Fun-Fact: Jeder #GopherProtocol Client ist auch in der Lage, auf einen #fingerprotocol Server zuzugreifen:

curl gopher://malte70.de:79/0myip

Nur sieht die URL wegen dem Gopher-Item-Type nicht so schön aus wie eine im SmallWeb/SmolWeb anzutreffende Finger-URL:

finger://malte70.de/myip

#gopher #finger #SmallWeb #smolweb

Morning, cyber pros! It's been a bit light on news over the last 24 hours, but we've still got some critical updates to chew on. We're looking at a major data breach, an actively exploited RCE vulnerability, an old protocol making a malicious comeback, and a significant legal crackdown on North Korean illicit activities. Let's dive in:

Logitech Hit by Clop Extortion ⚠️
- Hardware giant Logitech has confirmed a data breach following an extortion claim by the Clop gang, who leaked 1.8 TB of data.
- The breach stemmed from a third-party zero-day vulnerability, likely CVE-2025-61882 in Oracle E-Business Suite, which Clop actively exploited in July 2025.
- While Logitech states no sensitive national ID or credit card data was compromised, the incident highlights Clop's consistent use of zero-days in mass data theft campaigns, previously seen with Accellion, GoAnywhere, and MOVEit.

🤖 Bleeping Computer | https://www.bleepingcomputer.com/news/security/logitech-confirms-data-breach-after-clop-extortion-attack/

RondoDox Botnet Exploiting XWiki RCE 🛡️
- The RondoDox botnet is actively exploiting CVE-2025-24893, a critical eval injection vulnerability (CVSS 9.8) in unpatched XWiki instances, to achieve arbitrary code execution.
- This flaw allows any guest user to execute remote code via a request to the "/bin/get/Main/SolrSearch" endpoint, and has been in the wild since at least March 2025.
- CISA added this to its KEV catalog, urging federal agencies to patch by November 20th. Exploitation attempts have surged, with RondoDox adding these devices to its botnet for DDoS attacks, alongside other actors deploying crypto miners and reverse shells.

📰 The Hacker News | https://thehackernews.com/2025/11/rondodox-exploits-unpatched-xwiki.html

'Finger' Protocol Abused for Malware Delivery 🕵️
- Threat actors are leveraging the decades-old 'finger' protocol (TCP port 79) to retrieve and execute remote commands on Windows devices in recent ClickFix malware attacks.
- The technique involves piping the output of a 'finger' command (e.g., `finger [email protected][.]org`) directly into `cmd.exe`, causing the retrieved commands to run locally.
- Observed campaigns deliver Python-based infostealers or NetSupport Manager RAT, with some variants including anti-analysis checks for tools like Wireshark and Process Hacker. Defenders should block outgoing traffic to TCP port 79.

🤖 Bleeping Computer | https://www.bleepingcomputer.com/news/security/decades-old-finger-protocol-abused-in-clickfix-malware-attacks/

US Cracks Down on North Korean IT Worker Fraud ⚖️
- Five U.S. citizens have pleaded guilty to assisting North Korea's illicit revenue generation by enabling IT worker fraud, impacting over 136 U.S. companies and generating $2.2 million for the DPRK regime.
- The schemes involved using stolen U.S. identities, hosting company laptops in "laptop farms," and facilitating remote access to make it appear workers were in the U.S.
- This legal action, alongside the forfeiture of over $15 million in cryptocurrency stolen by APT38 (BlueNoroff), underscores ongoing efforts to disrupt North Korea's funding for its weapons programmes.

📰 The Hacker News | https://thehackernews.com/2025/11/five-us-citizens-plead-guilty-to.html

#CyberSecurity #ThreatIntelligence #DataBreach #Clop #Ransomware #ZeroDay #Vulnerability #RCE #XWiki #Botnet #DDoS #Malware #FingerProtocol #ClickFix #NorthKorea #DPRK #APT38 #BlueNoroff #Cybercrime #InfoSec #IncidentResponse #PatchManagement

Logitech confirms data breach after Clop extortion attack

Hardware accessory giant Logitech has confirmed it suffered a data breach in a cyberattack claimed by the Clop extortion gang, which conducted Oracle E-Business Suite data theft attacks in July.

