techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

5.4K
active users

#accountsecurity

1 post1 participant0 posts today
Absolute Memery 🎭<p>😭 credit <a href="https://twitter.com/PervisTime" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">twitter.com/PervisTime</span><span class="invisible"></span></a><br><a href="https://tribe.net/tags/IncorrectPassword" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IncorrectPassword</span></a> <a href="https://tribe.net/tags/IncorrectPasswords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IncorrectPasswords</span></a> <a href="https://tribe.net/tags/Password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Password</span></a> <a href="https://tribe.net/tags/Passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Passwords</span></a> <a href="https://tribe.net/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://tribe.net/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a> <a href="https://tribe.net/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://tribe.net/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a>.</p><p><a href="https://tribe.net/tags/Meme" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Meme</span></a> <a href="https://tribe.net/tags/Memes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Memes</span></a> <a href="https://tribe.net/tags/Humour" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Humour</span></a> <a href="https://tribe.net/tags/Humor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Humor</span></a> <a href="https://tribe.net/tags/SecuritateInformatic%C4%83" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecuritateInformatică</span></a> <a href="https://tribe.net/tags/SecuritateCibernetic%C4%83" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecuritateCibernetică</span></a></p>
halil deniz<p>Hello everyone.<br>In today's article, we examine Social Media Security in detail.</p><p>I wish everyone a good read:<br><a href="https://denizhalil.com/2023/07/24/social-media-security-tips/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">denizhalil.com/2023/07/24/soci</span><span class="invisible">al-media-security-tips/</span></a></p><p><a href="https://mastodon.social/tags/socialmedia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>socialmedia</span></a> <a href="https://mastodon.social/tags/accountsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>accountsecurity</span></a> <a href="https://mastodon.social/tags/privacysecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>privacysecurity</span></a> <a href="https://mastodon.social/tags/malwareprevention" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>malwareprevention</span></a> <a href="https://mastodon.social/tags/onlinesecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>onlinesecurity</span></a> <a href="https://mastodon.social/tags/phishingattacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>phishingattacks</span></a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a></p>
Gregarious<p>Question for my fellow iOS users: Have you switched over from using the 6-digit codes to using security keys &amp; Advanced Data Protection on your account? Just did so myself, &amp; hoping it improves my account security. <a href="https://dragonscave.space/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://dragonscave.space/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>2FA</span></a> <a href="https://dragonscave.space/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Apple</span></a> <a href="https://dragonscave.space/tags/iOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iOS</span></a> <a href="https://dragonscave.space/tags/AdvancedDataProtection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AdvancedDataProtection</span></a> <a href="https://dragonscave.space/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a> <a href="https://dragonscave.space/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Privacy</span></a> <a href="https://dragonscave.space/tags/Poll" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Poll</span></a></p>
PUPUWEB Blog<p>Forgot your Apple ID password? 😓 Don't worry! Follow this quick guide to reset it and regain access to all your Apple services in minutes. 🍏🔑 <a href="https://mastodon.social/tags/AppleID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AppleID</span></a> <a href="https://mastodon.social/tags/PasswordReset" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PasswordReset</span></a> <a href="https://mastodon.social/tags/TechHelp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechHelp</span></a> <a href="https://mastodon.social/tags/AppleTips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AppleTips</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://mastodon.social/tags/DigitalGuide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DigitalGuide</span></a> <a href="https://mastodon.social/tags/iPhoneHelp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iPhoneHelp</span></a></p><p><a href="https://pupuweb.com/how-do-you-quickly-change-your-apple-id-password/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">pupuweb.com/how-do-you-quickly</span><span class="invisible">-change-your-apple-id-password/</span></a></p>
PUPUWEB Blog<p>🚨 Telegram introduces new features: 3rd-party account verification, advanced search filters for private chats, &amp; the ability to turn gifts into NFTs! 💬🔍🎁 Big upgrades for privacy &amp; personalization. <a href="https://mastodon.social/tags/Telegram" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Telegram</span></a> <a href="https://mastodon.social/tags/PrivacyTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PrivacyTech</span></a> <a href="https://mastodon.social/tags/NFTs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NFTs</span></a> <a href="https://mastodon.social/tags/Crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Crypto</span></a> <a href="https://mastodon.social/tags/SocialMedia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SocialMedia</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechNews</span></a></p>
Pyrzout :vm:<p>AI-Powered Actions Cybersecurity Leaders Are Taking to Outwit Bad Actors – Source: securityboulevard.com <a href="https://ciso2ciso.com/ai-powered-actions-cybersecurity-leaders-are-taking-to-outwit-bad-actors-source-securityboulevard-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ciso2ciso.com/ai-powered-actio</span><span class="invisible">ns-cybersecurity-leaders-are-taking-to-outwit-bad-actors-source-securityboulevard-com/</span></a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>rssfeedpostgeneratorecho</span></a> <a href="https://social.skynetcloud.site/tags/SecurityBloggersNetwork" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecurityBloggersNetwork</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/SecurityBoulevard" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecurityBoulevard</span></a> <a href="https://social.skynetcloud.site/tags/accountsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>accountsecurity</span></a> <a href="https://social.skynetcloud.site/tags/botdetection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>botdetection</span></a> <a href="https://social.skynetcloud.site/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AI</span></a></p>
Joaquim Homrighausen<p>It's somewhat disheartening to see how many websites still have issues with complex passwords, impose ridiculous limits on password lengths, and/or the passwords containing "special characters"! 😑</p><p>I use <a href="https://password.oppetmoln.se" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">password.oppetmoln.se</span><span class="invisible"></span></a> for almost all my "random password" needs, set the length to at least 64 characters, and then let a password manager handle the rest.</p><p>👇 </p><p><a href="https://mastodon.online/tags/cybersec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersec</span></a> <a href="https://mastodon.online/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> <a href="https://mastodon.online/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> <a href="https://mastodon.online/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>password</span></a> <a href="https://mastodon.online/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a> <a href="https://mastodon.online/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a></p>
