NerdCulture

5 posts5 participants0 posts today

Felix EckhardtBei der Techniker Kasse hat man es anscheinend nicht verstanden:"Bei Sicherheitsbedenken wägt der TK-Chef ab: Zwar gebe es keine absolute Sicherheit, aber auch analoge Daten seien nicht sicher. In eine Praxis einzubrechen und dort Aktenordner zu klauen sei einfach."Bei der ePA kann man im Erfolgsfall Millionen Datensätze abziehen. Das ignoriert der TK Chef komplett. Die Attraktivität für Angreifer ist ebenso wie der mögliche Schaden deutlich höher.<a href="https://det.social/tags/ePA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ePA</a> <a href="https://det.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://det.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://det.social/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://det.social/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a>

Benjamin Carr, Ph.D. 👨🏻‍💻🧬<a href="https://hachyderm.io/tags/EFF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EFF</a> Leads Prominent <a href="https://hachyderm.io/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> Experts in Urging Trump Administration to Leave <a href="https://hachyderm.io/tags/ChrisKrebs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ChrisKrebs</a> Alone Political Retribution for Telling the Truth Weakens the Entire <a href="https://hachyderm.io/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> Community and Threatens Our <a href="https://hachyderm.io/tags/Democracy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Democracy</a>; Letter Remains Open for Further Sign-Ons <a href="https://www.eff.org/press/releases/eff-leads-prominent-security-experts-urging-trump-administration-leave-chris-krebs" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.eff.org/press/releases/eff-leads-prominent-security-experts-urging-trump-administration-leave-chris-krebs</a> <a href="https://hachyderm.io/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSecurity</a> <a href="https://hachyderm.io/tags/ITSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSec</a> <a href="https://hachyderm.io/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CISA</a>

𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕sqlmapAutomatic SQL injection and database takeover tool🔧 <a href="https://sqlmap.org" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sqlmap.org</a><a href="https://chaos.social/tags/sql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sql</a> <a href="https://chaos.social/tags/map" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#map</a> <a href="https://chaos.social/tags/db" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#db</a> <a href="https://chaos.social/tags/sqlmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sqlmap</a> <a href="https://chaos.social/tags/sqldatabase" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sqldatabase</a> <a href="https://chaos.social/tags/pgsql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pgsql</a> <a href="https://chaos.social/tags/database" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#database</a> <a href="https://chaos.social/tags/mysql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mysql</a> <a href="https://chaos.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://chaos.social/tags/injection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#injection</a> <a href="https://chaos.social/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://chaos.social/tags/opensql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensql</a> <a href="https://chaos.social/tags/sqlite" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sqlite</a> <a href="https://chaos.social/tags/postgresql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#postgresql</a> <a href="https://chaos.social/tags/takeover" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#takeover</a> <a href="https://chaos.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://chaos.social/tags/infection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infection</a>

Kevin Karhan :verified:<a href="https://infosec.exchange/@krypt3ia" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@krypt3ia</a> I think <a href="https://infosec.exchange/@briankrebs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@briankrebs</a> and other <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a> profressionals are cringing hard.<ul><li>At least I do...</li></ul>

Kevin Karhan :verified:<a href="https://hachyderm.io/@dave_andersen" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@dave_andersen</a> <a href="https://furry.engineer/@AVincentInSpace" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@AVincentInSpace</a> personally I consider any "<a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KYC</a>" a risk-factor, and <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@signalapp</a> has proven their ability and willingness to restrict functionality (i.e. their <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shitcoin</a>-<a href="https://infosec.space/tags/Scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Scam</a> <a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MobileCoin</a>) based off said <a href="https://infosec.space/tags/PhoneNumbers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PhoneNumbers</a> (Cuban, Russian and North Korean Numbers were excluded) which are in fact <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PII</a> (even if one doesn't have to <a href="https://infosec.space/tags/ID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ID</a> for obtaining a <a href="https://infosec.space/tags/SIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SIM</a>, they are circumstantial PII)... <ul><li>They have neither "legitimate interest" nor legal mandate to collect said data (or to integrate a scammy Shitcoin for that matter) as the discontinuation of <a href="https://infosec.space/tags/ChatSecure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ChatSecure</a> / <a href="https://infosec.space/tags/TextSecure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TextSecure</a> has eliminated the "technical necessity" to have those.</li></ul>Either way they either have to yeet <a href="https://infosec.space/tags/Hegseth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hegseth</a> as client and/or stop collecting PII like PhoneNumbers - they gotta have to do something…<ul><li>As for <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>, <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpSec</a> & <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ComSec</a>, I'd say <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMEMO</a> remains the gold standard alongside <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a>/MIME...</li></ul><a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a> is a different story, but unlike <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a> these do not depend on a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PhoneNumber</a> and work through <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a>.<ul><li>And I've been using Tor for almost 15 years daily now...</li></ul>