BleepingComputer
Finger
14.8%
Gopher
18.5%
Gemini
63%
Spartan
0%
Other protocol you tell us in the comments
3.7%
Poll ended at .
i see the finger protocol every time and i want to set it up for myself. i want people to finger me (pun intended), but i've desensitized myself with a blog post about the security risks of the finger protocol, and it seems kind of haphazard to run it on my personal machine. any views pls? #finger #fingerprotocol
PostFreely Update (2023-10-01) - FlameWar

This is a PostFreely update for Sunday October 1st, 2023. (Or maybe Monday October 2nd, 2023 — depending on where you are in the world.) (I’d like to do these updates somewhat regularly, just to keep everyone who is interested up to date.) — ## What Is PostFreely PostFreely is a clean, minimalistic publishing platform — geared towards blogging and long-form writing. PostFreely supports Markdown. And in particular CommonMark, thanks to Mathew ( @[email protected] [https://universeodon.com/@mathew] ). And on top of that — PostFreely is Fediverse software — meaning it can connect with Mastodon, Akkoma, Castopod, Firefish, Friendica, Kbin, Lemmy, Misskey, Pixelfed, Pleroma, Plume, and any other software that supports ActivityPub, WebFinger, and the other technologies that the Fediverse is built on top of. PostFreely is also a publishing platform for the smallnet / smallweb — currently supporting the gopher-protocol, and in the near future also supporting the gemini-protocol / gemtext, the nex-protocol, the mercury-protocol, the finger-protocol, as well as restricted sub-sets of XHTML & HTML. — ## History PostFreely is a fork of WriteFreely. Thank you Matt Baer for creating WriteFreely and making it open-source software. After a discussion on the Fediverse between 3 people, Ynte ( @[email protected] [https://aus.social/@whylamb] ) encouraged myself ( @[email protected] [https://mastodon.social/@reiver] ) and Mathew ( @[email protected] [https://universeodon.com/@mathew] ) to fork WriteFreely. That fork became PostFreely. The name “PostFreely” is an homage to Matt Baer’s WriteFreely. To note its history, and try to give credit where credit it due. — ## Archetypes We had some discussion on who PostFreely is being built for. That discussion happened over here: “PostFreely Archetypes” https://flamewar.social/post/2073 [https://flamewar.social/post/2073] Although this type of quantitative research is ongoing — we now have some clarity over who PostFreely is being built for. (A more comprehensive archetype map document still needs to be created.) — ## Roadmap Backlog Knowing who PostFreely is being built for leads into the next thing — what are we planning to build. What we are planning on building is directly affected by who we are creating PostFreely for. What do those people want? What are their problems? PostFreely should try to solve their problems and address their wants. The PostFreely roadmap is not finalized yet. But we have several items in the backlog. Here they are: * password-resets (from the web-based PostFreely application), * image uploads (with Markdown code for the uploaded image automagically put into the Markdown editor): * image upload via drag-and-drop, * image upload svia copy-and-paste, * image upload via a button (when and if the toolbar is shown), * accessibility improvements, * CommonMark Mardown by default * but can change to other formats, too, in addition to CommonMark Markdown: * the gemini-protocol’s gemtext, * the nex-protocol’s (unnamed) directory document format, * (a subset of) XHTML, * (a subset of) HTML, * etc, * post previewing, * better Fediverse integration: * ability to see Fediverse notifications — favorites, boosts, replies, mentions, etc, * edits of posts get propagated on the Fediverse * plus many other things, too * more smallnet / smallweb support: * gemini-protocol & gemtext * mercury-protocol * nex-protocol * finger-protocol * (the gopher-protocol is already supported) * perhaps others, too * commenting, * being able to have conversations with people who comment to your post, * readers being able to see comments to a post, * comment moderation tools, * ability to turn commenting off (and on), * ability to hide specific comments, * ability to block specific users from commenting, * ability to block anyone from who server instances from commenting, * importing content from other platforms into PostFreely * import from WordPress, * import from WriteFreely, * import from Plume, * improved customization abilities (from terminal and via the web-based PostFreely application), * change favicon, * change fonts, * change skin / theme, * teams * Mastodon client-server API support * the Mastodon client-server API is becoming the defacto client-server API for the Fediverse. PostFreely implementing even part of it instantly makes all sorts of tooling (such as mobile apps) work for PostFreely, too. * being able to subscribe by e-mail, * being able to paywall some content (if desired), * optional micro-blogging to be able to chat with subscribers, * new methods for authentication * in addition to password: * one-time authorization code (OTAC), * magic-link, * passkey, * multi-factor authentication (MFA), * admins * multiple admins * step-down as admin * multi-tenant support, * serving a different domain, * similar to how DNS MX records except uses host-meta, * etc. (This list is not prioritized. Being near to the top or bottom of the list is not meaningful.) Again, these are currently in the PostFreely backlog. We are still discussing them. The roadmap is not finalized yet. But hopefully this gives you some sense of where PostFreely is likely going. If you would like to affect the PostFreely roadmap, please post in the PostFreely forum: https://flamewar.social/c/postfreely [https://flamewar.social/c/postfreely] — ## Development Work Mathew ( @[email protected] [https://universeodon.com/@mathew] ) and I ( @[email protected] [https://mastodon.social/@reiver] ) have been doing clean-up work of the PostFreely source-code. This type of work is necessary to prepare for adding features. Mathew and I had a conversation about how much we want PostFreely to diverge from the WriteFreely code-base. There are trade-offs both ways. There are advantages to keeping it similar — such as being able to pull-in upstream changes from WriteFreely. BUT — it does put constraints on us — and limits how much we can improve things. We are still undecided about this. Mathew has been focusing on CommonMark and Markdown component of PostFreely. He has a plan for how to add post previewing for CommonMark Markdown, and for how to make CommonMark the default format. I have been focusing on password-resets and implementing (parts of) the Mastodon client-server API for PostFreely. — ## Feedback We would love to hear from you. You can talk with us and the PostFreely community: * by replying to this post, * by posting in this community: https://flamewar.social/c/postfreely [https://flamewar.social/c/postfreely] * by posting on the Fediverse using the #PostFreely hash-tag, * or by directly reaching out to us: @[email protected] [https://mastodon.social/@reiver] @[email protected] [https://universeodon.com/@mathew] — ⸺ Charles Iliya Krempeaux ( @[email protected] [https://mastodon.social/@reiver] )

