Collaborate Disseminate
A hacking group has gained access to the feeds of 150,000 surveillance cameras used inside businesses, schools, police departments, hospitals, and well-known companies.
Read more in my article on the Bitdefender BOX blog. Continue reading 150,000 security cameras are hacked exposing jails, hospitals, and well-known firms
I care about privacy and I use Cloudflare as a reverse proxy to block malicious bots from my website.
I have the mail subdomain for my self-hosted e-mail traffic, which is a subdomain marked as "DNS only" in CloudFlare:
I don’t … Continue reading Can CloudFlare intercept traffic of a "DNS only" subdomain?
I work at a company that provides a SaaS program for other organizations, and each subscribed organization receives their own subdomain of their choosing – generally they choose the organization name. We recently discovered that there are … Continue reading Rate Limit DNS Subdomain Requests
I had this idea out of nowhere the other day that I should have a visual display somewhere in my office showing how many active Have I Been Pwned (HIBP) subscribers I presently have. Why? I’m not sure exactly, it just seemed like a good idea at the time. Perhaps
Continue reading Creating a LaMetric App with Cloudflare Workers and KV
The NSA released new guidance providing system administrators with the tools to update outdated TLS protocols. Continue reading NSA Urges SysAdmins to Replace Obsolete TLS Protocols
I am converting a legacy system designed for IE6 to work on modern browsers.
Those parts of the site which have not yet been converted, will only work on Internet Explorer, and the IE6 emulation is provided via the following tag.
<meta … Continue reading Will implementing HSTS cause parts of my website which use IE6 compatibility mode to break? [migrated]
Being oblivious on the internet usually isn’t a recipe for protecting privacy. But Cloudflare announced Tuesday that it was launching support for a protocol that makes obliviousness its chief trait. Developed in conjunction with engineers from Apple and Fastly, it’s called Oblivious DNS over HTTPS, or ODoH for short. It’s a newly proposed Domain Name System standard that Cloudflare, an internet services and cybersecurity provider, says separates IP addresses from queries, which means no one entity can see both simultaneously. ODoH is one of three privacy initiatives Cloudflare hailed on Tuesday, with the other two meant to improve password security and halt metadata leaks. “Fundamentally what we’re trying to do with these announcements is to help point out places on the internet — or aspects of how the internet is built — that have a privacy hole, or an issue that make it easier to have their privacy compromised in […]
The post Meet ODoH, where privacy means just not knowing anything appeared first on CyberScoop.
Continue reading Meet ODoH, where privacy means just not knowing anything
Cloudflare released Data Localization Suite to give businesses across the globe tools to address their data locality, privacy, and compliance needs. With Data Localization Suite, businesses can use Cloudflare’s global cloud network to control where the… Continue reading Cloudflare unveils Data Localization Suite
Two separate groups of academics have recently released research papers based on research into the Domain Name System (DNS). One has found that the overwhelming majority of popular site operators haven’t learned from the 2016 Dyn/Mirai incident/a… Continue reading How prevalent is DNS spoofing? Could a repeat of the Dyn/Mirai DDoS attack have the same results?
Scenes like what happened to Florida’s voter registration site on Oct. 6 has played out over and over again: A system goes down, and questions fly. Was there a cyberattack, specifically a distributed denial-of-service (DDoS) attack meant to overwhelm a website site with traffic, knocking it offline? Could there have been too many legitimate visitors rushing to the site to beat the voter registration deadline — that surged past what the system could handle? Or, was it something weirder, as in this case, like pop singer Ariana Grande urging fans on Twitter to register to vote? Florida’s chief information officer eventually blamed misconfigured computer servers. The incident, though, was one of several over the course of the past month that exposed ongoing anxieties about how cyberattacks, accidental outages and other technical failures could upend a polling place, or even an election. Few, if any, election security experts would rank the […]
The post The lowly DDoS attack is still a viable threat for undermining elections appeared first on CyberScoop.
Continue reading The lowly DDoS attack is still a viable threat for undermining elections