Justin Plock @jplock@plock.social

#firetomlin

51 companies tell Congress it's time to tackle data privacy
https://www.engadget.com/2019/09/10/tech-companies-ask-congress-for-data-privacy-law/ #privacy #security #libremone #librem5

We’re launching several new security features that make ProtonMail even more secure against attacks. Learn about these technologies and how they keep you safe: https://protonmail.com/blog/security-updates-2019/

"Every program attempts to expand until it can read mail."
- Zawinski's Law

http://www.catb.org/jargon/html/Z/Zawinskis-Law.html

Librem 5 shipping starting 24 September 2019 https://puri.sm/posts/librem-5-shipping-announcement/ #purism #linux #linuxphone #linuxmobile #gnome

#Amazon + #Ring have created a dragnet #surveillance network that allows #police to use anyone's doorbell video footage without notice.

When we don't protect our own privacy, we inadvertently affect the privacy of others.

Maintaining good privacy and #security practices are like a vaccine against greater damage.

https://www.washingtonpost.com/technology/2019/08/28/doorbell-camera-firm-ring-has-partnered-with-police-forces-extending-surveillance-reach/

You may think your Gmail account is private, but Google disagrees. Google told a judge that users have "no legitimate expectation of privacy." https://www.cnet.com/news/google-filing-says-gmail-users-have-no-expectation-of-privacy/ Proton = privacy.

How To Promote Real Social Good https://puri.sm/posts/how-to-promote-real-social-good/ - "We believe that consumers who really care about their freedom, privacy, and security, or other issues like climate change, seek out companies like ours that exist, first and foremost, to do something important that can better people’s lives." #purism

Ever wanted to ditch big tech but had no idea how to? Grab your free Librem One account for social, chat and voice or a premium account with mail and VPN and get end-to-end encryption, no tracking, no ads and no data sharing https://librem.one #purism #libremone #opensource #deletefacebook

I spent all day looking for vulns in a IoT clothes dryer. What did I find?

* HTTPS to talk to backend service
* XMPP w/ STARTTLS to steam events
* Cert pinning so no MitM
* Android app obfuscated w/ no obvious backend URLs or certs
* Dryer runs an AP for initial setup w/ DHCP and HTTPS servers
* That HTTPS requires auth with a password printed on a label near the door

Best I could do was get the DHCP server to serve the same IP to every request.

Well done GE.

#defcon27 #iotvillage