#personal cybersecurity

[orbitbrain]

Bearer, Notebook Labs, Protexxa Raise Millions in Seed Funding

Bearer, Notebook Labs, Protexxa Raise Millions in Seed Funding

Home › Identity & Access Bearer, Notebook Labs, Protexxa Raise Millions in Seed Funding By Ionut Arghire on October 31, 2022 Tweet Bearer, Notebook Labs, and Protexxa, three cybersecurity startups dealing with data security, web3 identity, and enterprise cyber hygiene, respectively, have announced raising a combined total of over $10 million in seed funding. Bearer, a San Francisco-based company…

[existentialterror]

Do NOT send pictures of your ID card to discord bots!!!!

Or, like, any online rando.

I ran into a server that wanted to make sure that members are over 18 years old. They wanted to avoid the other thing I've heard of, which is asking you to verify your age by sending pictures of your ID card to a moderator. Good! Don't do that!

However, ALSO don't do this other thing, which is using a discord bot that would "automatically verify" you from a selfie and a photo of your ID card showing your birthday. The one they used is ageifybot.com. There's a little more information on its top.gg page. Don't like that! Not using that!

Why not? It's automatic! Well, let me count the ways this service skeeves me out:

How does the verification process work? There is no information on this. Well, okay, if you had more info on what kind of algorithms etc were being used here, that might make it easier for people to cheat it. Fair enough. But we need something to count on.

Who's making it? Like, if I can't understand the mechanics, at least I'd like to know who creates it - ideally they'd be a security professional, or at least a security hobbyist, or an AI expert, or at least someone with some kind of reputation they could lose if this turns out to not be very good, or god forbid, a data-stealing operation. However, the website contains nothing about the creators.

The privacy policy says they store information sent to them, such as your selfie and photo of an ID card, for up to 90 days, or a year if they suspect you're misleading them. It sure seems like even if they're truly abiding by their privacy policy, there's nothing to stop human people from looking at your photos.

The terms of service say they can use, store, process, etc, any information you send them. And that they can't be held accountable for mistakes, misuse, etc. And that they can change the bot and the ToS at any times without telling you. The terms of service also cut off midway through a sentence, so like, that's reassuring:

In conclusion, DO NOT SEND PICTURES OF YOUR ID CARD TO RANDOM DISCORD BOTS.

Yes, keeping minors out of (say) NSFW spaces is a difficult problem, but this "solution" sucks shit and is bad.

Your ID card is private, personal information that can be used by malicious actors to harm you. Do not trust random discord bots.

[allthecanadianpolitics]

One of western Canada’s largest rental property companies is warning tenants about a cyber security breach it says was discovered earlier this year. In a letter to tenants on Aug. 19, also published on its website, Mainstreet Equity Corporation says on it discovered a third party had gained access to a portion of its IT infrastructure on May 21. “Upon discovering this, we immediately undertook countermeasures to prevent any further unauthorized activity,” the company said.

Continue Reading

Tagging: @newsfromstolenland

[scipunk]

Person of Interest (2011-2016)

[multipleusersmasqueradingasone]

Multiple Users Masquerading As One

[alwaysbewoke]

[ackee]

when you find a 3 hr video essay and youre so excited to put it on as bg noise while you do whatever, but you realize you cant stand how they talk/edit/their humor/etc 💔💔

[juvederm]

bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb

[dougielombax]

So the whole world had an electronic stroke because of a dodgy system update?

Oops?

Have you tried turning it off and - *is promptly tackled to the ground by two large, surly Oompa-Loompas* OOF!!!! UNHAND ME YOU BASTARDS!!!!!! *is promptly beaten unconscious with hammers*

[electric-butter-slug]

I wish the hacker responsible for my job being shut down a very good day. I desperately needed a fuckin break and you delivered to me what my bosses have been refusing for so long. Whoever you are, I wish we were besties

[theeclecticlibrary]

Y'all I'm so fucking excited. Phrack is going to be coming out with a new issue in summer of this year! Hacking magazine that has literally existed since before the birth of the web is still up and running and I am so so so excited to see what winds up in the next issue.

[chronomally]

Me literally just starting the first semester of my master's degree: But what if I got...two master's degrees

[crystal-lillies]

I understand the importance of cybersecurity training. I really do.

But when the height of a 15-minute training (that is more or less the SAME TRAINING VIDEO from the year before) is just Don't Click Suspicious Links and Look for Spelling/Grammar Errors and Never Give Away Bank Details and Use a VPN on Public WiFi.

My dude. I could cry at this waste of 15 minutes of my life. This is the most reiterated knowledge, some of which is regularly repeated through YouTube VPN sponsorship ads!

Yes, companies need to cover their bases and whatnot but come ON I thought we collectively learned about phishing and scam emails back in the 2000s days of the whole Nigerian prince needs preloaded credit cards scam. Why are we all still being badgered with the same schtick and not on things like, 3rd party tracking data sold to the highest bidder and usage of professional social media that, with everything else, is BEING SCRAPED FOR GENAI HELLO. How is THAT not a "risk to company information"?

Phishing is a problem yeah but for the love of all goodness if we've completed ~training~ on it already, maybe JUST MAYBE. Consider. We don't need to sit through another mind-numbingly generic-ass animated PowerPoint on stuff we already know.

And MAYBE add a slide on your PowerPoint about bigger concerns to protect against.

[undedkat]

I wish we had more people who were in the middle when it came to privacy and personal security, you know? Most people are like “whatever the companies can track me” and everyone on the other side is like “don’t own a phone and rotate your passwords every day”.

Like where are the normal people

[ryanxross]

last.fm and instafest and any of those apps that take your spotify data and measure some kind of metric about it are all fun and games but they are SO insecure like please do not give any of these things access to your accounts or your data i am absolutely begging

[slightly-awkward-sunshine]

I didn’t use it much anyway, but imma delete my twitter. If you want to see my art and doodles and stuff follow me on Instagram!!