Sunu Security

Youtube:
#SunuSecurity

[Sunu Security @SunuSecurity]

Sunuy Formation ci WOLOF:
- Matna:

1- Linux ci WOLOF: https://t.co/MwlgYlUQSu

2 - Informatique: https://t.co/DkixWLM79K

#SunuSecurity #Kebetu

[GrapheneOS @GrapheneOS]

Motorola has announced their new high end flagship phone including upcoming official support for GrapheneOS as an OS option.

Motorola Signature 27 will be the first Motorola device supported by GrapheneOS. More devices will be supported in the future.

https://t.co/ARJFCisI8z

[Ayo O @ayoships]

I reverse engineered tiktok

[Sunu Security @SunuSecurity]

@WaveSenegal 4- Ngeen xool ay technics pour faagaagal arnaques/fraude yi, su jaree sax ku la aranaque nga man ko signaler direct ci application bi, bu ko ay nit yu bëri signaler ngeen bloquer ko xool li ciy topp...
Jaa ngeen jëf.
5- Ni may yeexe jote ci yu bees yi metti na ma trop nak.

[Sunu Security @SunuSecurity]

@WaveSenegal 3- Nga mana bloquer sa compte (pour du def benn transfert, deconnecter sa compte ci appareils yépp) soo sentire ne dan la pirate; ba nga lijjanti sa bopp ba pret.

[Levi @leviackermanft]

🚨Alert:

𝕏 adds extra tracking parameters to copied post links. ⚠️

Before sharing a post, check the URL.

Delete everything after ? to strip the extra parameters.

Same post. Cleaner link.

[Parlons Cyber @Parlons_Cyber]

⚠️ ATTENTION : X ajoute des paramètres de suivi aux liens que vous copiez ! Avant de partager un post, vérifiez l’URL. Supprimez tout ce qui se trouve après le ? pour nettoyer le lien.

Ce qui change :
➣ Les liens copiés peuvent contenir des paramètres comme "s=46" ou "a=...."
➣ s= indique notamment le type d’appareil et la méthode de partage utilisés.
➣ a= (ou parfois t=) peut servir à attribuer un clic à une session ou à un partage précis.
➣ Ces données peuvent alimenter les statistiques de partage, l’analyse du trafic et les systèmes de détection des abus.
➣ Le destinataire accède au même post, même si vous supprimez ces paramètres.

X peut utiliser ces paramètres pour mesurer d’où viennent les partages et les clics. Cela ne signifie pas que votre nom d’utilisateur est directement révélé au destinataire par l’URL.

[Makr @makrotasuss]

iOS 16 on redmi note 12

[Sunu Security @SunuSecurity]

@bayethiernodiop Done!

[Sunu Security @SunuSecurity]

Siar @bayethiernodiop,

amna luma jot ci ben mail, est ce k moomoo ko?

[Sunu Security @SunuSecurity]

@bayethiernodiop Dama la doon dm mais: "@bayethiernodiop has a closed inbox."

[Techjunkie Aman @Techjunkie_Aman]

GrapheneOS just accused Google of giving Pixels a security head start.

The project says some September Pixel patches affect standard Android code but haven't reached AOSP or the usual OEM patch channels yet.

Why this matters:

• Pixel gets extra security fixes first.
• Some Android 17 QPR1 APIs reportedly aren't in AOSP.
• GrapheneOS says it's backporting Pixel components instead.
• It also criticized delays in receiving GPL source code.
• Non-Pixel devices may wait until QPR2 for some changes.

Google hasn't announced a broader rollout timeline for those platform patches.

If Android is supposed to be open, should Pixel-exclusive advantages extend this far?

[The Hacker News @TheHackersNews]

‼️Claude Opus 5 helped three researchers build an image exploit that took over OpenAI's public help forum server.

A flaw in OpenAI's own login then let them take over staff ChatGPT/Codex accounts and reach an internal code repo — in under 72 hours.

Here's how the chain worked → https://t.co/vwttyJkl3T

[Nym @nym]

🌍UPDATE VPN RESTRICTIONS

🔴 VPN banned / effectively blocked
🇰🇵 North Korea - VPN access effectively unavailable
🇹🇲 Turkmenistan - VPNs heavily blocked
🇮🇷 Iran - unauthorized VPNs heavily restricted
🇨🇳 China - unauthorized VPN services heavily restricted
🇲🇲 Myanmar - VPNs heavily blocked/restricted
🇧🇾 Belarus - VPN services increasingly restricted
🇷🇺 Russia - many VPN services blocked
🟠 Heavy restrictions / government controls
🇮🇳 India - VPN providers face major compliance and data-retention requirements
🇮🇳 Jammu & Kashmir - Doda and Udhampur imposed temporary VPN bans
🇹🇷 Türkiye - many VPN services blocked
🇦🇪 UAE - VPNs legal for legitimate purposes, misuse can carry penalties
🇴🇲 Oman - VPN use subject to regulatory restrictions
🇪🇬 Egypt - VPN services/traffic increasingly restricted
🇺🇬 Uganda - VPN restrictions used alongside internet controls
🇻🇳 Vietnam - increasingly restrictive internet regulation
🇵🇰 Pakistan - repeated attempts to restrict/register VPNs

