May 4, 2022
You want to watch a great discussion on cyber warfare. You want to watch Danny Moore talk about his upcoming book.
A Ukrainian family lived in a basement for three weeks with Russian soldiers.
https://www.theatlantic.com/ideas/archive/2022/05/putin-war-propaganda-russian-support/629714/Timely indeed.
My latest piece for @BrookingsInst Techstream is up - unintentionally extra timely today. Expanding the availability of E2EE services will be crucial in America’s post-Roe reality.
May 3, 2022
An urgent task awaiting Elon Musk at Twitter: Encrypting direct messages
A recent ruling from the Ninth Circuit Court of Appeals makes improving messaging security more urgent than ever.
Cyber is everywhere in everything.
If you are in the United States and you are using a period tracking app, today is good day to delete it before you create a trove of data that will be used to prosecute you if you ever choose to have an abortion.
May 3, 2022
What Your Period Tracker App Knows About You
As period tracker apps grow in popularity, so do concerns about what happens to the very personal information they share. Consumer Reports explains how to stay safe.
Next time you have that great idea to solve cyber security: Run it past a person whose only computing device is an off-brand Android phone with a shattered screen. Don't know such a person? Your idea probably sucks.
May 3, 2022
Cool story, boomer.
40 years ago today: I joined a tiny startup called Sun Microsystems. What a ride! Here's the never-before-told story of how I arrived at Sun as employee #8! 🧵
May 3, 2022
Fascinating!
Interesting finding! People are not passively fed misinformation by social media, but they search actively for it! When Facebook down, search for misinformation increases in Google.
May 4, 2022
What is happening in cyber policy now?
What Does the 2022 NDS Fact Sheet Imply for the Forthcoming Cyber Strategy? - Lawfare
Crazy deception
seems like this trench, which the Russians struck with artillery, was manned by Ukrainian mannequins. I recall seeing a close up of similar dummies being used by the Ukrainians, will post it below if I find it
May 3, 2022
Amusing anecdotes
Civilians were donating *ANYTHING* that might help with Ukrainian efforts to volunteer centers. Someone donated 100s of mannequins, suggesting they could be used as decoys in the field. Another person donated a hundred packs of underwear, insisting it would be useful…
Apr 24, 2022
Lots of interesting papers out there. This is one of them
https://psycnet.apa.org/record/2013-42900-004They should change the name from NFTs to GIF Certificates.
May 3, 2022
Seems like a great plan
The crazy world of Sanctioned Russia.
Russian Federal Penitentiary Service had announced a plan to recruit IT specialists from Russian prisons to work remotely for domestic commercial companies.
Russia to Rent Tech-Savvy Prisoners to Corporate IT? – Krebs on Security
People might want to say a thing or two about political issues, and they should be safe while doing so.
https://blog.adafruit.com/2020/06/05/digital-privacy-and-security-measures-for-staying-safe-while-protesting/On that topic, here’s a cool line of research, but note my caveats. Generally for important security things you want to fail close. So pick something simple and dumb that can’t fail open. Stupid proof your security. The UK redacts documents with three asterisks (*) rather than the US style of using black bars over the text. The US method leaks some information, and the UK leaks none. (Not always used, of course, but generally speaking those are the two nations approaches.)
This is an interesting project. However, secure redaction is placing a solid shape (eg black bar) over identifying features. 1) this project leaves the face identifiable by human 2) is based on algorithms at a point in time. Adversarial research could invalidate it Very cool tho https://t.co/fIdWkWG2vM
May 4, 2022
Here’s an example of the police defeating a specific method of obscuring features.
@thegrugq @0xChain Timely reminder of the case of Mr Swirl... bbc.in/37Y8Tr5 @violetblue
May 4, 2022
PS worth noting that the way to defeat this method (as I recall) is to open the JPEG in Photoshop, place the centre of the “swirl” tool on the swirl, and then just reverse it.
There’s a pandemic on.
It’s been another bizarre week in Covid, with a growing schism between countries making efforts to protect their citizens, and those countries making efforts to hide the fact they are failing to protect their citizens. #AWeekInCovid (excuse the sarcasm). 🧵
May 3, 2022
There’s quite a lot of cool research being done on how we function as online-animals.
Another finding supporting that negative emotions favour online success.
May 4, 2022
Deep dive research.
My newest blog explores an initial RE pass at shedding light on the the service running on TCP port 7680 on your Windows OS and the “Swarm protocol” of Delivery Optimization DOing Harm
May 3, 2022
DOing Harm
There’s this thing called Windows Delivery Optimization which allows “you to get Windows updates and Microsoft Store apps from sources in addition to Microsoft, like other PCs on your local network, or PCs on the internet that are downloading the same files.
BREAKING: Britain bans Russia from using its management consulting and PR services
May 4, 2022
Add a comment: