Canard

joined 1 year ago
sorted by: new top controversial old
Do the "Ernest needs to add more maintainers to KBin!" comments remind anyone else of the xz social engineering malarkey? in c/[email protected]
[–] [email protected] 0 points 7 months ago (1 children)

I saw the term "threadiverse" being used to group all Reddit alternatives interoperable with the Fediverse.

What is the practical difference between the main instances of kbin and mbin, from a users perspective? in c/[email protected]
[–] [email protected] 1 points 7 months ago

I think the newest features available in Kbin are not available on Mbin.

2
Newsmast Brings Huge New Features in 3.0 Update (wedistribute.org)
 

The fledgling Fediverse discovery hub takes a big step today, showcasing deeper integrations with Mastodon, and a developer API for communities.

1
Taiwan ruling party’s Lai wins presidential election (www.aljazeera.com)
 

William Lai Ching-te from the governing Democratic Progressive Party (DPP) has won Taiwan’s presidential election, despite warnings from China – which claims Taiwan as part of its territory – not to vote for him.

Updates on Interstellar kbin app: account login, voting, subscriptions, and more in c/[email protected]
[–] [email protected] 0 points 10 months ago (1 children)

What about F-Droid?

1
Webauthn Attestation and OpenSource Keys (fy.blackhats.net.au)
 

Webauthn (Passkeys) are only going to become more important in the future and as this grows, deployments with higher security risks and criticality are going to need to start to understand and embrace attestation of their keys.

In their current form, almost all software products and IDM's today allow you to enroll any cryptographic authenticator. It doesn't matter what make or model it is, it will be allowed.

However, not all authenticators are made equal. They each have different properties, security features, and some even have security issues affecting their hardware or software. Because webauthn is a self contained multiple factor authenticator, this means we need to be even more careful to ensure these devices are secure.

1
AutoSpill attack steals credentials from Android password managers (www.bleepingcomputer.com)
 

Security researchers developed a new attack, which they named AutoSpill, to steal account credentials on Android during the autofill operation.

1
Microsoft’s Windows Hello fingerprint authentication has been bypassed (www.theverge.com)
 

Windows laptop manufacturers will likely need to fix this one.

Firefox 120.0 released in c/[email protected]
Firefox 120.0 released in c/[email protected]
[–] [email protected] 1 points 11 months ago (1 children)

This version was supposed to bring WebAuthn passkeys support as this source mentioned: https://connect.mozilla.org/t5/ideas/support-webauthn-passkeys/idc-p/39321/highlight/true#M22887
Sadly this is not part of the release notes. I’m disappointed but I hope this will be implemented soon in Firefox.

1
What the !#@% is a Passkey? (www.eff.org)
 

A new login technique is becoming available in 2023: the passkey. The passkey promises to solve phishing and prevent password reuse. But lots of smart and security-oriented folks are confused about what exactly a passkey is. There’s a good reason for that. A passkey is in some sense one of two (or three) different things, depending on how it’s stored.

3
Clever malvertising attack uses Punycode to look like KeePass's official website (www.malwarebytes.com)
 

Threat actors are doubling down on brand impersonation by using lookalike domain names.

1
What is a passphrase? Comparing passwords vs. passphrases | Proton (proton.me)
 

Passphrases are a great way to protect your online accounts and digital identity. But what is a passphrase?

2
Modernizing and improving PGP security | Proton (proton.me)
 

Daniel Huigens, the head of Proton’s cryptography team, explains how the latest crypto refresh makes PGP more secure.