Privatnost i sigurnost podataka i korisnika

[Night]

Ako tko ima potrebe za takvim nečim postoji Buskill, spoji se USB stick preko magnetskog konektora (par dolara na Aliju) i onda skripta u slučaju odspajanja trenutno okida shutdown, brisanje LUKS ili Vera headera ili što već treba da se onemogući pristup podacima. Ideja je ako ti netko otme laptop iz ruke da se odmah nukaju svi ključevi za enkripciju i tako zaštite privatni ključevi i ostale bitne informacije.

https://github.com/buskill/buskill-app

[Neo-ST]

Šta će ti onda LUKS ?

[Night]

LUKS enkriptira podatke 256bitnim ključem, a taj ključ enkriptira šifrom (ili keyfileom) koji mu daš i koji imaš/znaš. Ta šifra ne mora nužno imati entropiju 256 bita, u pravilu je slabija od toga i onda ako se radi bruteforce raditi će se na headeru da se probije šifra i tako dođe do tog 256bit ključa jer direktni napad na 256bit ključ nije realano izvediv u trenutnom svemiru.

Tako ako si pobrisao header maknuo si taj vektor napada, kao i mogućnost da će netko izvući šifru od tebe i onda ostaje samo mogućnost da se bruteforca sam ključ enkripcije, a onda si nekih par milijardi godina miran

Ni wrench decryption metoda neće imati učinka https://xkcd.com/538/

Također smisao tog Buskilla je da napravi shutdown i tako počisti ključeve iz memorije i vrati disk u encrypted-at-rest stanje.

[tomek@vz]

Several browser extensions with a combined total of more than 2.3 million downloads were reportedly hijacking browsing sessions and tracking user activity. Many of these malicious add-ons remained available on the Chrome and Edge web stores for years, with some even receiving the coveted "Featured" and "Verified" badges, raising serious questions about the extension review processes used by Google and Microsoft.
According to researchers at Koi Security, the malicious extensions were part of a coordinated operation involving at least 18 known add-ons listed on the Chrome and Edge extension stores. Dubbed "RedDirection," the browser hijacking campaign is believed to have infected more than 2.3 million users across both browsers, making it one of the largest operations of its kind ever documented.
One of the suspicious extensions, The Color Picker – Geco, had over 100,000 installs on Chrome and a 4.2-star rating from more than 800 reviews. It also received similarly high ratings on Microsoft's Edge Add-ons store, with over 1,000 installs, giving it an appearance of legitimacy.

> Techspot

[mkey]

Pitanje je samo jesu li se te ekstenzije ponašale tako od početka ili su ih preuzeli naknadno.

[Colop]

Evo jedna zanimljiva stvar.
Netko je sastavio skriptu koja čita sudski registar Republike Hrvatske
https://sudreg.pravosudje.hr/ords/r/...ic/1?clear=APP
i šalje na službene e-mailove tvrtki mail sa imenom i prezimenom od direktora tvrtke koji pita:

[Colop]

Autor Colop

Evo jedna zanimljiva stvar.
Netko je sastavio skriptu koja čita sudski registar Republike Hrvatske
https://sudreg.pravosudje.hr/ords/r/...ic/1?clear=APP
i šalje na službene e-mailove tvrtki mail sa imenom i prezimenom od direktora tvrtke koji pita:

1:37 PM (1 hour ago)

to me
Bok,

Koliki je naš bankovni saldo? Moramo izvršiti uplatu od 39.755,19 eura. Možemo li platiti danas?

Lp,

Autor Colop

Direktor Direktorić

1:37 PM (1 hour ago)

to me
Bok,

Koliki je naš bankovni saldo? Moramo izvršiti uplatu od 39.755,19 eura. Možemo li platiti danas?

Autor Colop

Bok Direktore Direktorić

Bankovni saldo to može pokriti i možemo platiti danas.
Da li želiš da ti pošaljem novce na tvoj uobičajni račun?

