#pr1v8 #noticia
@pr1v8
https://fossbytes.com/warning-just-opening-jpeg-2000-image-file-can-get-hacked/
@pr1v8
https://fossbytes.com/warning-just-opening-jpeg-2000-image-file-can-get-hacked/
Fossbytes
Warning! Just Opening A JPEG 2000 Image File Can Get You Hacked
Security researchers at Talos have discovered zero-day vulnerability in JPEG 2000 image file format. A specially crafted JPEG 2000 file trigger a massive massive read and write of adjacent heap area memory, causing a code execution possibility.
#reflexão #anonimato
"Monocultures in nature are dangerous, as vulnerabilities are held in common across a broad spectrum. In contrast, diversity means single vulnerabilities are less likely to harm the entire ecosystem. In a global anonymity network, monocultures are potentially disastrous."
Monoculturas, em sua natureza, são perigosas, pois vulnerabilidades afetam sistemas em larga escala. Em contrapartida, diversidade significa que vulnerabilidades únicas têm menos chances de afetar todo um conjunto. Em redes anônimas, monoculturas são desastrosas.
https://torbsd.github.io
🌐 @pr1v8
"Monocultures in nature are dangerous, as vulnerabilities are held in common across a broad spectrum. In contrast, diversity means single vulnerabilities are less likely to harm the entire ecosystem. In a global anonymity network, monocultures are potentially disastrous."
Monoculturas, em sua natureza, são perigosas, pois vulnerabilidades afetam sistemas em larga escala. Em contrapartida, diversidade significa que vulnerabilidades únicas têm menos chances de afetar todo um conjunto. Em redes anônimas, monoculturas são desastrosas.
https://torbsd.github.io
🌐 @pr1v8
#awesomelist #compilacao #pr1v8 #python #cursos #livros
@PR1V8 — Awesome List
Livros & cursos - Python - Parte 1
Livros:
· Think Python: How to Think Like a Computer Scientist(pt-BR): https://telegram.me/pr1v8/3299
· Compilação PDF Python(ingles): https://telegram.me/pr1v8/2356
· Learning Penetration Testing with Python(ingles): https://telegram.me/pr1v8/1651
Cursos:
· Curso de Python - Excript(pt-BR): https://telegram.me/pr1v8/3955
· Curso Python - Ignorancia Zero(pt-BR): https://telegram.me/pr1v8/3954
· Python Black-Hat voltado para Segurança Computacional(pt-BR): https://telegram.me/acervopr1v8/144
· Python para Hackers(pt-BR): https://telegram.me/acervopr1v8/72
· Algoritmos e Estruturas de dados com Python3(pt-BR): https://telegram.me/pr1v8/2884
· Curso de Python Orientado a Objetos(pt-BR): https://telegram.me/pr1v8/3127
· Curso Python para Zumbis(pt-BR): https://telegram.me/pr1v8/2491
· Pentester Academy – Python for Pentesters(ingles): https://telegram.me/pr1v8/3094
· Curso Python - Solyd EAD(pt-BR): https://telegram.me/pr1v8/3771
Junte-se à nós: https://telegram.me/pr1v8 & http://pr1v8.co.nf
@PR1V8 — Awesome List
Livros & cursos - Python - Parte 1
Livros:
· Think Python: How to Think Like a Computer Scientist(pt-BR): https://telegram.me/pr1v8/3299
· Compilação PDF Python(ingles): https://telegram.me/pr1v8/2356
· Learning Penetration Testing with Python(ingles): https://telegram.me/pr1v8/1651
Cursos:
· Curso de Python - Excript(pt-BR): https://telegram.me/pr1v8/3955
· Curso Python - Ignorancia Zero(pt-BR): https://telegram.me/pr1v8/3954
· Python Black-Hat voltado para Segurança Computacional(pt-BR): https://telegram.me/acervopr1v8/144
· Python para Hackers(pt-BR): https://telegram.me/acervopr1v8/72
· Algoritmos e Estruturas de dados com Python3(pt-BR): https://telegram.me/pr1v8/2884
· Curso de Python Orientado a Objetos(pt-BR): https://telegram.me/pr1v8/3127
· Curso Python para Zumbis(pt-BR): https://telegram.me/pr1v8/2491
· Pentester Academy – Python for Pentesters(ingles): https://telegram.me/pr1v8/3094
· Curso Python - Solyd EAD(pt-BR): https://telegram.me/pr1v8/3771
Junte-se à nós: https://telegram.me/pr1v8 & http://pr1v8.co.nf
#VPN #Anonimato
Uma das melhores VPNs free que ja usei, a BitMask é uma VPN free e ilimitada, tem para Debian e derivados e tambem para Android 4.0 ou acima
https://bitmask.net/pt/install
@pr1v8
Uma das melhores VPNs free que ja usei, a BitMask é uma VPN free e ilimitada, tem para Debian e derivados e tambem para Android 4.0 ou acima
https://bitmask.net/pt/install
@pr1v8
http://arstechnica.com/security/2016/11/tor-phone-prototype-google-hostility-android-open-source/
#Tor #Phone #Android #Developer
@pr1v8
#Tor #Phone #Android #Developer
@pr1v8
Ars Technica
Tor phone is antidote to Google “hostility” over Android, says developer
An Android phone hardened for privacy and security that plays Google at its own game.
