.10-2012. Часть 4

    Безопасная эксплуатация ноутбуков, или Защита пользовательского ключа с помощью алгоритмов ГОСТ Р 34.10-2012 В третьей части мы настроили защиту мастер-ключа с помощью USB-токена, используя RSA, но теперь мы перейдем на алгоритмы ГОСТ Р 34.10-2012. Жаркие. Зимние. Твои. А еще они основаны на более перспективных эллиптических кривых, которым не нужны такие большие ключи, чтобы обеспечить более высокий уровень безопасности.

    habr.com/ru/companies/aktiv-co

    #linux #luks #полнодисковое_шифрование #рутокен #plymouth #openssl #pkcs11 #encrypt #bitlocker #гост_34102012

  5. Как защитить ключи LUKS с помощью Рутокен ЭЦП 3.0 и алгоритмов ГОСТ Р 34.10-2012. Часть 3

    Безопасная эксплуатация ноутбуков, или Защита пользовательского ключа с помощью USB-токена на примере Рутокен ЭЦП 3.0 Из второй части мы узнали, как настроить загрузку компьютера таким образом, чтобы для разблокирования системного диска использовались ключи, размещенные на внешнем USB-накопителе. Однако при краже компьютера вместе с этим накопителем злоумышленник сможет получить доступ к данным так, как если бы они не были защищены вовсе, поэтому наиболее привлекательным способом решения поставленной задачи видится использование USB-токенов и смарт-карт, таких как Рутокен ЭЦП 3.0 или JaCarta-2 ГОСТ. Токены представляют собой защищенные микроконтроллеры со встроенной энергонезависимой памятью, поэтому способны выполнять все вычисления самостоятельно без использования ресурсов центрального процессора, не допуская копирование закрытого ключа с устройства, что обеспечивает максимально высокий уровень безопасности.

    habr.com/ru/companies/aktiv-co

    #linux #luks #полнодисковое_шифрование #рутокен #plymouth #rsa #openssl #pkcs11 #encrypt #bitlocker

  6. Introducing #EncryptItAlready

    Today, we’re launching #Encrypt It Already, our push to get companies to offer stronger #privacy protections to our data and #communications by implementing end-to-end #encryption. If that name sounds a little familiar, it’s because this is a spiritual successor to our 2019 campaign, #FixItAlready, a campaign where we pushed companies to fix longstanding issues.
    #e2ee #security @eff

    eff.org/deeplinks/2026/01/intr

  7. How to #encrypt your PC's disk without giving the keys to #Microsoft

    In early 2025, Forbes reports, investigators at the #FBI served Microsoft with a #warrant seeking the #BitLocker #encryption recovery keys for several laptops it believed held evidence of fraud in Guam's COVID-19 unemployment assistance program. And Microsoft complied with the FBI's request.
    #privacy #security

    arstechnica.com/gadgets/2026/0

  8. Upcoming Changes to Let’s #Encrypt #Certificates - #API Announcements - #LetsEncrypt Community Support

    Let’s Encrypt is introducing several updates to the certificates we issue, including new #rootCertificates , deprecation of #TLS client #authentication , & shortening certificate lifetimes. To help roll out changes gradually, we’re making use of ACME profiles to allow users to have control over when some of these changes take place. For most users, no action required

    community.letsencrypt.org/t/up

  9. Mich würde interessieren, welcher Anteil der Fediverse Nutzer ihre e-Mails mit OpenPGP oder S/MIME signieren oder verschlüsseln.

    Bitte gerne teilen/boosten.

    ---------------

    I'd be interested to know what percentage of Fediverse users sign or encrypt their e-Mails with OpenPGP or S/MIME.

    Please share/boost.

    #email #security #sign #encrypt #openpgp #smime

  10. Единый SSL, или Автоматизация Let's Encrypt на HAProxy

    Привет, Хабр! На связи Алексей Холодаев из Cloud4Y. Наверняка вам знакома типичная архитектура — несколько бэкенд-серверов, один HAProxy на входе и куча поддоменов — app.example.com, api.example.com, admin.example.com. Классический подход к SSL заставляет вас либо покупать дорогой Wildcard-сертификат, либо мучительно поддерживать отдельные сертификаты для каждого поддомена на каждом бэкенде… А что, если я покажу вам способ получше? Давайте настроим получение и, что критично, полностью автоматическое продление одного SSL-сертификата от Let's Encrypt прямо на HAProxy. Этот единственный сертификат будет защищать все ваши поддомены сразу. Больше не нужно возиться с SSL на каждом бэкенде — весь трафик шифруется и расшифровывается на балансировщике, а до бэкендов идёт уже по защищённому внутреннему каналу.

    habr.com/ru/articles/959470/

    #ssl #sslсертификат #автоматизация #haproxy #encrypt

  11. Ребят, никто не знает программу для личного дневника? Вот как будто взяли телеграм, и оставили там только Сохранённые. Все полностью автономно, не зависящие от сторонних сервисов с шифрованием.
    #encrypt #note #android

  12. File Encryption with JavaScript.

    I've been exploring the #WebCryptoAPI and I'm impressed!

