Bill Bernard

119 Followers
181 Following
1.1K Posts
Cybersecurity Presales Leader, InfoSec news junkie and privacy fan. Sometimes I post smart thoughts of my own as well.
LinkedInhttps://www.linkedin.com/in/billbernardchicago/
Bloghttps://between-two-firewalls.com/
Pronounshe/him

Happy Friday!

Today's image begs the question: why?

Why did that duct have to be placed where it would interfere with a traditional garage door opener?

Why didn't they install a wall-mount opener instead of the traditional overhead one?

Why do they not realize how much airflow they're restricting with that cut-thru?

It seems like a brilliant hack from one perspective. But when you dive into it, there were so many possible other solutions that would work better, why was this the "solution?"

We are only one week away from #SecretCon in the Twin Cities! This is the 4th annual (and the 5th has already been scheduled!)

Why join me there? Three great reasons:

  • I'm speaking! "Gen AI Ain't Your Buddy, Neither Is Your Lawnmower" is at Noon Friday.
  • We're bringing our Linux Village to SecretCon! If you're Linux Curious you should stop by!
  • This conference is community run and community focused. In the Twin Cities! You should experience it.https://secretcon.com/speaker/gen-ai-aint-your-buddy-neither-is-your-lawnmower/
  • We're paying a huge price for a policy that doesn't work.

    People adapt what they do online when parts of the Internet are put behind intrusive ID checks.

    Why carry on like this when young Australians have found ways to bypass the social media ban?

    Have your say by 26 May in the UK consultation ➡️ https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation

    #onlinesafety #privacy #ageverification #digitalID #digitalrights #socialmediaban #ukpolitics #ukpol

    If you collect it, someone at some point will come to exploit it.

    #Privacy #DataMinimization

    Tiny Privacy Tip for Application Developers 🔒✨

    Every piece of data you
    collect on others with your application becomes a liability to you.

    You are responsible for
    safeguarding and keeping track of every single piece of personal data you collect.

    This is a heavy responsibility.

    Especially if you collect and store a lot of data.

    A much easier approach is to collect only what is absolutely necessary and delete it thoroughly as soon as it is not necessary to keep it anymore. You will save yourself so many headaches adopting this practice right from the start in your software development.

    Remember: You can't be liable for the data you simply never had.
    This is the easiest path for you,
    and the safest path for your users.

    #TinyPrivacyTip #Privacy #DataMinimization

    Age verification mandates are reshaping the internet in ways that are invasive, dangerous, and unnecessary. But users aren't powerless! Our resource hub is here to help you challenge these laws, protect our digital rights, and build a safer digital world for all—no matter your age. https://www.eff.org/age
    Age Verification and Age Gating: Resource Hub

    Age verification (or age-gating) laws generally require online services to check, estimate, or verify all users’ ages—often through invasive tools like ID checks, biometric scans, or other dubious “age estimation” methods—before granting them access to certain online content or services.  Governments in the U.S. and around the world are increasingly adopting these restrictive measures in the name of protecting children online. But in practice, these systems create dangerous new forms of surveillance, censorship, and exclusion.  Technologically, the age verification process can take many forms: collection and analysis of government ID, biometric scans, algorithmic or AI-based behavioral or user monitoring, digital ID, the list goes on. But no matter the method, every system demands users hand over sensitive and immutable personal information that links their offline identity to their online activity. Once that valuable data is collected, it can easily be leaked, hacked, or misused. (Indeed, we’ve already seen several breaches of age verification providers.) EFF has long warned against age-gating the internet. Age verification technology itself is often inaccurate and privacy-invasive. These restrictive mandates strike at the foundation of the free and open internet. They are tools of censorship, used to block people from viewing or sharing information that the government deems “harmful” or “offensive.” And they create surveillance systems that critically undermine online privacy, chill access to vital online communities and resources, and burden the expressive rights of adults and young people alike. EFF.org/Age: A Resource to Empower Users Age-gating mandates are reshaping the internet in ways that are invasive, dangerous, and deeply unnecessary. But users are not powerless! We can challenge these laws, protect our digital rights, and build a safer digital world for all internet users, no matter their ages. This resource hub is here to help—so explore, share, and join us in the fight for a better internet.

    Electronic Frontier Foundation

    It's that time again, the 3rd Thursday of the month, and that means time to meet up for @BurbSecWest. I look forward to seeing everyone out there. Details for where and when are available here: https://burbsec.com/west/, but the TLDR version is 6:00pm at Granite City, Naperville, this month sponsored by Push and Orca Security!

    I look forward to seeing you there.

    #BurbSecWest
    #Naperville
    #Cybersecurity
    #Socializing

    And while we're at it, do you really need to continue to use closed-source drivers for things as innocuous as video cameras, speakers, and microphones? Could you offer an out-of-band BIOS update solution?

    Your Intel based MacBooks are still solid computers all these years on, but your choices mean that using them with #Linux is, well, a non-trivial setup exercise that just leads to depositing the old computers in a landfill that much faster.

    I'd just like to pause a moment and say:

    "Curse you Apple! You and your 5-point screw-heads! I need to replace a faulty SSD and now I need to wait until brand new screwdrivers arrive!"

    Happy Friday!

    Today's image is about how I got my start hacking. As a young kid (7-10ish) I was given my very own actual tool box with actual tools like a hand saw, framing square, and a hand drill that looked quite a bit like this one. (though the drill bits were in Imperial sizes, not metric)

    Hacking isn't only about computers, it's about making something that works from what you have available to you. A good tool kit along with the knowledge about how to use the tools you have is critical