Nuevo ataque #PetitPotam obliga a Windows a compartir sus hashes. https://t.co/lwz4kEZRxd
— Fran Andrades (@AndradesFran) Jul 24, 2021
— Fran Andrades (@AndradesFran) Jul 24, 2021
Twitter
Fran Andrades
Nuevo ataque #PetitPotam obliga a Windows a compartir sus hashes. ow.ly/c3r630rOPzz
CUATRO VULNERABILIDADES CRÍTICAS ENCONTRADAS EN LA CRIPTOGRAFÍA DE TELEGRAM. https://t.co/N8sk1dNwEy
— Fran Andrades (@AndradesFran) Jul 25, 2021
— Fran Andrades (@AndradesFran) Jul 25, 2021
Cyber Security
CUATRO VULNERABILIDADES CRÍTICAS ENCONTRADAS EN LA CRIPTOGRAFÍA DE TELEGRAM
Un equipo de investigación de ETH Zurich y Royal Holloway publicó un reporte detallando el hallazgo de múltiples vulnerabilidades en el protocolo criptográfico de …
Antivacunas: lo sentimos pero ya es demasiado tarde. https://t.co/EEP1UkvrF4
— Fran Andrades (@AndradesFran) Jul 25, 2021
— Fran Andrades (@AndradesFran) Jul 25, 2021
New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains. https://t.co/r0freNWp0U
— Fran Andrades (@AndradesFran) Jul 26, 2021
— Fran Andrades (@AndradesFran) Jul 26, 2021
Forwarded from Pavel Durov
The phones of 50,000 individuals, including human rights activists and journalists, have been targeted by surveillance tools that were used by numerous governments. These tools can hack any iOS and Android phone, and there is no way to protect your device from it. It doesn't matter which apps you use, because the system is breached on a deeper level.
According to the Snowden revelations from 2013, both Apple and Google are part of the global surveillance program that implies that these companies have to, among other things, implement backdoors into their mobile operating systems. These backdoors, usually disguised as security bugs, allow US agencies to access information on any smartphone in the world.
The problem with such backdoors is that they are never exclusive to just one party. Anybody can exploit them. So if a US security agency can hack an iOS or Android phone, any other organization that uncovers these backdoors can do the same. Unsurprisingly, this is exactly what has been taking place: an Israeli company called NSO Group has been selling access to the spying tools that allowed third parties to hack tens of thousands of phones.
Since at least 2018, I have been aware that one of my phone numbers was included in a list of potential targets of such surveillance tools (although a source from the NSO Group denies it). Personally, I wasn't worried: since 2011, when I was still living in Russia, I’ve got used to assuming that all my phones were compromised. Anyone who gains access to my private data will be utterly disappointed – they will have to go through thousands of concept designs for Telegram features and millions of messages related to our product development process. They won't find any important information there.
However, these surveillance tools are also used against people far more prominent than me. For example, they were employed to spy on 14 heads of state. The existence of backdoors in crucial infrastructure and software creates a huge challenge for humanity. That's why I have been calling upon the governments of the world to start acting against the Apple-Google duopoly in the smartphone market and to force them to open their closed ecosystems and allow for more competition.
So far, even though the current market monopolization increases costs and violates privacy and freedom of speech of billions, government officials have been very slow to act. I hope the news that they themselves have been targeted by these surveillance tools will prompt politicians to change their minds.
According to the Snowden revelations from 2013, both Apple and Google are part of the global surveillance program that implies that these companies have to, among other things, implement backdoors into their mobile operating systems. These backdoors, usually disguised as security bugs, allow US agencies to access information on any smartphone in the world.
The problem with such backdoors is that they are never exclusive to just one party. Anybody can exploit them. So if a US security agency can hack an iOS or Android phone, any other organization that uncovers these backdoors can do the same. Unsurprisingly, this is exactly what has been taking place: an Israeli company called NSO Group has been selling access to the spying tools that allowed third parties to hack tens of thousands of phones.
Since at least 2018, I have been aware that one of my phone numbers was included in a list of potential targets of such surveillance tools (although a source from the NSO Group denies it). Personally, I wasn't worried: since 2011, when I was still living in Russia, I’ve got used to assuming that all my phones were compromised. Anyone who gains access to my private data will be utterly disappointed – they will have to go through thousands of concept designs for Telegram features and millions of messages related to our product development process. They won't find any important information there.
