免責聲明:
以下外部鏈結均不在本人的管理範圍內,所有立埸均與本站無關連。
如不幸在以下鏈結遇到令閣下不快的內容,請自行關閉視窗或分頁。本站不會負上任何責任。請自行決定是否繼續前住這些網站。
-
TL;DR: we have discovered XMPP (Jabber) instant messaging protocol encrypted TLS connection wiretapping (Man-in-the-Middle attack) of jabber.ru (aka xmpp.ru) service’s servers on Hetzner and Linode hosting providers in Germany. […] There are no indications of the server breach or spoofing attacks on the network segment, quite the contrary: the traffic redirection has been configured on the hosting provider network. The wiretapping may have lasted for up to 6 months overall (90 days confirmed). We believe this is lawful interception Hetzner and Linode were forced to setup.
- XMPP 界發生的蠻重大的 MitM 攻擊事件。受到攻擊的伺服器管理員相信此事件是由 VPS 提供者受到法令指示的通訊截取行為
- 這事件也許提醒了我們, VPS、「雲端」的機器並不完全在我們控制上
-
- 對於「密碼登錄是不安全」的迷思的批評
-
Cyberbullying Gone Global: Fediverse Spam and Operation Beleaguer
- 對於最近在 Fediverse 很誇張的濫發騷擾的整理
-
Twitter front-end Nitter dies as Musk wins war against third-party services
- Hugo Landau
- Web-based cryptography is always snake oil
A cryptosystem is incoherent if its implementation is distributed by the same entity which it purports to secure against.
- 對於「端對端加密」忽悠的批評。推薦閱讀
- Cloudflare considered harmful
- Web-based cryptography is always snake oil
- Schneier on Security