Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.world is one of the many independent Mastodon servers you can use to participate in the fediverse.
Generic Mastodon server for anyone to use.

Administered by:

Server stats:

8.5K
active users

mastodon.world: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.8

#computersecurity

7 posts7 participants0 posts today
Public
2600

We're meeting tonight (Fri 4th Jul) at #Glasgow #hackerspace - @thegamerclub at 153 Bath Lane from 6pm 'til late - all welcome!

Hackers, crackers, geeks, hats of any colour, technology enthusiasts, hacktivists, and other like-minded folks are most welcome. We do not judge anyone and everyone has something to contribute, no matter their level of expertise!

Also join us in Matrix at #2600:glasgow.social (invite link: glasgow.social/matrix)

glasgow.socialYou're invited to talk on MatrixYou're invited to talk on Matrix
#infosec#hacker#computersecurity
Public *
Bruce MacDonald

When the AP uses "impact" as a verb you know something's up.

Aflac duck in the news.

"Cyberattacks against companies have been rampant for years, but a string of attacks on retail companies have raised awareness of the issue because the breaches can impact customers."
apnews.com/article/aflac-cyber

An Aflac logo is seen on a toy duck on March 27, 2008 in New York. (AP Photo/Mark Lennihan, File)
AP News · Aflac finds suspicious activity on US network that may impact Social Security numbers, other dataAflac says that it has identified suspicious activity on its network in the U.S. that may impact Social Security numbers and other personal information, calling the incident part of a cybercrime campaign against the insurance industry. The company said Friday that the intrusion was stopped within hours. “We continue to serve our customers as we respond to this incident and can underwrite policies, review claims, and otherwise service our customers as usual,” Aflac said in a statement.
#ComputerSecurity#breaches#impact
Public
JdeBP

I boot up #NetBSD from the install image, and it has sshd, Postfix, and inetd running before I even get to set the superuser password. Fortunately, by default it's only listening on the SSH port, on both TCP/IP v4 and v6.

But given the amount of SSH attempts per second one has to fend off nowadays, and given that whether sshd is running is a configurable option in sysinst, it's a bit off that sshd is on until the installer turns it off, or one manually turns it off.

It's not even as if it's arguably useful at that point. The only non-service account in the account database at the time is root, and root login over SSH is disabled.

The same goes for inetd and Postfix. Those seem like something that should be off at first until the installer/administrator turns them on, too.

This is an operating system bootstrapped from an installation DASD, which hasn't done any installing at all yet. It has no business delivering mail or being ready for TELNET or finger.

#ComputerSecurity#SSH
ExploreLive feeds
About