#tls — Public Fediverse posts

Some of the inner workings of @limeleaf 's https://probes.dev is using Go's net/http/httptrace package which gives you very handy information.

https://blainsmith.com/articles/httptrace-with-go/

#GoLang #HTTP #DNS #TLS #TCP #TTFB #Tracing

LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

https://www.europesays.com/at/179243/ Android 17 und iOS 26.5: KI-Phishing, Trojaner und Quishing – Hersteller kontern #AI #Android #ARTIFICIALINTELLIGENCE #AT #Austria #Cyberkriminalität #identität #iOS #KI #kryptografie #KünstlicheIntelligenz #Österreich #Passkeys #Phishing #QrCode #Science #Science&Technology #Sicherheit #Smartphone #SSH #Technik #Technology #Tls #Trojaner #VPN #Wissenschaft #Wissenschaft&Technik

#nginx 1.31.1 (dev) has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.31.1 (dev) has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.31.1 (dev) has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.31.1 (dev) has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.30.2 has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.30.2 has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.30.2 has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

#nginx 1.30.2 has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) https://nginx.org/

Let's Encrypt support landed on Ubiquiti. Finally!

#acme #letsencrypt #tls #ubiquiti #unifi

https://youtu.be/EvUwr9GUXtg

MTProxy jumper — делаем автоматическое переключение прокси-серверов Telegram

В свете последних новостей вокруг Telegram провела некоторые эксперименты с протоколом MTProxy. Основная идея: сделать ПО, выглядящее для Telegram-клиента как MTProxy-сервер, и осуществляющее дальнейший обмен данными со сторонними MTProxy-серверами. В идеале, эти сторониие серверы должны обнаруживаться автоматически, и переключение между ними тоже должно происходить автоматически.

https://habr.com/ru/articles/1039034/

#Telegram #MTProto #TLS #прокси #DPI #блокировка #MTJumper

MTProxy jumper — делаем автоматическое переключение прокси-серверов Telegram

В свете последних новостей вокруг Telegram провела некоторые эксперименты с протоколом MTProxy. Основная идея: сделать ПО, выглядящее для Telegram-клиента как MTProxy-сервер, и осуществляющее дальнейший обмен данными со сторонними MTProxy-серверами. В идеале, эти сторониие серверы должны обнаруживаться автоматически, и переключение между ними тоже должно происходить автоматически.

https://habr.com/ru/articles/1039034/

#Telegram #MTProto #TLS #прокси #DPI #блокировка #MTJumper

MTProxy jumper — делаем автоматическое переключение прокси-серверов Telegram

В свете последних новостей вокруг Telegram провела некоторые эксперименты с протоколом MTProxy. Основная идея: сделать ПО, выглядящее для Telegram-клиента как MTProxy-сервер, и осуществляющее дальнейший обмен данными со сторонними MTProxy-серверами. В идеале, эти сторониие серверы должны обнаруживаться автоматически, и переключение между ними тоже должно происходить автоматически.

https://habr.com/ru/articles/1039034/

#Telegram #MTProto #TLS #прокси #DPI #блокировка #MTJumper

MTProxy jumper — делаем автоматическое переключение прокси-серверов Telegram

В свете последних новостей вокруг Telegram провела некоторые эксперименты с протоколом MTProxy. Основная идея: сделать ПО, выглядящее для Telegram-клиента как MTProxy-сервер, и осуществляющее дальнейший обмен данными со сторонними MTProxy-серверами. В идеале, эти сторониие серверы должны обнаруживаться автоматически, и переключение между ними тоже должно происходить автоматически.

https://habr.com/ru/articles/1039034/

#Telegram #MTProto #TLS #прокси #DPI #блокировка #MTJumper

Laravel Lang Compromised with RCE Backdoor Across 700+ Versions

Community-maintained Laravel Lang packages were compromised with remote code execution backdoors affecting over 700 versions across multiple repositories including laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions. The attack involved coordinated rapid tag publishing on May 22-23, 2026, suggesting organization-level credential compromise. A malicious helpers.php file was automatically executed via Composer's autoloader, deploying a sophisticated cross-platform information stealer. The second-stage payload systematically harvested credentials from cloud infrastructure, Kubernetes, CI/CD systems, browsers, password managers, cryptocurrency wallets, VPN clients, and local configurations. Stolen data was encrypted and exfiltrated to a command-and-control server. The backdoor employed advanced evasion techniques including TLS verification bypass, per-host execution markers, and embedded Windows executables to bypass Chrome encryption protections.