Pozdrav

Eustahije Brzić

Autor Colop

Molim Vas da izvršite uplatu na račun naveden u nastavku.

Podaci o primatelju;

IME RAČUNA: Sai Krishna N
ADRESA: Waterside Court, Western Avenue, Chatham Maritime, ME4 4RT
IBAN: GB84NWBK53701172951591
BIC: NWBKGB2L
BANKA: National Westminster Bank
SVRHA: ELR Projekt
REFERENCA: INV/GB19-82017
OTPLATA: 39.755,19 EUR

Poslat ću kopiju fakture kasnije.
Molim vas da mi javite kada uplata bude izvršena.

Lp,
Direktor Direktorić

Autor Colop

Bok Direktore

Nema problema, odmah ću poslati novce.
Sa računa koje od naših banki želiš da platim račun, Hrvatske narodne banke ili Kent Banke?


Lijep pozdrav

Eustahije Brzić

Autor Colop

Hrvatske narodne bankey.


Lijep pozdrav

Direktor Direktorić

Autor Colop

Hvala ti na brzom odgovoru.
Šaljem novce.

Lijep pozdrav

Eustahije Brzić

Autor Colop

Čekam potvrdu o uplati.


Lp,
Direktor Direktorić

Autor Colop

Uplaćeno!

Pozdrav

Eustahije

Autor Colop

U redu, hvala.

Lp,
Direktor Direktorić

Autor Colop

Jel ti stvarno misliš da je itko toliki idiot da ti pošalje novce na neki nepoznati račun?
Pozdrav

Eustahije

Malo smo popričali, ne znam jel AI sa druge strane ili čovjek sa CHAT GPTom

[tomek@vz]

Security researchers and ethical hackers are uncovering new and unexpected places where malicious code can be hidden within IT infrastructure. Even the seemingly innocuous Domain Name System (DNS) – the foundational naming system for all internet-connected devices – can, in theory, be exploited by clever cybercriminals or state-sponsored attackers. This underlines a growing trend: no part of the digital stack is too mundane to become a vector for sophisticated threats.
Hiding ransomware inside a CPU was strange but now, attackers are going even deeper and broader across networks. In a recent discovery, security researchers revealed that a piece of malware had been embedded directly within the Domain Name System, effectively bypassing nearly all advanced security tools.

> Techspot

As GenAI tools make their way into mainstream apps and workflows, serious concerns are mounting about their real-world safety. Far from boosting productivity, these systems are increasingly being exploited – benefiting cybercriminals and cost-cutting executives far more than end users. Researchers this week uncovered how Google's Gemini model used in Gmail can be subverted in an incredibly simple way, making phishing campaigns easier than ever.
Mozilla recently unveiled a new prompt injection attack against Google Gemini for Workspace, which can be abused to turn AI summaries in Gmail messages into an effective phishing operation. Researcher Marco Figueroa described the attack on 0din, Mozilla's bug bounty program for generative AI services.
We strongly recommend reading the full report if you still think GenAI technology is ready for deployment in production or live, customer-facing products.

> Techspot

[tomek@vz]

FortiGuard Labs researchers have uncovered a sophisticated cryptomining campaign where the H2Miner botnet, active since late 2019, has expanded its operations to target Linux, Windows, and containerized environments simultaneously.
The campaign represents a significant evolution in cross-platform cryptocurrency mining attacks, with threat actors leveraging updated scripts and infrastructure to maximize financial gains from compromised systems.
The investigation revealed that H2Miner operators have updated their arsenal with new deployment URLs while maintaining core functionalities from previous campaigns documented in 2020.

> gbhackers

[spiderhr]

Pojavila se fejk/phising stranica e-Građani na domeni gov-nias DOT com

Registrirana je i nias-gov DOT com (trenutno ne radi).

[xlr]

Hvala, updejtane blackliste naivnih penzica!