Notices by jomo (jomo@mstdn.io)

An NPM package with 2,000,000 weekly downloads had malicious code injected into it. No one knows what the malicious code does yet.

(via ?gerybernhardt)

https://github.com/dominictarr/event-stream/issues/116

Does the GDPR allow a company to contact you via unencrypted email, including sensitive information that you had submitted to them via HTTPS?

@angristan :^) https://twitter.com/trffckng_agncy/status/1041669533461823488

Found an interesting spam/scam scheme today:
- Attacker posts their link that redirects to a legit news article
- Twitter resolves the redirect to news article
- Twitter hides link from Tweet and displays Twitter Card with news domain
- Attacker changes redirect to spam site

The Tweet now displays a legit looking Twitter Card with the news website domain, but actually goes to the scammer.

"If Telegram receives a court order that confirms you’re a terror suspect, we may disclose your IP address and phone number to the relevant authorities" https://telegram.org/privacy