Cezar Lungu

3 Followers
71 Following
218 Posts
Cyber Security Specialist & Privacy Enthusiast
Websitehttps://cezarlungu.com
LinkedInhttps://www.linkedin.com/in/cezarlungu/

Defeating Private Wi-Fi Address - The Human Factor.
Read it at https://cezarlungu.com/defeating-private-wi-fi-address-the-human-factor/

Excerpt:
"Nowadays, devices have built-in privacy protections against tracking when it comes to Wi-Fi networks. But what if it were possible to work around them?"

#privacy #wifi #tracking

Defeating Private Wi-Fi Address - The Human Factor

Nowadays, devices have built-in privacy protections against tracking when it comes to Wi-Fi networks. But what if it were possible to work around them? Keep reading to find out how.

Cezar Lungu
KDE Connect: Security Disclosure

In this writeup, I go into the details of the issues I've found in the KDE Connect mobile application, together with the Python script used for exploiting them and demonstrating their impact.

Cezar Lungu

I say this as someone running a sizable Discord: We have to move past Discord for community.

2025 let's bring back BLOGS, RSS, and FORUMS

Help to advocate for a digital future that puts users in control of technology!

Participate in the EU consultation before 20 September:

https://fsfe.org/news/2024/news-20240911-02.html

đź’Ą Your input makes a difference

#FreeSoftware #SoftwareFreedom

Bring Back Free Software Funding: Give Your Feedback to the European Commission - FSFE

The European Commission has cut important funds for Free Software. The non-transparent decision shows the need for sustainable long-term funding to allow t...

FSFE - Free Software Foundation Europe
We've published a blog post on the recent Tor coverage, which we'll update with new information as it becomes available. Nothing that the Tor Project has learned about this incident indicates that the Tor Browser was attacked or exploited. Tor users can continue to use Tor to browse the Internet securely and anonymously.
https://blog.torproject.org/tor-is-still-safe/
Is Tor still safe to use? | Tor Project

This blog post is a response to an investigative news report about a large-scale law-enforcement attack that managed to de-anonymize a user of an old version of the long-retired app Ricochet. This blog post aims to provide insight into what we know so far. Nothing that the Tor Project has learned about this incident suggests that Tor Browser was attacked or exploited. Tor users can continue to use Tor Browser to access the web securely and anonymously.

The 900 MHz band supports everything from baby monitors to emergency networks—NextNav wants to claim it for themselves. https://www.eff.org/deeplinks/2024/09/nextnavs-callous-band-grab-privatize-900-mhz
NextNav’s Callous Land-Grab to Privatize 900 MHz

The 900 MHz band, a frequency range serving as a commons for all, is now at risk due to NextNav’s brazen attempt to privatize this shared resource. Left by the FCC for use by amateur radio operators, unlicensed consumer devices, and industrial, scientific, and medical equipment, this spectrum has...

Electronic Frontier Foundation
Life without alt text isn't fun for everyone.
We Spent $20 to Achieve RCE and Accidentally Became the Admins of .MOBI
L: https://labs.watchtowr.com/we-spent-20-to-achieve-rce-and-accidentally-became-the-admins-of-mobi/
C: https://news.ycombinator.com/item?id=41510252
posted on 2024.09.11 at 07:19:12 (c=0, p=3)
We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI

Welcome back to another watchTowr Labs blog. Brace yourselves, this is one of our most astounding discoveries. Summary What started out as a bit of fun between colleagues while avoiding the Vegas heat and $20 bottles of water in our Black Hat hotel rooms - has now seemingly become a

watchTowr Labs

This morning, I took my wife to the hospital for routine blood tests that had been scheduled for some time. Everything was going smoothly: check-in, number, waiting room. Suddenly, everything came to a halt and shut down. I was connected to the hospital’s public Wi-Fi and noticed that my connection also went down.

Having managed a couple of similar facilities, I immediately understood what had happened. I saw the staff panicking and calling the technicians, but they quickly reorganized within 10 minutes. They managed to process everyone who already had a number and then proceeded with the others in the order of their arrival. Despite the ten-minute delay (even though people started complaining right away), they were extremely efficient.

I later confirmed that the entire booking, check-in, and queue system is “in the cloud.” The hospital experienced a connectivity interruption, and all related services stopped. The staff no longer had access to anything, so a technician sent the lists to a manager via another channel, and everything resumed manually.

For years, I’ve insisted that certain things MUST be local. The healthcare facilities I manage have all the necessary systems for the operation of the facility internally, including patient records. External services like websites, emails, etc., are secondary.

Everything essential must always be accessible locally and, in special cases, it should be possible to physically access the servers and connect directly to them, bypassing any network/switch failures.

There has been only one interruption in the past, due to human error. Today, we have redundant servers (not HA on virtualizers, but two machines running the same software with replicated databases - on separate power lines) so such an issue shouldn’t happen anymore.

Not everything can be anticipated, but history is a great teacher. The Internet connection will eventually be interrupted :-)

When it comes to the health and survival of people, there are no compromises.

#IT #Internet #Networking #Outage #Health #HA #Cloud #CloudComputing #OwnYourData

The American #FCC is accepting public comment on a proposal that would license the 902-928 MHz band to a private company (NextNav Inc) for use in terrestrial location tracking as a commercial alternative to free #GPS, GLONASS, & Galileo satellite positioning systems. The company already operates in the 920-928 MHz band.

This will significantly interfere with #LoRaWAN IOT devices and could have dire consequences for #decentralized communication networks such as #Meshtastic.

NextNav intends to deprive the public of these unlicensed frequencies and build a nationwide monopoly on PNT infrastructure in the 902-928 MHz band. (https://www.fcc.gov/ecfs/document/10416238018537/1)

This is not only harmful to the #opensource and #openhardware community, it is a gross misappropriation of the public's precious radio frequencies to further the goals of a monopolistic for-profit corporation.

(https://meshtastic.org/blog/meshtastic-opposition-to-nextnav-proposed-changes/ )

Initial comments were due by September 5th. "reply comments" (comments that support the concerns expressed in other comments) are due by September 20th. You can make a comment here: (https://www.fcc.gov/ecfs/filings/express?proceeding%5Bname%5D=24-240). You can view all public comments here: (https://tinyurl.com/FCC-24-240)

ECFS

Federal Communication Commission Electronic Comment Filing System