its good wider community (mostly older folk/seniors?) came out in support after this Islamic Centre in #Cornwall was attacked (including funding upgraded #CCTV and #security equipment!) but offenders need to be caught

After ramming gates, they poured used engine oil around the grounds from what appears to be a 20/25 litre container + maybe a smaller 5l one.

Not stuff you generally have lying around, unless you do your own oil changes or work in a repair garage!

Also to bust the gates they needed access to a large vehicle they didn't mind putting a few (more?) dents/cracks in the bumper, suggesting lads from local rural community (building not obviously Islamic from outside) with an interest in vehicles (but also with history of reckless driving)

https://www.bbc.co.uk/news/articles/cm62exggn0nwo

Told me I need to use "cat" on terminal to see the logs. OK, now what? Where's the logs?

#Jokes #Funny #Cat #Hardware #Meme #OS #Privacy #Security #OpSec #InfoSec #Research #Tech #Technology

...

- #Surveillance
- Controlling content we see
- Making unaccountable life-changing decisions

The #Labour manifesto promised it would regulate AI. But #Starmer succumbed to pressure from #BigTech and pursued ‘growth’ over our rights

It’s time for our new Prime Minister & Minister for AI, Narayan, to introduce legislation that will #regulate AI and ensure that works for all of us and does not harm our #HumanRights

https://action.openrightsgroup.org/tell-andy-burnham-regulate-ai

#safety #security #privacy #DigitalAlert

[2/2]

#AskFedi #Security: Looking for good smartlock recommendations for a house in the US, in a neighborhood where forced entry isn't too much of a concern.

My friend's current one is in need of retirement, and I'm a lock person (but the "smart" part isn't really my thing 😋).

@deviantollam ?

Security updates for Friday

https://lwn.net/Articles/1095219/

#LWN #Linux #security

Security updates for Thursday

https://lwn.net/Articles/1094962/

#LWN #Linux #security

✍️ New post on serving the change password well-known URL in Django

Add this one redirect and two tests (you won't believe #2) to make your site more user-friendly for users with compromised passwords.

https://adamj.eu/tech/2026/09/16/django-change-password-url/

#Django #Security

[$] Ways to encrypt data on servers

At the 2026 edition of FOSSY, Romeo Solano gave a fast-paced, humorous presentation on what could have been a rather boring topic: server encryption. There are a number of threats [...]

https://lwn.net/Articles/1092553/

#LWN #Linux #security #systemd #OpenSSH #XFS

Security updates for Wednesday

https://lwn.net/Articles/1094720/

#LWN #Linux #security

EuroBSDCon 2026 talks online https://undeadly.org/cgi?action=article;sid=20260916093106 #openbsd #eurobsdcon #conference #development #security

@MichalBryxi Security people don’t do things like timeout, forced password rotation, and OTP 2FA to make systems safer.

They do them to assert their dominance over those they call “normies” by making them miserable.

#security #2fa #password

Adamsdesk Bans Font Squirrel Over Privacy Concerns?

Find out what lead to the discovery of privacy concerns, complications whether to ban linking to certain websites and what decision was made.

https://www.adamsdesk.com/posts/font-squirrel-privacy-concern/

#blog #privacy #security #tech #technology

Alt...

A squirrel sitting in an opening covered in grass with a row of tall trees stand in the background around bushes. Above is bold title that reads, 'Adamsdesk Bans Font Squirrel?' with a red no symbol over top of the squirrel.

Security updates for Tuesday

https://lwn.net/Articles/1094469/

#LWN #Linux #security

Emacs arbitrary code execution flaw

https://lwn.net/Articles/1094224/

#LWN #Linux #security

Security updates for Monday

https://lwn.net/Articles/1094211/

#LWN #Linux #security

This one goes close to my heart.

If you work in #IT and you think you made systems safer by implementing logout timeout, then the only thing you did is that you forced people to find “ways around”.

And it is yours and only yours fault if the people do something silly and insecure.

