Black belt in Mikado, Photo model, for the photos where they put under ‘BEFORE’

  • 13 Posts
  • 30 Comments
Joined 4 years ago
cake
Cake day: April 25th, 2021

help-circle













  • Andisearch Writeup

    A threat actor known as “Orange” has leaked nearly 500,000 Fortinet VPN login names and passwords, a move that has sent ripples through the cybersecurity community. These credentials were allegedly scraped from vulnerable FortiGate SSL-VPN devices, exploiting a known vulnerability, CVE-2018-13379, which had been patched since May 2019. Despite the availability of patches, many systems remained unpatched, leaving them susceptible to this breach.

    The leaked credentials were posted for free on the RAMP hacking forum, a platform managed by Orange, who was previously associated with the Babuk Ransomware operation. This leak is believed to be a promotional tactic for the RAMP forum and the Groove ransomware operation, aiming to attract other cybercriminals by offering a “freebie”.

    The breach has affected organizations across 74 countries, with a significant number of compromised devices located in the USA. The leaked data includes VPN credentials for 498,908 users over 12,856 devices. While some sources confirm the validity of these credentials, others provide mixed reports, indicating that not all credentials may be functional.

    Fortinet has acknowledged the breach, emphasizing the importance of patching and resetting passwords to mitigate the risk. They have urged affected users to upgrade their devices to the latest FortiOS versions and perform an organization-wide password reset. The incident underscores the critical need for timely patching and robust security practices to protect against such vulnerabilities.















  • Zerush@lemmy.mltoMemes@lemmy.mlfirefox
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    Not a problem, in Vivaldi there a lot of patches against Google interests. Even Google can do nothing if the devs of other companies eliminate the tracking APIs from Chromium, precisely because it’s FOSS an even Google can’t revert it and can’t do nothing against modified forks. There are several intends in the past, with idle tracking, FloC, and some others, also cutting of Google sync for others than Chrome, discriminative Browsersniffing in some websites to block Vivaldi and others. Nothing of this worked. Vivaldi is a small european cooperative with few devs, but which are among the bests out there. Now on top of that they have managed to introduce Vivaldi into the world of Browsers and its use in Mercedes, Renault and VAG, that has not even been achieved by Google and with this also eliminated the possibility of acting against Vivaldi, without messing with these Companies. This is showing a really big middle finger.


  • Zerush@lemmy.mltoMemes@lemmy.mlfirefox
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    10
    ·
    2 years ago

    No, Google no controls Chromium, despite Chromium as is use a lot or Google APIs. But Chromium is FOSS and because of this a lot of Chromiums are “degoogled” or parcial “degoogled” leaving some APIs as Option in the settings (Vivaldi permits even to quit the API for the Chrome Store in the settings page, if you don’t want extension from there). The difference in Chrome itself, EDGE, Opera and others, is that they all use a lot of own tracking APIs above the default from Chromium.


  • Zerush@lemmy.mltoMemes@lemmy.mlfirefox
    link
    fedilink
    arrow-up
    1
    ·
    2 years ago

    Blink is somewhat faster than Gecko in most sites, but it use somewhat more resources, because render every tab independly. Because of this some Chromium hibernate tabs in background (Chrome itself don’t)


  • If you have root access it isn’t a problem, then you can use alternatives, like GrapheneOS, Ubuntu Touch, CalyxOS or similar. The only problem is if you need an official app, since they are usually only available for Android or iOS. Then the only are Replicant or LinageOS, these are “degoogled” Android forks



  • No, I don’t use TOR, it’s not really more anonym in the ordinary web than other browsers, it’s only slower and less secure. Certainly Chromium is made by Google, but as OpenSource, the script can be modified, well as degoogled Chromium or let the user decide which Google APIs need and which not in the settings, as Vivaldi do, because there are also users which need some services for their work. A lot of online services and profesional sites need services que offers Google and which don’t have valid alternatives. Because of this, also Gecko use them, but you have to modify the script to eliminate it, in Vivaldi you can do it in the settings or at least in flags. As you can see, FOSS have advantages for devs, but not so much for a normal user who need certain features for his work, study or activities. Privacy and security has nothing to do if te product is FOSS or not. The normal user need a good tecnical support and devs which respects the need of the user (most features are added by request made by the users in the community of Vivaldi where the devs and even von Tetzchner itself particpate). Nothing to do with the habits of Big Tech and prefab FAQ pages as support, or implement or rest functions, without consens of the users, as FF do… Where are here the advantage of FOSS over a product OpenSource who use 5% auditable and customizable by the user but proprietary code?