Privatnost i sigurnost podataka i korisnika

[strikoo]

Autor tomek@vz

Signal?

https://matrix.org/ecosystem/hosting/

[Neo-ST]

Autor strikoo

https://matrix.org/ecosystem/hosting/

I šta se desi ako zatvore matrix.org domenu ?

[kopija]

Autor Neo-ST

I šta se desi ako zatvore matrix.org domenu ?

Onda pređeš na Session i zaboraviš na sve ostale gluposti, uključujući Signal.

[The Exiled]

Session se bazira na Signal protokolu, dok se Matrix/Element može koristiti i kroz self-hosting.

[mkey]

Ajde da ne potrošim pet sati uludo, mogu li s matrixom zamijeniti whatsapp, viber i slične aplikacije? U smisla da eliminiram to sranje s telefona ali da i dalje mogu komunicirati s ekipom koja ih koristi?

[The Exiled]

Izgleda da se može, a i Element kao aplikacija koja se bazira na Matrix protokolu, podržava slične funkcionalnosti.

Matrix supports bridging messages from different chat applications into Matrix rooms. These bridges are programs that run on the server and communicate with the non-Matrix servers.

Bridges for the following notable applications are maintained by the community:

• Apple iMessage
• Discord
• Email
• Facebook Messenger/Instagram
• Google Chat
• GroupMe
• Mastodon
• RSS/Twitter feeds
• Signal
• Skype
• Telegram
• SMS
• WeChat
• WhatsApp
• LinkedIn

[mkey]

Hmeh, ima tu tona raznih ograničenja. Lakše je samo šutnut to sranje, WA naročito.
https://ems-docs.element.io/books/el...hatsapp-bridge

[tomek@vz]

Cybercriminals are exploiting weak email authentication settings in Zendesk, using the platform's customer support systems to bombard targets with thousands of spam and harassing messages that appear to come from legitimate companies like The Washington Post, Discord, and NordVPN. KrebsOnSecurity reports:

"We recognize that our systems were leveraged against you in a distributed, many-against-one manner," said Carolyn Camoens, communications director at Zendesk. "We are actively investigating additional preventive measures. We are also advising customers experiencing this type of activity to follow our general security best practices and configure an authenticated ticket creation workflow."

[tomek@vz]

A high-severity vulnerability in the Pluggable Authentication Modules (PAM) framework was assigned the identifier CVE-2025-8941.
This vulnerability stems from the heart of Linux operating systems, enabling attackers with local access to exploit symlink attacks and race conditions for full root privilege escalation.
Root access, the ideal of control in Unix-like environments, could open doors to widespread system compromise and data breaches, underscoring the risks in even the most trusted open-source tools.
Security researchers warn that this issue demands immediate attention, especially for servers and desktops relying on Linux-PAM for user authentication.
Local users might become superusers, raising concerns for both corporate networks and personal devices. The disclosure of this flaw shows the ongoing difficulties in securing authentication systems as threats continue to change.

> cybersecuritynews


------

"Eleven days ago, the nonprofit entity that develops the protocol, Signal Messenger LLC, published a 5,900-word write-up describing its latest updates that bring Signal a significant step toward being fully quantum-resistant," writes Ars Technica:

[tomek@vz]

Microsoft said in a blog post this week that "over half of cyberattacks with known motives were driven by extortion or ransomware... while attacks focused solely on espionage made up just 4%."

And Microsoft's annual digital threats report found operations expanding even more through AI, with cybercriminals "accelerating malware development and creating more realistic synthetic content, enhancing the efficiency of activities such as phishing and ransomware attacks." [L]egacy security measures are no longer enough; we need modern defenses leveraging AI and strong collaboration across industries and governments to keep pace with the threat...

Over the past year, both attackers and defenders harnessed the power of generative AI. Threat actors are using AI to boost their attacks by automating phishing, scaling social engineering, creating synthetic media, finding vulnerabilities faster, and creating malware that can adapt itself... For defenders, AI is also proving to be a valuable tool. Microsoft, for example, uses AI to spot threats, close detection gaps, catch phishing attempts, and protect vulnerable users. As both the risks and opportunities of AI rapidly evolve, organizations must prioritize securing their AI tools and training their teams...

Amid the growing sophistication of cyber threats, one statistic stands out: more than 97% of identity attacks are password attacks. In the first half of 2025 alone, identity-based attacks surged by 32%. That means the vast majority of malicious sign-in attempts an organization might receive are via large-scale password guessing attempts. Attackers get usernames and passwords ("credentials") for these bulk attacks largely from credential leaks. However, credential leaks aren't the only place where attackers can obtain credentials. This year, we saw a surge in the use of infostealer malware by cybercriminals...

