Fosstodon

Susan Larson ♀️🏳️‍🌈🏳️‍⚧️🌈The <a href="https://mastodon.online/tags/NewYorkTimes" class="mention hashtag" rel="nofollow noopener" target="_blank">#NewYorkTimes</a> Faces <a href="https://mastodon.online/tags/Backlash" class="mention hashtag" rel="nofollow noopener" target="_blank">#Backlash</a> After <a href="https://mastodon.online/tags/Sanitizing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sanitizing</a> <a href="https://mastodon.online/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trump</a> <a href="https://mastodon.online/tags/Eugenics" class="mention hashtag" rel="nofollow noopener" target="_blank">#Eugenics</a> <a href="https://mastodon.online/tags/Claim" class="mention hashtag" rel="nofollow noopener" target="_blank">#Claim</a>. What was The New York Times thinking <a href="https://mastodon.online/tags/whitewashing" class="mention hashtag" rel="nofollow noopener" target="_blank">#whitewashing</a> Trump’s <a href="https://mastodon.online/tags/racist" class="mention hashtag" rel="nofollow noopener" target="_blank">#racist</a> <a href="https://mastodon.online/tags/remarks" class="mention hashtag" rel="nofollow noopener" target="_blank">#remarks</a>?<a href="https://newrepublic.com/post/187039/new-york-times-nyt-trump-eugenics-claim" rel="nofollow noopener" translate="no" target="_blank">https://newrepublic.com/post/187039/new-york-times-nyt-trump-eugenics-claim</a>

Harry SintonenThe <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> report on the technical investigations for <a href="https://infosec.exchange/tags/Storm0558" class="mention hashtag" rel="nofollow noopener" target="_blank">#Storm0558</a> key acquisition is a rather interesting read.They of course can't and don't go into specifics about the nature of the key leakage. I'm totally guessing here, but it might be that the tooling Microsoft used to detect and sanitize the <a href="https://infosec.exchange/tags/keymaterial" class="mention hashtag" rel="nofollow noopener" target="_blank">#keymaterial</a> didn't identify the key in the specific key schedule form. Maybe a new <a href="https://infosec.exchange/tags/encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#encryption</a> cipher was used that uses a new key schedule format that the tooling didn't support, or the cipher implementation started to store the key schedule in a new, different way.This incident is a good example on how attempts of <a href="https://infosec.exchange/tags/sanitizing" class="mention hashtag" rel="nofollow noopener" target="_blank">#sanitizing</a> logs, memory dumps and similar of sensitive information are a losing game. At best it can be considered best effort, there's always ways information can end up leaking out despite your best efforts in trying to identify it.For critical systems the encryption key should only ever exists in a security enclave or HSM. That'd be the only way to ensure that the key cannot leak: It's nowhere in the memory to begin with.ref: <a href="https://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/" rel="nofollow noopener" translate="no" target="_blank">https://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/</a>

Nonilex<a href="https://masto.ai/tags/ChrisLicht" class="mention hashtag" rel="nofollow noopener" target="_blank">#ChrisLicht</a>’s departure marks the failure of his mandate — delivered from his corporate overlords, including <a href="https://masto.ai/tags/WarnerBrosDiscovery" class="mention hashtag" rel="nofollow noopener" target="_blank">#WarnerBrosDiscovery</a> CEO <a href="https://masto.ai/tags/DavidZaslav" class="mention hashtag" rel="nofollow noopener" target="_blank">#DavidZaslav</a> — to recalibrate the network’s political sensibility toward the center. To the extent that anyone ever understood what that meant for actual <a href="https://masto.ai/tags/CNN" class="mention hashtag" rel="nofollow noopener" target="_blank">#CNN</a> broadcasts, it’s now clear that it meant <a href="https://masto.ai/tags/sanitizing" class="mention hashtag" rel="nofollow noopener" target="_blank">#sanitizing</a> the screen in deference to the <a href="https://masto.ai/tags/Republican" class="mention hashtag" rel="nofollow noopener" target="_blank">#Republican</a> front-runner.  A disaster, in other words.

