#Tag · Bonfire social

I decided to put some regular black electrical tape over the camera to block it whilst keeping a neat finish. Turns out IR passes straight through electrical tape 😂

I did consider whether its because of the adjacent backlight and so I tried blocking that too, however most of the rooms I sit in have enough ambient IR to not matter.

I'm considering something more "glass like" since that seems to reflect IR much better but the seems a pain.
Anyone else have a better solution they've found?

Its probably at the point for me that its "good to know but can't be bothered" but there's just so many interesting and unexpected outcomes I felt compelled to satisfy my curiosity and share.

#Cyber #Security #Infosec #Lenovo #Privacy #Hacking

Picture of IR camera seeing through the electrical tape with reasonable detail.

Lord Caramac the Clueless, KSC boosted

Matt Organ

@Slater450413@infosec.exchange · 2 weeks ago

A friendly reminder to never trust manufacturers privacy protections.

I was recently attempting to get an external camera functioning, so I started polling various video devices sequentially to find out where it appeared and stumbled across a previously unknown (to me at least) camera device, right next to the regular camera that is not affected by the intentional privacy flap or "camera active" LED that comes built in.

I had always assumed this was just a light sensor and didn't think any further about it.

The bandwidth seems to drop dramatically when the other camera is activated by opening the privacy flap, causing more flickering.
This was visible IRL and wasn't just an artifact of recording it on my phone.
I deliberately put my finger over each camera one at a time to confirm the sources being projected.

A friend of mine suggested this may be related to Windows Hello functionality at a guess but still seems weird to not be affected by the privacy flap when its clearly capable of recording video.

dmidecode tells me this is a LENOVO Yoga 9 2-in-1 14ILL10 (P/N:83LC)

Command I used for anyone to replicate the finding. (I was on bog standard Kali, but I'm sure you'll figure out your device names if they change under other distros):
vlc v4l2:///dev/video0 -vv --v4l2-width=320 --v4l2-height=240 & vlc v4l2:///dev/video2 -vv --v4l2-width=320 --v4l2-height=240

#Cyber #Security #Infosec #Lenovo #Privacy #Hacking

GIF

Victoria Stuart 🇨🇦 🏳️‍⚧️

@persagen@mastodon.social · 15 hours ago

Persona (identity verification service)
https://en.wikipedia.org/wiki/Persona_(identity_verification_service)

#LinkedIn #Persona #DataBrokers #surveillance #privacy #capitalism #billionaires #Thiel #Palantir #ICE #DHS #authoritarianism #Trump

Persona (identity verification service) - Wikipedia

I Verified My LinkedIn Identity. Here's What I Handed Over | Hacker News

THE LOCAL STACK

I Verified My LinkedIn Identity. Here's What I Actually Handed Over.

I wanted a blue badge on LinkedIn. To get it, I gave a US company my passport, my face, and my biometric data. Then I read the fine print.

GhostOnTheHalfShell boosted

Mysk🇨🇦🇩🇪

@mysk@mastodon.social · 18 hours ago

This can be interpreted in such a broad manner that even HTTPS could be considered a hostile act of “end-to-end” encryption 🇬🇧

NoToDigitalID:
BREAKING: Under British and UK Legislation anyone using or developing end-to-end encryption is now a “hostile actor”

#privacy #infosec

Engagement in Hostile Activity

Since hostile activity does not require any knowledge or tasking by a
foreign state*30, the phenomenon of double-ignorance could arise. A person may be engaged in hostile activity if they do something which, unknown to them threatens, national security and which is in the interests of another State, also entirely in the dark. For example:

The developer of an app, whose selling point is end-to-end encryption which would make it more difficult for UK security and intelligence agencies to monitor communications. It is a reasonable assumption that this would be in the interests of a foreign state even if though the foreign state has never contemplated this potential advantage. — Engagement in Hostile Activity Since hostile activity does not require any knowledge or tasking by a foreign state*30, the phenomenon of double-ignorance could arise. A person may be engaged in hostile activity if they do something which, unknown to them threatens, national security and which is in the interests of another State, also entirely in the dark. For example: The developer of an app, whose selling point is end-to-end encryption which would make it more difficult for UK security and intelligence agencies to monitor communications. It is a reasonable assumption that this would be in the interests of a foreign state even if though the foreign state has never contemplated this potential advantage.

Mysk🇨🇦🇩🇪

@mysk@mastodon.social · 18 hours ago

This can be interpreted in such a broad manner that even HTTPS could be considered a hostile act of “end-to-end” encryption 🇬🇧

NoToDigitalID:
BREAKING: Under British and UK Legislation anyone using or developing end-to-end encryption is now a “hostile actor”

#privacy #infosec

🌱🏴‍🅰️🏳️‍⚧️🐧📎 Ambiyelp and 1 other boosted

Javier de la Cueva

@jdelacueva@mastodon.social · 2 days ago

Actions speak louder than words.

I am unable to install EU Login app in my phone because I use LineageOS and not the Google Spy Android.

Thus, I cannot use the double factor authentication, mandatory from the 25-02-2026 on unless I tell Google.

A frontal attack to our #privacy.

Stupid, no?

@EUCommission

Screenshot showing need og Google Play Services to install EU Login Mobile App

Kevin Karhan :verified:

@kkarhan@infosec.space · 23 hours ago

@ambiguous_yelp @stman @mmu_man @vidak @theruran @50htz @forthy42 @oceane @nobody obviously people should do #CryptoParties.

The fact that the #UK jails people for refusing to self-incriminate aka. choose to remain silent by not providing passwords and/or decryption keys IS #fascist af!

