Do you accept suggestions of links? #1

(An Antivirus does not improve your security)

Most of these links are dead and not technical but rather opinion based, maybe in future add archive.org or arhive.ph link when referencing a tweet.

Only first link is dead. @Zanthed @terezipyrope

But yeah they’re not technical.
will check your other links. Thanks

jermanuts · 2022-08-05T14:33:44Z

https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html
https://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest , https://portswigger.net/daily-swig/multiple-encryption-flaws-uncovered-in-telegram-messaging-protocol. Also no E2EE by default only when enabling secret chat, secret chat isn't available on desktop and some groups are censored by app store/play store.

https://matt.traudt.xyz/posts/2019-10-17-you-want-tor-browser-not-a-vpn/
https://madaidans-insecurities.github.io/encrypted-dns.html , https://madaidans-insecurities.github.io/browser-tracking.html
https://madaidans-insecurities.github.io/security-privacy-advice.html#email
https://www.privacyguides.org/basics/account-deletion/
https://www.privacyguides.org/advanced/erasing-data/#erasing-specific-files
https://www.privacyguides.org/basics/email-security/#email-metadata-overview
https://www.youtube.com/watch?v=QRYzre4bf7I (well explained TOR)
https://www.youtube.com/watch?v=lVcbq_a5N9I (well explained TOR hidden services)

@jermanuts

https://sudneela.github.io/posts/the-workings-of-whatsapps-end-to-end-encrypted-backups https://www.ndss-symposium.org/ndss-paper/improving-signals-sealed-sender/ https://portswigger.net/daily-swig/multiple-encryption-flaws-uncovered-in-telegram-messaging-protocol https://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest Thanks @jermanuts #1 (comment) & #1 (comment)

@jermanuts

https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html thanks @jermanuts #1 (comment)

beerisgood · 2022-08-05T19:25:39Z

I added most of it and also mentioned you again in the commits.
Thank you!

jermanuts · 2022-08-05T19:42:39Z

Thanks, glad you liked them.

jermanuts · 2022-08-07T20:53:29Z

https://www.bejarano.io/sms-phishing/
https://mega-awry.io/ (mega.nz flaws, don't trust encrypted storage clouds use cryptomator to upload your files to the cloud)
https://mjg59.dreamwidth.org/59479.html (The Freedom Phone is not great at privacy)

@jermanuts

https://mjg59.dreamwidth.org/59479.html Thanks @jermanuts beerisgood/Security-link-collection#1 (comment)

@jermanuts

https://www.bejarano.io/sms-phishing/ Thanks @jermanuts #1 (comment)

beerisgood · 2022-08-08T18:05:09Z

Added 🍺

Last link added in https://github.com/beerisgood/Smartphone_Security/blob/main/README.md

jermanuts · 2022-08-12T00:45:09Z

https://tonyarcieri.com/4-fatal-flaws-in-deterministic-password-managers
https://www.ietf.org/archive/id/draft-nottingham-avoiding-internet-centralization-05.html
https://pseudorandom.resistant.tech/federation-is-the-worst-of-all-worlds.html
https://krausefx.com/blog/ios-privacy-instagram-and-facebook-can-track-anything-you-do-on-any-website-in-their-in-app-browser
https://rohanrd.xyz/posts/why-you-should-start-self-hosting/

EDIT: do you think the last 2 links fit/related to security?

Not related.
Do you have any way of contacting? Might invite you to servers where you meet like-minded people or for discussing some topics.

@jermanuts

https://tonyarcieri.com/4-fatal-flaws-in-deterministic-password-managers thanks @jermanuts #1 (comment)

beerisgood · 2022-08-12T06:07:59Z

Password manager link added. Thanks 👍

I read about Meta the other day, but since Meta itself is a problem in itself, i don't see the point of recording individual things about it.
Regarding the other links i have no use.