Pulse ID: 6a1187d92cdbfd79095008cd
Pulse Link: https://otx.alienvault.com/pulse/6a1187d92cdbfd79095008cd
Pulse Author: AlienVault
Created: 2026-05-23 10:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chrome #Cloud #CyberSecurity #Encryption #HTTP #InfoSec #OTX #OpenThreatExchange #PHP #Password #RAT #RCE #RemoteCodeExecution #TLS #VPN #Windows #Word #bot #cryptocurrency #AlienVault

Laravel Lang Compromised with RCE Backdoor Across 700+ Versions

Community-maintained Laravel Lang packages were compromised with remote code execution backdoors affecting over 700 versions across multiple repositories including laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions. The attack involved coordinated rapid tag publishing on May 22-23, 2026, suggesting organization-level credential compromise. A malicious helpers.php file was automatically executed via Composer's autoloader, deploying a sophisticated cross-platform information stealer. The second-stage payload systematically harvested credentials from cloud infrastructure, Kubernetes, CI/CD systems, browsers, password managers, cryptocurrency wallets, VPN clients, and local configurations. Stolen data was encrypted and exfiltrated to a command-and-control server. The backdoor employed advanced evasion techniques including TLS verification bypass, per-host execution markers, and embedded Windows executables to bypass Chrome encryption protections.

Pulse ID: 6a1187d92cdbfd79095008cd
Pulse Link: https://otx.alienvault.com/pulse/6a1187d92cdbfd79095008cd
Pulse Author: AlienVault
Created: 2026-05-23 10:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chrome #Cloud #CyberSecurity #Encryption #HTTP #InfoSec #OTX #OpenThreatExchange #PHP #Password #RAT #RCE #RemoteCodeExecution #TLS #VPN #Windows #Word #bot #cryptocurrency #AlienVault

Laravel Lang Compromised with RCE Backdoor Across 700+ Versions

Community-maintained Laravel Lang packages were compromised with remote code execution backdoors affecting over 700 versions across multiple repositories including laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions. The attack involved coordinated rapid tag publishing on May 22-23, 2026, suggesting organization-level credential compromise. A malicious helpers.php file was automatically executed via Composer's autoloader, deploying a sophisticated cross-platform information stealer. The second-stage payload systematically harvested credentials from cloud infrastructure, Kubernetes, CI/CD systems, browsers, password managers, cryptocurrency wallets, VPN clients, and local configurations. Stolen data was encrypted and exfiltrated to a command-and-control server. The backdoor employed advanced evasion techniques including TLS verification bypass, per-host execution markers, and embedded Windows executables to bypass Chrome encryption protections.

Pulse ID: 6a1187d92cdbfd79095008cd
Pulse Link: https://otx.alienvault.com/pulse/6a1187d92cdbfd79095008cd
Pulse Author: AlienVault
Created: 2026-05-23 10:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chrome #Cloud #CyberSecurity #Encryption #HTTP #InfoSec #OTX #OpenThreatExchange #PHP #Password #RAT #RCE #RemoteCodeExecution #TLS #VPN #Windows #Word #bot #cryptocurrency #AlienVault

Laravel Lang Compromised with RCE Backdoor Across 700+ Versions

Community-maintained Laravel Lang packages were compromised with remote code execution backdoors affecting over 700 versions across multiple repositories including laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions. The attack involved coordinated rapid tag publishing on May 22-23, 2026, suggesting organization-level credential compromise. A malicious helpers.php file was automatically executed via Composer's autoloader, deploying a sophisticated cross-platform information stealer. The second-stage payload systematically harvested credentials from cloud infrastructure, Kubernetes, CI/CD systems, browsers, password managers, cryptocurrency wallets, VPN clients, and local configurations. Stolen data was encrypted and exfiltrated to a command-and-control server. The backdoor employed advanced evasion techniques including TLS verification bypass, per-host execution markers, and embedded Windows executables to bypass Chrome encryption protections.