🌱🏴‍🅰️🏳️‍⚧️🐧📎 Ambiyelp

@ambiguous_yelp@veganism.social replied · 22 hours ago

@kkarhan Yes I was aware of that one. That's where deniability comes in: on the official SimpleX client there is a hidden profile feature: to display hidden profile you type in a password you set previously but you type it into the chat search bar so there is no indication in the GUI that you have any hidden profile. I think each hidden profile can have their own associated password so you can type in a password and say there you go thats all my hidden profiles when actually there are more

#FLOSS #PSA #Privacy #Anonymity #Simplex #Deniability

oldguy52 - resist, live, love and 1 other boosted

Sammiej

@capitainesam@mastodon.social · yesterday

When your password leaks:
→ Change your password
→ Problem solved

When your biometric data leaks:
→ You can't change your face
→ You can't change your fingerprints
→ The compromise is permanent
→ Your biometric data is in breach databases forever

This is why facial recognition for age verification is dangerous.

#Biometrics #Privacy #Discord

🌱🏴‍🅰️🏳️‍⚧️🐧📎 Ambiyelp

@ambiguous_yelp@veganism.social · 23 hours ago

@stman @kkarhan @mmu_man @vidak @theruran @50htz @forthy42 @oceane @nobody

This quote is not from UK legislation it is a report on a specific interpretation of UK legislation. It may be interpreted by a court that way one day and as anarchists we should build OPSEC and INFOSEC that is resilient to this kind of suppression, but please double check the source of things before you post or share.

To counter this kind of suppression we would need more sophisticated privacy and anonymity tech than most activists use and we'd need development to happen underground: this would mean using tools like Tor onion addresses or even better I2P sites for codehosting and development comms.

#FLOSS #PSA #Privacy #Anonymity #Tor #I2P #OPSEC #INFOSEC #UK #UnitedKingdom #Anarchism

🌱🏴‍🅰️🏳️‍⚧️🐧📎 Ambiyelp

@ambiguous_yelp@veganism.social · 23 hours ago

@stman @kkarhan @mmu_man @vidak @theruran @50htz @forthy42 @oceane @nobody

#FLOSS #PSA #Privacy #Anonymity #Tor #I2P #OPSEC #INFOSEC #UK #UnitedKingdom #Anarchism

zivi liked this activity

Mad Argon :qurio:

@madargon@is-a.cat · 4 years ago

Sad illustration...
I had first vision for this after reading some chapters of "Permanent Record".

#drawing #comic #internet #freedom #privacy #corporations #socialmedia

Two-panel comic.
First picture - boy riding a big grey bird is flying above green meadow. On the ground there are many people having fun, building towers from colourful blocks, sitting around campfire, dancing. There are muntains in the background and colourful dragons fly above them. Picture is described "Internet at the beginning".
Second picture - field of unhealthy dead grass, with holes in the ground, many traps and security cameras everywhere. There is some walled gardens with greener grass, but with unwelcoming heavy gates. Boy is wandering between ugly walls and thinking "I hate this crap". Picture is described "Internet now". — Two-panel comic. First picture - boy riding a big grey bird is flying above green meadow. On the ground there are many people having fun, building towers from colourful blocks, sitting around campfire, dancing. There are muntains in the background and colourful dragons fly above them. Picture is described "Internet at the beginning". Second picture - field of unhealthy dead grass, with holes in the ground, many traps and security cameras everywhere. There is some walled gardens with greener grass, but with unwelcoming heavy gates. Boy is wandering between ugly walls and thinking "I hate this crap". Picture is described "Internet now".

zivi liked this activity

Mad Argon :qurio:

@madargon@is-a.cat · 4 years ago

How I see attempts to force #backdoors in E2E #encryption...

#drawing #comic #geek #government #privacy #security

Comic with title "Government's fight against encryption".
First picture: Nerdy-looking man with beard holds baloon. Other man has a needle and says: "I want a small hole in this so I could use it if I would need to." Man with beard replies: "But it's impossible! Or you would destroy everything..."
Second picture: Closer view, head, shoulders and arm of bearded man with ballon. Only hands of man with needle are visible, needle is close to ballon. Man with needle says: "I said only small hole. Nobody else would know about this." Bearded man replies: "It doesn't work... THIS WAY!". His last two words are on third picture, with close view of ballon and hand touching its surface with needle.
On last, fourth picture there is orange-yellow explosion with big text "BOOM!". — Comic with title "Government's fight against encryption". First picture: Nerdy-looking man with beard holds baloon. Other man has a needle and says: "I want a small hole in this so I could use it if I would need to." Man with beard replies: "But it's impossible! Or you would destroy everything..." Second picture: Closer view, head, shoulders and arm of bearded man with ballon. Only hands of man with needle are visible, needle is close to ballon. Man with needle says: "I said only small hole. Nobody else would know about this." Bearded man replies: "It doesn't work... THIS WAY!". His last two words are on third picture, with close view of ballon and hand touching its surface with needle. On last, fourth picture there is orange-yellow explosion with big text "BOOM!".

zivi liked this activity

Mad Argon :qurio:

@madargon@is-a.cat · 2 years ago

Created this after reading conversation in comments below some tech article somewhere. Someone mentioned "surfing the #internet sewer" and I really liked that phrase.

#drawing #comic #krita #web #surveillance #google #SocialMedia #enshittification #privacy #adblocker #ads

Glowing Cat of the Nuclear Wastelands liked this activity

Sammiej

@capitainesam@mastodon.social · yesterday

When your password leaks:
→ Change your password
→ Problem solved

When your biometric data leaks:
→ You can't change your face
→ You can't change your fingerprints
→ The compromise is permanent
→ Your biometric data is in breach databases forever

This is why facial recognition for age verification is dangerous.

#Biometrics #Privacy #Discord