Friday Security Brief

This release is trial for a weekly security brief compiled from trusted sources that encourage a general awareness of cyber security issues. I'm still not sure about how to do this so any thoughts or feedback will be appreciated.

Brexit deal mandates a limit to security standards

"In what is surely an unthinking cut-and-paste issue, page 921 of the Brexit deal mandates the use of SHA-1 and 1024-bit RSA:"

Brexit Deal Mandates Old Insecure Crypto Algorithms ~ Schneier on Security

FBI Warns of Hijacked Security Devices being exploited for Swatting

"Stolen email passwords are being used to hijack smart home security systems to “swat” unsuspecting users, the Federal Bureau of Investigation warned this week. The announcement comes after concerned device manufacturers alerted law enforcement about the issue."

FBI Warn Hackers are Using Hijacked Home Security Devices for Swatting ~ Threatpost

A look back at some email attacks of 2020

"In 2020, our spam folders bulged with malware-laced emails, phishing lures linking to ransomware schemes, impersonation attacks, spoofed brand and fake domain missives, and dubious requests from legit-sounding companies. So, what defined 2020 in spam?"

Inbox Attacks: The Miserable Year (2020) That Was ~ Threatpost

SolarWinds hackers accessed Microsoft source code

"The hackers behind the SolarWinds supply chain attack managed to escalate access inside Microsoft's internal network and gain access to a small number of internal accounts, which they used to access Microsoft source code repositories, the company said on Thursday."

SolarWinds hackers accessed Microsoft source code ~ Zdnet

CISA updates SolarWinds guidance

"The US Cybersecurity and Infrastructure Security Agency has updated its official guidance for dealing with the fallout from the SolarWinds supply chain attack.

In an update posted late last night, CISA said that all US government agencies that still run SolarWinds Orion platforms must update to the latest 2020.2.1HF2 version by the end of the year."

CISA updates SolarWinds guidance, tells US govt agencies to update right away

I do, and my personal go-to is the SOG Key Knife. Small, fits perfectly on my keychain, usable for most daily tasks, and not made in China, despite being inexpensive. I also tend to keep an old folding Buck my dad gave me in my bag for heavier duties.

Edit: added a photo of the SOG.

Second edit: Don’t get a knife for self-defense, they require significant training to properly use without getting hurt, and put you closer to your assailant. Learn situational awareness first and foremost, then if you still would like, pick up some pepper spray or a firearm.

What have you been listening to this week? You don't need to do a 6000 word review if you don't want to, but please write something! If you've just picked up some music, please update on that as well, we'd love to see your hauls :)

Feel free to give recs or discuss anything about each others' listening habits.

You can make a chart if you use last.fm:

http://www.tapmusic.net/lastfm/

Remember that linking directly to your image will update with your future listening, make sure to reupload to somewhere like imgur if you'd like it to remain what you have at the time of posting.

What have you been watching and reading this week? You don't need to give us a whole essay if you don't want to, but please write something! Feel free to talk about something you saw that was cool, something that was bad, ask for recommendations, or anything else you can think of.

If you want to, feel free to find the thing you're talking about and link to its pages on Anilist, MAL, or any other database you use!

Do we have any statistics on how many users have been banned and why they’ve been banned? What information should be or remain public? Some forum sites let you see the banned users post and comment history from prior to their ban; is there any value in that?

Unrelated; how many Tildes-ers are we up to now?

Thats all the languages I know. Please expand! I wish you all a happy new years and that next year is gonna be (even) better ;-)

I'm really greatful to be part of this community, one of the brigtest spots of friendlyness and respect in the wide internet :-) thank you all!

Someone posted this on the privacy subreddit. I also ended up finding this and this after doing a bit of searching. As someone who isn’t in the CS/IT spheres (chemical engineering is my background), Firefox has been my go-to browser for awhile, although I’m being made aware of the flaws of Firefox (most of which go over my head) and behavior of Mozilla. What can be done to fix this, especially considering that Firefox is the only FOSS browser with a significant user base?

Today's problem description: https://adventofcode.com/2020/day/19

Join the Tildes private leaderboard! You can do that on this page, by entering join code 730956-de85ce0c.

Please post your solutions in your own top-level comment. Here's a template you can copy-paste into your comment to format it nicely, with the code collapsed by default inside an expandable section with syntax highlighting (you can replace python with any of the "short names" listed in this page of supported languages):

<details>
<summary>Part 1</summary>

```python
Your code here.
```

</details>

I'm going on a news fast until after Samhain (that's Hallowe'en for you non-heathens). Still figuring out what, exactly, that means, but basically, I'm minimizing (ideally, eliminating) my exposure to ... hmmm ... I guess "unnecessary stress and anxiety" is the best summary.

Turned off my Feedly (ahem) feed. No more Mastodon, etc. I'll still be visiting Tildes, but less ... and I just finished tuning out the news from my postings list (unsubscribed from ~enviro, ~finance, ~health, ~lgbt, and of course, ~news ... added a bunch of tag filters — covid, Trump, politics, the FAANG corps, etc). That seems to have killed 95% of the stress-inducing headlines. Will add more tag filters, as they prove necessary.

Thoughts? Anyone already try this? Anyone wanna join me?

PS: I have no idea how to tag this post. Tildes ModGods, please have at it, but try not to add any tags that'll inadvertently hide my own post from me. Danke, y gracias.