I am only active on GitHub. All other community platforms are always crap from the users or even from the moderation and i don't want that anymore

jermanuts · 2022-08-12T11:49:39Z

Thanks for replying,
I was going to recommend #grapheneos:grapheneos.org and https://matrix.to/#/#privacyguides:matrix.org anyway privacyguides is probably not as aggressive as grapheneos when it comes to moderation.

What about #1 (comment) https://www.hardenize.com/ , https://mxtoolbox.com/ they seem to be more accurate than the ones recommended in this repo

guardianproject/haven#454 (haven is broken)
Tox has a severe vulnerability since 2017 and has yet to be fixed as of July 2022 where messages are spoofable.
https://blog.invisiblethings.org/2011/04/23/linux-security-circus-on-gui-isolation.html

Mind changing the antivirus part in this repo with https://privsec.dev/knowledge/badness-enumeration/#antiviruses instead as we discussed #1 (comment)

beerisgood · 2022-08-12T15:04:58Z

GrapheneOS is already listed in my Smartphone repository.
PrivacyGuides isn’t that good.

Will check your newest links 👍

@jermanuts

https://blog.invisiblethings.org/2011/04/23/linux-security-circus-on-gui-isolation.html thanks @jermanuts #1 (comment)

@jermanuts

https://privsec.dev/knowledge/badness-enumeration/#antiviruses thanks @jermanuts #1 (comment)

old: https://twitter.com/ZanthedNT/status/1446943944261128192?t=ZuoyFaaPKD5WW5vfWoWnNg&s=19 new: https://web.archive.org/web/20211009210153/https://twitter.com/ZanthedNT/status/1446943944261128192

beerisgood · 2022-08-13T11:04:53Z

What about #1 (comment) https://www.hardenize.com/ , https://mxtoolbox.com/ they seem to be more accurate than the ones recommended in this repo

while they're nice, both doesn't provide any further information or are even bloated with too much different stuff.

added other ones 🍺

jermanuts · 2022-08-13T17:03:47Z

https://superuser.com/questions/926517/is-it-safe-to-register-on-an-http-webpage-when-i-am-using-vpn
https://matt.traudt.xyz/posts/2019-10-17-you-want-tor-browser-not-a-vpn/#untruth-vpns-protect-you-from-local-network-hackers
https://daniel.haxx.se/blog/2022/08/10/ipfs-and-their-gateways/

@jermanuts

https://gist.github.com/alexbakker/b297916d4375bc9fbb620def3ba64ff4 https://superuser.com/a/926524 thanks @jermanuts #1 (comment)

CompSciFutures · 2023-09-15T06:48:49Z

+1

…

On Fri, Sep 15, 2023 at 3:58 PM xTrEIX ***@***.***> wrote: https://www.spacebar.news/p/stop-using-brave-browser I don't use Brave and I'm not in favor of replacing ads with others, but I don't see what ideology and politics has anything to do with a real security / confidentiality, moreover, most of the things he writes are old and have been discussed many times, have little impact on the user and can be disabled, in short, it's not a relevant article from my point of view. — Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACGU3TNJSOXG2FDHHKR6LQ3X2PVANANCNFSM54FYG5KA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

beerisgood · 2023-09-15T09:06:56Z

most of the things he writes are old and have been discussed many times

If you have details why the technical research in that article is wrong, i'm open for links.

have little impact on the user and can be disabled, in short, it's not a relevant article from my point of view.

abusing an browser for own suspicious crypto shouldn't be activated in any way. No matter if you can disable it or not
Also we have (an already solved) discussion: #4

jermanuts · 2023-09-15T11:21:29Z

most of the things he writes are old and have been discussed many times

Agree

If you have details why the technical research in that article is wrong, i'm open for links.

It's more politically motivated and all his points were already discussed before. Take a look yourself https://www.spacebar.news/p/expressvpn-is-sponsoring-far-right/ and several replies from privacyguides community https://discuss.privacyguides.net/t/why-recommend-brave-browser-on-android-and-not-mull/13957/2

abusing an browser for own suspicious crypto shouldn't be activated in any way. No matter if you can disable it or not Also we have (an already solved) discussion: #4

What about Pocket in Firefox?

beerisgood · 2023-09-15T12:22:43Z

What about Pocket in Firefox?

