Justin Plock @jplock@plock.social

Ever wanted to ditch big tech but had no idea how to? Grab your free Librem One account for social, chat and voice or a premium account with mail and VPN and get end-to-end encryption, no tracking, no ads and no data sharing https://librem.one #purism #libremone #opensource #deletefacebook

I spent all day looking for vulns in a IoT clothes dryer. What did I find?

* HTTPS to talk to backend service
* XMPP w/ STARTTLS to steam events
* Cert pinning so no MitM
* Android app obfuscated w/ no obvious backend URLs or certs
* Dryer runs an AP for initial setup w/ DHCP and HTTPS servers
* That HTTPS requires auth with a password printed on a label near the door

Best I could do was get the DHCP server to serve the same IP to every request.

Well done GE.

#defcon27 #iotvillage

hey, if you haven't yet, claim your $125 from the Equifax data breach settlement

literally seconds of entering your name and address results in a mailed check of $125 and helps make sure a corporation pays for their massive negligence

https://www.equifaxbreachsettlement.com/

RT @linuxjournal@twitter.com

Germany has banned its #schools from using cloud-based productivity suites from Microsoft, Google, and Apple, because the companies weren't meeting the country's #privacy requirements. 
https://nakedsecurity.sophos.com/2019/07/17/germany-bans-schools-from-using-tech-giants-clouds/

🐦🔗: https://twitter.com/linuxjournal/status/1152212640871178245

Location data is protected by US federal law, but AT&T has sold it anyway. Without consent. Now @eff is suing. https://www.vice.com/en_us/article/43j99g/eff-hits-atandt-with-class-action-lawsuit-for-selling-customers-location-to-bounty-hunters

“@DuckDuckGo is a poster child for a future in which companies stand with their users and still make money...They counter the assumption that we’ve all been socialized to accept: that it is normal to hand over all your information." - EFF's @jenuhhveev https://www.nytimes.com/2019/07/15/technology/duckduckgo-private-search.html

Chrome, Google Search, Gmail, Drive, Maps, Youtube, they are all windows Google uses to snoop on your online activity. If you have to use these products, this post discusses ways to prevent Google from sucking up your data. https://protonvpn.com/blog/how-to-delete-your-google-data/

Apple Cofounder Steve Wozniak Says Most People Should Get Off Facebook Permanently #libremone #privacy
https://gizmodo.com/apple-cofounder-steve-wozniak-says-most-people-should-g-1836178238

Forbes has selected ProtonVPN as their top pick in their new #VPN review thanks to our no logs policy, kill switch and other features. #Forbes https://www.forbes.com/sites/tjmccue/2019/07/01/the-best-vpns-for-pc/#43d415f26deb

Learn why so many users trust ProtonVPN: https://protonvpn.com/blog/is-protonvpn-trustworthy/