Pulse ID: 6a1187d92cdbfd79095008cd
Pulse Link: https://otx.alienvault.com/pulse/6a1187d92cdbfd79095008cd
Pulse Author: AlienVault
Created: 2026-05-23 10:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chrome #Cloud #CyberSecurity #Encryption #HTTP #InfoSec #OTX #OpenThreatExchange #PHP #Password #RAT #RCE #RemoteCodeExecution #TLS #VPN #Windows #Word #bot #cryptocurrency #AlienVault

Laravel Lang Compromised with RCE Backdoor Across 700+ Versions

Community-maintained Laravel Lang packages were compromised with remote code execution backdoors affecting over 700 versions across multiple repositories including laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions. The attack involved coordinated rapid tag publishing on May 22-23, 2026, suggesting organization-level credential compromise. A malicious helpers.php file was automatically executed via Composer's autoloader, deploying a sophisticated cross-platform information stealer. The second-stage payload systematically harvested credentials from cloud infrastructure, Kubernetes, CI/CD systems, browsers, password managers, cryptocurrency wallets, VPN clients, and local configurations. Stolen data was encrypted and exfiltrated to a command-and-control server. The backdoor employed advanced evasion techniques including TLS verification bypass, per-host execution markers, and embedded Windows executables to bypass Chrome encryption protections.

Pulse ID: 6a1187d92cdbfd79095008cd
Pulse Link: https://otx.alienvault.com/pulse/6a1187d92cdbfd79095008cd
Pulse Author: AlienVault
Created: 2026-05-23 10:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chrome #Cloud #CyberSecurity #Encryption #HTTP #InfoSec #OTX #OpenThreatExchange #PHP #Password #RAT #RCE #RemoteCodeExecution #TLS #VPN #Windows #Word #bot #cryptocurrency #AlienVault

Toulouse-Blagnac Airport - Toulouse/Blagnac, France

https://en.wikipedia.org/wiki/Toulouse_Blagnac_International_Airport
https://www.openstreetmap.org/#map=13/43.629101/1.363820

#LFBO #TLS #Toulouse #France #airport #aviation #avgeeks #GIS

Toulouse-Blagnac Airport - Toulouse/Blagnac, France

https://en.wikipedia.org/wiki/Toulouse_Blagnac_International_Airport
https://www.openstreetmap.org/#map=13/43.629101/1.363820

#LFBO #TLS #Toulouse #France #airport #aviation #avgeeks #GIS

#DHCP, #DNS, #IPv6, #TLS: Ihr seid anstrengend.

#pihole ignoriert nach Update standardmäßig die eigene dnsmasq-Konfiguration. Alle Hosts bekommen zwei IPv6-Gateways: Router und Pi-hole. Ziemlich zufällig wirkend hängen dann Verbindungen.

#Docker Compose-Setup mit #Coolify: Anfragen wechseln zwischen den Umgebungen, weil es kein Docker-Netz pro Umgebung gibt und per DNS-Round-Robin Anfragen zufällig an Apps verteilt werden.

#Traefik aktualisiert Zertifikate auf Basis von 2160 Stunden Gültigkeit (änderbar mit acme.certificatesDuration). #step-ca gibt Zertifikate aus, die 24 Stunden gültig sind (änderbar über authority.claims.{max,default}TLSCertDuration). Kein Wunder, dass das ganze Setup einen Tag später nicht mehr läuft.

Usw. usf.

#DHCP, #DNS, #IPv6, #TLS: Ihr seid anstrengend.