#Security #Password

Security through obscurity - the last days

The traditional approach to ‘if no one knows then they won’t find out’ that has been adopted by many companies and organisations to protect their systems is finally on it’s way out - and in part we have AI attacks to thank for it.

https://www.theregister.com/security/2026/09/13/security-through-obscurity-is-dead-and-ai-delivered-the-fatal-blow/5296000

#Security #Obscurity #AI #IT

We had a big wave of automated Mastodon signups with very predictable usernames.

I first tried the sledgehammer approach and blocked known VPN ranges at the firewall.

It (partially) worked.

It also blocked legitimate ProtonVPN users. 😬

So I replaced that with a tiny custom Mastodon validator that rejects the actual abusive username pattern instead.

Much cleaner: block the abuse, not the transport.

How-to + code:
https://gist.github.com/chofstede/a422427570004719196cde948521dd04

#Mastodon #Mastoadmin #Fediverse #SysAdmin #Ruby #Rails #Security @tux @AlienJay @aping

Imagine you're having a remote appointment with your doctor for a very personal health issue.

Your doctor is a tech enthusiast, and is proudly wearing the new Apple Watch with all the recording features enabled.

You don't see the "Audible and visible signals for Live Rewind", because you don't see your doctor's wrist on videochat or on speakerphone.

The "Omitted content" safeguard fails to detect the sensitive conversation, because none of the pre-selected keywords are detected.

"What about all the privacy laws protecting me?", you claim in distress.

Sadly, your doctor is unaware and thinks "surely Apple respects all the laws by default?"

The medical clinic isn't informed about privacy risks related to new technologies, and hasn't implemented any training or policies about it yet.

Your sensitive health data is collected by Apple's new features, stored on their servers, blissfully unaware of the infringements to your consent, your privacy, and all the laws supposed to protect you.

This is only one scenario of the many surveillance nightmares we might hear about in the coming months and years.

Brace yourself.

#Privacy #Security #Consent #Apple

The Open Source Security Summit is less than a week away! Featuring insights on cyber policy and geopolitics, the ethics and culture shaping the #security community, and more, this free virtual event is one you won’t want to miss.

Save your spot now: https://bitwarden.com/open-source-security-summit/

Security updates for Friday

https://lwn.net/Articles/1093765/

#LWN #Linux #security

Forgejo 16.0.4 and 15.0.8 address critical security vulnerability

https://lwn.net/Articles/1093671/

#LWN #Linux #security #Git

Security updates for Thursday

https://lwn.net/Articles/1093566/

#LWN #Linux #security

The #ColdWar is over. " #PaxAmericana" is over

It's regional powers abusing their neighbors now

#Ukraine, #Georgia etc near #Russia

#Canada, #Venezuela etc near #USA

#Taiwan, #Philippines etc near #China

Here's an amazing bit of #diplomacy #drama on the point

Philippine #Defense Secretary #GilbertoTeodoro at a #SouthKorea #security forum is handed a note apparently from a Chinese #military attaché

And ad libs this witty, dignified reaction

https://www.deccanherald.com/world/asia/have-a-little-shame-philippines-defence-chief-gets-chinas-note-mid-speech-fires-salvo-over-south-china-sea-claims-4140722

#SouthChinaSea #UNCLOS

A decade of Rustls

https://lwn.net/Articles/1093391/

#LWN #Linux #security

Security updates for Wednesday

https://lwn.net/Articles/1093342/

#LWN #Linux #security

Beware the monster inside. But I am sure that Musk would approve

https://www.theguardian.com/australia-news/2026/sep/09/how-one-womans-tesla-was-remotely-controlled-and-harass-by-her-abusive-ex-partner-ntwnfb

#Security #Privacy #Tesla

Security updates for Tuesday

https://lwn.net/Articles/1093144/

#LWN #Linux #security

🆕 blog! “ActivityPub - Is it worth defending against replay attacks and message/signature time skew?”