🔗 David Sommerseth<p>It's the year 2024 .... and <a href="https://infosec.exchange/tags/Regus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Regus</span></a> has updated the login system with enforcing <a href="https://infosec.exchange/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>2FA</span></a>. That's great!</p><p>But they offer only e-mail and SMS .... in the year 2024. Well, okay, you can tie your login to Microsoft and Google. But that's a completely different can of worms.</p><p>I mean ... is it that hard to implement <a href="https://infosec.exchange/tags/TOTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TOTP</span></a> ??!??!</p><p><a href="https://infosec.exchange/tags/login" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>login</span></a> <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>privacy</span></a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a> <a href="https://infosec.exchange/tags/accountsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>accountsecurity</span></a></p>
Pyrzout :vm:<p>Meta To Use Facial Recognition For Recovering Compromised Accounts <a href="https://cybersecuritynews.com/meta-facial-recognition-for-account-recovery/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">cybersecuritynews.com/meta-fac</span><span class="invisible">ial-recognition-for-account-recovery/</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/cybersecuritynews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecuritynews</span></a> <a href="https://social.skynetcloud.site/tags/FacialRecognition" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FacialRecognition</span></a> <a href="https://social.skynetcloud.site/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://social.skynetcloud.site/tags/PrivacyConcerns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PrivacyConcerns</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://social.skynetcloud.site/tags/Facebook" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Facebook</span></a> <a href="https://social.skynetcloud.site/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Privacy</span></a></p>
PUPUWEB Blog<p>🔍 Curious about your Discord login activity? Learn how to track it on both mobile and PC to keep your account secure! 💻📱 Click for essential tips and stay informed! 👉 <a href="https://mastodon.social/tags/DiscordTips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DiscordTips</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a></p><p><a href="https://pupuweb.com/how-can-you-track-your-discord-login-activity-on-mobile-and-pc/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">pupuweb.com/how-can-you-track-</span><span class="invisible">your-discord-login-activity-on-mobile-and-pc/</span></a></p>
PUPUWEB Blog<p>🚨 Attention WordPress Users! 🚨 A new checkbox demands you confirm NO affiliation with WP Engine before you can log in or register! Are you ready to stand your ground? 🛑💥 Stay vigilant! <a href="https://mastodon.social/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WordPress</span></a> <a href="https://mastodon.social/tags/WPEngine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WPEngine</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://mastodon.social/tags/WebDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WebDev</span></a> <a href="https://mastodon.social/tags/UserAwareness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>UserAwareness</span></a></p>
Nerdscave Hosting<p>🔐 Exciting Security Update!</p><p>We now support 2FA via YubiKey in addition to TOTP. This helps our customers protect their accounts even better!</p><p><a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://mastodon.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>2FA</span></a> <a href="https://mastodon.social/tags/YubiKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>YubiKey</span></a> <a href="https://mastodon.social/tags/TOTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TOTP</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://mastodon.social/tags/TechUpdate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechUpdate</span></a> 💪🛡️</p>
Alex Ivanovs<p>Snowflake admins can now enforce MFA across all user accounts</p><p><a href="https://stackdiary.com/snowflake-admins-can-now-enforce-mfa-across-all-user-accounts/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">stackdiary.com/snowflake-admin</span><span class="invisible">s-can-now-enforce-mfa-across-all-user-accounts/</span></a></p><p><a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersecurity</span></a> <a href="https://mastodon.social/tags/DataProtection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataProtection</span></a> <a href="https://mastodon.social/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MFA</span></a> <a href="https://mastodon.social/tags/Snowflake" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Snowflake</span></a> <a href="https://mastodon.social/tags/SecurityMeasures" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecurityMeasures</span></a> <a href="https://mastodon.social/tags/DataBreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataBreach</span></a> <a href="https://mastodon.social/tags/Authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Authentication</span></a> <a href="https://mastodon.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudSecurity</span></a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechNews</span></a> <a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a> <a href="https://mastodon.social/tags/DigitalSafety" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DigitalSafety</span></a> <a href="https://mastodon.social/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ITSecurity</span></a> <a href="https://mastodon.social/tags/CredentialCompromise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CredentialCompromise</span></a> <a href="https://mastodon.social/tags/SecurityPolicy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecurityPolicy</span></a> <a href="https://mastodon.social/tags/DataSafety" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataSafety</span></a> <a href="https://mastodon.social/tags/SecureAccounts" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecureAccounts</span></a> <a href="https://mastodon.social/tags/CloudComputing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudComputing</span></a> <a href="https://mastodon.social/tags/CyberThreats" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberThreats</span></a> <a href="https://mastodon.social/tags/TechUpdate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechUpdate</span></a> <a href="https://mastodon.social/tags/PrivacyProtection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PrivacyProtection</span></a> <a href="https://mastodon.social/tags/UserSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>UserSecurity</span></a> <a href="https://mastodon.social/tags/DataIntegrity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataIntegrity</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://mastodon.social/tags/OnlineSafety" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OnlineSafety</span></a> <a href="https://mastodon.social/tags/SecurityUpdate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecurityUpdate</span></a> <a href="https://mastodon.social/tags/TechSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechSecurity</span></a> <a href="https://mastodon.social/tags/DataDefense" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataDefense</span></a> <a href="https://mastodon.social/tags/UserProtection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>UserProtection</span></a> <a href="https://mastodon.social/tags/CloudTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudTech</span></a></p>
The Mayor 🏵️ of oslo.town<p>Want to make sure your oslo.town account is more secure? Then you can enable 2FA in the settings so that anyone logging in to your account will have to type in a unique code too. 🔐 </p><p><a href="https://oslo.town/settings/two_factor_authentication_methods" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">oslo.town/settings/two_factor_</span><span class="invisible">authentication_methods</span></a> </p><p><a href="https://oslo.town/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>2FA</span></a> <a href="https://oslo.town/tags/MastoTips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MastoTips</span></a> <a href="https://oslo.town/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a> <a href="https://oslo.town/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://oslo.town/tags/allheimen" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>allheimen</span></a></p>
capodieci.eth<p>Who iz you, trying to access my accounts? Every day! Nothing better to do? lol</p><p><a href="https://mastodon.social/tags/UnauthorizedAccessAttempt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>UnauthorizedAccessAttempt</span></a> <a href="https://mastodon.social/tags/AccountSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccountSecurity</span></a> <a href="https://mastodon.social/tags/AccessPinRequests" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AccessPinRequests</span></a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://mastodon.social/tags/ProtectYourAccounts" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ProtectYourAccounts</span></a></p>

