Uber Investigating Breach of Its Computer Systems

• tpm-fido

  6 174 2.7 Go

  A WebAuthn/U2F token protected by a TPM (Go/Linux)

  If you have a Linux PC with a TPM, you can use https://github.com/psanford/tpm-fido to create and "plug in" a virtual USB WebAuthn key whose secret is irretrievably stored in the machine's TPM. This effectively asserts that your specific machine is being used to enter a given site. However, it's important to remember it doesn't necessarily verify that *you're* present, or even if *anyone* is present at all, since the presence check is done via a software dialog and can be pwned along with the rest of the system.

• santa

  10 4,016 7.5 Objective-C

  A binary authorization system for macOS

  

  > Infostealers for Mac are a thing (Uber is a mac heavy shop I hear)

  Block unknown executables on company machines. Google developed Santa to protect themselves: https://github.com/google/santa

  > and that's all it takes to steal cookies and tokens post-mfa,

  Make post-MFA cookies and tokens short-lived. Require MFA re-authentication at least daily.

  > or why even bother with that, if you're running code just make it a reverse shell.

  All outbound connections should be strictly monitored, especially from production servers, which should have no ability to make outbound connections. With modern dependency management, that's harder for build servers, but still doable.

• Appwrite

  appwrite.io

  sponsored

  Appwrite - The Open Source Firebase alternative introduces iOS support. Appwrite is an open source backend server that helps you build native iOS applications much faster with realtime APIs for authentication, databases, files storage, cloud functions and much more!

  

Suggest a related project