Peter Cohrs | Journalist 🦣"Gezielt getroffen" — Am Tag der Bundestagswahl legt ein Cyberangriff die Website der <a href="https://dju.social/tags/taz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#taz</a> lahm. Es ist nicht der erste dieser Art. Angriffe auf die kritische Infrastruktur der Demokratie sind längst Alltag. <a href="https://dju.social/tags/Medien" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Medien</a> <a href="https://dju.social/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a> <a href="https://taz.de/Angriff-auf-die-taz/!6081815/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://taz.de/Angriff-auf-die-taz/!6081815/</a>

Benjamin Carr, Ph.D. 👨🏻‍💻🧬Who needs <a href="https://hachyderm.io/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> when your login's already in the wild? Stolen <a href="https://hachyderm.io/tags/credentials" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#credentials</a> edge out email tricks for cloud break-ins because they're so easy to get Criminals used stolen credentials more frequently than email phishing to gain access into their victims' IT systems last year, marking the first time that compromised login details claimed the number two spot in Mandiant's list of most common initial infection vectors. <a href="https://www.theregister.com/2025/04/23/stolen_credentials_mandiant/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/2025/04/23/stolen_credentials_mandiant/</a> <a href="https://hachyderm.io/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://hachyderm.io/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Kevin Karhan :verified:<a href="https://mstdn.social/@GottaLaff" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@GottaLaff</a> the sheer fact that he didn't get jailed for this violation of <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>, <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ComSec</a> & <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpSec</a> rules is propably making <a href="https://infosec.space/tags/RealityWinner" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RealityWinner</a> and <a href="https://infosec.space/tags/ChelseaManning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ChelseaManning</a> scream internally at max volume.<ul><li>IMHO <a href="https://infosec.space/tags/Hegseth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hegseth</a> should he sharing a cell with <a href="https://infosec.space/tags/Ames" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ames</a> because he's just a risk to <a href="https://infosec.space/tags/NatSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NatSec</a>!</li></ul>

Felix EckhardtHm.<a href="https://www.golem.de/news/kurz-nach-offenlegung-chatgpt-und-claude-liefern-exploit-fuer-kritische-ssh-luecke-2504-195579.amp.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.golem.de/news/kurz-nach-offenlegung-chatgpt-und-claude-liefern-exploit-fuer-kritische-ssh-luecke-2504-195579.amp.html</a><a href="https://det.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://det.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://det.social/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://det.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://det.social/tags/erlang" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#erlang</a> <a href="https://det.social/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a>

minzmadeFound a Linux Security Cookbook (O'Reilly) of 2003 in the <a href="https://chaos.social/tags/straze" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#straze</a> <a href="https://chaos.social/tags/library" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#library</a> - still interesting to browse through. <a href="https://chaos.social/tags/greifswald" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#greifswald</a> <a href="https://chaos.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://chaos.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a>

Christoph Schmees<a href="https://social.heise.de/@heisec" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@heisec</a> Was? Das ist noch eine Meldung wert? Sollte es ernsthaft noch denkende Menschen geben, die <a href="https://social.tchncs.de/tags/Zyxel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Zyxel</a> einsetzen? <a href="https://www.pc-fluesterer.info/wordpress/?s=zyxel" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.pc-fluesterer.info/wordpress/?s=zyxel</a><a href="https://social.tchncs.de/tags/sicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicherheit</a> <a href="https://social.tchncs.de/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://social.tchncs.de/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.tchncs.de/tags/foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foss</a>

