Un nouvel ensemble de 361 millions d'adresses e-mails a été ajouté au service en ligne Have I Been Pwned ! De quoi vous permettre de vérifier si vos identifiants sont présents dans cette liste d'informations collectées à partir de canaux Telegram. Faisons le point.
Un chercheur en sécurité anonyme a transféré à Troy Hunt, le créateur du site Have I Been Pwned (HIBP), un ensemble de fichiers représentants 122 Go de données. Cet ensemble de données correspond à plus de 1 700 fichiers provenant de 518 canaux Telegram différents. Il s'agit d'une action de scraping("moissonnage") effectuée par ce chercheur en sécurité.
Source : troyhunt.com
Au total, ces fichiers contiennent pas moins de 361 millions d'adresses e-mails uniques, dont 151 millions d'adresses e-mails ajoutées pour la première fois sur le site Have I Been Pwned !
À quoi correspondent ces identifiants ? Sont-ils légitimes ?
Ces identifiants peuvent provenir d'une fuite de données suite à une intrusion sur un système par un cybercriminel, à la collecte d'identifiants effectuée par un malware infostealer, à du credential stuffing, etc... Ce qui est certain, c'est que ces identifiants circulent sur des canaux cybercriminels de Telegram. Les pirates n'hésitent pas à divulguer ces identifiants pour accroître leur popularité.
Les données comprennent des identifiants de connexion regroupés par service (par exemple, Gmail, Yahoo, etc.) ou par pays. Aucun site ou service n'est susceptible d'être épargné, notamment s'il s'agit d'un infostealer qui a exfiltré les mots de passe enregistrés dans un navigateur Web.
Tous les fichiers correspondant à cette fuite de 361 millions d'identifiants ne sont pas structurés de la même façon. Il y a des combinaisons d'adresse e-mail et de mot de passe, tandis que d'autres fichiers intègrent l'URL du service en plus de l'adresse e-mail et du mot de passe ! Certains fichiers contiennent des dizaines de millions de lignes.
Source : troyhunt.com
Troy Hunt a passé du temps à analyser ces données, notamment pour déterminer si elles sont légitimes, bien qu'il soit impossible de vérifier l'ensemble des identifiants.
Le résultat est clair : de nombreuses adresses e-mails présentes concernées par une fuite sont correctement associées au site web mentionné dans les fichiers de données fournit par le chercheur en sécurité. Autrement dit, les identifiants distribués sur ces canaux Telegram sont légitimes, au moins pour une partie.
Pour en savoir plus, vous pouvez consulter l'article publié par Troy Hunt. Pour vérifier si vous êtes affecté, rendez-vous sur le service de vérification HIBP.
L'image « All eyes on Rafah » générée par intelligence artificielle est devenue virale sur Instagram, avec près de 30 millions de partages en à peine 24 heures. Elle a été publiée suite à une frappe contre un camp de réfugiés à Gaza, qui a fait des victimes civiles.
Facebook a bien l'intention d'entraîner son IA avec vos contenus sur le réseau social, et Instagram aussi. Cette nouvelle politique doit être lancée à partir du 26 juin 2024. Cependant, les internautes peuvent s'opposer à ce traitement de leurs données personnelles. Avec, toutefois, certaines limites.
Des chercheurs de Kaspersky ont découvert que des arnaqueurs cherchent à voler les Toncoins (TON) d’utilisateurs Telegram à travers le monde, en utilisant un système évolutif impliquant des boosters de crypto-monnaies et des parrainages d’amis. Ce stratagème existe au moins depuis novembre 2023, et son apparition en plein boom de Telegram et des Toncoins le […]
Les amis, si vous cherchez une solution simple et efficace pour créer des animations et des graphiques animés sans vous prendre la tête, j’ai déniché un petit bijou pour vous : Trangram. C’est une plateforme en ligne gratuite qui vous permet de créer, d’animer et de partager vos créations en toute simplicité, sans avoir besoin de connaissances en programmation.
Avec Trangram, vous avez accès à une panoplie d’outils intuitifs et puissants pour donner vie à vos idées. Que vous soyez un professionnel du marketing qui cherche à créer des vidéos engageantes pour les réseaux sociaux, un enseignant qui souhaite rendre ses cours plus dynamiques, ou simplement un passionné de graphisme qui aime expérimenter, Trangram pourra vous aider.
L’interface est claire et bien pensée, avec des fonctionnalités accessibles en quelques clics. Vous pouvez choisir parmi une bibliothèque d’éléments graphiques prêts à l’emploi, ou importer vos propres images et illustrations. Ensuite, il suffit de les disposer sur votre scène, de définir les animations et les transitions, et le tour est joué ! Vous pouvez même ajouter du texte animé, des effets sonores et de la musique pour rendre vos créations encore plus immersives.
