Créer un compteSe connecter

Recherches récentes

Aucune recherche récente

Options de recherche

Disponible uniquement lorsque vous êtes connecté.
pouet.chapril.org est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Chapril https://www.chapril.org est un projet de l'April https://www.april.org

Administré par :

Statistiques du serveur :

1,1K
comptes actifs

pouet.chapril.org: À proposAnnuaire des profilsPolitique de confidentialité

Mastodon: À proposTélécharger l’applicationRaccourcis clavierVoir le code sourcev4.3.7

#opsec

11 messages10 participants0 message aujourd’hui
Public *
digital witch

-- Draw the Circle or Be Consumed --

>OPSEC isn’t what happens before the real work. It is the real work that determines whether anything else becomes possible.<

The universe doesn’t give a fuck about your intentions. Neither does any state’s surveillance apparatus. Both operate on cold deterministic principles that render your revolutionary potential to ash the moment you treat OPSEC as optional.

Let me be painfully clear: your movement will collapse with mathematical certainty unless security is the foundation, not the afterthought.

...

Read More:
pixelnull.substack.com/p/draw-

#OPSECIsThePrimaryPraxis #CybersecurityMutualAid

Recursive Blasphemy · Draw the Circle or Be ConsumedPar pixelnull
#praxis#mutualaid#infosec
Public *
Tom

Hey #fediverse I could use some #opsec advice:

If I have a CMS, and its login page uses SSO with another 3rd party for authentication, I shouldn't need to lock that login page down by IP address should I? Isn't the security of it contingent on the 3rd party providing the SSO not me?

Public
Resilience Theatre @38C3

RaspberryPi Zero2w serves whole world and terrain from 256 GB MicroSD card. Pictured white box contains RPi and creates wifi access point. Phone attached to AP and browser allows you to browse full world map. No need for Internet connectivity or SIM card in you phone. Perfect tool for preparedness and denied area planning.
youtube.com/shorts/TAY2yY8TAoY

youtube.comAvant d'accéder à YouTube
#edgemap#prepping#redetam
Public *
Hannu Ikonen, MD

I talked a boatload of shit today about RFK, the Federal judiciary enabling Ostarbeiter to take place in the US, RFK's desire for concentration camps for ADHD & autistic folks, & the DOJ dropping charges on the Texas doctor who went after trans patients & violated HIPAA.

At the end of the day, every patient agreed that deleting their ASD diagnosis was the right thing to do right now.

Why do I share this?

Im urging all providers to have similar conversations with patients before September. Some may glean services from ASD diagnosis. Factor in a risks benefit discussion. Let them decide.

It's urgent.

Sources:

Federal enabling: apnews.com/article/illegal-imm

Ostarbeiter: mstdn.social/@Npars01/11431606

RFK 1: cbsnews.com/news/rfk-jr-cause-

RFK 2: motherjones.com/politics/2024/

DOJ: texastribune.org/2025/01/24/tr

Further, autism self diagnosis is largely valid & UWash website has links.

depts.washington.edu/uwautism/

depts.washington.edu/uwautism/

The Department of Homeland Security seal is seen on the podium at the Immigration and Customs Enforcement headquarters, Wednesday, April 9, 2025, in Washington. (AP Photo/Alex Brandon)
AP News · Judge allows requirement that everyone in the US illegally must register to move forwardPar Rebecca Santana
#ActuallyAutistic#ADHD#Privacy
Public *
CornOnTheGob

#question #didyouknow #todayilearned #til

Windows is reinstating Recall,
Snapshots of screen saved every 3 seconds and fed to AI.
Previously introduced in May, 2024 to some backlash.

(...)"a gold mine for malicious insiders, criminals, or nation-state spies if they managed to gain even brief administrative access to a Windows device."
(...)"nothing stopping Recall from preserving sensitive disappearing content sent through privacy-protecting messengers such as Signal."
(...)"Windows 11 Build 26100.3902 preview version. Over time, the feature will be rolled out more broadly."
(...)"That would indiscriminately hoover up all kinds of User A's sensitive material, including photos, passwords, medical conditions, and encrypted videos and messages."
(...)"That level of detailed archival material will undoubtedly be subject to subpoena by lawyers and governments."

etc. etc.
Yeah...

