microblog.at

Erik van Straten<a href="https://fediverse.thefloatinglab.world/users/FransVeldman" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@FransVeldman</a> :Hopelijk hebben de *meeste* mensen ondertussen hun buik vol van techsolutionisme (ik in elk geval wel).PS hieronder een (zojuist gemaakte) screenshot van een nep Google Play Store - voorzien van een certificaat uitgegeven door "Google Trust Services" (go figure).Aanvulling 12:22: u moet niet alles vertrouwen wat u op internet leest (de plaatjes hieronder zijn echt, maar leugenaars zeggen dat ook van hun plaatjes, websites en apps). In het kader van "Certificate Transparency" kunt u o.a. hier: <a href="https://crt.sh/?q=google-ivi.com" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://crt.sh/?q=google-ivi.com</a> de voor de nepsite uitgegeven certificaten bekijken - zodra die server weer bereikbaar is (down op dit moment). Als alternatief ziet u in <a href="https://www.virustotal.com/gui/domain/play.google-ivi.com/details" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.virustotal.com/gui/domain/play.google-ivi.com/details</a> het laatste certificaat. Nb. VirusTotal is een dochterbedrijf van Google, en de nepsite verstopt zich nu achter CDN-servers van Cloudflare.<a href="https://mastodon.nl/@GrijzeBeamerNL" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@GrijzeBeamerNL</a> <a href="https://socialserver.science/@miekeroth" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@miekeroth</a> <a href="https://infosec.exchange/tags/OveralEenAppVoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OveralEenAppVoor</a> <a href="https://infosec.exchange/tags/GoogleIsEvil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GoogleIsEvil</a> <a href="https://infosec.exchange/tags/IkWilNietOveralEenAppVoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IkWilNietOveralEenAppVoor</a> <a href="https://infosec.exchange/tags/DV" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DV</a> <a href="https://infosec.exchange/tags/BigTechIsEvil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BigTechIsEvil</a> <a href="https://infosec.exchange/tags/WeWantYourPII" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WeWantYourPII</a> <a href="https://infosec.exchange/tags/WeWantYourMoney" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WeWantYourMoney</a> <a href="https://infosec.exchange/tags/ThenYouDie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThenYouDie</a>

Erik van Straten<a href="https://mastodon.online/@vwbusguy" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@vwbusguy</a> : non-ACME certs suck big time.However, now the internet has turned into a malicious phishing mess.People can no longer determine who is responsible for a website, and nobody cares.Google hosted fake websites (using ACME certs from Let's Encrypt) on their cloud servers called: • cancel-google[.]com • adsupport-google[.]com • helpdesk-google[.]comSee (Dutch) <a href="https://infosec.exchange/@ErikvanStraten/113837934294209517" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec.exchange/@ErikvanStraten/113837934294209517</a>.Google also doesn't give a fsck about HSTS, see <a href="https://infosec.exchange/@ErikvanStraten/113856108585517842" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec.exchange/@ErikvanStraten/113856108585517842</a>.Worse, last year a phishing site with a domain name containing "google" was proxied by Cloudflare - and had a "GOOGLE TRUST SERVICES" DV certificate.Did I mention that browsers suck and that Big Tech, making Big Money, is knowingly complicit to cybercrime?And did I mention that certificates were not invented to please admins?<a href="https://infosec.exchange/tags/Phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Phishing</a> <a href="https://infosec.exchange/tags/DV" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DV</a> <a href="https://infosec.exchange/tags/GoogleIsEvil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GoogleIsEvil</a> <a href="https://infosec.exchange/tags/BigTechIsEvil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BigTechIsEvil</a> <a href="https://infosec.exchange/tags/GTS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GTS</a> <a href="https://infosec.exchange/tags/BrowsersSuck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BrowsersSuck</a> <a href="https://infosec.exchange/tags/AnonymousWebsites" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AnonymousWebsites</a>

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#googleisevil