Ce que j’apprécie particulièrement avec Trangram, c’est la flexibilité qu’offre la plateforme. Vous avez le contrôle total sur chaque élément de votre composition, ce qui vous permet de laisser libre cours à votre créativité. Que vous souhaitiez réaliser une infographie animée pour présenter des données complexes de manière ludique, ou une vidéo teaser pour promouvoir un événement, les possibilités sont infinies.
Un autre point fort de Trangram, c’est la communauté qui gravite autour de la plateforme. Vous pouvez explorer les créations d’autres utilisateurs pour vous inspirer, mais aussi partager les vôtres et obtenir des retours constructifs. C’est une excellente façon de progresser et de faire de belles découvertes. Et si vous avez besoin d’un coup de pouce, la documentation fournie est très complète, avec des tutoriels vidéo et des guides pas à pas pour vous aider à prendre en main les différents outils.
Évidemment, Trangram ne remplacera pas les logiciels de motion design haut de gamme utilisés par les professionnels. Mais pour la grande majorité des utilisateurs qui cherchent une solution abordable et facile à prendre en main, c’est un excellent choix. Que vous soyez une startup qui souhaite créer des vidéos explicatives pour présenter ses produits, ou une agence qui a besoin de produire rapidement des contenus animés pour ses clients, Trangram saura vous faire gagner un temps précieux.
Votre PC est sous Windows et vous utilisez l'application Telegram pour ce système d'exploitation ? Alors, sachez que Telegram a effectué une modification pour vous protéger d'une nouvelle faille de sécurité zero-day.
Telegram a corrigé une faille de sécurité zero-day pour protéger les utilisateurs de son application bureau pour Windows. En l'exploitant, un attaquant peut contourner les mécanismes de protection et exécuter des scripts Python sur la machine cible. In fine, ceci permettrait d'exécuter du code à distance sur la machine de l'utilisateur qui utilise une version vulnérable de l'application Telegram, même si cela implique une interaction de la part de l'utilisateur.
Une démonstration de l'exploitation de cette vulnérabilité a été publiée sur le réseau social X. Telegram a d'abord indiqué qu'il s'agissait d'un canular. Mais, le lendemain, un exploit PoC a été publié sur le forum de piratage XSS pour montrer qu'il était possible d'exécuter des scripts Python ayant l'extension ".pyzw" sur Windows,par l'intermédiaire de l'application Telegram. Ainsi, un attaquant pourrait utiliser l'icône d'une vidéo pour inciter l'utilisateur à cliquer sur un lien dans le but d'exécuter le script malveillant.
En principe, l'application Telegram devrait déclencher un avertissement pour "bloquer" l'exécution de ce type de fichiers, mais là ce n'est pas le cas. Précisons également que Python doit être installé sur l'ordinateur de l'utilisateur pour que le script soit exécuté, ce qui fait une condition supplémentaire.
Finalement, Telegram a reconnu l'existence de cette vulnérabilité et a pris la décision de la corriger. Toutefois, le correctif a été implémenté du côté des serveurs Telegram, donc les utilisateurs n'ont rien à faire : il n'y a aucune mise à jour installer. "Un correctif côté serveur a été appliqué pour s'assurer que ce problème ne se reproduise plus, de sorte que toutes les versions de Telegram Desktop (y compris les plus anciennes) n'ont plus ce problème.", a précisé Telegram.
En fait, Telegram s'appuie sur une liste d'extensions correspondante à tous les fichiers "à risques" et potentiellement malveillants. Celle-ci permet d'indiquer à l'application Telegram quand elle doit afficher l'avertissement de sécurité.
The release of Terramaster TOS 6 Beta for NAS devices marks a significant milestone in the evolution of NAS operating systems, with an array of new features and comprehensive improvements designed to enhance user experience, system performance, and security. This sixth iteration introduces a radically redesigned user interface and integrates more than 40 new functionalities while refining over 370 aspects, ensuring a top-tier upgrade for TNAS users.
Expanded Key Features and Improvements in TOS 6
Linux Kernel 6.1 LTS Upgrade: Transitioning to the latest Linux kernel version, TOS 6 benefits from improved scheduling algorithms, enhanced memory management, superior file system support, optimized network performance, advanced security features, and better power management. This upgrade facilitates a more robust and efficient system, capable of handling the demands of both home and enterprise environments with ease.
Revolutionized Docker Manager 2.0.16: This release introduces Docker Compose project management, adding a new dimension to container orchestration on TNAS devices. The addition of a container terminal and system notifications for Docker image operations streamlines container management. These enhancements, combined with UI and functionality optimizations, cater to developers and IT professionals seeking a versatile platform for containerized applications.
