en.osm.town is one of the many independent Mastodon servers you can use to participate in the fediverse.
An independent, community of OpenStreetMap people on the Fediverse/Mastodon. Funding graciously provided by the OpenStreetMap Foundation.

Server stats:

251
active users

#filesharing

3 posts3 participants0 posts today

Pick your Poison - A Double-Edged Email Attack

A sophisticated cyber-attack campaign has been identified, combining phishing techniques targeting Office365 credentials with malware delivery. The attackers use a file deletion reminder as a pretext, exploiting a legitimate file-sharing service to appear more credible. Upon opening a shared PDF file, users are presented with two hyperlinks: 'Preview' leads to a fake Microsoft login page for credential theft, while 'Download' initiates the installation of ConnectWise RAT malware. The malware establishes persistence through system services and registry modifications. This dual-threat approach emphasizes the need for user vigilance and education in recognizing phishing attempts and suspicious emails.

Pulse ID: 680fac69fa21735eedd5b785
Pulse Link: otx.alienvault.com/pulse/680fa
Pulse Author: AlienVault
Created: 2025-04-28 16:27:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

"The anti-piracy campaign was … not exactly subtle. Its spots ran before movies in theaters and on home media from 2004–2008. One shows a teen girl clicking a big green "Download" button on a website promising "Feature Films"—but when she does so, large white text jumps onto a black backdrop: "You wouldn't steal a car." The text looks like it was applied with spray paint and a stencil.

What font is this? The site Fonts in Use suggests it was FF Confidential, designed by Just van Rossum in 1992.

Melissa Lewis, a reporter at the Center for Investigative Reporting, noticed Fonts in Use's identification, and she remembered that noted "computer person" Parker Higgins had been digging into the "very similar (font) Xband Rough." Lewis contacted van Rossum, who confirmed that Xband Rough was a clone of FF Confidential. "It's just been around forever and is ubiquitous," Lewis writes.

Picking up on these inquiries, a tinkerer going by the handle "Rib" then dug into a PDF from the anti-piracy campaign's archived website. A tool called FontForge indicated that the notable "spray-painted" font used in the PDF was, in fact, XBand Rough.

Van Rossum—who is the brother of Guido van Rossum, creator of the Python programming language—told TorrentFreak that he knew the anti-piracy campaign had used his font, and he knew that the Xband Rough clone existed. He did not know that the industry group had used the knock-off version in its campaign, but he found it "hilarious." Van Rossum, reached for comment by Ars, declined to comment."

arstechnica.com/gadgets/2025/0

White text on a black background, in a photocopied/rough style, reading "You Wouldn't Ironically Pirate a Font" in the same style as a famous mid-2000s anti-piracy campaign.
Ars Technica · “You wouldn’t steal a car” anti-piracy campaign may have used pirated fontsBy Kevin Purdy

@kuketzblog ist jetzt sozusagen mein IT-"Gemischtwarenladen" 🤪

Ich musste gestern jemandem eine sehr große Datei schicken und nutzte automatisch #WeTransfer. Danach dann so: "Moooooment mal...". Bei #Wikipedia gelesen, dass WeTransfer zwar ein niederländisches Unternehmen ist, aber Amazon-Server nutzt. Verdammt!

Also in Kuketz' Empfehlungsecke nachgeguckt und sich einen besseren #Filesharing|Dienst rausgesucht 💪 DANKE!!!

#unplugtrump #unplugamazon

@disroot

FilePizza • Your files, delivered.
Peer-to-peer file transfers in your browser.

Using WebRTC, FilePizza eliminates the initial upload step required by other web-based file sharing services. Because data is never stored in an intermediary server, the transfer is fast, private, and secure.

🍕 file.pizza

file.pizzaFilePizza • Your files, delivered.Peer-to-peer file transfers in your web browser.

Use FilePizza App to Send Someone a File Without Using Any Cloud Storage

“FilePizza isn’t the only application like this. There’s p2pfileshare.com and sharedrop.io, to name a couple. FilePizza stands out because of the simplicity—just share a file and copy the URL—and because it has a unique URL. These links only work as ...continues

See gadgeteer.co.za/use-filepizza-

GadgeteerZA · Use FilePizza App to Send Someone a File Without Using Any Cloud Storage“FilePizza isn't the only application like this. There's p2pfileshare.com and sharedrop.io, to name a couple. FilePizza stands out because of the

I'm curious to hear what others are #SelfHosting! Here's my current setup:

Hardware & OS

Infrastructure & Networking

Security & Monitoring

Authentication & Identity Management

  • Authelia (Docker): Just set this up for two-factor authentication and single sign-on. Seems to be working well so far!
  • LLDAP (Docker): Lightweight LDAP server for managing authentication. Also seems to be working pretty well!
    #AuthenticationTools #IdentityManagement

Productivity & Personal Tools

Notifications & Development Workflow

  • Notifications via: #Ntfy (Docker) and Zoho's ZeptoMail (#Zoho)
  • Development Environment: Mostly using VSCode connected to my server via Remote-SSH extension. #VSCodeRemote

Accessibility Focus ♿🖥️

Accessibility heavily influences my choices—I use a screen reader full-time (#ScreenReader), so I prioritize services usable without sight (#InclusiveDesign#DigitalAccessibility). Always open to discussing accessibility experiences or recommendations!

I've also experimented with:

  • Ollama (#Ollama): Not enough RAM on my Pi.
  • Habit trackers like Beaver Habit Tracker (#HabitTracking): Accessibility issues made it unusable for me.

I don't really have a media collection, so no Plex or Jellyfin here (#MediaServer)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 😄

What's your setup like? Any cool services you'd recommend I try?

#SelfHosted #LinuxSelfHost #OpenSource #TechCommunity #FOSS #TechDIY

@selfhost @selfhosted @selfhosting

If I record myself reading a copyrighted book and share the recording with some friends (for free), is that copyright infringement?

If so, can I claim fair use by, idk, dressing up in a funny outfit or something and turning the reading into a performance art piece, which I then record and share?

Is it copyright infringement to extract the audio from said recording of such a performance art piece and share that? There must be a legal way to do this...