However, these surveillance tools are also used against people far more prominent than me. For example, they were employed to spy on 14 heads of state. The existence of backdoors in crucial infrastructure and software creates a huge challenge for humanity. That's why I have been calling upon the governments of the world to start acting against the Apple-Google duopoly in the smartphone market and to force them to open their closed ecosystems and allow for more competition.
So far, even though the current market monopolization increases costs and violates privacy and freedom of speech of billions, government officials have been very slow to act. I hope the news that they themselves have been targeted by these surveillance tools will prompt politicians to change their minds.
New post in Hacking tools y tal: The phones of 50,000 individuals, including human rights activists and journalists, have been targeted by surveillance tools that were used by numerous governments. These tools can hack any iOS and Android phone, and ther… https://t.co/QbNx2BwwCM
— Fran Andrades (@AndradesFran) Jul 26, 2021
— Fran Andrades (@AndradesFran) Jul 26, 2021
Telegram
Hacking tools y tal
The phones of 50,000 individuals, including human rights activists and journalists, have been targeted by surveillance tools that were used by numerous governments. These tools can hack any iOS and Android phone, and there is no way to protect your device…
You could be exposing your data if your operating system (OS) is outdated https://t.co/bIbDxJDmBv
— Fran Andrades (@AndradesFran) Jul 27, 2021
— Fran Andrades (@AndradesFran) Jul 27, 2021
Retailers turn to zero trust to keep consumers and employees secure. https://t.co/xyEgubh14O
— Fran Andrades (@AndradesFran) Aug 2, 2021
— Fran Andrades (@AndradesFran) Aug 2, 2021
Forwarded from Codigo Abierto "FOSS"
EDS Lite
EDS Lite es un software de cifrado de disco virtual para Android que permite almacenar archivos en un contenedor cifrado.
Los tipos de contenedores soportados son VeraCrypt, TrueCrypt, LUKS, EncFs, CyberSafe. El programa puede funcionar en dos modos: sin montar y montado
En el modo no montado, puedes ver el contenedor encriptado utilizando el gestor de archivos EDS incrustado o cualquier otro gestor de archivos que soporte el Android Storage Access Framework. Cuando se abre un archivo (que no es un archivo multimedia o un archivo de imagen) desde un contenedor en modo no montado, EDS descifra el archivo a una ubicación temporal en su dispositivo. Los archivos multimedia se pueden ver directamente desde el contenedor. En modo no montado puede abrir un contenedor con el sistema de archivos FAT o ExFAT después de haber instalado un complemento.
En este modo, el sistema de archivos del contenedor se asigna al sistema de archivos del dispositivo. Los archivos dentro del contenedor cifrado se cifran o descifran sobre la marcha, sin archivos temporales. El modo montado requiere acceso de root al dispositivo.
https://github.com/sovworks/edslite
F-droid: https://f-droid.org/packages/com.sovworks.edslite/
Autor: https://sovworks.com/eds/
====================
Si encuentra software interesante, compártalo con la comunidad: @SCAyL_bot
EDS Lite es un software de cifrado de disco virtual para Android que permite almacenar archivos en un contenedor cifrado.
Los tipos de contenedores soportados son VeraCrypt, TrueCrypt, LUKS, EncFs, CyberSafe. El programa puede funcionar en dos modos: sin montar y montado
En el modo no montado, puedes ver el contenedor encriptado utilizando el gestor de archivos EDS incrustado o cualquier otro gestor de archivos que soporte el Android Storage Access Framework. Cuando se abre un archivo (que no es un archivo multimedia o un archivo de imagen) desde un contenedor en modo no montado, EDS descifra el archivo a una ubicación temporal en su dispositivo. Los archivos multimedia se pueden ver directamente desde el contenedor. En modo no montado puede abrir un contenedor con el sistema de archivos FAT o ExFAT después de haber instalado un complemento.
En este modo, el sistema de archivos del contenedor se asigna al sistema de archivos del dispositivo. Los archivos dentro del contenedor cifrado se cifran o descifran sobre la marcha, sin archivos temporales. El modo montado requiere acceso de root al dispositivo.
https://github.com/sovworks/edslite
F-droid: https://f-droid.org/packages/com.sovworks.edslite/
Autor: https://sovworks.com/eds/
====================
Si encuentra software interesante, compártalo con la comunidad: @SCAyL_bot
New post in Hacking tools y tal: EDS Lite EDS Lite es un software de cifrado de disco virtual para Android que permite almacenar archivos en un contenedor cifrado. Los tipos de contenedores soportados son VeraCrypt, TrueCrypt, LUKS, EncFs, CyberSafe.… https://t.co/M1rSSWDVpC
— Fran Andrades (@AndradesFran) Aug 2, 2021
— Fran Andrades (@AndradesFran) Aug 2, 2021
Telegram
Hacking tools y tal
EDS Lite
EDS Lite es un software de cifrado de disco virtual para Android que permite almacenar archivos en un contenedor cifrado.
Los tipos de contenedores soportados son VeraCrypt, TrueCrypt, LUKS, EncFs, CyberSafe. El programa puede funcionar en dos…
EDS Lite es un software de cifrado de disco virtual para Android que permite almacenar archivos en un contenedor cifrado.
Los tipos de contenedores soportados son VeraCrypt, TrueCrypt, LUKS, EncFs, CyberSafe. El programa puede funcionar en dos…
Informe anual de amenazas de Dispositivos y Comunicaciones Móviles del CCN-CERT. | Derecho de la Red https://t.co/NicmOrA8vN
— Fran Andrades (@AndradesFran) Aug 3, 2021
— Fran Andrades (@AndradesFran) Aug 3, 2021
Derecho de la Red
Informe anual de amenazas de Dispositivos y Comunicaciones Móviles del CCN-CERT. | Derecho de la Red
El Informe anual de amenazas de Dispositivos y Comunicaciones Móviles, presenta alguna de las principales amenazas de seguridad y vulnerabilidades descubiertas .
The Ultimate Guide to Phishing - computer insecurities https://t.co/fBtcOTLtmi
— Fran Andrades (@AndradesFran) Aug 3, 2021
— Fran Andrades (@AndradesFran) Aug 3, 2021
Forwarded from Libreware
The Hitchhiker’s Guide to Online Anonymity
💡 TLDR: This is an open-source non-profit detailed and maintained guide on online anonymity (in addition to Privacy/Security). I've been writing/updating it for the past months. It covers Windows/Linux/MacOS/Whonix/TAILS/Qubes OS and more. It's written with hope for activists, journalists, scientists, lawyers, whistle-blowers, and good people being oppressed/censored anywhere!
The whole guide is backed up by many external references (over 500 external references, many of them academic) and is not sponsored by any commercial entity.
The guide is presented in a "book format" (Online ,or PDF with Light and Dark themes) and is quite a long read with over 180 pages of information (not counting the many 500+ external references). But there are ways you can read some parts and not others depending on your interest (and this is also explained in the introduction).
* Project Website: https://anonymousplanet.org
* Mirror: https://mirror.anonymousplanet.org
* Mirror: https://anonymousplanet.github.io/thgtoa/guide.html
* Tor Mirror: http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion
💡 Online Guide:
* Online Version (Dark Theme): https://anonymousplanet.org/guide.html
* Online Version Mirror (Dark Theme): https://mirror.anonymousplanet.org/guide.html
* Online Version Tor Mirror (Dark Theme): http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/guide.html
💡 PDFs:
* PDF (Light Theme): https://anonymousplanet.org/guide.pdf
* PDF (Light Theme Mirror): https://mirror.anonymousplanet.org/guide.pdf
* PDF (Light Theme Tor Mirror): http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/guide.pdf
* PDF (Dark Theme): https://anonymousplanet.org/guide-dark.pdf
* PDF (Dark Theme Mirror): https://mirror.anonymousplanet.org/guide-dark.pdf
* PDF (Dark Theme Tor Mirror): http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/guide-dark.pdf
💡 Changelog:
* https://anonymousplanet.org/CHANGELOG.html
* https://mirror.anonymousplanet.org/CHANGELOG.html
* http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/CHANGELOG.html
💡 Archives:
* Archive.org: https://web.archive.org/web/https://anonymousplanet.org/guide.html
* Archive.today: https://archive.fo/anonymousplanet.org/guide.html
* Archive.today over Tor: http://archivecaslytosk.onion/anonymousplanet.org/guide.html
* Cryptpad.fr: https://cryptpad.fr/drive/#/2/drive/view/Ughm9CjQJCwB8BIppdtvj5zy4PyE-8Gxn11x9zaqJLI/
Feel free to share and contribute through the repository at https://github.com/AnonymousPlanet/thgtoa
👉🏼 Follow me on:
* Mastodon: https://mastodon.online/@anonypla
Any constructive opinion/idea/criticism is welcome if you spot any issue. Many changes have been done based based on suggestions from redditors. Don't be too harsh tho. Remember it's still a "work in progress" draft.