Firefox did and do other suspicious crap and isn't recommend anyway.

jermanuts · 2024-01-05T20:33:03Z

https://anarc.at/blog/2022-06-17-matrix-notes/ and https://crnkovic.dev/testing-converso/

btw I started my own "collection of links" repo https://github.com/jermanuts/bad-opsec/ 😊

@jermanuts

https://anarc.at/blog/2022-06-17-matrix-notes/ thx @jermanuts #1 (comment)

@jermanuts

https://crnkovic.dev/testing-converso/ thanks @jermanuts #1 (comment)

beerisgood · 2024-01-05T22:59:14Z

Thanks I add both 🍻

Good luck with your collection!

jermanuts · 2024-01-24T19:25:34Z

https://blog.erethon.com/blog/2022/07/13/what-a-malicious-matrix-homeserver-admin-can-do/

https://blog.erethon.com/blog/2023/06/21/what-happens-when-a-matrix-server-disappears/

https://j3s.sh/thought/fail2ban-sux.html

https://sequoia-pgp.org/blog/2021/06/28/202106-hey-signal-great-encryption-needs-great-authentication/ (messenger problems)

@jermanuts

https://blog.erethon.com/blog/2023/06/21/what-happens-when-a-matrix-server-disappears/ thanks @jermanuts #1 (comment)

@jermanuts

https://j3s.sh/thought/fail2ban-sux.html thanks @jermanuts #1 (comment)

beerisgood · 2024-01-24T20:09:16Z

thanks I added some.

CompSciFutures · 2024-02-24T14:45:47Z

Your Messages on Telegram Are Not Encrypted, the Platform Is Not as Private as You Think
Telegram claims to be private and encrypted, but that isn’t really the case.

https://medium.com/secure-words/your-messages-on-telegram-are-not-encrypted-the-platform-is-not-as-private-as-you-think-d14a6342928d

Takeout: only Secret Chat's are e2e encrypted. Everything else is cleartext.

beerisgood · 2024-02-24T18:54:28Z

@CompSciFutures yes this is sadly still the case since years and I already include three links about that:
https://portswigger.net/daily-swig/multiple-encryption-flaws-uncovered-in-telegram-messaging-protocol
https://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest
https://blog.bytebytego.com/p/ep29-online-gaming-protocol#§is-telegram-secure

CompSciFutures · 2024-02-25T07:39:52Z

fab :)

…

On Sun, Feb 25, 2024 at 5:54 AM beerisgood ***@***.***> wrote: @CompSciFutures <https://github.com/CompSciFutures> yes this is sadly still the case since years and I already include three links about that: https://portswigger.net/daily-swig/multiple-encryption-flaws-uncovered-in-telegram-messaging-protocol https://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest https://blog.bytebytego.com/p/ep29-online-gaming-protocol#§is-telegram-secure — Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACGU3TMGC7JWTH6QDL423V3YVIZPBAVCNFSM54FYG5KKU5DIOJSWCZC7NNSXTN2JONZXKZKDN5WW2ZLOOQ5TCOJWGI2TGOBRGI2A> . You are receiving this because you were mentioned.Message ID: ***@***.***>

jermanuts · 2024-02-27T15:49:24Z

https://routersecurity.org/consumerrouters.php

https://passwordbits.com/ Goldmine articles, Ex: https://passwordbits.com/mix-non-english-passwords-secure/

https://www.troyhunt.com/thanks-fedex-this-is-why-we-keep-getting-phished/

@jermanuts

https://routersecurity.org/consumerrouters.php Thx @jermanuts #1 (comment)

beerisgood · 2024-02-27T19:03:29Z

Thanks.

jermanuts · 2024-04-13T11:29:33Z

https://educatedguesswork.org/posts/public-wifi/ public wifi security (clears all FUD about public wifi VPN marketing)

