Sheogorath 🦊 @sheogorath@shivering-isles.com

The good thing when using external services is: You don't have to fix them, when they are broken.
The bad thing when external services is: You can't fix them, when they are broken.

When something is critical for your operation, you might want to consider have it under your control, because just sitting around waiting for something to be fixed is a very annoying thing.

Source: https://support.microsoft.com/en-us/help/4512486/windows-7-update-kb4512486

When you run Symantec or Norten AV, Microsoft will not provides security updates for now, because your Anti-malware solution, which at least according to itself, deletes all updates provides by Microsoft, which protect you from real security issues.

I mean, it's not like Microsoft announced months ago, that they will drop SHA-1 signatures this month… And also SHA-1 support is already no longer recommended since years… 🤷 "Security experts"

#infosec #security #fail #symantec #Norten #snakeoil

Looks like things worked out:

https://github.com/blakawk/gitlab-integration/issues/39#issuecomment-520801145

Sometimes it just needs a second hint :)

Things get even better. So I opened a public GitHub issue in order to make sure people are informed and the developer might be even more motivated to fix it. Seems like the opposite is the case:

https://github.com/blakawk/gitlab-integration/issues/39

I'll give it another try to convince him, but if not… 🤷 Can't help people who don't want to be helped.

#infosec #security #developer #sadResearcher

Since the way to the official @fdroidorg repository is still a bit complicated for #Bitwarden, they decided to self-host a repository!

Want to get the Bitwarden Android app without Google Play? Here you go:

https://mobileapp.bitwarden.com/fdroid/

#passwordsafe #infosec #security #Android #fdroid

And here we go, my new blog article is out:

"Atom plugin "gitlab-integration" leaks your tokens"

https://shivering-isles.com/Atom-plugin-gitlab-integration-leaks-your-tokens

TL;DR: When you use the Atom plugin gitlab-integration you should either patch it with the mentioned workaround in the article or stop using it. Definitely you should revoke the personal access token you were using with it.

#atom #infosec #security #gitlab #disclosure #0day

Remember Spectre? It's back! 👻

Time to patch your systems!

https://access.redhat.com/articles/4329821

This time it's called Spectre SWAPGS and has the CVE number: CVE-2019-1125

Have fun! 👍🏻

#Spectre #linux #intel #infosec #security #redhat

I guess that's Pihole's way of telling me that my devices are rather well configured.

And I checked, the 2.1 percent that are blocked, are all related to the (unnamed) communication app that I have to use for work…

#privacy #pihole #dns

You don't have to be a programmer to contribute to a project:

https://github.com/codimd/server/pull/140

Trivial commit. Just exchanging some pictures.

Help us to develop @CodiMD :)

#CodiMD #development #shieldsio #badges #Mastodon #Matrix