DIRECT MESSAGING

DMs on Mastodon work differently than on other platforms.

Graham Cluley, a well-respected British security blogger with a sharp sense of humor (and host of the Smashing Security podcast) has this to say:

“Imagine you are having a direct message conversation with someone on Mastodon about a sensitive subject.

Maybe George and Paul are bantering via direct message on Mastodon, and one of them says “I’ll tell you who’s a twit. That bloody @Ringo”

Well, because @Ringo has been mentioned in the chat, he now sees a copy of the message too. Ouch, that’s awkward.

This would be particularly dangerous if you were communicating with another Mastodon user to report abusive behaviour. Suddenly your abuser knows you are complaining about them.

Email doesn’t work like that. Twitter direct messages don’t work like that.

(Sorry Ringo for using your name in this example, Peace and Love man!)”

https://grahamcluley.com/mastodon-what-you-need-to-know-for-your-security-and-privacy/

Marcus Hutchins pointed out -- in his excellent overview “A Twitter User's Guide to Mastodon”:

“Something to also be wary of is similar to how Twitter staff can read your DMs, so can Mastodon instance staff. If you send a DM to someone on another instance, both the staff on the sending and receiving instance could read your message if they wanted to. Just like on any social media platform, I do not advise using DMs to share sensitive information. Use DMs for normal discussions, or exchanging contacts. Any sensitive information should be sent via an End-to-end encrypted messaging app like Signal, WhatsApp, Telegram, or Wire.”

https://escapingtech.com/tech/guides/a-twitter-users-guide-to-mastodon.html

@gcluley
#SmashingSecurity
#GrahamCluley
@malwaretech
#MarcusHutchins
#DirectMessages
#DMs

📬 Abzocke: Krypto-Nutzer bitten euch um Hilfe
#Kryptowährungen #OnlineBetrug #BitcoinBetrüger #JackRhysider #MarcusHutchins #Scam #Tron #TRX https://tarnkappe.info/artikel/krypto/abzocke-krypto-nutzer-bitten-euch-um-hilfe-254561.html

Career Choice Tip: Cybercrime is Mostly Boring https://krebsonsecurity.com/2020/05/career-choice-tip-cybercrime-is-mostly-boring/ #HowtoBreakIntoSecurity #CambridgeUniversity #CybercrimeCentre #ALittleSunshine #MarcusHutchins #RichardClayton #DDoS-for-Hire #ddos-for-hire #GameoverZeuS #ZeuSTrojan #stresser #booter #wired

Career Choice Tip: Cybercrime is Mostly Boring - When law enforcement agencies tout their latest cybercriminal arrest, the defendant is often cast as... more: https://krebsonsecurity.com/2020/05/career-choice-tip-cybercrime-is-mostly-boring/ #howtobreakintosecurity #cambridgeuniversity #cybercrimecentre #alittlesunshine #marcushutchins #richardclayton #ddos-for-hire #gameoverzeus #zeustrojan #stresser #booter #wired

#wired #story "The Confessions of Marcus Hutchins, the Hacker Who Saved the Internet" #WannaCry #Hacker #MarcusHutchins ... https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/

#wired #story "The Confessions of Marcus Hutchins, the Hacker Who Saved the Internet" #WannaCry #Hacker #MarcusHutchins ... https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/