security

Our Summer Clearance Sale is happening now! Save 50% on select @adminmagazine and Linux Magazine back issues and products. Use the links at the top of the page to get to the shop system for your region/currency.
https://shop.linuxnewmedia.com/shop/category/summer-clearance-79
#Linux #sale #LibreOffice #RaspberryPi #OpenSource #security #hacks #FOSS

Kroger is shuttering stores temporarily to pressure union to concede. Their offer is below the poverty levels set by the state! Their CEO took $15.4M home last year (450 times their average employee) and the company announced 7.5B in stock buybacks!! But now they cry poor, and want to stiff the workers.
#Teamsters #union #pride #fair #wages #job #security #slow #walking #negotiations #pay #below #minimum #wage #Kroger #greed #grocery #price #eggs #trucks #food #inflation https://www.thestreet.com/retail/kroger-faces-massive-worker-walkout-closed-stores

#Trump asked if he’ll call Governor #TimWalz in wake of #Minnesota #shootings

Normally in the wake of a serious shooting or crime the #president of the #UnitedStates calls the governor to make sure they have all they need in terms of #LawEnforcement resources, #medical, #security, #trauma response etc.

#POS #immoral #DerelictionOfDuty #law #USpol #MelissaHortman #JohnHoffman

This is how Trump responded:

Never thought I'd be writing official docs for a major open source project begging LLMs to stop fabricating surreal vulnerabilities.

Is this the future??? 😱

Hasta la vista, baby.

https://github.com/django/django/commit/0f60102444d8a2cfb662a7b11b3911b52567ee54

#django #security #opensource

This is awesome. I wish I live there because I've been doing this for a few years now, voluntarily as a solo runner. 😉#Running #Safety #Security #Fitness ( #Philippines when?)

RE: https://bsky.app/profile/did:plc:kimvbh2xwiov42efu6idyfs2/post/3lrzv5pmt6m26

I just published “Generating Passphrases Like correct horse battery staple” at
https://www.ii.com/passphrase-generators/ - please post suggestions for passphrase generators as a reply to this toot and I'll include them in my article!
#InfiniteInk #Privacy #Security #Tech #Passwords #Passphrases #CorrectHorseBatteryStaple
#Words #Writing #Byℵ #ByNM

On Monday morning, the #Pentagon abruptly canceled its participation in the Aspen Security Forum in Colorado.

Every summer for years, Republican & Democratic admins have dispatched senior civilian Pentagon officials & #military commanders to participate in the Aspen #Security Forum, a #NationalSecurity & #ForeignPolicy conference in Colorado.

#Trump #kakistocracy
https://www.nytimes.com/2025/07/14/us/politics/pentagon-military-aspen-forum.html?smid=url-share

🚨 Security Update: Hollo 0.6.5 Released

We've released #Hollo 0.6.5 with a critical #security fix for CVE-2025-53941, addressing an HTML injection vulnerability in federated posts.

Please #update immediately to protect your instance from potential phishing and XSS attacks.

How to update:

• Railway: Go to deployments → click three dots → Redeploy
• Docker: docker pull ghcr.io/fedify-dev/hollo:latest and restart
• Manual: git pull origin stable && pnpm install and restart server

A variety of US federal and state laws give cops the power to get your data from online services. This overview goes over how they work, and how they can be mitigated.
https://www.eff.org/deeplinks/2025/06/how-cops-can-get-your-private-online-data
#privacy #police #security #encryption

Memory safety is a matter of life and death https://lobste.rs/s/67tqpz #rust #security
https://joshlf.com/posts/memory-safety-life-and-death/

Inside Lazarus: How North Korea uses AI to industrialize attacks on developers https://lobste.rs/s/glb1iy #security
https://expel.com/blog/inside-lazarus-how-north-korea-uses-ai-to-industrialize-attacks-on-developers/

🤖 Gemini’s Gmail summaries were just caught parroting phishing scams. A security researcher embedded hidden prompts in email text (w/ white font, zero size) to make Gemini falsely claim the user's Gmail password was compromised and suggest calling a fake Google number. It's patched now, but the bigger issue remains: AI tools that interpret or summarize content can be manipulated just like humans. Attackers know this and will keep probing for prompt injection weaknesses.

TL;DR
⚠️ Invisible prompts misled Gemini
📩 AI summaries spoofed Gmail alerts
🔍 Prompt injection worked cleanly
🔐 Google patched, but risk remains

https://www.pcmag.com/news/google-gemini-bug-turns-gmail-summaries-into-phishing-attack
#cybersecurity #promptinjection #AIrisks #Gmail #security #privacy #cloud #infosec #AI

It’s trivial to create your own hacking robot https://lobste.rs/s/5g5q5w #rant #security #vibecoding
https://www.notcheckmark.com/2026/04/you-will-drink-the-gasoline/

Last week we published a set of three in-depth #map reports covering territorial control across #Somalia's claimed territories from 2023 to present. The June 2024 report is free for all readers, and shows the height of "#IslamicState" (#ISIS/#ISIL) control in the country:

https://www.polgeonow.com/2025/06/somalia-territorial-control-map-2024-isis-shabaab.html

#HornOfAfrica #cartography #maps #geography #Somaliland #Puntland #SSC_Khaatumo #mapping @geography @cartography @geopolitics #AlShabaab #AlQaeda #security #OSINT

Great, informative writeup of Cryptographic Gotchas: https://gotchas.salusa.dev/

Lots of fantastic references and links in there, too.

