mathstodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance for maths people. We have LaTeX rendering in the web interface!

Server stats:

3K
active users

#hack

14 posts14 participants2 posts today
Continued thread

Then, a couple of months later, I get spam from a seller trying to get me to buy knockoff designer handbags, or a Nigerian prince trying to secret his fortune away, or something else odious.

But look -- the email was sent to the address "crappytire@example.net"!

Now I know, with absolute certainty, that this spammer got my address, directly or indirectly, from Crappy Tire. Maybe they sold their mailing list far and wide. Maybe their systems were hacked and every customer's email was exfiltrated.

I can now take action. If I think they sold my address, I can write a nastygram referencing their privacy policy or Canada's PIPEDA act, or Europe's GDPR, or whatever. If I think my address was stolen from their systems, I can report the security incident to them, or publicize it so others know it may have happened to them.

And most importantly, I can disable that email address. Just refuse all mail sent to it. It's no longer of use to spammers or crooks. If I ever deal with Crappy Tire again, I give them a new unique address.

Anyway, that's a lot of backstory. I use this technique extensively. I have caught many, many companies selling/renting their mailing lists in violation of their own policies. I have caught many others that have been hacked, and they didn't even know it.

So what's the thing that happens to me occasionally regarding this?

2/x

Favorite thing lately is finding an article I wish were in podcast form, saving the text to a .txt file, then having TTS Util use RH Voice to convert the file into an audio reading, and listen to my own little robotic FOSS nanny read me the stories I want to hear in my headphones as I do yardwork.

G'day
Another week... Another data breach / hack

This one is grand theft retirement savings :blobcat_ohno:

It's time to make sure all your financial accounts have multifactor authentication enabled (verification codes

Check your:
Bank accounts
Superannuation (pension) accounts
Insurance accounts
Broker accounts
... Anything associated with your money or finances

This has been a public service announcement 📰
theguardian.com/australia-news

If you don't know how to use the multifactor authentication supplied, then get the organisation to explain it to you

--
Multi-factor authentication (MFA) is an enhanced security method that requires users to provide multiple forms of verification (factors) beyond just a password to access an account or system
#CyberSecurity #Data #Hack

The Guardian · $500,000 stolen in Australian super fund data breachBy Josh Taylor
Continued thread

🧵 …oh look, once again (see toot above) Twitter / X was leaked again. Well, this is not surprising.

»Twitter (X) Hit by Data Leak of 2.8 Billion Users; Allegedly an Insider Job
Massive Twitter (X) data breach exposes details of 2.8 billion users; alleged insider leak surfaces with no official response from the company.«

🍿 hackread.com/twitter-x-of-2-8-

X (Twitter) Largest Data Breach Ever? 2.8 Billion User Info Exposed
Hackread - Latest Cybersecurity, Tech, AI, Crypto & Hacking News · Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider JobFollow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Un test di #phishing geniale che fa leva sulla curiosità.
Forse non sarebbe male immaginare una campagna di test simili benevoli disegnati apposta per far prendere coscienza alle persone sui rischi della non consapevolezza e della reattività in rete. Immaginate che dopo inquadrato il QR code gli utenti fossero portati a una pagina benevola che prima li accoglie con un "benvenuto coglione" e poi li informa di quello che sarebbe accaduto se quel post (email o quel che volete) invece di essere stato preparato per una iniziativa di prevenzione fosse stato preparato da malintenzionati.
#cybersecurity #hack #prevenzione #phishing