Nextcloud E2EE broken

EDIT: Adding quantum resistance to Signal double ratchet algorithm SimpleX Chat 😎

@jermanuts

https://gergelykalman.com/why-you-shouldnt-use-a-commercial-vpn-amateur-hour-with-windscribe.html https://educatedguesswork.org/posts/public-wifi/ thx @jermanuts for the public wifi link #1 (comment)

beerisgood · 2024-04-14T10:35:28Z

https://educatedguesswork.org/posts/public-wifi/ public wifi security (clears all FUD about public wifi VPN marketing)

Nextcloud E2EE broken

EDIT: Adding quantum resistance to Signal double ratchet algorithm SimpleX Chat 😎

Thanks. I added this and also another new post about VPN.
Found also the Nextcloud think in Mastodon a new days ago 🍺

jermanuts · 2024-04-27T16:00:33Z

https://words.filippo.io/dispatches/telegram-ecdh/ (THE MOST BACKDOOR-LOOKING BUG I’VE EVER SEEN)

TokTok/c-toxcore#426 (https://blog.tox.chat/2023/03/redesign-of-toxs-cryptographic-handshake/)

@jermanuts

https://words.filippo.io/dispatches/telegram-ecdh/ https://blog.tox.chat/2023/03/redesign-of-toxs-cryptographic-handshake/ thx @jermanuts #1 (comment)

beerisgood · 2024-04-27T19:01:55Z

Thanks! I added both 🍻

wldasf · 2024-05-18T19:15:17Z

Sorry for hijacking this issue but https://ynwarcs.github.io/Win11-24H2-CFG

beerisgood · 2024-05-18T21:39:13Z

Sorry for hijacking this issue but https://ynwarcs.github.io/Win11-24H2-CFG

Sounds like a good thing for user.

jermanuts · 2024-07-15T20:56:26Z

https://palant.info/2024/07/15/how-insecure-is-avast-secure-browser/

@jermanuts

https://palant.info/2024/07/15/how-insecure-is-avast-secure-browser/ Thx @jermanuts #1 (comment)

beerisgood · 2024-07-16T04:22:22Z

Thanks. Added 🍺

beerisgood added a commit that referenced this issue Jul 22, 2022

End-to-End encryption in web apps added

47004bf

https://cronokirby.com/posts/2021/06/e2e_in_the_browser/ Thanks @jermanuts #1 (comment)

beerisgood closed this as completed Jul 26, 2022

beerisgood reopened this Aug 1, 2022

beerisgood added a commit that referenced this issue Aug 5, 2022

linux: broken encryption added

50ef42c

https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html thanks @jermanuts #1 (comment)

beerisgood added a commit to beerisgood/Mobile_Security that referenced this issue Aug 8, 2022

ClearOS added

3145060

https://mjg59.dreamwidth.org/59479.html Thanks @jermanuts beerisgood/Security-link-collection#1 (comment)

beerisgood added a commit that referenced this issue Aug 8, 2022

SMS phishing added

78e44be

https://www.bejarano.io/sms-phishing/ Thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Aug 12, 2022

fatal flaws in deterministic password managers added

b836705

https://tonyarcieri.com/4-fatal-flaws-in-deterministic-password-managers thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Aug 13, 2022

Linux Security Circus added

ab9f948

https://blog.invisiblethings.org/2011/04/23/linux-security-circus-on-gui-isolation.html thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Aug 13, 2022

one more Antivirus link added

b2f31b9

https://privsec.dev/knowledge/badness-enumeration/#antiviruses thanks @jermanuts #1 (comment)

beerisgood referenced this issue Aug 13, 2022

fixed broken link

d9b4aa0

old: https://twitter.com/ZanthedNT/status/1446943944261128192?t=ZuoyFaaPKD5WW5vfWoWnNg&s=19 new: https://web.archive.org/web/20211009210153/https://twitter.com/ZanthedNT/status/1446943944261128192

beerisgood added a commit that referenced this issue Aug 14, 2022

VPN services added

4412171

https://gist.github.com/alexbakker/b297916d4375bc9fbb620def3ba64ff4 https://superuser.com/a/926524 thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Jan 5, 2024

