LINKDING

Set up a GPG key for signing Git commits on MacOS (M1) - signing-git-commits.md

> Learn various steps you can take to protect your privacy online. I don't want to fearmonger, but you might want to consider being a little more private these days. These are basic steps you can take to protect yourself. You probably know most of them, but if you don't, here you go.

> Introducing 1Password for SSH & Git (Beta), the single source of truth for all your SSH keys.

A PAM plugin module that allows the Apple Watch to be used for sudo authentication. This particular fork has modifications to make it work with macOS 11 on an M1 Mac.

A git command that allows you to store secret information (credentials, etc.) as encrypted files in a repo. Automates ignoring the original and adding an encrypted copy. Allow others access based on public PGP keys.

Writing a post-cyber-attach press release and need a nation state actor to blame? This page will generate everything you need.

Pointed out to me by Adam Wood, this is a handy (and complete) checklist for staying safe on the internet, as a continuation of some of the themes I've been bringing up lately.

Aside from being enamored with the presentation of this story, this is a chilling look inside China's "Sesame Credit" system. If you're not already familiar with what's happening there, you should definitely read up.

As a long-long-time [1Password](https://1password.com) user, having 20-character gibberish passwords unique to every account is easy for me. But at the rate that compromises are happening, having a strong, unique password is only half the battle. And you don't even get to fight the other half of it... but do your half and bulk up your passwords.

> Cloudflare's mission is to help build a better Internet. We're excited today to take another step toward that mission with the launch of 1.1.1.1 — the Internet's fastest, privacy-first consumer DNS service.

The app formerly known as MacID has been [renamed to Unlox](https://unlox.it/blog/2017/12/29/hello-unlox-goodbye-macid) and updated to work with Face ID on the iPhone X. If you fancy unlocking your Mac with your face, here you go.

Cabel Sasser tweeted a tip for enabling MacBook Pro touch bar touch ID for sudo commands. Serenity Caldwell explains it in detail on iMore.

A thorough comparison of currently available VPN services, covering speed, encryption level, usability and cost. The site isn't affiliated with any particular VPN, and the ranking/scoring is fair (and useful).

Privacy and security are of more interest than ever right now. Product Hunt offers a list of some of the best tools for maintaining both.

A plug-and-play VPN service to keep your online activity, identity, and location private. Pay €5/mo with Bitcoin, cash, bank wire, credit card (PayPal), or Swish.

A Chrome extension that tracks you while you are on Facebook to show you your own data traces and reveal how machine learning algorithms use your data to gain insights about your personality.

A comprehensive guide to hardening WordPress installations against attacks. I'm not using WordPress these days, but I've had a lot of experience with it and this is a great resource.

An obvious (in retrospect) vulnerability in apps that use Sparkle for automatic updates (most apps outside of the MAS). The fix is pretty easy for developers, and as of Marked 2.5.4 (which is [available now](http://marked2app.com)) all of the updates and release notes are served over HTTPS. You can find additional details on the issue at [Vulnerable Security](https://vulnsec.com/2016/osx-apps-vulnerabilities/).

I use 1Password every day, and it's always been solid (both for security and convenience). The 6.0 release adds some great new features, and (suprisingly to me) is a free upgrade for version 5 users.

XARA—an acronym for unauthorized cross-app resource access on Mac OS X and iOS—describe a series of exploits that you need to know about.

The report

The first report I saw on the vulnerability.

Does the Indiana University XARA whitepaper make your head hurt? Here's an in-depth look at what "cross-app resource attacks" actually mean for your iOS and OS X systems.

The fact of the matter is that specialized malware can capture some of the information sent by the 1Password browser extension and 1Password mini on the Mac under certain circumstances. But roughly speaking, such malware can do no more (and actually considerably less) than what a malicious browser extension could do in your browser.

Researchers sneak password-stealing app into Apple Store to demonstrate threat.

This is great. An iOS/Mac combo app that lets you unlock your Mac using Touch ID on your iOS device. It lets you to define custom tap sequences for trackpad unlocking.

I'm clearly no security expert, but these points raised by Rene Ritchie are pretty obvious flaws GFI "report."