📡 @NoGoolag 📡 @Libreware
#guide #anonymity #privacy #anonymousplanet
💡 TLDR: This is an open-source non-profit detailed and maintained guide on online anonymity (in addition to Privacy/Security). I've been writing/updating it for the past months. It covers Windows/Linux/MacOS/Whonix/TAILS/Qubes OS and more. It's written with hope for activists, journalists, scientists, lawyers, whistle-blowers, and good people being oppressed/censored anywhere!
The whole guide is backed up by many external references (over 500 external references, many of them academic) and is not sponsored by any commercial entity.
The guide is presented in a "book format" (Online ,or PDF with Light and Dark themes) and is quite a long read with over 180 pages of information (not counting the many 500+ external references). But there are ways you can read some parts and not others depending on your interest (and this is also explained in the introduction).
* Project Website: https://anonymousplanet.org
* Mirror: https://mirror.anonymousplanet.org
* Mirror: https://anonymousplanet.github.io/thgtoa/guide.html
* Tor Mirror: http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion
💡 Online Guide:
* Online Version (Dark Theme): https://anonymousplanet.org/guide.html
* Online Version Mirror (Dark Theme): https://mirror.anonymousplanet.org/guide.html
* Online Version Tor Mirror (Dark Theme): http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/guide.html
💡 PDFs:
* PDF (Light Theme): https://anonymousplanet.org/guide.pdf
* PDF (Light Theme Mirror): https://mirror.anonymousplanet.org/guide.pdf
* PDF (Light Theme Tor Mirror): http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/guide.pdf
* PDF (Dark Theme): https://anonymousplanet.org/guide-dark.pdf
* PDF (Dark Theme Mirror): https://mirror.anonymousplanet.org/guide-dark.pdf
* PDF (Dark Theme Tor Mirror): http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/guide-dark.pdf
💡 Changelog:
* https://anonymousplanet.org/CHANGELOG.html
* https://mirror.anonymousplanet.org/CHANGELOG.html
* http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion/CHANGELOG.html
💡 Archives:
* Archive.org: https://web.archive.org/web/https://anonymousplanet.org/guide.html
* Archive.today: https://archive.fo/anonymousplanet.org/guide.html
* Archive.today over Tor: http://archivecaslytosk.onion/anonymousplanet.org/guide.html
* Cryptpad.fr: https://cryptpad.fr/drive/#/2/drive/view/Ughm9CjQJCwB8BIppdtvj5zy4PyE-8Gxn11x9zaqJLI/
Feel free to share and contribute through the repository at https://github.com/AnonymousPlanet/thgtoa
👉🏼 Follow me on:
* Mastodon: https://mastodon.online/@anonypla
Any constructive opinion/idea/criticism is welcome if you spot any issue. Many changes have been done based based on suggestions from redditors. Don't be too harsh tho. Remember it's still a "work in progress" draft.
