Attackers Can Exploit Critical Cisco Jabber Flaw With One Message
An attacker can execute remote code with no user interaction, thanks to CVE-2020-3495. Continue reading Attackers Can Exploit Critical Cisco Jabber Flaw With One Message
Category Archives: xmpp
Profiling a Currently Active Portfolio of High-Profile Cybercriminal Jabber and XMPP Accounts Including Email Address Accounts – Part Two
Dear blog readers,I wanted to take the time and effort and some of my recently published and released findings part of my currently ongoing OSINT and Law Enforcement Operation called “Uncle George” where I intend to present the findings from what appea… Continue reading Profiling a Currently Active Portfolio of High-Profile Cybercriminal Jabber and XMPP Accounts Including Email Address Accounts – Part Two
Forward secrecy (plausible deniability) and storing messages
How do messengers, like signal or XMPP-omemo messengers, store their messages?
Since the session key is only valid for the current session, how can such extensions like MAM (message archiving on XMPP server) or storing the me… Continue reading Forward secrecy (plausible deniability) and storing messages
monitoring VOIP packets with GV configured with obi200
I have a question regarding the security level of using Google voice with OBI200. I believe they probably using XMPP protocol which provides no encryption. In a large scale can the VOIP packets be sniffed remotely without the… Continue reading monitoring VOIP packets with GV configured with obi200
BSides SF 2019: Remote-Root Bug in Logitech Harmony Hub Patched and Explained
Users of Logitech’s Harmony Hub get long-awaited answers about the critical bugs that left their home networks wide open to attack. Continue reading BSides SF 2019: Remote-Root Bug in Logitech Harmony Hub Patched and Explained
How do end-to-end encrypted chat services ensure that the server admin doesn’t add new members to a chat?
This question is about any chat service that supports end-to-end encrypted group chats, for instance Signal, XMPP + OMEMO (closed group chats in particular), WhatsApp, and the like.
How do these services ensure that a hostil… Continue reading How do end-to-end encrypted chat services ensure that the server admin doesn’t add new members to a chat?
Is messaging using a mobile jabber client and the jabber network secure?
Given that WhatsApp does not advertise itself as secure, and that the EFF foundation is not giving any recomendations on open source messaging apps while providing a guide to install Signal and another guide to install WhatsA… Continue reading Is messaging using a mobile jabber client and the jabber network secure?
Best XMPP client for Linux?
What is the best XMPP client? I know many of XMPP clients are not audited have bugs and can be exploited, so I don’t know what is the most secure.
Now I think about Gajim, Pidgin and Dino
Security Camera Found Riddled With Bugs
Hanwha is patching 13 vulnerabilities in its SmartCam security camera that allows attackers to take control of the device, use it to gain further network access or just brick it. Continue reading Security Camera Found Riddled With Bugs
Security Camera Found Riddled With Security Bugs
Hanwha is patching 13 vulnerabilities in its SmartCam security camera that allows attackers to take control of the device, use it to gain further network access or just brick it. Continue reading Security Camera Found Riddled With Security Bugs