Kevin Karhan :verified:<a href="https://mastodon.social/@shoppingtonz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@shoppingtonz</a> <a href="https://mas.to/@alternativeto" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@alternativeto</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> granted, those cases are "nieche" as in "extreme low latency applications" are out.of scope for <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> as they are intrinsically incompatible with a self-routing <a href="https://infosec.space/tags/Proxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Proxy</a> network.<ul><li>Also proper <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpSec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>, <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ComSec</a> & <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a> teaches to never mingle identities and activities...</li></ul>

NickI took an ITSec training today that gave "Thi5izmyP4ssWord!" as an example of a good password to use. I'm curious what people think of a password like this. <a href="https://mathstodon.xyz/tags/ITSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSec</a> <a href="https://mathstodon.xyz/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mathstodon.xyz/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a>

Markus FeilnerWahnsinn. <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://mastodon.social/tags/log4j" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#log4j</a> <a href="https://mastodon.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://mastodon.social/tags/exploits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploits</a> "I am no hero" Unfassbar gut, lieber <a href="https://ard.social/@br_data" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@br_data</a> ! <a href="https://mastodon.social/tags/br" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#br</a> <a href="https://mastodon.social/tags/bayerischerrundfunk" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bayerischerrundfunk</a>Linkempfehlung ARD Audiothek<a href="https://www.ardaudiothek.de/episode/wild-wild-web-geschichten-aus-dem-internet/das-wichtigste-hobby-der-welt/br/14442077/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.ardaudiothek.de/episode/wild-wild-web-geschichten-aus-dem-internet/das-wichtigste-hobby-der-welt/br/14442077/</a>

Felix EckhardtUS Government wreaks havoc on the cybersecurity community. This will hit their own tech companies hard. No idea what and if they even think. I get that funding CVE DB and everyone using it is one of Trumps talking points. But why not monetising it? Make People pay for access? That would make much more sense. This stupid messing around will hurt everyone bad, incl. US economy and government. Cybercriminals will profit.<a href="https://det.social/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a> <a href="https://det.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://det.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://det.social/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://det.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://det.social/tags/uspol" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#uspol</a> <a href="https://det.social/tags/mitre" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mitre</a>

art4<a href="https://mastodon.green/@IrrsinnHilft" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@IrrsinnHilft</a> 1. Es gibt Leute, die müssen dahin, siehe <a href="https://heise.de/-10352231" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://heise.de/-10352231</a> 2. Es geht um <a href="https://infosec.exchange/tags/ITSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSec</a> und <a href="https://infosec.exchange/tags/Datensicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Datensicherheit</a>, nicht um eine andere Sicherheit.

Felix EckhardtAch das ist doch alles Sch***e<a href="https://det.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://det.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://det.social/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://det.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Felix Eckhardt<a href="https://social.bund.de/@bsi" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bsi</a> Mitre funding scheint ja in Frage zu stehen (<a href="https://infosec.exchange/@briankrebs/114343835430587973" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec.exchange/@briankrebs/114343835430587973</a>). Ich hatte schonmal gefragt, ob es von deutscher oder europäischer Seite aus Ideen gibt sowas zu ersetzen. Hat sich da was getan? <a href="https://det.social/@felix_eckhardt/114154392133564146" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://det.social/@felix_eckhardt/114154392133564146</a><a href="https://det.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://det.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://det.social/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://det.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