#pihole ignoriert nach Update standardmäßig die eigene dnsmasq-Konfiguration. Alle Hosts bekommen zwei IPv6-Gateways: Router und Pi-hole. Ziemlich zufällig wirkend hängen dann Verbindungen.

#Docker Compose-Setup mit #Coolify: Anfragen wechseln zwischen den Umgebungen, weil es kein Docker-Netz pro Umgebung gibt und per DNS-Round-Robin Anfragen zufällig an Apps verteilt werden.

#Traefik aktualisiert Zertifikate auf Basis von 2160 Stunden Gültigkeit (änderbar mit acme.certificatesDuration). #step-ca gibt Zertifikate aus, die 24 Stunden gültig sind (änderbar über authority.claims.{max,default}TLSCertDuration). Kein Wunder, dass das ganze Setup einen Tag später nicht mehr läuft.

Usw. usf.

With the proper documents, any may pass and be trusted. #TLS #LetsEncrypt #Linux #OpenSource https://cromwell-intl.com/open-source/letsencrypt-tls-cert-godaddy.html?s=mc

Die Telekom hat einen Dienst der sich 'Security OnNet' nennt. Der bricht die Zertifikatskette auf und injected ein eigenes Zertifikat, leitet Netzverkehr über eigene Routen um und blockiert somit bestimmte Seiten.
Haben das nur bemerkt, weil ein Kunde von uns der Mailserver weg geblockt wurde.

Keine Ahnung wie das funktioniert aber schon scary.

Scheinbar zielt der Dienst besonders gerne auf mailcow Dienste.

https://onnet.telekom.de/portal/telekom-de/blocking

#telekom #blocking #tls

Die Telekom hat einen Dienst der sich 'Security OnNet' nennt. Der bricht die Zertifikatskette auf und injected ein eigenes Zertifikat, leitet Netzverkehr über eigene Routen um und blockiert somit bestimmte Seiten.
Haben das nur bemerkt, weil ein Kunde von uns der Mailserver weg geblockt wurde.

Keine Ahnung wie das funktioniert aber schon scary.

Scheinbar zielt der Dienst besonders gerne auf mailcow Dienste.

https://onnet.telekom.de/portal/telekom-de/blocking

#telekom #blocking #tls

Die Telekom hat einen Dienst der sich 'Security OnNet' nennt. Der bricht die Zertifikatskette auf und injected ein eigenes Zertifikat, leitet Netzverkehr über eigene Routen um und blockiert somit bestimmte Seiten.
Haben das nur bemerkt, weil ein Kunde von uns der Mailserver weg geblockt wurde.

Keine Ahnung wie das funktioniert aber schon scary.

Scheinbar zielt der Dienst besonders gerne auf mailcow Dienste.

https://onnet.telekom.de/portal/telekom-de/blocking

#telekom #blocking #tls

Die Telekom hat einen Dienst der sich 'Security OnNet' nennt. Der bricht die Zertifikatskette auf und injected ein eigenes Zertifikat, leitet Netzverkehr über eigene Routen um und blockiert somit bestimmte Seiten.
Haben das nur bemerkt, weil ein Kunde von uns der Mailserver weg geblockt wurde.

Keine Ahnung wie das funktioniert aber schon scary.

Scheinbar zielt der Dienst besonders gerne auf mailcow Dienste.

https://onnet.telekom.de/portal/telekom-de/blocking

#telekom #blocking #tls

Die Telekom hat einen Dienst der sich 'Security OnNet' nennt. Der bricht die Zertifikatskette auf und injected ein eigenes Zertifikat, leitet Netzverkehr über eigene Routen um und blockiert somit bestimmte Seiten.
Haben das nur bemerkt, weil ein Kunde von uns der Mailserver weg geblockt wurde.

Keine Ahnung wie das funktioniert aber schon scary.