    When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

    I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

    Live Demo: dim.positive-intentions.com/?p

    Demo Code: github.com/positive-intentions

    About the Dim framework:
    positive-intentions.com/docs/c

    IMPORTANT NOTES (PLEASE READ!):
    * This is NOT a product. It's for #testing and #demonstration purposes only.
    * It has NOT been reviewed or audited. Do NOT use for sensitive data.
    * The "password encryption" currently uses a hardcoded password. This is for demonstration, not security.
    * This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

    #Encryption #Cryptography #JavaScript #Frontend #Privacy #Security #WebDevelopment #Coding #Developer #Tech #FOSS #OpenSource #GitHub #MastodonDev #Programming #WebStandards #FileSystem #WebAPI #ProofOfConcept

  13. I've written down the steps to #encrypt your existing #email and import it into Mailbox.org (but it should work for other providers as well), in order to have a zero-knowledge encrypted #mailbox:

    https://kedara.eu/encrypting-old-emails

    It took a lot of effort to figure everything out, so I hope it'll save you some time. If you have any feedback after reading the article, please let me know.

    #blogpost #privacy #blaugust #blaugust2025 #mail #mailboxorg

  14. 81 #Proxy Hosts avec 1 seul certificat Let's #Encrypt #DNS Challenge ✔️

  15. Kingston IronKey D500S – pierwszy na świecie pendrive z szyfrowaniem sprzętowym zgodny z TAA, FIPS 140-3 poziomu 3 i zaufanym łańcuchem dostaw. Celem podczas projektowania IronKey D500S w 2020 roku, było stworzenie najlepszego w swojej klasie nośnika szyfrowanego sprzętowo z 256-bitowym kodowaniem XTS-AES i najnowszym standardem bezpieczeństwa NIST, FIPS 140-3 Level 3. linuxiarze.pl/kingston-ironkey #kingston #pendrive #linux #encrypt

  16. IronCore has just announced its ability to #encrypt training data and use that encrypted data to build models, which can only be run with the proper key. Bring your own #AI framework, only with #privacy and #security layered in.
    apnews.com/press-release/ein-p

  17. Hoy aprendí sobre el algoritmo de hash #bcrypt, basado en el cifrador de bloques #Blowfish, revisando un artículo de @andrea_navarro sobre extensiones de #Flask... particularmente sobre las extensiones de seguridad.

    Y acabo de descubrir que es uno de los algoritmos soportados para la creación de passwords en GNU/Linux :D

    Habrá que hacer algunos experimentos.

    #gnu #linux #cryptography #criptografía #ciberseguridad #infosec #encrypt #hash #python #flask

  18. Let's #Encrypt rolls out free IP address #certificates • The Register

    Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

    It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
    #security #tls #ssl #privacy

    theregister.com/2025/07/03/let

  19. File encryption with a browser.

    I've been exploring the #WebCryptoAPI and I'm impressed!

    When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

    I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

    Live Demo: dim.positive-intentions.com/?p

    Demo Code: github.com/positive-intentions

    Hook Code: github.com/positive-intentions

    IMPORTANT NOTES (PLEASE READ!):
    * This is NOT a product. It's for #testing and #demonstration purposes only.
    * It has NOT been reviewed or audited. Do NOT use for sensitive data.
    * The "password encryption" currently uses a hardcoded password. This is for demonstration, not security.
    * This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

    #Encryption #Cryptography #JavaScript #Frontend #Privacy #Security #WebDevelopment #Coding #Developer #Tech #FOSS #OpenSource #GitHub #MastodonDev #Programming #WebStandards #FileSystem #WebAPI #ProofOfConcept

  20. 2 #CertificateAuthorities booted from the good graces of #Chrome

    #Google says its Chrome browser will stop trusting certificates from two certificate authorities after “patterns of concerning behavior observed over the past year” diminished trust in their reliability.

    The 2 orgs, #Taiwan -based #ChunghwaTelecom & #Budapest -based #Netlock , are among the hundreds of cert auth trusted by Chrome & most other #browsers to provide digital certificates that #encrypt traffic

    arstechnica.com/security/2025/

  21. THE BLOODY #PIRATE MANIFESTO
    "No #ads. No #VIP. #No god. Just seed.

    Welcome to the Age of Monetized #Piracy.

    Where “#free” comes with cookies,
    Where “#anonymous” means “newsletter,”
    Where every #pirate flag has a price tag sewn in.

    You wanted to sail the high seas
    They sold you a lifeboat subscription with #ads.

    🦷 RULE #1:
    If you make money off #piracy you are the #Navy.

    #TARGETS:

    Ad-plastered “free streaming” sites
    → You click "Play", they load 9 #JavaScript #miners and your ex’s #Facebook ad.
    → Solution: #Kill their #revenue. #uBlock, #TamperMonkey, Empty.gif carpet #bombing.

    VIP #Pirate #Accounts
    → They sell stolen #Netflix access like it’s a f***ing bottle service.
    → Solution: #Leak it. #Fork it. #Burn it.

    #Darknet Pirate Resellers
    → "Premium Ebook Packs - Only $29 #BTC"
    → Solution: #Doxx. #Spoof. #Blacklist.
    (They sell what should be holy. Purify with fire.)

    #FAKE #LIBRARIES ARE NOT #LIBERATION.

    "#PDF download" — 9 popups later, your #RAM is crying.
    "Buy 3 #EPUBs, get 1 free" — you just colonized knowledge.
    "#DMCA takedown coming 😭" cry #harder, #bitch.

    #Archive it. #Mirror it. #Share it. Don't sell it.

    REAL #PIRATES DON’T RUN #ADS.

    They #seed.

    They #encrypt.

    They #disappear.

    Every time you monetize piracy, an #FTP server #dies in a basement.

    THE #FINAL #RULE:

    “If your #piracy has a #profit model,
    then our #piracy will include you.”

    #Ads? Nuked.
    #Subscriptions? Hijacked.
    #Privacy policies? Weaponized.

    You are not a user. You are a bullet.

    “You wanted #torrent #freedom.
    They gave you streaming #debt.”
    Now take it back. With #fire.

    #realpiratesburneachother