Anyone asserting encryption is a tool for crime is either painfully misinformed or is attempting to manipulate legislators to gain oppressive power over the people.

Encryption is not a crime,
encryption is a shield.

Encryption protects you from cyberattack, identity theft, discrimination, doxxing, stalking, sexual violence, physical harm, and much more.

For safety, for privacy, for democracy, and for all our human rights, it's critical that we defend our right to encryption.

https://www.privacyguides.org/articles/2025/04/11/encryption-is-not-a-crime/

#Privacy #Encryption #DigitalRights #HumanRights #Democracy #RootForE2EE

I've just stumbled across this incredibly useful explanatory chart on mansplaining. Petition for this to be prominently displayed in every workplace.

https://www.bbc.com/worklife/article/20180727-mansplaining-explained-in-one-chart

No Hardening macOS this week. Got distracted.

Starkiller is a new phishing kit that proxies REAL login pages in real-time. It steals credentials, MFA tokens and session cookies — and MFA won't save you.

I wrote a full technical analysis: how AitM works, why traditional defences fail, and what to actually do about it.

Also released ja3-probe, a Rust PoC for TLS fingerprinting of phishing proxies.

→ Post: https://bytearchitect.io/network-security/Starkiller-Phishing-Kit-Why-MFA-Fails-Against-Real-Time-Reverse-Proxies/?ref=mastodon
→ PoC: https://github.com/gb-at-r3/ja3Probe

#infosec #phishing #AitM #MFA #TLS #security #rust

RE: https://mastodon.social/@bsletten/116112393904621126

Holy smokes. Do not trust a company called Persona with your personal information. #privacy #infosec

I just starred sheeki03/tirith on GitHub: https://github.com/sheeki03/tirith

⭐ 1,761 stars • Rust
Your browser catches homograph attacks. Your terminal doesn't. Tirith guards the gate — intercepts suspicious URLs, ANSI injection, and pipe-to-shell attacks before they execute.