Things from Cloudflare you should block because they are so frequently abused:

*.pages.dev (web page hosting)
*.workers.dev (serverless compute)
*.r2.dev (cloud storage service)
cloudflare-ipfs.com (ipfs gateway)
*.cfargotunnel.com (Argo tunnel service - original domain name)
*.trycloudflare.com (free quick tunnels service)

Block access via DNS, web security gateway and/or your NGFW

#cybersecurity #cloudflare #infosec

From: @BleepingComputer
https://infosec.exchange/@BleepingComputer/113590904434020750

Tiny Privacy Tip for Organizations 🔘🔒:

1. If you are not absolutely required to be able to contact people by phone, do not make a phone number field mandatory in your forms ☎️🚫

2. If you are not absolutely required to be able to mail/ship something, or visit someone in-person, do not make a home address field mandatory in your forms 📪🚫

3. Do not make mandatory (or even request) any data in a form that you do not *absolutely require* to fulfill the purpose of this form 🚫

4. If you use a third-party vendor for your forms, make sure to remove any piece of data you do not actually absolutely need to collect. If you can't, select a different vendor that will allow you to 🔒👍

Yes, this mandatory by law.

#TinyPrivacyTip #Privacy #DataMinimization

Recent conversation:

Them: "Oh, there's a QR code, I'll just scan that!"

Me: "If a stranger sent you a random link, you'd just click that?"

Them: "No, that's probably a scam."

Me: "So if a stranger prints a random link on paper and tapes it to a window, that magically makes it safe?"

Them: (pause) "But it's a QR code."

Me: (facepalm)

#infosec #qrcode

My wife is on the phone with HP and looks exasperated. We had a working printer that, in my opinion, was surveiling us too much. It knew when our ink cartridges were almost empty and had our credit card number so it could send us new cartridges when we needed them. My wife loved that because ink cartridges always go dry right when you need them, and it was getting more difficult to find the proper cartridges. Yes, the printer knew if we installed third party cartridges.

But, the credit card on file just passed the expiration date, and the printer magically stopped working. That is why she is calling. And, of course, they are telling us it is obsolete and we should big a new one with even MORE surveillance! That, folks, is #enshittification

#HP
#printers
#SubscriptionHardware
#RentSeekers

#Cybersecurity tip:

Use a password manager! Not only will it save you a lot of remembering, but once it learns which passwords go with which sites, it'll help you avoid putting them into imposter sites (like from a phish). If you're looking at a login page, but the manager isn't suggesting which password to use, take an extra close look to see if it's legit!