Image says- That groan you hear is users’ reaction to Recall going back into Windows Snapshotting and AI processing a screen every 3 seconds. What could possibly go wrong? Dan Goodin – Apr 11, 2025 2:45 pm | 157 The Recall feature as it currently exists in Windows 11 24H2 preview builds. Credit: Andrew Cunningham Security and privacy advocates are girding themselves for another uphill battle against Recall, the AI tool rolling out in Windows 11 that will screenshot, index, and store everything a user does every three seconds. When Recall was first introduced in May 2024, security practitioners roundly castigated it for creating a gold mine for malicious insiders, criminals, or nation-state spies if they managed to gain even brief administrative access to a Windows device. Privacy advocates warned that Recall was ripe for abuse in intimate partner violence settings. They also noted that there was nothing stopping Recall from preserving sensitive disappearing content sent through privacy-protecting messengers such as Signal. (...) later stated "First, even if User A never opts in to Recall, they have no control over the setting on the machines of Users B through Z. That means anything User A sends them will be screenshotted, processed with optical character recognition and Copilot AI, and then stored in an indexed database on the other users’ devices." -from arstechnica, bad scripts. You get no link.
#microsoft#windows#os
Public
Resilience Theatre @38C3

One MicroSD card and Raspberry PI. With $35 + $24 you get totally off the grid planning environment for your tasks. Plan and coordinate regardless access to infrastructure like cellular or satcom. Sometimes it's also good if you don't leave traces to great firewalls. Edgemap is open source and available at my Github for free!
#edgemap #preparedness #offthegrid #opsec #tak #atak #mesh #manet #meshtastic

youtu.be/CMUB8S3AKzw

youtu.be- YouTubeProfitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
Public
Jonathan Kamens

Here's a somewhat novel #LinkedIn connection request scam.
I am not, actually, connected to the person named in the message sent with this connection request. In other words, "Notice you're connected with her," is simply a lie. Did they think I wouldn't notice, or what? I suppose maybe some people wouldn't.
Needless to say I blocked this person. I am careful in general about whom I connect with on LinkedIn, but I especially don't want to interact with dirtbag scammers.
#infosec #opsec #scam

LinkedIn connection request from "Paul Bereschi", whose bio line describes him as "Engineering Teams for Ambitious Founders | Sales and Marketing Specialist @ Duty…" The message in the connection request says, "Hi Jonathan - do you know [blurred] personally? Noticed you're connected with her. We worked with her on the [blurred] website. Let's connect as well!"
En réponse à Robert [KJ5ELX] :donor:
Public *
mkj

@0xF21D The way I see it is that even if end-user device security is poor, proper E2EE such as that used by Signal still provides a significant benefit: It shifts the burden of an attacker from wholesale dragnet surveillance (which is easy to do in bulk) to focused attack targetting (very difficult to do in bulk, especially inconspiciously).

*Even if* device security sucks, which would equally impact other services as well, that *still* provides a privacy benefit.

#Signal#opsec#privacy
Suite du fil
Public
h3artbl33d :openbsd: :ve:

If you are partaking in a #protest, please do think of your and others' #OpSec (operational security). Depending on the protest, you might want to have it not linkable to your personal identity.

Some tips:

  • Consider taking measures that protect your identity. Wear a mask, wear clothes that you don't normally wear. Conceal any markings like tattoos and piercings.
  • Make sure you and fellow protestors are safe at any given time - wherever feasible. Help and advice others if you can.
  • No matter how secure your phone is - cellular connections do broadcast your location. Even if you take out the SIM. Either leave your phone at home or get a burner, paid with cash. And never, ever turn it on at home, at work or places that can be linked to you.
  • Do not link any IRL identities on that phone. Use a resilient app like @briar for communication during the protest. Briar is able to withstand internet and comms blackouts.

2/🧵

Public
h3artbl33d :openbsd: :ve:

So, folks - we need to have a chat. I've seen a large number of #handsoff #protest photos. While I am deeply grateful to anyone protesting in whatever form, please keep from posting photos that reveal faces and/or identities of people you haven't have explicit permission from.

#OpSec is incredibly hard - protestors might not be aware of the (possible) consequences of having their identities posted and shared online.

It still needs to be a choice, whether any individual wants to be linked to the protest they've partaken in. Even if they did not wear a mask.

1/🧵

ExplorerFlux en direct
À propos