Netsec – Telegram
Netsec
7.37K subscribers
22.3K links
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
Download Telegram
Analyzing a Safari exploit and patch from Pwn2Own 2017
http://ift.tt/2iC3SKt

Submitted October 27, 2017 at 09:45PM by RedmondSecGnome
via reddit http://ift.tt/2hgtuJr
TLS-N - Securely share TLS-based content
https://tls-n.org

Submitted October 27, 2017 at 11:32PM by modelop
via reddit http://ift.tt/2lju6CB
Is there a list of USB device vendors, which implement code-signing protections on their devices?
The context of the question is "BadUSB" - USB devices firmware can be infected with malware.Let's assume I would use USB device (USB dongle for wireless mouse and keyboard, USB flash drive) on infected computer.Where to buy USB device, which is resistant to reinstalling the firmware?

Submitted October 27, 2017 at 10:43PM by vstoykov
via reddit http://ift.tt/2ib1giP
What security sites / feeds do you follow daily?
No text found

Submitted October 27, 2017 at 10:41PM by the_caller
via reddit http://ift.tt/2xvuXl5
Google's Advanced Protection and your threat model
Google released its Advanced Protection program for public sign-up a few weeks ago. Some questions:Do you plan to make use of it?Do you have a threat model that necessitates it, or do you think it's just generally something most security professionals should take advantage of?I'm considering it myself, so I'm wondering what others are doing, or if they're even paying attention to it.

Submitted October 27, 2017 at 11:47PM by astrobase_go
via reddit http://ift.tt/2iEmDgt
Someone has Scraped my Entire Site & Have the Similar Domain Name as Mine, Pls Help!
Hello All, Need Help I have one website ficode.co.uk someone copied my all content on ficode.net , How can anyone copied my whole content. Please tell me now what should i do.

Submitted October 28, 2017 at 09:27AM by Ameliapro
via reddit http://ift.tt/2hhF6M8
[News] IoT_reaper/IoTroop likely a simple DDoS-for-hire botnet, seems to only actually have 10,000-20,000 nodes at any time. Phew!
http://ift.tt/2yLGLnt

Submitted October 28, 2017 at 03:04PM by dscottboggs
via reddit http://ift.tt/2yRF3kb
APNIC resets passwords after whois credentials spill
http://ift.tt/2xk0Vkb

Submitted October 28, 2017 at 06:25PM by ollie-pidgy
via reddit http://ift.tt/2yaeOGh
Amazon account under constant attack
Hey guys. I wasn't sure where to go with this, but I hope some of you can offer help. Basically this started with me getting 2FA codes spammed to my phone. I panicked and cleared all trusted machines for the account, changed the password to something fairly complex, and hoped it was over. It wasn't. The next day, same thing. 15 texts all at once, then silence for 15 minutes (amazon's 2FA lockout timer, I'm guessing.) Only thing that gets it to stop is changing my password. But then it picks up AGAIN the next day. And then AGAIN today. Each time, pretty complex passwords. My last one was something like $!$A8162a#19nSD1! for example.I ran MBAM, Adwcleaner, Roguekiller, Win defender and found nothing at all. It seems you can only request a 2FA code by getting the password CORRECT. And this seems to be backed up by the fact that the spam stops for a day or so each time I change it.I'm at a loss. I'm panicking. Only with Amazon is this happening, but I feel like nothing is secure at all if these passwords are getting cracked that easily. I'm terrified and I don't know what to do. Is it POSSIBLE that somehow they're able to spam the 2FA requests without guessing my password? Is it possible there's a data breach? Is there anything I can do to make this stop?

Submitted October 29, 2017 at 11:38AM by Doctor_Turkleton
via reddit http://ift.tt/2ycn34H