Here's a problem that I've found with ActivityBot - my little ActivityPub server. Sometimes it receives messages which were originally sent months ago. Why does that happen and is it risky to accept and…

👀 Read more: https://shkspr.mobi/blog/2026/09/activitypub-is-it-worth-defending-against-replay-attacks-and-message-signature-time-skew/
⸻
#ActivityBot #ActivityPub #http #security

Ad tracking. Those pesky trackers that allow people to be tracked through (generally) their mobile telephones are proving irksome to the US military. Want to know where a group of targets are congregating - just buy the data from your friendly broker.

How about instead of only solving the problem for the military, you solve the problem for ALL citizens by making such tracking illegal?

Ahh - too obvious.

https://www.theregister.com/public-sector/2026/09/06/us-troops-can-still-be-tracked-by-purchased-location-data-and-congress-wants-to-know-why/5294652

#Tracking #Security #Privacy #IT

IMPORTANT MASTODON PASSWORD SECURITY/PRIVACY ISSUE…
----

For everyone:

If you are using the same password for Mastodon that you use anywhere else, CHANGE YOUR PASSWORD NOW.

A hacker is stealing accounts using something called “credential stuffing.” This means they use email/password combinations stolen from other sites.

You can check if your email is in a data breach elsewhere:

https://haveibeenpwned.com

Create a new strong password:

1. 12+ characters
2. Capital/lowercase letters
3. At least one special character

For admins:

The hacker is using the same unique user agent.

Go-http-client/1.1

We’re seeing a pattern of IPs, but they’re from varying ISPs. They’re also not changing the account emails.

#Mastodon #Password #InfoSec #OpSec #Security #Privacy #Hacked #Hacker

Security updates for Monday

https://lwn.net/Articles/1092911/

#LWN #Linux #security

There will be a PF tutorial at EuroBSDCon 2026 in Brussels:

Network Management with the PF Packet Filter Toolset on OpenBSD and FreeBSD
Featuring Tom Smyth and Peter Hansteen, 2026-09-11, 10:30, full day

See https://events.eurobsdcon.org/2026/talk/RKCHRW/
To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/
#eurobsdcon #bsd #openbsd #freebsd #networking #firewall #security

Security updates for Friday

https://lwn.net/Articles/1092659/

#LWN #Linux #security

The Debian Security Advisory DSA-6482-1 has so many CVEs that just the assigned numbers don't fit into the 5000 character limit we have here 😆

#Chrome #Security #CVE

Security updates for Thursday

https://lwn.net/Articles/1092419/

#LWN #Linux #security

If you want a password manager that you can keep local-only, KeePassXC is a great option 🔐

It's free,
Open-source,
Easy to install and use,
Doesn't require an account,
Works on Linux, macOS, and Windows,
And the team is here! 👉 @keepassxc

Here's how to set up KeePassXC with a YubiKey: ‪https://www.privacyguides.org/articles/2025/03/18/installing-keepassxc-and-yubikey/

#PasswordManager #KeePassXC #Privacy #Security #Passwords #FOSS

Waiting Years to Review a Shelly… Then They Sent a Camera #Tech #SmartHome #Frigate #Security #HomeAssistant

https://youtube.com/watch?v=5HCOs-txqe4&is=ItVjzOQQlLkSVkrD

[$] Securely suspending LUKS-encrypted disks

When a laptop is asleep, its memory is not unreadable. The right tooling can attach to the computer's memory bus and read out its contents, and cold-boot attacks can theoretically [...]

https://lwn.net/Articles/1090568/

#LWN #Linux #security #Debian #Git

Security updates for Wednesday

https://lwn.net/Articles/1092149/

#LWN #Linux #security

Hey fedi hackers, what's your approach to running untrusted code from the internet? Let's say you find a niche lil repo on GitHub and want to try out the thing. Any suggestions on how to securely sandbox the code?

#AskFediverse #AskFedi #security

I'm suddenly reconsidering a cloud solution for a password manager. Just now I had no connection to proton pass, on a moment where I needed it.
This is quite a tad annoying.
What are you using? Keepass? A notebook? Let me know!

#passwordManager #password #security #offline