📡 @NoGoolag 📡 @Libreware
#guide #anonymity #privacy #anonymousplanet
New post in Hacking tools y tal: The Hitchhiker’s Guide to Online Anonymity TLDR: This is an open-source non-profit detailed and maintained guide on online anonymity (in addition to Privacy/Security). I've been writing/updating it for the past months.… https://t.co/Xwg3n3OTFA
— Fran Andrades (@AndradesFran) Aug 4, 2021
— Fran Andrades (@AndradesFran) Aug 4, 2021
Telegram
Hacking tools y tal
The Hitchhiker’s Guide to Online Anonymity
💡 TLDR: This is an open-source non-profit detailed and maintained guide on online anonymity (in addition to Privacy/Security). I've been writing/updating it for the past months. It covers Windows/Linux/MacOS/W…
💡 TLDR: This is an open-source non-profit detailed and maintained guide on online anonymity (in addition to Privacy/Security). I've been writing/updating it for the past months. It covers Windows/Linux/MacOS/W…
40 Linux Server Hardening Security Tips [2021 edition] - nixCraft https://t.co/AF7kAEcGjo
— Fran Andrades (@AndradesFran) Aug 5, 2021
— Fran Andrades (@AndradesFran) Aug 5, 2021
Así funciona la estafa que muestra un falso SMS del BBVA y otros en el mismo hilo que los verdaderos (y es más fácil de lo que parece). https://t.co/nZmDlkokHq
— Fran Andrades (@AndradesFran) Aug 6, 2021
— Fran Andrades (@AndradesFran) Aug 6, 2021
Twitter
Fran Andrades
Así funciona la estafa que muestra un falso SMS del BBVA y otros en el mismo hilo que los verdaderos (y es más fácil de lo que parece). ow.ly/a7KX30rQ8ny
Ransomware para dispositivos Android se hace pasar por la app de Netflix. https://t.co/GCJzsewkwR
— Fran Andrades (@AndradesFran) Aug 6, 2021
— Fran Andrades (@AndradesFran) Aug 6, 2021
Protegerse. Blog del laboratorio de Ontinet.com
Ransomware para dispositivos Android se hace pasar por la app de Netflix
Algunos delincuentes con pocos conocimientos aprovechan herramientas de fácil uso para configurar sus amenazas.
Zoom Lied about End-to-End Encryption. https://t.co/69oC07KeDv
— Fran Andrades (@AndradesFran) Aug 6, 2021
— Fran Andrades (@AndradesFran) Aug 6, 2021
WikiLeaks - The Intolerance Network https://t.co/gnN5LQ6YSt
— Fran Andrades (@AndradesFran) Aug 7, 2021
— Fran Andrades (@AndradesFran) Aug 7, 2021
WikiLeaks
The Intolerance Network
Over 17,000 documents from HazteOir and CitizenGO, Spanish right-wing campaigning organizations. They use high level lobbying, a large network and grassroots mobilizations to hinder advancements in LGBTQI, reproductive rights and secularization. These documents…
📃 "Conoce estos servicios para comprobar quién te espía en Internet" https://www.redeszone.net/tutoriales/seguridad/comprobar-quien-te-espia-internet/
🛠 EFF https://coveryourtracks.eff.org/
🛠 AmIUnique https://amiunique.org/
🛠 Trackography https://trackography.org/
🛠 Disconnect https://disconnect.me/disconnect
Extensión para Chrome
🛠 Thunderbeam-Lightbeam para Chrome https://github.com/socsys/Lightbeam_Chrome
Bloquear los rastreadores en línea
🛠 ublock origin https://github.com/gorhill/uBlock
🛠 https everywhere https://www.eff.org/HTTPS-EVERYWHERE
🛠 Privacy Badger https://www.eff.org/privacybadger
🛠 NoScript https://noscript.net/
🛠 PixelBlock https://chrome.google.com/webstore/detail/pixelblock/jmpmfcjnflbcoidlgapblgpgbilinlem?hl=en
Navegador
🛠 Tor https://www.torproject.org/projects/torbrowser.html.en
Buscador
🛠 DuckDuckGo https://duckduckgo.com/
🛠 EFF https://coveryourtracks.eff.org/
🛠 AmIUnique https://amiunique.org/
🛠 Trackography https://trackography.org/
🛠 Disconnect https://disconnect.me/disconnect
Extensión para Chrome
🛠 Thunderbeam-Lightbeam para Chrome https://github.com/socsys/Lightbeam_Chrome
Bloquear los rastreadores en línea
🛠 ublock origin https://github.com/gorhill/uBlock
🛠 https everywhere https://www.eff.org/HTTPS-EVERYWHERE
🛠 Privacy Badger https://www.eff.org/privacybadger
🛠 NoScript https://noscript.net/
🛠 PixelBlock https://chrome.google.com/webstore/detail/pixelblock/jmpmfcjnflbcoidlgapblgpgbilinlem?hl=en
Navegador
🛠 Tor https://www.torproject.org/projects/torbrowser.html.en
Buscador
🛠 DuckDuckGo https://duckduckgo.com/