File Manager Overhaul: With user feedback and industry best practices in mind, the File Manager has been retooled to offer an intuitive, efficient file navigation and management experience. Features such as enhanced directory navigation, column display mode for deep folder hierarchy exploration, tabbed browsing, adjustable thumbnail sizes, and a suite of new file operation tools significantly elevate user productivity.
Online Disk Wiping: This new utility offers a straightforward solution for securely erasing all data from disks directly within the TOS interface, facilitating easy preparation of drives for repurposing or disposal without the need for external tools.
Cloud Drive Mounting: Seamlessly integrate cloud storage services such as Google Drive, Dropbox, and more directly into TNAS. This feature enhances the flexibility of data access and management, allowing for efficient data synchronization and sharing between local and cloud storage.
Security and Privacy Control (SPC): Introducing a robust security framework designed to prevent unauthorized execution of programs on TNAS devices. SPC enhances the overall security posture by ensuring only vetted and authorized applications can run, significantly reducing the risk of malware and ransomware infections.
SMB Multichannel Support: By enabling multiple network connections for SMB file sharing, TOS 6 ensures higher data transfer speeds, improved reliability, and enhanced redundancy. This feature is particularly beneficial in multi-user environments where network performance directly impacts productivity.
Direct Data Drive Mounting: Offering unparalleled convenience, this feature allows users to access data on external drives without the need for disk reformatting or repartitioning, preserving existing data while extending the storage capabilities of TNAS devices.
Storage Pool Migration: Streamlines the process of migrating storage pools between TNAS devices, aiding users in hardware upgrades or replacements without the hassle of data migration or system reconfiguration.
Advanced ACL Permissions: Delivers granular access control with 13 additional customizable permissions on top of the standard read, write, and deny options. This advanced permission management system enables precise control over data access, ensuring data security and compliance.
TOS 6 Beta System Enhancements
TOS 6 introduces a slew of system-wide enhancements aimed at delivering a more stable, secure, and user-friendly NAS operating environment:
Performance and Stability: With the new Linux kernel and system optimizations, TOS 6 offers improved system stability and performance, ensuring that TNAS devices can handle intensive tasks and larger volumes of data more efficiently.
Hardware and Innovation Support: Prepared for the future, TOS 6 includes support for the latest hardware innovations, such as Intel’s “Meteor Lake” chips, and introduces new data structures and error decoding capabilities for enhanced data processing and system reliability.
Enhanced Security Measures: Building upon TerraMaster’s commitment to security, new features like customizable HTTPS certificates, optimized firewall rule settings, and the innovative SPC module significantly enhance the protection of user data against external threats.
User Interface and Usability Improvements: From a streamlined desktop design and simplified navigation to a new “Start” menu and customizable user avatars, TOS 6 focuses on creating a more engaging and personalized user experience.
Comprehensive Application and Service Enhancements: The update enriches the application ecosystem with new functionalities, improved file services, and advanced storage features, catering to a wide range of user needs from media indexing and scheduled task notifications to cross-platform data interoperability and USB storage device health management.
Through these extensive features and improvements, TOS 6 Beta not only advances the capabilities of TNAS devices but also sets a new standard for NAS operating systems, offering a sophisticated platform for storage, management, and security that meets the evolving needs of both individual and enterprise users.
How To Access the TOS 6 Beta – Update Instructions
Applicable TOS Versions: TOS 5.1.123or later versions; if your device does not meet the update requirements, please do not update! Otherwise, system crashes may occur.
Precautions: 1. The Beta version is an early version of the program, containing most major functions but not yet completed, and may have some defects. This version is only released to specific groups or the general public for testing and feedback collection; the Beta version should not be used in work or production environments. If your TNAS device is running business operations or storing important data, please refrain from participating in this test. 2. Updating the system theoretically will not affect the data on your hard drive, but for safety reasons, please be sure to back up your data in advance. 3. After the update, if applications such as Plex, Emby, Aria2, etc., need to access new shared folders, you will need to reconfigure application user permissions. 4. Previously created firewall rules will be cleared, and you will need to create new firewall rules after the update. 5. If you are using port 5444, you will need to modify this port before updating. 6. After the update, TNAS will exit the domain, and you will need to rejoin the domain and refresh domain users. 7. After the update, if your encrypted shared file key contains special characters, you can only mount it by entering the key. 8. System configuration backups from TOS 5 cannot be restored to TOS 6. 9. Hyper Cache created before the update will become invalid after the update; it is recommended to uninstall Hyper Cache before updating. 10. Docker Manager versions 1.1.99 or earlier cannot run on TOS 6; please update Docker Manager before updating the system.
How to Update to TOS 6 Beta on Your Terramaster NAS?