🚨 Attention Gemini, Gopher, & Finger fans —

Adële ( @adele ) has something to show you:

https://smolweb.org/

Adële joins others who argue that — we shouldn't throw out all of the HTML "baby" with the broken-web "bath water" — but that instead —

We should use a restricted subset of HTML — and in particular XHTML.

https://mastodon.tetaneutral.net/@adele/110984755396680624

#smolWeb #smallWeb #smolNet #smallNet #smolInternet #smallInternet #WorldWideWeb #xhtml #gemini #geminiProtocol #gemtext #gopher #finger #fingerProtocol

About smolweb

smolweb.org promotes simple unbloated web. It provides resources to actors who want to participate.

@reiver is the #fingerprotocol having some kind of resurgence that it needs a hashtag?

I have been on the Fediverse long enough to remember when the #finger hash-tag was primarily about the #FingerProtocol

Now, it has been taken over by porn.

I think I'll start using #FingerProticol rather than #finger

2/

#acctURI has a way of representing user accounts on other hosts — sort of similar to the #fingerProtocol

For example —

acct:reiver%[email protected]

(Notice that the "@" in "[email protected]" gets percent-encoded as "%40".)

#WebFinger uses acct-URIs.

And the #Fediverse used WebFinger.

This is how you could represent a user on one Fediverse instance being used on another Fediverse instance without necessarily having to create a new account.