https://www.wordfence.com/blog/2016/11/hacking-27-web-via-wordpress-auto-update/
#wordpress #hacking #falha #code
#wordpress #hacking #falha #code
Wordfence
Hacking 27% of the Web via WordPress Auto-Update
At Wordfence, we continually look for security vulnerabilities in the third party plugins and themes that are widely used by the WordPress community. In addition to this research, we regularly examine WordPress core and the related wordpress.org systems.…
Script para gerenciar senhas em um arquivo criptografado usando o gpg.
#criptografia #gpg
https://github.com/drduh/pwd.sh
@pr1v8
#criptografia #gpg
https://github.com/drduh/pwd.sh
@pr1v8
GitHub
GitHub - drduh/pwd.sh: Manage secrets with Bash and GnuPG symmetric encryption
Manage secrets with Bash and GnuPG symmetric encryption - drduh/pwd.sh
Google Hacking Database (GHDB)
https://www.exploit-db.com/google-hacking-database/
#database #hacking #exploit
@pr1v8
https://www.exploit-db.com/google-hacking-database/
#database #hacking #exploit
@pr1v8
#noticia
"Conheça o hacker que faz a série 'Mr. Robot' parecer real"
http://olhardigital.uol.com.br/fique_seguro/noticia/conheca-o-hacker-que-faz-a-serie-mr-robot-parecer-real/64096
@pr1v8
"Conheça o hacker que faz a série 'Mr. Robot' parecer real"
http://olhardigital.uol.com.br/fique_seguro/noticia/conheca-o-hacker-que-faz-a-serie-mr-robot-parecer-real/64096
@pr1v8
Olhar Digital - O futuro passa primeiro aqui
Conheça o hacker que faz a série 'Mr. Robot' parecer real
Tudo sobre tecnologia, internet e redes sociais
#noticia
"Novo ataque a sistemas de bancos faz caixas eletrônicos cuspirem dinheiro"
http://gizmodo.uol.com.br/ataque-caixas-eletronicos-cuspirem-dinheiro/
@pr1v8
"Novo ataque a sistemas de bancos faz caixas eletrônicos cuspirem dinheiro"
http://gizmodo.uol.com.br/ataque-caixas-eletronicos-cuspirem-dinheiro/
@pr1v8
gizmodo.uol.com.br
Novo ataque a sistemas de bancos faz caixas eletrônicos cuspirem dinheiro - Gizmodo Brasil
Ataque a sistemas centrais de bancos fazem caixas eletrônicos cuspirem dinheiro. Novo tipo de golpe dificulta o processo de rastreamento das autoridades.
#noticia
"A Touch Bar do novo MacBook Pro já roda Doom (mas não muito bem)"
http://gizmodo.uol.com.br/touchbar-macbook-doom/
@pr1v8
"A Touch Bar do novo MacBook Pro já roda Doom (mas não muito bem)"
http://gizmodo.uol.com.br/touchbar-macbook-doom/
@pr1v8
gizmodo.uol.com.br
A Touch Bar do novo MacBook Pro já roda Doom (mas não muito bem) - Gizmodo Brasil
Fãs adoram adaptar Doom para máquinas que não deveriam rodar Doom. A Touch Bar da Apple talvez seja a pior de todas essas adaptações.
