How to say you're not qualified for your job without saying your're not qualified for your job.

#BBC #cyberjournalists

TIL

https://www.leonardocompany-us.com/lpr/elsag-signaltrace

US law enforcement just got this worrying tech.

It will not take long that our law enforcement wants to have stuff like this too as the tech is in the world

#surveillance #surveillancestate

The CA/Browser Forum, a consortium of browser makers and certificate authorities, has determined that public TLS certificates may no longer contain an EKU for client authentication as of June 15. After June 15, browsers will no longer trust certificates that still have such an extension. CertSIGN had notified customers that they needed to replace their old certificate with a new one that complies with the new rules.

To give customers time to change their certificate, CertSIGN decided to update its CRL lists and the status of the Online Certificate Status Protocol 24 hours after the revocation. During the scheduling of that publication, an error occurred 'in the adjustment of the automated workflow'. As a result, the updated CRL lists were published before synchronization with the OCSP database was completed. Consequently, CRL and OCSP checks may now give different responses. This also affects Dutch websites, because KPN is the supplier of certSIGN certificates there. KPN confirms that a list was published by 'a supplier' in which 'a number of websites' were incorrectly flagged as unsafe. According to a spokesperson, the supplier has resolved the issue. Certificate check services are still showing problems with various websites, including logius.nl and eherkenning.nl.

Government domain TLS certificates appear to have expired due to certSIGN error
Due to an error at the certificate authority certSIGN, the TLS certificates of various government websites appear to have been revoked. The Romanian company's Certificate Revocation List (CRL) states that the certificates of logius.nl and several municipal websites, among others, have been revoked.

The bug has been shared on Bugzilla, among others. According to Gabriel Petcu of certSIGN, the error occurred during the preparation for revoking certificates that still use a clientAuth Extended Key Usage. Servers use this key extension to verify the identity of clients.

OCSP and CRL?

There are two ways to check the status of web certificates. The Certificate Revocation List (CRL) is a list of all revoked certificates published by the issuer. The Online Certificate Status Protocol (OCSP) works in a more targeted way: the browser sends a request to the certificate authority's OCSP server asking whether the website's certificate is still valid. This method is often more reliable because it operates in real time, whereas the certificate authority updates the CRL list at specific times.

https://tweakers.net/nieuws/249034/tls-certificaten-van-overheidsdomeinen-lijken-verlopen-door-fout-certsign.html

Certsign - the Dutch government goto-CA fucked up and accidentally kinda revoked an intermediate CA certificate.

Basically everything government related is affected.

(Translation in threat)

Added books big tracker link: https://bugzilla.mozilla.org/show_bug.cgi?id=2046230

#cyber #cybersecuity #InfoSec #CA #certificates

If you have a windows computer or server:

You might want to install the june updates rather soon.

#servicetoot #windows

Do i have someone in my peer group that could give a 4 hrs workshop on target Information Gathering at a company? Ideally based on Kali linux or alike.

#mastohelp #getfedihired #workshop #security

Use used wood they said so i did...

There was a piece of a screw burried in the wood.
I saw the hole, tested it with a magnet, could not find anything.

The table saw found it for the price 47 eur.

#woodworking #wasmitholz #upcycle

The dutchies have a centralized identity that you are using to basically interact with everything government. That contains pensions and health related issues.

This is called DigID. It is run by a company called Solvinity an was was supposed to be taken over by a U.S. company called Kyndryl.

The dutch cabinet (= government) has now blocked this takeover.

I think the topic of souvernty is slowly landing in the right heads. I guess also ... thank you @bert_hubert and everyone else making noise there🙂

https://nltimes.nl/2026/05/26/netherlands-blocks-us-takeover-digid-operator-solvinity-security-concerns

#infosec #cybersecurity #souveraeneInfrastruktur #sovereignty #digid

Every single blueteamer in information security at the moment...

#infosec #cybersecurity #security

I would like to have a new electric car but the whole data collection part is the main thing keeping me away from it.

So I liked this article quite a lot. Forgot where I found it, likely here somewhere on the fediverse...

https://arkadiyt.com/2026/05/13/removing-the-modem-and-gps-from-my-rav4/

Today is European flag day

LinkedIn is trying to push you more and more into verification.
For americans the data collection gets excessive.

I think quite some data collection here is illegal in the area of the GDPR

For some added background: Here's the article that's the source for this:
https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/

The problem in place here is persona, the company doing the verification business on linkedin.

Post from @Zjaan translated into english for those who don't speak dutch...

"WTF!!!!!!! A remarkable moment on French television. A French judge explains how Trump sent people from the US embassy to intimidate her during Le Pen's embezzlement trial—something they've done to other judges around the world. With subtitles."

Original post at: https://mastodon.nl/@Zjaan/115927138634446634

Hey hackers out there. There's a kickstarter from @dotmeow for a new .meow tld that you should support.
They have now reached 60k out of 80k - lets push them over the goal line.

The Kickstarter can be found at https://kickstarter.dotmeow.org/

#dotmeow

did i mention that #covid19 fucked up my sleep schedule?

#COVID #covidisnotover #beingsicksucks

https://mastodon.online/@2600/115572087192790794

HOPE has been banned from their location.

What they have been told is that all of this came about because a single person thought we were promoting an anti-police agenda.

That person had spotted pamphlets on a table which an attendee had apparently brought to HOPE that espoused that view.

@2600

Today we're all #antifa

How about NO?

No attack on encrypted communication by the Danish ministery of Justice.

No to #chatcontrol

Its everyones civil liberty to communicate on encrypted messaging servies.