Matrix concerns

fe353a8

https://anarc.at/blog/2022-06-17-matrix-notes/ thx @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Jan 5, 2024

Messenger app Converso

de6ea3d

https://crnkovic.dev/testing-converso/ thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Jan 24, 2024

Matrix metadata issues

37d01c8

https://blog.erethon.com/blog/2023/06/21/what-happens-when-a-matrix-server-disappears/ thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Jan 24, 2024

fail2ban sucks

f5849d8

https://j3s.sh/thought/fail2ban-sux.html thanks @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Feb 27, 2024

Router security problems

678b041

https://routersecurity.org/consumerrouters.php Thx @jermanuts #1 (comment)

This comment was marked as spam.

Sign in to view

beerisgood added a commit that referenced this issue Apr 14, 2024

more VPN Insecurity

2fb0a4e

https://gergelykalman.com/why-you-shouldnt-use-a-commercial-vpn-amateur-hour-with-windscribe.html https://educatedguesswork.org/posts/public-wifi/ thx @jermanuts for the public wifi link #1 (comment)

beerisgood added a commit that referenced this issue Apr 27, 2024

Messenger Tox and (more) Telegram InSecurity

ea99730

https://words.filippo.io/dispatches/telegram-ecdh/ https://blog.tox.chat/2023/03/redesign-of-toxs-cryptographic-handshake/ thx @jermanuts #1 (comment)

beerisgood added a commit that referenced this issue Jul 16, 2024

Avast browser

bed59fb

https://palant.info/2024/07/15/how-insecure-is-avast-secure-browser/ Thx @jermanuts #1 (comment)

Do you accept suggestions of links? #1

Do you accept suggestions of links? #1

Comments

jermanuts commented Jul 21, 2022

beerisgood commented Jul 21, 2022

jermanuts commented Jul 21, 2022

beerisgood commented Jul 22, 2022

jermanuts commented Aug 1, 2022 • edited Loading

jermanuts commented Aug 1, 2022

beerisgood commented Aug 1, 2022

jermanuts commented Aug 5, 2022

beerisgood commented Aug 5, 2022

jermanuts commented Aug 5, 2022

jermanuts commented Aug 7, 2022

beerisgood commented Aug 8, 2022

jermanuts commented Aug 12, 2022 • edited Loading

beerisgood commented Aug 12, 2022

jermanuts commented Aug 12, 2022 • edited Loading

beerisgood commented Aug 12, 2022

beerisgood commented Aug 13, 2022

jermanuts commented Aug 13, 2022

CompSciFutures commented Sep 15, 2023 via email

beerisgood commented Sep 15, 2023

jermanuts commented Sep 15, 2023 • edited Loading

beerisgood commented Sep 15, 2023

jermanuts commented Jan 5, 2024

beerisgood commented Jan 5, 2024

jermanuts commented Jan 24, 2024

beerisgood commented Jan 24, 2024

CompSciFutures commented Feb 24, 2024

beerisgood commented Feb 24, 2024

CompSciFutures commented Feb 25, 2024 via email

jermanuts commented Feb 27, 2024

beerisgood commented Feb 27, 2024

jermanuts commented Apr 13, 2024 • edited Loading

This comment was marked as spam.

beerisgood commented Apr 14, 2024

jermanuts commented Apr 27, 2024

beerisgood commented Apr 27, 2024

wldasf commented May 18, 2024

beerisgood commented May 18, 2024

jermanuts commented Jul 15, 2024

beerisgood commented Jul 16, 2024

jermanuts commented Aug 1, 2022 •

edited

Loading

jermanuts commented Aug 12, 2022 •

edited

Loading

jermanuts commented Aug 12, 2022 •

edited

Loading

jermanuts commented Sep 15, 2023 •

edited

Loading

jermanuts commented Apr 13, 2024 •

edited

Loading