🚨 Mastodon Vulnerability Patched! CVE-2024-25618 🛡️

A security flaw - CVE-2024-25618 - was fixed, in Mastodon's software to prevent potential account takeovers. This vulnerability allowed attackers to bypass authentication mechanisms via a crafted request, posing a significant risk to the platform's integrity.

It enabled new logins from certain authentication providers (like CAS, SAML, OIDC) to merge with existing local accounts sharing the same email. This could lead to someone taking over your account if the provider allows changing emails or if there are multiple providers set up.

Here's how it works: When someone logs in using an external provider for the first time, Mastodon checks for an existing account with the same email. However, relying only on the email could result in hijacking your Mastodon account if the provider allows changing it. The Mastodon team swiftly deployed a patch, reinforcing the security of user accounts and the broader ecosystem. Remember, keeping software up-to-date is crucial for safeguarding against such vulnerabilities. 🔄🔐

The commit "b31af34c9716338e4a32a62cc812d1ca59e88d15" signifies this update. For further details, check out their advisory.

A big thanks to the discoverers Dominik George and Pingu from Teckids, and the Mastodon team for their rapid response in improving our digital defenses. Stay secure, everyone! ✨🐘

Tags: #CVE2024_25618 #Mastodon #Cybersecurity #PatchUpdate #AccountSecurity #AuthenticationBypass #DigitalDefense #CommunityVigilance 🌍🔒

MITRE CVE-2024-25618 Summary

GitHubExternal OpenID Connect Account Takeover by E-Mail Change### Summary Mastodon allows new identities from configured authentication providers (CAS, SAML, OIDC) to attach to existing local users with the same e-mail address. This results in a possible a...