#noticia
"Ataque hacker na Finlândia desliga sistema de aquecimento de dois prédios"
https://www.tecmundo.com.br/ataque-hacker/111912-ataque-hacker-finlandia-desliga-sistema-aquecimento-dois-predios.htm
@pr1v8
"Ataque hacker na Finlândia desliga sistema de aquecimento de dois prédios"
https://www.tecmundo.com.br/ataque-hacker/111912-ataque-hacker-finlandia-desliga-sistema-aquecimento-dois-predios.htm
@pr1v8
TecMundo - Descubra e aprenda tudo sobre tecnologia
Ataque hacker na Finlândia desliga sistema de aquecimento de dois prédios
A sobrecarga em uma central de gerenciamento de automação predial deixou congelando dois prédios residenciais em cidade finlandesa
#noticia
"Equipe por trás do Tor está desenvolvendo uma ROM Android super segura"
https://www.tecmundo.com.br/seguranca-de-dados/111974-equipe-tras-tor-desenvolvendo-rom-android-super-segura.htm
@pr1v8
"Equipe por trás do Tor está desenvolvendo uma ROM Android super segura"
https://www.tecmundo.com.br/seguranca-de-dados/111974-equipe-tras-tor-desenvolvendo-rom-android-super-segura.htm
@pr1v8
Tecmundo
Equipe por trás do Tor está desenvolvendo uma ROM Android super segura
Batizado de “Mission Improbable”, projeto se baseia no CopperheadOS e utiliza o firewall orWall para impedir qualuer tráfego de internet não-autorizado
#noticia
"Até seus fones de ouvido podem ser hackeados e usados para te rastrear"
https://www.tecmundo.com.br/seguranca-de-dados/111963-fones-ouvido-hackeados-usados-te-rastrear.htm?utm_source=tecmundo.com.br&utm_medium=home&utm_campaign=tv
@pr1v8
"Até seus fones de ouvido podem ser hackeados e usados para te rastrear"
https://www.tecmundo.com.br/seguranca-de-dados/111963-fones-ouvido-hackeados-usados-te-rastrear.htm?utm_source=tecmundo.com.br&utm_medium=home&utm_campaign=tv
@pr1v8
Tecmundo
Até seus fones de ouvido podem ser hackeados e usados para te rastrear
De acordo com um estudo conduzido por pesquisadores israelenses, é possível utilizar esses gadgets inofensivos para gravar áudio — mesmo se eles não possuírem um microfone
#noticia
"Tem espião até no Tinder e é tão sinistro quanto você imagina"
https://motherboard.vice.com/pt_br/read/tem-espiao-ate-no-tinder
@pr1v8
"Tem espião até no Tinder e é tão sinistro quanto você imagina"
https://motherboard.vice.com/pt_br/read/tem-espiao-ate-no-tinder
@pr1v8
Motherboard
Tem espião até no Tinder e é tão sinistro quanto você imagina
O capitão do Exército brasileiro infiltrado no Tinder não é um caso isolado.
#sistemas #operacionais #tanenbaum #ebook
Sistemas operacionais 2ª Edição, feito por Andrew S. Tanenbaum.
🌐 @pr1v8
Sistemas operacionais 2ª Edição, feito por Andrew S. Tanenbaum.
🌐 @pr1v8
Forwarded from RDSM
For teh paranoid people:
🂱 ACE OF NO TRACE (2016.11.04)
ABOLISH YOUR ADDRESS: THIRTY TIPS TO EVADE SPYING AND SURVEILLANCE AND RECLAIM PRIVACY
(Meeting the Amish Halfway in the Digital Age)
1. Don't use the internet for anything financially sensitive, legally important, or personally revealing. Pay bills, renew vehicles, order ID documents, and pay taxes the old fashioned way at the courthouse and through the US mail. Woo your lover the old fashioned way in person. Even government websites get hacked and millions of citizens' personal data placed in the hands of criminals on both sides of the prison bars. The website you didn't use is the website that can't leak your data.
2. Talk face to face. Don't discuss appointments or meeting places over the phone. Arrange subsequent (several) meetings mono-e-mono in advance. If someone is a no-show both parties know where to try again. It is trivial for criminals to eavesdrop on phone calls. Worse yet the government intercepts, records and archives all phone calls.
3. Don't use computer printers. Print a letter on a public or university printer without any spycams nearby and drop the mail in the blue box. This is more secure than email. Use a public printer for sensitive communication because all printers invisibly output the serial number using microscopic dots on each page. That serial number could be traced back to your printer.
4. You are blessed if you have friends in the privacy game. Leave coded messages for each other by placement of stones or coded notes at a certain location. Each one knows to check the location at a certain day of the week or month. Each could agree to a "code shape." For instance Bob can be an arrow and Alice can be a heart and Preacher John can be a cross. Bob leaves a note at the location with an arrow drawn on it, a time, and a symbol or codeword for the place to meet. That's a low-tech, surveillance-proof way to schedule meets and hangouts. It's the low tech way to secretly "broadcast" an event.
5. Often low tech beats high tech. Low tech is often highly efficient. Think it through and choose the lowest-tech way that works.
6. Never use online banking or electronic payment services. Contract utilities in the name of a LLC registered with a nominee in another state or offshore jurisdiction. The nominee does not need to know your real name to set up a LLC. Since you can hold the LLC registration in hand with the nominee's signature on a transfer to a trust you would hold proof of ownership. This will remedy any adverse claim if there's ever a legal problem (which will rarely happen).