tallship<a href="https://octodon.social/@ethanz" class="u-url mention" rel="nofollow noopener" target="_blank">@ethanz</a> And you should return the favor by never posting unsanitized Twitter links to the <a href="https://obo.sh/tags/Fediverse" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fediverse</a> either 🙂I recommend you do a search for "IndyWeb POSSE" program. Which explains the philosophy behind only posting Fediverse links into the deprecated legacy silos, and never posting unsanitized links from places there like twitter into the Fediverse.Basically, you do a disservice posting links in the Fediverse that lead people to the very monolithic, privacy disrespecting silos that they've already left behind.Instead, if you even bother to use those deprecated legacy silo systems, post links bringing the people there at places like twitter to content that exists here in the Fediverse, thereby providing incentives to create accounts on Fediverse platforms like <a href="https://obo.sh/tags/Friendica" class="mention hashtag" rel="nofollow noopener" target="_blank">#Friendica</a>, <a href="https://obo.sh/tags/FunkWhale" class="mention hashtag" rel="nofollow noopener" target="_blank">#FunkWhale</a>, <a href="https://obo.sh/tags/MicroPub" class="mention hashtag" rel="nofollow noopener" target="_blank">#MicroPub</a>, <a href="https://obo.sh/tags/Mitra" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mitra</a>, <a href="https://obo.sh/tags/PeerTube" class="mention hashtag" rel="nofollow noopener" target="_blank">#PeerTube</a>, <a href="https://obo.sh/tags/Pixelfed" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pixelfed</a>, <a href="https://obo.sh/tags/Pleroma" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pleroma</a>, <a href="https://obo.sh/tags/Soapbox" class="mention hashtag" rel="nofollow noopener" target="_blank">#Soapbox</a>, <a href="https://obo.sh/tags/Quanta" class="mention hashtag" rel="nofollow noopener" target="_blank">#Quanta</a>, Etc., Thereby joining the Fediverse 👍If you find that you really must post a link leading to one of the deprecated silos, then please consider <a href="https://obo.sh/tags/sanitizing" class="mention hashtag" rel="nofollow noopener" target="_blank">#sanitizing</a> such links. i.e., in the case of Twitter, you can use the very popular <a href="https://obo.sh/tags/Nitter" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nitter</a> by just replacing the "twitter .com" with "nitter .net" in the URL.If you're on <a href="https://obo.sh/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a>, <a href="https://obo.sh/tags/Fedilab" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fedilab</a> does this "automagically" for you if you have safe posting enabled.If you're on desktop, there's a whole list of similar sanitation tools you can use for <a href="https://obo.sh/tags/Reddit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Reddit</a>, for example, by changing the domain in the URL to <a href="https://obo.sh/tags/Teddit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Teddit</a> .net and similar tools for <a href="https://obo.sh/tags/InstaSPAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#InstaSPAM</a>, <a href="https://obo.sh/tags/Quora" class="mention hashtag" rel="nofollow noopener" target="_blank">#Quora</a>, and many others too. For <a href="https://obo.sh/tags/YouTube" class="mention hashtag" rel="nofollow noopener" target="_blank">#YouTube</a>, you can use <a href="https://obo.sh/tags/Invidious" class="mention hashtag" rel="nofollow noopener" target="_blank">#Invidious</a>.A long list of these privacy protecting utilities is provided at:<a href="https://pussthecat.org/" rel="nofollow noopener" target="_blank">https://pussthecat.org/</a>And you can install Fedilab from F-Droid too: <a href="https://Fedilab.App" rel="nofollow noopener" target="_blank">https://Fedilab.App</a>You can also install the <a href="https://obo.sh/tags/UntrackMe" class="mention hashtag" rel="nofollow noopener" target="_blank">#UntrackMe</a> app at F-Droid for generating safe links when not posting to the Fediverse - desks details are at three Fedilab website above.I hope that helps!<a href="https://obo.sh/tags/tallship" class="mention hashtag" rel="nofollow noopener" target="_blank">#tallship</a> <a href="https://obo.sh/tags/FOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSS</a> <a href="https://obo.sh/tags/ActivityPub" class="mention hashtag" rel="nofollow noopener" target="_blank">#ActivityPub</a> <a href="https://obo.sh/tags/POSSE" class="mention hashtag" rel="nofollow noopener" target="_blank">#POSSE</a> <a href="https://obo.sh/tags/Indyweb_POSSE" class="mention hashtag" rel="nofollow noopener" target="_blank">#Indyweb_POSSE</a> <a href="https://obo.sh/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://obo.sh/tags/fdroid" class="mention hashtag" rel="nofollow noopener" target="_blank">#fdroid</a> ⛵.

IT NewsThe Big List of Naughty Strings Helps Find Those User Input Problems - Any software that accepts user input must take some effort to sanitize incoming da... - <a href="https://hackaday.com/2022/09/10/the-big-list-of-naughty-strings-helps-find-those-user-input-problems/" rel="nofollow noopener" target="_blank">https://hackaday.com/2022/09/10/the-big-list-of-naughty-strings-helps-find-those-user-input-problems/</a> <a href="https://schleuss.online/tags/biglistofnaughtystrings" class="mention hashtag" rel="nofollow noopener" target="_blank">#biglistofnaughtystrings</a> <a href="https://schleuss.online/tags/softwaredevelopment" class="mention hashtag" rel="nofollow noopener" target="_blank">#softwaredevelopment</a> <a href="https://schleuss.online/tags/sanitizing" class="mention hashtag" rel="nofollow noopener" target="_blank">#sanitizing</a> <a href="https://schleuss.online/tags/userinput" class="mention hashtag" rel="nofollow noopener" target="_blank">#userinput</a> <a href="https://schleuss.online/tags/strings" class="mention hashtag" rel="nofollow noopener" target="_blank">#strings</a> <a href="https://schleuss.online/tags/testing" class="mention hashtag" rel="nofollow noopener" target="_blank">#testing</a> <a href="https://schleuss.online/tags/xss" class="mention hashtag" rel="nofollow noopener" target="_blank">#xss</a> <a href="https://schleuss.online/tags/qa" class="mention hashtag" rel="nofollow noopener" target="_blank">#qa</a>

Recent searches

Search options

Administered by:

Server stats:

#sanitizing