security

security

Discussion on all things web3 security and auditing

Web3 Antivirus pfp

@web3-antivirus

Ever wondered how to spot safe #DeBank profiles when tracking wallets and #DeFi activity? Stay tuned, we will soon make wallet data clearer and help you spot risky ones. P.S. Get ready to decide which @debankdefi Whales’ portfolios to trust

0 reply

0 recast

0 reaction

Vinay Vasanji pfp

@vinayvasanji.eth

Recently I've received multiple calls that show up as Google on Caller ID The 'person' on the other end sounds like an employee of Google and responds in a believably human way - I almost believed them when they said my Google account had been compromised BUT thankfully I am 99% always suspicious of any calls on my cell phone except for those from a very select few people TL;DR: ignore calls from anyone purporting to be Google - more details on how things could go horribly wrong if you don't https://krebsonsecurity.com/2024/12/how-to-lose-a-fortune-with-just-one-bad-click/

1 reply

1 recast

9 reactions

barrydyne pfp

It’s strange to me that emails are allowed to show one url and direct to a different one (browsers too). I suppose because they need to track clicks. Seems like it should be a solved thing by now.

1 reply

0 recast

2 reactions

Peter🎩 pfp

@silencedogood.eth

How has the web3 auditing landscape changed in 2024 in your opinion?

0 reply

0 recast

0 reaction

kazani.base.eth 🦂 pfp

kazani.base.eth 🦂

👮‍♀ 10 Cybersecurity Blogs/Websites for Cybersecurity Professionals/Hackers 1. Daniel Missler https://danielmiessler.com 2. Graham Kewley https://grahamcluley.com/about-this-site/ 3. Security Weekly https://scmagazine.com/security-weekly-blog 4. Infosecurity Logs https://infosecurity-magazine.com 5. Hacker news https://thehackernews.com 6. Intigriti https://medium.com/intigriti 7. Hakluke https://hakluke.com 8. Hacker 1 https://hackerone.com/hacktivity 9. BugCrowd https://bugcrowd.com/crowdstream?filter=disclosures 10. IT Security Guru https://itsecurityguru.org

0 reply

0 recast

1 reaction

Abi | abishek.eth pfp

Abi | abishek.eth

in past cycles, crypto as an industry faced an existential risk of centralized providers masquerading as decentralized & secure. think Mt Gox, Terra Luna, FTX, etc. what are the biggest risks of this cycle? ai agents going rogue? L2s getting hacked? chain censorship?

0 reply

0 recast

1 reaction

RevNet pfp

https://x.com/me_jango/status/1864784691397525751?s=46&t=VHuetk2JxEceZwbUtaxuvA Auditors where you at?

1 reply

2 recasts

7 reactions

Jorge Schnura pfp

I wish @keystonewallet would launch a much faster hardware wallet (faster interface, QR scanning and fingerprint reader), with a more premium body. I love my Keystone, it's by far the best hardware wallet I've ever had, but those improvements would make it perfect IMO

1 reply

0 recast

4 reactions

Cassie Heart pfp

https://crzphil.github.io/posts/ssh-obfuscation-bypass/ Not good enough. See you in a few years when they finally support fixed constant bandwidth use.

4 replies

8 recasts

40 reactions

Brad Barrish pfp

Are you still using Telegram? Why or why not?

1 reply

0 recast

2 reactions

Colin pfp

Getting an uptick in phishing messages lately. Haven't seen this one before

4 replies

2 recasts

48 reactions

Jorge Schnura pfp

We should all make an effort to try to move over to Signal after all that's going on with TG: https://signal.org/install

0 reply

0 recast

5 reactions

not parzival pfp

the oldest hacks are the ones we often see in extensive infrastructure - SQL injection, teamviewer, weak passwords Tsa skip precheck site was vulnerable to sql injection, florida water plant hacked via teamviewer, oil rig security, and hospitals + schools This is why security is a scary place, not because solutions don't exist but because they typically arent in place

4 replies

0 recast

4 reactions

Brad Barrish pfp

For anyone that uses YubiKeys. https://www.yubico.com/support/security-advisories/ysa-2024-03/

0 reply

0 recast

0 reaction

Frank pfp

How exactly do I pay Mullvad, in cash?

0 reply

0 recast

0 reaction