1. Download the TOS 6 Beta update package: TOS 6(md5:821b697ddb27dbc9c95ce2be398c791b) 2. Go to TOS > Control Panel > General Settings > System; 3. Under “Manual Update”, upload the update package; 4. Click “Apply”; 5. After the system update is complete, you will need to refresh your browser; 6. Your TNAS IP address may change after the system update. If you are unable to connect to your TNAS using the previous IP address, please use the TNAS PC client to search for the new IP address again.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
Alors que de plus en plus de personnes, massivement des femmes, sont victimes de deepfakes à caractères sexuels, leur contrôle sur le web devient impossible tant les outils prolifèrent. Numerama a consulté ces chaînes « usines » à détournement de visage.
Are DRAM free SSDs Worth Your Money and Your Data?
Solid-State Drives (SSDs) have revolutionized data storage with their speed and reliability. Among these, DRAMless SSDs have carved a niche, offering unique advantages and disadvantages. With the emergence of models like the Samsung 990 EVO, the Phison E31T controller-based SSDs, and the WD Black SN770, the landscape of DRAMless SSDs is expanding. This assessment delves into the pros and cons of DRAMless SSDs, offering an unbiased perspective on their place in the storage market.
What Are the Advantages of DRAMless SSDs?
Choosing to opt for an SSD inside your client desktop or portable system that does not feature it’s own on-board DRAM/Memory actually opens the door to a lot of benefits that extend way beyond just buying an SSD that has a lower price per TB/GB. Here are a whole bunch of benefits to using DRAMless SSDs, like the Samsung 990 EVO, WD Black SN770 and more in 2024 onwards:
Cost-Effectiveness
The absence of DRAM chips in SSDs like the Samsung 990 EVO and WD Black SN770 makes them more affordable, offering solid-state speed at a lower price point. This is due to reduced manufacturing costs, making these drives a budget-friendly option for consumers.
Energy Efficiency
DRAMless SSDs, including those with the Phison E31T controller, are known for lower power consumption compared to DRAM SSDs. This feature is particularly beneficial in battery-powered devices, extending their battery life.
Compact and Lightweight Design
The elimination of DRAM chips allows for a more compact form factor. This design aspect is crucial in devices where space is limited, such as ultra-thin laptops or compact embedded systems.
Simplicity and Increased Reliability
Fewer components mean a simpler design, which could lead to increased reliability. DRAMless SSDs, by virtue of their simplicity, might have fewer points of failure compared to their DRAM counterparts.
Security Advantages
The volatile nature of DRAM means it can retain data temporarily. In DRAMless SSDs, like the Samsung 990 EVO, the lack of this component might reduce the risk of data recovery after power loss, enhancing data security.
Suitability for Certain Workloads
For applications that are read-intensive and don’t require high write performance, a DRAMless SSD can be a suitable choice. These drives can handle basic tasks and typical consumer workloads effectively. However, it’s important to note that DRAMless SSDs may have limitations in terms of performance, particularly in write speeds and handling large or intensive workloads, compared to SSDs with dedicated DRAM. As such, their benefits are most realized in specific use cases where the cost and power efficiency are prioritized over peak performance.
What Are the Disadvantages of DRAMless SSDs?
Commonly recognized negatives/disadvantages of SSDs that lack onboard DRAM/Memory are:
Compromised Performance
A major drawback, seen in models like the WD Black SN770, is slower write speeds and increased latency due to the absence of a DRAM cache. This impacts performance, especially in write-intensive tasks.
Limited Multitasking Efficiency
Without a high-speed buffer, DRAMless SSDs struggle with multitasking. This limitation affects their ability to handle multiple simultaneous read/write operations effectively.
Dependency on System Memory
Some DRAMless SSDs, including those using the Phison E31T controller, rely on the system’s RAM (Host Memory Buffer) for data management, which could impact overall system performance, especially in RAM-constrained environments.
Reduced Endurance and Longevity
Continuous write operations directly to NAND can accelerate wear, potentially reducing the SSD’s lifespan. This is a concern in DRAMless SSDs where direct NAND writes are more frequent.
Inadequacy for High-End Tasks
High-performance tasks like gaming or video editing may not be ideally suited for DRAMless SSDs due to their limited speed and multitasking capabilities.
DRAMless SSDs – The Verdict?
In conclusion, DRAMless SSDs like the Samsung 990 EVO, Phison E31T-based drives, and the WD Black SN770 offer a cost-effective and energy-efficient solution for basic storage needs. They are particularly well-suited for devices where space and power consumption are key considerations. However, their reduced performance and endurance make them less ideal for high-performance computing or heavy workloads. These SSDs represent a compromise, balancing affordability and efficiency against top-tier performance, making them a viable option for certain consumer segments but not a one-size-fits-all solution.
Here are Three of the leading DRAMless m.2 NVMes in the SSD market right now:
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
Connexion