7. Use a snail mail drop. Even better, use an offshore maildrop and have it forwarded to a random location every couple months.
8. Never receive mail at where you sleep or anywhere near bed-zero. Get utility bills at a mail drop in another town even if it must be 20 miles away. Never order anything like pizza using a real name.
9. Never call the police from home. Unless it's homicide or the house is on fire handle it privately.
10. Cease using volunteer tracking devices. Never make unnecessary calls from home or from a home landline. Even if the number is unlisted any spook can find the address linked to the number. On the commute home from work turn the cell phone off to eliminate the potential for tracking. Only make phone calls away from home. Home is a refuge from the world, not a place to conduct business. Friends and family might complain. Tell them to come by to talk in person-- like people should do anyway.
11. Move to a new town every so often and erase the paper and accounting tracks to the old domain. I usually relocate every six to nine months. If I have any kind of security breach I pack and move immediately to my secret refuge homestead then relocate from there.
12. When renting a home do it off paper and stay alert for an egress. It is most secure to rent from an old schooler who doesn't ask for ID or run credit checks. Many landlords still operate on a handshake. Don't be the dolt who crosses this country gentleman's old school way. I am
🂱 ACE OF NO TRACE (2016.11.04)
ABOLISH YOUR ADDRESS: THIRTY TIPS TO EVADE SPYING AND SURVEILLANCE AND RECLAIM PRIVACY
(Meeting the Amish Halfway in the Digital Age)
1. Don't use the internet for anything financially sensitive, legally important, or personally revealing. Pay bills, renew vehicles, order ID documents, and pay taxes the old fashioned way at the courthouse and through the US mail. Woo your lover the old fashioned way in person. Even government websites get hacked and millions of citizens' personal data placed in the hands of criminals on both sides of the prison bars. The website you didn't use is the website that can't leak your data.
2. Talk face to face. Don't discuss appointments or meeting places over the phone. Arrange subsequent (several) meetings mono-e-mono in advance. If someone is a no-show both parties know where to try again. It is trivial for criminals to eavesdrop on phone calls. Worse yet the government intercepts, records and archives all phone calls.
3. Don't use computer printers. Print a letter on a public or university printer without any spycams nearby and drop the mail in the blue box. This is more secure than email. Use a public printer for sensitive communication because all printers invisibly output the serial number using microscopic dots on each page. That serial number could be traced back to your printer.
4. You are blessed if you have friends in the privacy game. Leave coded messages for each other by placement of stones or coded notes at a certain location. Each one knows to check the location at a certain day of the week or month. Each could agree to a "code shape." For instance Bob can be an arrow and Alice can be a heart and Preacher John can be a cross. Bob leaves a note at the location with an arrow drawn on it, a time, and a symbol or codeword for the place to meet. That's a low-tech, surveillance-proof way to schedule meets and hangouts. It's the low tech way to secretly "broadcast" an event.
5. Often low tech beats high tech. Low tech is often highly efficient. Think it through and choose the lowest-tech way that works.
6. Never use online banking or electronic payment services. Contract utilities in the name of a LLC registered with a nominee in another state or offshore jurisdiction. The nominee does not need to know your real name to set up a LLC. Since you can hold the LLC registration in hand with the nominee's signature on a transfer to a trust you would hold proof of ownership. This will remedy any adverse claim if there's ever a legal problem (which will rarely happen).
7. Use a snail mail drop. Even better, use an offshore maildrop and have it forwarded to a random location every couple months.
8. Never receive mail at where you sleep or anywhere near bed-zero. Get utility bills at a mail drop in another town even if it must be 20 miles away. Never order anything like pizza using a real name.
9. Never call the police from home. Unless it's homicide or the house is on fire handle it privately.
10. Cease using volunteer tracking devices. Never make unnecessary calls from home or from a home landline. Even if the number is unlisted any spook can find the address linked to the number. On the commute home from work turn the cell phone off to eliminate the potential for tracking. Only make phone calls away from home. Home is a refuge from the world, not a place to conduct business. Friends and family might complain. Tell them to come by to talk in person-- like people should do anyway.
11. Move to a new town every so often and erase the paper and accounting tracks to the old domain. I usually relocate every six to nine months. If I have any kind of security breach I pack and move immediately to my secret refuge homestead then relocate from there.
12. When renting a home do it off paper and stay alert for an egress. It is most secure to rent from an old schooler who doesn't ask for ID or run credit checks. Many landlords still operate on a handshake. Don't be the dolt who crosses this country gentleman's old school way. I am