Today I've been really busy and I'm exhausted, but I wanted to share the "gem" of the day.
A colleague (whom I've never spoken to before) calls me and explains that they need to connect a client's server with their management system. To communicate, the client's server needs to be reachable via telnet. I explain that I can't open telnet to the world, but if necessary, I can set up a VPN of their choice (Wireguard, OpenVPN, even Zerotier if it's helpful) and grant telnet access through the VPN. Not ideal, but better than nothing...

That said, the colleague attacks me: "Here you are, with these VPNs - don't you understand they're used to spy on us? Governments intercept all VPNs to steal our personal data." I try to clarify that I may not have explained myself well and that I don't mean using the famous commercial VPNs, but a private VPN access to allow the two machines to communicate securely. No luck: "Haven't you realized yet? Every time we open a VPN, they know and intercept us."

Frankly, I was speechless...

#VPN #Privacy #Security #Misconceptions #IT #SysAdmin #ITHorrorStories

An absolutely naive question:

Are there any OAuth 2 (similar) solutions that also or especially insist on post-quantum cryptography and also conform to OpenID Connect or similar? 🤔

(Sharing this post would be nice and I thank you for it )

—
#itsecurity #oauth2 #pqc #crypto #it #cryptography #openidconnect #openid #postquantumcryptography #security #pqc #question #itquestion #question #share #shareplease #nerdquestions

Adobe Magneto: una pericolosa minaccia RCE per i siti di e-commerce

Gli specialisti di Sicurezza Informatica hanno avvertito che gli #hacker stanno già sfruttando una nuova #vulnerabilità in #Magento (CVE-2024-20720) e l'utilizzatore per implementare una #backdoor persistente sui siti di e-commerce.

#redhotcyber #online #it #web #ai #hacking #privacy #cybersecurity #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

https://www.redhotcyber.com/post/adobe-magneto-una-pericolosa-rce-minaccia-i-siti-di-e-commerce/

Adobe Magneto: una pericolosa RCE minaccia i siti di e-commerce

Una pericolosa falla di sicurezza consente agli utenti malintenzionati di eseguire codice remoto sui siti web Adobe Magneto.

^{Redazione RHC (Red Hot Cyber)}

The whole story:

Users ditch Glassdoor, stunned by site adding real names without consent.

https://arstechnica.com/tech-policy/2024/03/glassdoor-adding-users-real-names-job-info-to-profiles-without-consent/

#infosec #security #IT #enshitification #jobs

Users ditch Glassdoor, stunned by site adding real names without consent

Anonymous review site Glassdoor now consults public sources to identify users.

^{Ars Technica}

Il Robot Giocattolo Spione: Kaspersky Lab rivela inquietanti vulnerabilità su

I #ricercatori di Kaspersky Lab hanno studiato un #robot #giocattolo e hanno scoperto una serie di pericolose #vulnerabilità.

#redhotcyber #online #it #web #ai #hacking #privacy #cybersecurity #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

https://www.redhotcyber.com/post/il-robot-giocattolo-spione-kaspersky-lab-rivela-inquietanti-vulnerabilita-su/

Il Robot Giocattolo Spione: Kaspersky Lab rivela inquietanti vulnerabilità su

I ricercatori di Kaspersky Lab hanno rilevato all'interno di un robot giocattolo diffuse vulnerabilità capaci di interagire con il bambino.

^{Redazione RHC (Red Hot Cyber)}