techhub.social: About · Status · Profiles directory · Privacy policy
Mastodon: About · Get the app · Keyboard shortcuts · View source code · v4.3.6
Binance enforces stricter measures against account misuse - The platform encourages users to report any suspected incidents of misus... - https://cointelegraph.com/news/binance-new-security-measures-account-misuse #cryptocurrencyexchange #blockchainsecurity #platformintegrity #accountsuspension #misuseprevention #accountsecurity #fraudprevention #fairmarket #kycpolicy #binance
With the arrival of Spring, many still practice the good habits of Spring cleaning. De-cluttering your home and work spaces to make space for the new is important. It's also a good time to Spring clean your digital spaces, by reviewing your accounts, policies, and passwords. Here's where to start...
#spring #digitalFootprint #cybersecurity #cyberHygiene #springcleaning #passwordsecurity #accountsecurity
https://negativepid.com/spring-cleaning-your-digital-footprint-tips-for-cyber-hygiene/
Password generator on FosseryWeb can now generate up to 128 characters long passwords instead of 64!
Cisco #Duo has the push notification to log in. other 2FA was use number which called token which change in 30 sec.
From a user perspective, the #Duo make it easier for just one click. From a security perspective, Other 2FA like #Raivo are more secure.
#2FA #AccountSecurity
Mastodon Vulnerability Patched! CVE-2024-25618
A security flaw - CVE-2024-25618 - was fixed, in Mastodon's software to prevent potential account takeovers. This vulnerability allowed attackers to bypass authentication mechanisms via a crafted request, posing a significant risk to the platform's integrity.
It enabled new logins from certain authentication providers (like CAS, SAML, OIDC) to merge with existing local accounts sharing the same email. This could lead to someone taking over your account if the provider allows changing emails or if there are multiple providers set up.
Here's how it works: When someone logs in using an external provider for the first time, Mastodon checks for an existing account with the same email. However, relying only on the email could result in hijacking your Mastodon account if the provider allows changing it. The Mastodon team swiftly deployed a patch, reinforcing the security of user accounts and the broader ecosystem. Remember, keeping software up-to-date is crucial for safeguarding against such vulnerabilities.
The commit "b31af34c9716338e4a32a62cc812d1ca59e88d15" signifies this update. For further details, check out their advisory.
A big thanks to the discoverers Dominik George and Pingu from Teckids, and the Mastodon team for their rapid response in improving our digital defenses. Stay secure, everyone!
Tags: #CVE2024_25618 #Mastodon #Cybersecurity #PatchUpdate #AccountSecurity #AuthenticationBypass #DigitalDefense #CommunityVigilance
Mastodon is the best way to keep up with what's happening.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
Create accountLogin