• RedGreenBlue@lemmy.zip
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 days ago

    Hackers warns Microsoft are targeting Windows users PCs: What to know.

    Microsoft is stealing your files, cookies, etc. Microsoft have access to your 365 account, one drive and email.

    Microsoft collects documents and are able to capture keystrokes, screenshots, audio, and video, monitor the clipboard, and change your preferences and more.

  • Sims@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 days ago

    Incredible that all big US tech is now suddenly trusted researchers/detectives, judge, jury and a societal security pillar alerting citizens without any intrinsic bad intentions (cough).

    I think these ridiculous scaremonger posts, with insanely biased claims, belong to either not-the-onion or similar joke subs, or should simply just be deleted. Some random tech-lord psycho corp (that never speaks the truth) claims random badness about US/Epsteins enemies… I mean ffs 1. its stupid, and 2. its racist slur without any evidence AT ALL!! …and racism don’t belong on Lemmy subs at all!

    Oh, and its incredible that they never found any of the US Gov attacks against both their own citizens, and against all other nations and their citizens. Snowden showed it all, but micro-shit are somehow not capable of catching US instigated crimes against humanity, and not capable of detecting any of the Capitalist surveillance operators that hacks every user on all sites, or anything really. I mean, Microsh*t themselves steal more information and are harming more people than any ‘hacker’. Its almost like they voluntarily participate in deliberate propaganda - coordinated with US fascist Gov.

    Here’s what Microshts best security advice should be: “Don’t use Microsoft products !”. Microsht is far far more dangerous for normal people than any ‘hacker’ threats out there…

  • Septimaeus@infosec.pub
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    2 days ago

    Seriously, this is the lowest hanging fruit. Never trust hotel WiFi.

    E: infants and their alts

    • Scrubber0777@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 days ago

      Agree with your sentiment especially not trusting hotel Wifi (or heck all open network for this matter).

      I’d even err on the safe side and suggest not download any certificate and encryption profile at all.

      Even if I find myself as a tech literate person, I’d not trust my ability to identify the legitimacy of the download.

    • pHr34kY@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      arrow-down
      2
      ·
      edit-2
      3 days ago

      I don’t think anything can monitor or mess with your local web traffic once you have encrypted DNS.

      VPNs don’t add any privacy over HTTPS+DoH. Installing CA certs and whatnot is insane.

      Stop getting your opsec advice from influencers on youtube. It’s snake oil.

      • Assassassin@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        “VPNs don’t add any privacy over HTTPS+DoH”

        For someone so smug, you sure say some stupid shit. In what world would wrapping all of your traffic in an encrypted tunnel not provide additional privacy when using a public endpoint?

        • pHr34kY@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          2 days ago

          You’re routing all your traffic through a single inspection point. They too can scrape anything that isn’t HTTPS. They can list every site you visit without DoH.

          Corporations are just as unaccountable as ISPs and governments.

          • Assassassin@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 days ago

            That’s not what’s at argument here. You said that VPNs offer no additional privacy, which is completely incorrect. They have their own pitfalls, yes. But that’s not what you were arguing. You can’t just move the goalposts when someone points out that you’re wrong.

      • Septimaeus@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 days ago

        Hotel can see every site you connect to and you’re exposed to SNI fingerprinting by their ISP. Metadata leaks over both LAN and WAN (traffic volume, timing patterns, dest IPs, connection frequency) and both netadmin and ISP can infer your browsing habits without actually seeing the content. Other guests with wireshark and too much time on their hands.

        Moreover, many types of traffic aren’t HTTPS, including NTP, DHCP, SNMP, FTP, SSH (without HTTPS), most IoT devices, VoIP, gaming traffic, many application APIs, apps with embedded DNS overrides (really apps in general, especially mobile apps, especially meta and alphabet apps), even email unless TLS is explicitly configured. And many websites simply don’t serve HTTPS and will attempt to redirect to HTTP.

        This is without getting into encryption strength and post-quantum standards. And I was referring to 802.1X/MDM enterprise profiles not CA.

  • IWW4@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 days ago

    Is this an archive article?

    Hotel WiFi has been “targetted” by hackers since the they were first put in.