Scheinbar zielt der Dienst besonders gerne auf mailcow Dienste.

https://onnet.telekom.de/portal/telekom-de/blocking

#telekom #blocking #tls

New #TCP public peer is now available by thanks to @neilalexander

```
tcp://yggdrasil.neilalexander.dev:64649
```

it's CPU-friendly and could be especially useful in the #Yggdrasil #TLS-less #NTP context https://yggdrasil-network.github.io/services.html#ntp

Someone who knows @admin, please advise them to update the #TLS certificate for mastox.eu. It just expired.

#Fediverse #FediAdmin #HTTPS

Merely saying 'We speak a secret tongue' is not enough. One's wizards must speak the appropriate tongue, and speak it only in a most cautious fashion. #cybersecurity #TLS https://cromwell-intl.com/cybersecurity/ssl-tls.html?s=mc

Merely saying 'We speak a secret tongue' is not enough. One's wizards must speak the appropriate tongue, and speak it only in a most cautious fashion. #cybersecurity #TLS https://cromwell-intl.com/cybersecurity/ssl-tls.html?s=mc

Merely saying 'We speak a secret tongue' is not enough. One's wizards must speak the appropriate tongue, and speak it only in a most cautious fashion. #cybersecurity #TLS https://cromwell-intl.com/cybersecurity/ssl-tls.html?s=mc

Merely saying 'We speak a secret tongue' is not enough. One's wizards must speak the appropriate tongue, and speak it only in a most cautious fashion. #cybersecurity #TLS https://cromwell-intl.com/cybersecurity/ssl-tls.html?s=mc

Merely saying 'We speak a secret tongue' is not enough. One's wizards must speak the appropriate tongue, and speak it only in a most cautious fashion. #cybersecurity #TLS https://cromwell-intl.com/cybersecurity/ssl-tls.html?s=mc

#phetch - #GopherProtocol client written in #Rust with #Tor / #I2P proxy support + #TLS as the bonus:
https://github.com/xvxx/phetch

To handle I2P connections use following trick:
TOR_PROXY=127.0.0.1:4447 target/release/phetch -o gopher://phlogqhspsjzcdubodidwc74pmc56hik2t3bhajwc47rg6snboia.b32.i2p:70/1ps/

See also:
https://github.com/xvxx/phetch/issues/45

#phetch - #GopherProtocol client written in #Rust with #Tor / #I2P proxy support + #TLS as the bonus:
https://github.com/xvxx/phetch

To handle I2P connections use following trick:
TOR_PROXY=127.0.0.1:4447 target/release/phetch -o gopher://phlogqhspsjzcdubodidwc74pmc56hik2t3bhajwc47rg6snboia.b32.i2p:70/1ps/

See also:
https://github.com/xvxx/phetch/issues/45

#phetch - #GopherProtocol client written in #Rust with #Tor / #I2P proxy support + #TLS as the bonus:
https://github.com/xvxx/phetch

To handle I2P connections use following trick:
TOR_PROXY=127.0.0.1:4447 target/release/phetch -o gopher://phlogqhspsjzcdubodidwc74pmc56hik2t3bhajwc47rg6snboia.b32.i2p:70/1ps/

See also:
https://github.com/xvxx/phetch/issues/45

Build a fortress in the realm of the clouds. #FreeBSD #GCP #GoogleCloud #OpenSource #TLS https://cromwell-intl.com/open-source/freebsd-google-cloud/?s=mc

Build a fortress in the realm of the clouds. #FreeBSD #GCP #GoogleCloud #OpenSource #TLS https://cromwell-intl.com/open-source/freebsd-google-cloud/?s=mc

Build a fortress in the realm of the clouds. #FreeBSD #GCP #GoogleCloud #OpenSource #TLS https://cromwell-intl.com/open-source/freebsd-google-cloud/?s=mc

Build a fortress in the realm of the clouds. #FreeBSD #GCP #GoogleCloud #OpenSource #TLS https://cromwell-intl.com/open-source/freebsd-google-cloud/?s=mc

Build a fortress in the realm of the clouds. #FreeBSD #GCP #GoogleCloud #OpenSource #TLS https://cromwell-intl.com/open-source/freebsd-google-cloud/?s=mc