Luckily, the solution to identity compromise is simple. The implementation of phishing-resistant multifactor authentication (MFA) can stop over 99% of this type of attack even if the attacker has the correct username and password combination.
"Security is not only a technical challenge but a governance imperative..." Microsoft adds in their blog post. "Governments must build frameworks that signal credible and proportionate consequences for malicious activity that violates international rules." (The report also found that America is the #1 most-targeted country — and that many U.S. companies have outdated cyber defenses.)

But while "most of the immediate attacks organizations face today come from opportunistic criminals looking to make a profit," Microsoft writes that nation-state threats "remain a serious and persistent threat." More details from the Associated Press: Russia, China, Iran and North Korea have sharply increased their use of artificial intelligence to deceive people online and mount cyberattacks against the United States, according to new research from Microsoft. This July, the company identified more than 200 instances of foreign adversaries using AI to create fake content online, more than double the number from July 2024 and more than ten times the number seen in 2023.
Examples of foreign espionage cited by the article:

• China is continuing its broad push across industries to conduct espionage and steal sensitive data...

• Iran is going after a wider range of targets than ever before, from the Middle East to North America, as part of broadening espionage operations..

• "[O]utside of Ukraine, the top ten countries most affected by Russian cyber activity all belong to the North Atlantic Treaty Organization (NATO) — a 25% increase compared to last year."

• North Korea remains focused on revenue generation and espionage...

There was one especially worrying finding. The report found that critical public services are often targeted, partly because their tight budgets limit their incident response capabilities, "often resulting in outdated software.... Ransomware actors in particular focus on these critical sectors because of the targets' limited options. For example, a hospital must quickly resolve its encrypted systems, or patients could die, potentially leaving no other recourse but to pay."

[geronimo_2]

Jel vam krepo signal app jutros?

[The Exiled]

AWS se skršil i povukel dosta toga, uključujući i Signal.

[Neo-ST]

Meanwhile, Telegram radi na Vodki i pegla i dalje

[The Exiled]

Jasno, kad ga Pavel doma kod sebe hosta, skupa s backup arhivom svih "privatnih" razgovora.

[geronimo_2]

[Ivo_Strojnica]

koliko će ovo još stranica trajati?

[kopija]

Autor Ivo_Strojnica

koliko će ovo još stranica trajati?

Hvali Boga da su PCE registracije disejblane pa pacijenti s bug foruma mogu samo gledati i sliniti

[Neo-ST]

Autor Ivo_Strojnica

koliko će ovo još stranica trajati?

A moramo se malo našalit, ne budi ljubomoran 😁

EDIT:
https://x.com/elonmusk/status/1980206753209082334

[The Exiled]

Između Pavela i Elona, ne znaš koji više laže dok zine, a obojica se s milijardama na računima "bore za sigurnost i privatnost malog čovjeka", dok istovremeno hostaju platforme za širenje propagande i teorija zavjere. Čudno kak nitko od njih u svim onim intervjuima ne spomene uistinu škakljive teme, poput presađivanje kose i estetskih zahvata, ali to im je valjda tabu tema. Lakše je širiti PR bajke kako su sve sami postigli i od malena programiraju čuda tehnike, tako da nam svima bude bolje kad odletimo na Mars i prek Telegrama šaljemo srčeka.

[Neo-ST]

Ako se dobro sjećam, i Elon i Snowden su promovirali Signal kad je tek počeo, a ne znam šta je to škakljivo oko presađivanja kose...
To danas dosta ljudi radi u Turskoj koliko znam.

[The Exiled]

Nije škakljivo koliko je sarkazam s moje strane, jer likovi nisu u stanju sami sebe pogledati u zrcalo, a tu dijele pametne po intervjuima i to kaj oni nešto promoviraju ne znači ama baš ništa, jer uredno mijenjaju kaput ovisno o tome kaj im je u tom trenu bilo u interesu. Signal je danas zajedno s nekoliko stotina aplikacija po našem vremenu od 03:00h do 05:00h, zbog skršenog AWS-a bil nedostupan i evo odma Elona s argumentom da im više ne vjeruje, jer njegova riječ i mišljenje su jako bitni, pa ajmo brže bolje sve podrediti njemu i takvima. Kaj se Elon kao "zagovornik ljudskih prava i slobode govora" ne izjasni zakaj mu Twitter/X ne radi kad ide u Kinu moliti pare i radnu snagu za Tesline autiće na struju, dok se potajno nada kak mu ovi neće jednim potezom sjebati sve firme, jer mu ionako proizvode to kaj on prezetira kao svoje.