art4Die <a href="https://infosec.exchange/tags/US" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#US</a>-Zoll- und Grenzschutzbehörde hat weitreichende Befugnisse, um alle Geräte von Reisenden bei der Ein- und Ausreise - unabhängig von deren Staatsangehörigkeit - zu durchforsten.Es gibt zwei Arten von Durchsuchungen: Eine einfache Durchsuchung kann ohne jeden Grund, völlig willkürlich oder aufgrund einer bloßen Vermutung über eine Person erfolgen - vielleicht aufgrund ihres Aussehens oder einer Antwort, die sie auf eine Frage gegeben hat. Bei einer einfachen Durchsuchung blättert ein Beamter durch die Fotos, E-Mails, Apps und Dateien der Geräte. Für diese Art der Durchsuchung ist kein Verdacht auf ein Fehlverhalten erforderlich.Bei einer erweiterten Suche kann der Inhalt der Geräte zur Analyse kopiert werden. Dazu muss ein "begründeter Verdacht" auf einen Rechtsverstoß vorliegen, oder Bedenken hinsichtlich der nationalen Sicherheit bestehen. Ab hier müssen Geräte grundsätzlich als kompromittiert betrachtet werden.Zu einer starken digitalen Sicherheit gehört daher, dass eine Verteidigung in der Tiefe praktiziert wird: Wenn eine Sicherheitsebene versagt, muss für den Fall der Fälle eine weitere Schutzschicht vorhanden sein. Auch fehlende Daten können eine solche Schutzschicht darstellen.Wenn du in der nächsten Zeit planst, in die USA einzureisen, dann solltest du einige <a href="https://infosec.exchange/tags/ITSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSec</a> Tipps wissen und einhalten.Allgemeine Hygienetipps:1. Aktiviere die Festplatten- bzw. Vollverschlüsselung der Geräte. Verwende starke Passwörter. 2. Verwende keine biometrischen Merkmale zur Entsperrung. 3. Lade dir alle Daten, die du auf den Geräte benötigst, offline herunter. Entferne alle vorhandenen Cloud-Anbindungen. 4. Logge dich nicht bei Accounts, Social Media, etc ein. Wenn du sie verwenden musst, nutze nur den Browser und logge dich nach der Nutzung explizit wieder aus. Lösche Apps, die du nicht benötigst. 5. Verwende PINs und Passwörter zum Öffnen von Apps, falls möglich. 6. Lösche alle Kontakte, die du nicht benötigst. Erstelle ein Backup der Kontakte und spiele es erst nach deiner Rückkehr wieder ein. 7. Lasse die Geräte vor Kontrollen ausgeschaltet.Bei einer einfachen Durchsuchung:8. Kooperiere sofort, wenn du bei einer Kontrolle zum Einschalten oder Entsperren des Geräts oder von Accounts aufgefordert wirst. 9. Gib bei einer Kontrolle nie dein Passwort heraus. Entsperre die Geräte nur selber. Wenn du zur Herausgabe eines Passworts gezwungen wurdest, ändere das Passwort sobald wie möglich.Next Level für die erweiterte Suche:10. Nutze Wegwerfgeräte. Das gilt für Smartphone, Tablets, Labtops, USB-Sticks, Festplatten, Speicherkarten, etc. Nimm dir nur leere oder frisch aufgesetzte Geräte mit minimaler Ausstattung mit. Betrachte die Geräte nach einer erweiterten Suche als kompromittiert und entsorge sie nach der Rückreise. 11. Besorge vor Ort, oder vor der Anreise eine neue SIM-Karte. Benutze keine bestehende SIM-Karte. Nimm keine vorhandene SIM-Karte mit. Betrachte SIM-Karten ab einer erweiterten Suche als kompromittiert und entsorge sie nach der Rückreise. 12. Lege dir Proforma-Accounts an. Keinen Social-Media-Account zu haben kann verdächtig wirken, daher pflege Accounts mit unverfänglichen Inhalten, die du entsperren kannst, falls du dazu aufgefordert wirst. 13. Wenn ein Gerät beschlagnahmt wird, verlange einen detaillierten Eigentumsnachweis und eine Erklärung darüber, wann und wie du es zurückbekommst.Sources: - <a href="https://apnews.com/article/internet-privacy-smartphones-travel-e0a3146ae7966ea0e4157dbfae1f6a81" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://apnews.com/article/internet-privacy-smartphones-travel-e0a3146ae7966ea0e4157dbfae1f6a81</a> - <a href="https://theintercept.com/2025/03/29/customs-us-border-travel-airports-phone-searches/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://theintercept.com/2025/03/29/customs-us-border-travel-airports-phone-searches/</a>

Marcel HellkampSmall update on our <a href="https://academiccloud.social/tags/HIBP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HIBP</a> style password checker: We are now at 9.91 billion password hashes (sha1 and ntml), and it's growing and growing. Only 1.3 billion (13%) of those are in HIBP.<a href="https://pwcheck.gwdg.de/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pwcheck.gwdg.de/</a> <a href="https://pwcheck.mpg.de/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pwcheck.mpg.de/</a><a href="https://academiccloud.social/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://academiccloud.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://academiccloud.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://academiccloud.social/tags/leak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#leak</a>

Recent searches

Search options

Administered by:

Server stats:

#itsec