nice, I can now get RSS feeds for these email-only newsletters using github.com/leafac/kill-the-new.

- This Week in Security: this.weekinsecurity.com

- The Wiretap: forbes.com/newsletter/thewiret

Quad9 is moving to Switzerland:

“The Swiss government produced findings of law that Quad9 is exempt from both law enforcement and intelligence data-collection and retention requirements, as well as KYC.”

- quad9.net/news/blog/quad9-publ
- Discussion: teddit.net/r/privacytoolsIO/co

Help users in Iran reconnect to Signal

“We’ve added support in Signal for a simple TLS proxy that is easy to set up, can be used to bypass the network block, and will securely route traffic to the Signal service.”

signal.org/blog/help-iran-reco

@polymerwitch this fragile script I wrote may interest you (and hopefully still works)—will generate a .ovpn file for connecting to riseup which you could do so using 3rd party OpenVPN apps. Although their API options are limited to TCP/443, I think UDP/1194 is supported and you can select the server, just need to modify the file 🙂

gitlab.com/nitrohorse/bitmask-

Interesting new open-source iOS app, ZudVPN. Deploy a personal IKEv2 VPN with Pi-hole to a VPS *from* the app.

- zudvpn.com
- github.com/zudvpn/ZudVPN

Added to encrypted-dns.party for Apple devices:

- Faelix Privacy DoH: faelix.net/ref/dns/#privacy-dn
- Free Radio Munich DoH: ffmuc.net/wiki/doku.php?id=knb

And now looks like there are signed profiles directly from dnsforge.de and get.yepdns.com.

Show thread

a compelling spam email I received 

from 1a45b1090000e3bc@comsoft.co.in:

Congratulations,

Because of the coronavirus pandemic, the United Nations decided to reward so many people around the world with EUR 5,000,000.

Your email address was one of the lucky winners. To receive the award, contact us at unitednation.donation26@gmail.com with your full name, country and phone number, occupation and monthly income.

United Nations

@silmathoron good to know! You’re right, looks like sharing is disabled by default.

@andreas
Fennec, the open-source version of FF on F-droid does not track anything

mozilla conflict of interest 

End Mozilla-the-corp.

Give money from the inevitable Google settlement to Mozilla-the-foundation.

Enact UBI so more devs can contribute to the browser without fearing starvation.

Otherwise this absurd conflict-of-interest between making a privacy-oriented browser and the worst surveillance capitalist company providing funding will resolve the other way, with Mozilla continuing to sell its soul, until 'privacy' is no more than marketing.

(Which some might say has already happened...)

Helpful filterlist for uBlock Origin, "Fuck Fuckadblock," a successor to reek's "Anti-Adblock Killer list."

bogachenko.github.io/fuckfucka

Found a blog post related to that comparison video w/ a more fleshed out script to test DNS blocking effectiveness.

andryou.com/2020/05/31/compari

Source: pastebin.com/raw/qNxYF6bp

Some fitler list ideas: firebog.net

Show thread

Pros: increased security due to leveraging threat intelligence feeds across multiple providers.

Cons: latency is coupled to the slowest resolver, and decreased privacy due to sending DNS requests to multiple 3rd party resolvers (rather than one or even none w/ something like Unbound).

I wonder if this idea has been implemented anywhere...

Show thread

Watching this video [1] comparing the malware blocking effectiveness of 3rd party DNS resolvers got me thinking...

For some security focused use cases wouldn't it be valuable if there were a way to leverage multiple DNS resolvers with a strategy where DNS requests are sent to multiple resolvers in parallel and responses are returned only once it's determined that no resolver blocked the request? 🤔

[1] forums.lawrencesystems.com/t/d

Show thread
Show older
nitrohorse Ⓐ

Personal instance of nitrohorse (nitrohorse.com).