218 Followers
58 Following
86 Posts
Threat Intelligence person.
Professional Sitehttps://www.linkedin.com/in/brianpkime/
Bird Sitehttps://twitter.com/BrianPKime
APTFUZZYSNUGGLYDUCK
Your moment of Zen. #dogsofmastodon

Sigh. Let's see if y'all can play along at home:

The FCC and the FBI's Denver field office are both warning people to beware of Juice Jacking attacks at airports and other public places. Both cite "cybersecurity experts."

https://www.fcc.gov/juice-jacking-dangers-public-usb-charging-stations

An FBI spox told me the Denver field office warning was reporting information from the FCC. An FCC spox said its information came from a 2019 NYT article, but that the agency has received consumer complaints of juice jacking.The NYT article cited a warning from the LA DA's office. The DA's post was taken down in December 2021, a couple weeks after @zackwhittaker reported DA officials had no cases and could point to no cases of it happening.

Even though the the LA DA's warning was depublished ~18 months ago and the FCC spox can't name a single cybersecurity expert issuing such warnings, there are no plans to correct the post and no mechanism for the public to challenge the warning.

'Juice Jacking': The Dangers of Public USB Charging Stations

If your battery is running low, be aware that juicing up your electronic device at free USB port charging stations, such as those found near airport gates, in hotels and other travel-friendly locations, could have unfortunate consequences.

US #infosec #cybersecurity policy, in brief
BEHOLD! Commercial #Infosec #CTI #ThreatIntel impact on #Ukraine

New law in Belgium allows "ethical" hackers to hack Belgian companies without their permission. The law requires hackers to report any vulnerabilities they find within 72 hours of discovering them. "You can't just test the security of a system and then say nothing about it afterwards."

Hackers also are prohibited from asking for a bounty "otherwise it is the same principle as asking for a ransom."

"There are more than 3,000 ethical hackers in Belgium. They will be able to see whether the data of an average citizen is properly secured. If the government comes up with a corona app, ethical hackers can now legally test it."

https://www-vrt-be.translate.goog/vrtnws/nl/2023/02/14/ethische-hackers-mogen-meer-door-nieuwe-wet/?_x_tr_sl=fr&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp

Ethische hackers mogen dankzij nieuwe wet Belgische bedrijven hacken zonder toestemming: "Kijk hier al 10 jaar naar uit" 

Ethische hacker Inti De Ceukelaire vertelt in "VRT NWS laat" wat er precies verandert.

VRT NWS: nieuws
Non- #shitpost version of how #CTI conflates #threatactors and such with capability developers based on visibility and telemetry bias:
https://www.dragos.com/wp-content/uploads/Threat-Intelligence-and-the-Limits-of-Malware-Analysis.pdf

Layoffs:
- don't save money
- don't improve company performance
- don't increase stock pricess
- destroy trust
- have huge impacts on health, well-being, and income of employees

So why do layoffs? It's a network effect: execs lay people off because other companies are doing it

Stanford Biz School article: https://news.stanford.edu/2022/12/05/explains-recent-tech-layoffs-worried/

Harvard Biz Review:
https://hbr.org/2022/12/what-companies-still-get-wrong-about-layoffs

What explains recent tech layoffs, and why should we be worried? | Stanford News

As layoffs in the tech sector mount, Stanford Graduate School of Business Professor Jeffrey Pfeffer is worried. Research – by him, and others – has shown that the stress layoffs create takes a devastating toll on behavioral and physical health and increases mortality and morbidity substantially. Layoffs literally kill people, he said.

Stanford News

What a foolish thing to say. Maybe oppression only feels like freedom to you because you're not the one bearing the brunt of it.

There's always someone admiring the boot when they're not the one being crushed under it.

https://www.nytimes.com/2023/01/18/opinion/china-education-parenting-culture.html

Opinion | China Helped Raise My American Kids, and They Turned Out Fine

U.S. polarization and live-shooter drills make me miss my Chinese government co-parent.

The New York Times
Awesome calendar @sergio ! And so cool that the proceeds benefit the Global Emancipation Network to end human trafficking! #ThreatIntelligence