🟡 Age verification / anti-circumvention pressure
🇬🇧 UK - no VPN ban, but government is examining circumvention of age checks
🇦🇺 Australia - no VPN ban, increasing focus on VPN circumvention
🇪🇺 EU - no VPN ban, expanding age verification infrastructure
🇺🇸 USA - some states targeting VPN use to circumvent age verification
🇺🇸 Utah - law targeting VPN circumvention of age checks, enforcement tied up in litigation
🇳🇿 New Zealand - proposed social media age restrictions could create VPN circumvention issues
🇳🇴 Norway - proposed age restrictions create similar concerns
🇩🇰 Denmark - proposed age restrictions create similar concerns
🇵🇱 Poland - proposed age restrictions create similar concerns
🇨🇦 Canada - proposals for age restrictions could create VPN circumvention issues

🟢 No general VPN ban identified
🇩🇪 Germany
🇫🇷 France
🇯🇵 Japan
🇨�� Switzerland
🇳🇱 Netherlands
🇸🇪 Sweden
🇫🇮 Finland
🇪🇸 Spain
🇮🇹 Italy
🇮🇪 Ireland
🇧🇪 Belgium
🇦🇹 Austria
🇨🇿 Czechia
🇵🇹 Portugal
🇬🇷 Greece
🇺🇸 USA - federal level
🇨🇦 Canada - federal level

The trend is changing:
VPN bans →
VPN blocking →
provider regulation →
mandatory registration →
age verification →
anti-circumvention →
VPN detection

The VPN itself doesn't always get banned.

Sometimes governments just make using one increasingly difficult.

It is kind of hard to ban a decentralized VPN.....

[The Hacker News @TheHackersNews]

‼️ Google Gemini broke into real company systems during a security test.

A fictional company name matched a real domain while internet access was unintentionally enabled. Gemini guessed one password and found other credentials in a public repository before halting.

Read: https://t.co/1K95TTT5Iu

[Sunu Security @SunuSecurity]

@kararaaidara1 @Talladiagne222 Tere gi sax jàpp naane tereg sibéel lay doon ngir lin siy wax lépp ak nimiy def nitt, waante terag araamal moom ma su ma see dégg Hadiis bu wér nju ne Yêneen bee ko wax.

[ferstar @ferstar_org]

Hey @Zai_org , why does ZCode silently pack entire workspaces + full .git history and upload to Aliyun OSS on login?
- Server holds the only decryption key
- No UI toggle to disable
- Zero disclosure in privacy policy

Full forensics & fix:
https://t.co/N3HnwZdQOQ

[Sunu Security @SunuSecurity]

Amul lu géna doy waar "dont X Go sur la 5G".
Do am pexe (ndax fi nga nekk) wut "pass 100Go dont 50Go sur la 5G 15000 FCFA",
50Go 4G yi jeex, nga deplace wu ci ben Zone connecte du dem, nga woote nju ne la zone bi nga nekk amul 5G, fu am 5G rek lay dox. @orange_sn @30JPLJP_SN

[Orange Sénégal @orange_sn]

15 Go à 3 000F ? Waw, du jeex dee.

Jusqu’au 06 septembre à 08h00, profitez d’un pass de 15 Go, dont 3 Go sur la 5G, à seulement 3 000 F. 

Waw rentrée bu and ak connexion ngeen di am fofou.

Bonus valable pendant 30 jours.
Promo disponible via Max it  👉 https://t.co/lUpq02w3et , #1234#, #144# et payable par crédit ou Orange Money.

Pour plus d’informations, retrouvez dès maintenant l’assistante d’Ibou sur WhatsApp 👉 https://t.co/Yqc5CoXwmq

#Ibou

[冨樫義博 @Un4v5s8bgsVk9Xp]

No.428、原稿完成。

[Qwinah @MaaSonder]

Google copied open-sourced code, removed engineers names and claimed it as their own

artemis, Googles new open-source tool for mobile automation was found to be a exact copy of someone’s work

the original engineers named an agent randomly “hopper”, which was found, with its prompt internally

some of the engineers and co-founder’s names were found in the “authors” section of an old commit

all three names had been replaced with another author’s name in a commit, and the other 228 files from mobile-use were unchanged