#cryptography #crypto #security #infosec

Have you checked out our Summer Clearance Sale yet? Select back issues and products are 50% off through July 31st! Get 2024 and older issues of Linux Magazine, @adminmagazine, Special Issues, and select products. Follow the link for the shop for your region/currency.
https://shop.linuxnewmedia.com/shop/category/summer-clearance-79
#Linux #OpenSource #security #FOSS #LibreOffice #hacks #RaspberryPi

Cybersecurity challenge: be nice to each other [IMPOSSIBLE] https://lobste.rs/s/jifvgs #culture #rant #security
https://sdomi.pl/weblog/29-please-do-better-thanks/

Smartphone security tip of the week: Do not take screenshots of personal or sensitive data

Certain malicious apps secretly search your screenshots for login data, recovery data or personal information.

Read more about this topic: https://smartphone-dont-spy.de/en/list/do-not-take-screenshots-of-personal-or-sensitive-data

#smartphone #privacy #security

An open call to #Android #developers! The #EuropeanCommission needs help evaluating #GooglePlay's #security claims. I'm going to do what I can. Anyone with knowledge of how app installation, uninstallation, sandboxing, signing, etc. could really help here. If you want to contribute, please reach out!

#DigitalMarketsAct #EU #Google #GooglePlayServices #policy

Don't trust cloud services with your creative work.

#enshittification #privacy #infosec #security #cybersecurity #writing #art

A list of Digital Service Providers located outside the jurisdiction of the United States of America:

https://codeberg.org/Linux-Is-Best/Outside_Us_Jurisdiction

This is an ongoing group project — so if you have any suggestions, corrections, or new information to share, feel free to reach out!

#USJurisdiction #USA #America #UnitedStates #Privacy #Security

#ProxPatch for #Proxmox VE Clusters!

Automate the most repetitive operational task in Proxmox: keeping cluster nodes updated! ProxPatch drains, migrates, patches, and reboots nodes in a controlled rolling fashion — no downtime, no manual intervention.

ProxPatch is written in Rust and fully #opensource.

Website: https://proxpatch.de
GitHub: https://github.com/gyptazy/ProxPatch

#PVE #homelab #enterprise #Debian #PatchManagement #ProxmoxVE #Security #ProxLB #SecurityUpdateManagement #Automation #Rustlang

Just found out that #BeagleIM automatically fetches web links in messages and plays the page's video if there is one.

This is not acceptable behavior!!!

* It's annoying. There isn't any obvious way to stop the video.

* It's insecure. The linked page might attack vulnerabilities in Beagle's video player.

* It exposes the user's IP address to anyone who sends them a message, potentially physically endangering them.

Will uninstall and replace ASAP.

#XMPP #security #cybersecurity #infosec #UX

***infosec specialists are needed in the resistance ***

The world needs tech security specialists to run workshops at public libraries for all ages & abilities to remove spyware, AI, reduce surveillance, understand the issues, & for more advanced, move to Linux, degooglefy, etc.

Libraries will pay good wages for these workshops.
If you have these skills, please consider offering them.

#libraries #library #tech #infosec #privacy #security #activism #antifa #resistance

Are you interested in a different kind of security conference?

Then take a look at the Open Security Conference (@OSCo). #osco25 takes place from October 2 to 5 in Rückersbach (Germany near Frankfurt) and registration is still open at https://opensecurityconference.org/.
(this is an English version of the original German thread https://infosec.exchange/@realn2s/114936419689473030)

Why?

The Open Security Conference aims to be diverse and inclusive. This also includes different levels of knowledge and experience.
It is therefore not only for security experts or for people who have (already) worked in the security sector for a long time,
but also for people who are interested in security or want to get into the field.

The #OpenSpace format not only enables expert presentations,
but also non-expert topics or questions as session topics. Sessions are not resticted to presentations, they can be interactive, collaborative, workshops or basically anything else.

Since topics do not have to be submitted months in advance,
but the agenda is created jointly by the participants, hot topics can also be covered.

The conference is non-commercial, i.e. the total costs are shared between the participants (including the organizers).
The costs include accommodation and meals in the conference hotel.

And yes, there are also sponsors who cover part of the costs.

But not everything is different.

There are great keynotes e.g. by @bkastl ("History repeating itself") and Mireia Cano ("Building an AppSec Program from Scratch").

#CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity