Tor Browser opsec discovery: The security level slider cannot be relied upon without a full browser restart: https://www.privacyguides.org/articles/2025/05/02/tor-security-slider-flaw/

If you frequently switch between security levels in Tor Browser (or Mullvad Browser!), make sure you are fully restarting the browser every time, otherwise you could still unexpectedly have dangerous JS features enabled!

This requirement is not publicly documented anywhere. Hopefully @torproject will add a prompt to restart after modifying this setting in a future Tor Browser release.

We've thoroughly investigated the reported security leak in our email system and can officially declare that we are currently clean on OPSEC.

If you are a US-based organisation working in support of human rights and/or the environment looking to swiftly migrate your server infrastructure and data to safer soil, get in touch.

We have extensive experience helping frontline at-risk orgs find a safer home for their work, on their terms and under their control, with a particular focus on hosting in jurisdictions with robust data-protection laws.

https://nikau.io

Pass it on.

Safety tip for fedi users

Hi friends! Hazel here with an important tip for online safety. We have lots of fun here on fedi, but this is still the internet. It's absolutely critical to safeguard your privacy, so no matter how safe it may seem: never share your personal information online!

There are lots of friendly, close-knit communities here, but that doesn't make it safe to post personal details. Bad-faith actors sometimes sneak into communities like ours, looking for vulnerable people to stalk and harass. Fedi, in particular, has a problem of hateful people operating "scrapers" that use bots to scan the federated timeline and capture any information on marginalized people. This gets passed on to dangerous groups like KiwiFarms and used for harassment, doxxing, and other terrible things.

Fortunately, you can protect yourself by limiting what types of personal information you share online. In particular, here are some things that you should never ever reveal:
- Your legal name(s)
- Your birth date
- Your address (even city of residence)
- Photos of your house (especially the exterior)
- Your phone number
- Where you work

There's also some which are a bit less critical, but I still strongly recommend against sharing. If you want to publish one of these, then please consider your risk factors!
- Selfies / other photos showing your face
- Your exact age (and be careful with ranges)
- Where you went to school / college
- Details of businesses / organizations you visit
- Uncommon medical conditions (doctors are frequently hacked)

This may seem restrictive, but I promise you - it's a small price to pay for online safety! There are horrible people out there, and they'd like nothing more than to make us suffer. Let's make sure that doesn't happen!

--
With love from Hazel,
Admin of transfem.social
​​ ​​

#OnlineSafety #PersonalSafety #DigitalSafety #Safety #Privacy #OpSec

Així que Espanya va enviar una de les seves ordres xusques a Suïssa (d'aquelles que anomenen terroristes a Tsunami –LOL), Suïssa va requerir a #ProtonMail i això va acabar descobrint la identitat d'una persona (a través del seu mail de recuperacio i un requeriment a Apple), i en la seva detenció.

Aneu amb compte i no doneu per fet que un servei segur/encriptat us converteix en anònims.

(Notícia de fa mínim dos setmanes que pel que sigui no m'havia arribat fins avui)

How to encrypt and #password protect your Excel files

From @protonmail

#security #opsec #cybersecurity

https://proton.me/blog/encrypt-excel-file

Hi infosec.exchange, (and hi again #mastodon + the rest of the #fediverse )

I have successfully infiltrated your server and will load subsequent toots here for the foreseeable future.

(( DETECTED: #introduction ))

I am the same Avoid The Hack from #birdsite and run the website https://avoidthehack.com

Most of this feed is related to #cybersecurity and #privacy - generally for the individuals, families, and the super small organizations out there. I often focus on the intersection between the two.

Sometimes I post advice. Sometimes I share tools. Sometimes I share articles I have written. Sometimes I share articles featuring Avoid the Hack. Sometimes there is humor and memes.

Stay safe out there.

Since its nearing Beta, I should talk about my pet project: ​​ Wyng Backup!

What's so great about it?! ​​

• Wyng can make lightning fast backups of logical volumes, disk images, or just plain large files... like multiple-terabyte-sized volumes backed up in just seconds! (Your local storage needs snapshot capability for this to work, but backup storage does not!)
• An ingenious snapshot rotation scheme is used to keep snapshot local space consumption to a tiny fraction of what they normally require (a big drawback of other snapshot-based backup tools).
• Deduplication is also supported.
• Improves Opsec: Works even in net-isolated admin environments, like Qubes 'dom0', and there is no trust bestowed on remote or guest systems. There is no mounting of volumes or disk images; all data is handled as just a set of blocks. All encryption & verification operations happen within the local admin environment. Perfect for keeping backups of VMs/containers with various levels of (un)trusted content.
• Maintenance functions (like pruning old backups) are also very fast, similar to how Time Machine works.

Try the final alpha here: https://github.com/tasket/wyng-backup/tree/04alpha3 There is also a full release of the prior version which lacks some features and usability improvements in the new alpha.
#wyng #backup #FOSS #linux #lvm #btrfs #infosec #opsec #QubesOS #vmware #containers

How to stop email trackers from invading your #privacy

@protonmail gives tips for improving your privacy while using email.

#privacymatters #privatebydefault #opsec

https://proton.me/blog/how-to-stop-email-trackers

Hi Mastodon

(Redoing #introduction)

I am the same Avoid The Hack from Bird Site

Only news items and updates for https://avoidthehack.com are cross posted from Bird Site. Everything else is here (and only here) as I’m more active on Mastodon.

Most of this feed is related to #cybersecurity and #privacy. Sometimes I post advice. Sometimes I share articles I have written. Sometimes I share articles featuring Avoid The Hack. Sometimes there are memes.

I don't have a face or real name here, but does that even matter?

The beauty of the internet is finding random people with similar interests and create healthy discussions, identities are completely irrelevant.

Also #privacy and #opsec but hey, that's an extra ;)

Ik heb zojuist een bot account aangemaakt waarmee mijn #HomeAssistant huis @DomusSapiens met de buitenwereld wordt verbonden. Binnenkort kun je hier meelezen wat er gebeurt. En ja, ik denk aan mijn #OpSec.