Jan SchaumannI posted this a few years ago on Twitter, but perhaps today is an opportune time to post again here:
Any sufficiently advanced "endpoint protection" software is indistinguishable from malware.
(Adding: Has the potential to cause global outages.)
bryansowen
- 19 Followers
- 54 Following
- 31 Posts
Down the compliance rabbit hole re: NIST AC-10 Concurrent Session Control
Hypothesis: control objective is to help mitigate use of stolen credentials.
if so, MFA seems far superior.
/r/netsecBSidesSF 2024 CFP is now open! https://bsidessf.org/cfp
nixCraft 🐧Ask Microsoft: Are you using our personal data to train AI? https://foundation.mozilla.org/en/campaigns/microsoft-ai/ I have a good guess: Microsoft will use your personal data to train AI, even if you use an alternative OS. We are doomed with big tech now. Please boost for reach. #privacy #security
Ask Microsoft if They Plan to Use Our Personal Data to Train AI
A healthy internet requires an active, global community. Mozilla’s advocacy work brings people together from around the world to educate and fight for privacy, inclusion, literacy, and all principles of a healthy internet.
A Follow-up to the Exploit-DB and 0day.today Comparison https://vulncheck.com/blog/exploit-database-followup
A Follow-up to the Exploit-DB and 0day.today Comparison - Blog - VulnCheck
Following reader suggestions, we take a deeper look at the types of vulnerabilities in the Exploit-DB and 0day.today exploit databases. We also examine exploit attack vectors and find out how many of the exploits have been used in the wild.
[CVE-2023-21554] MSMQ (tcp/1801) Remote Code Execution (CVSS 9.8) https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/
Matthew GreenImagine “the anarchist cookbook” but it’s a device-local chatbot that will answer all your (technical and ideological) questions interactively and persuasively.
Fight for the FutureBREAKING: 🐦InternetArchive will appeal today’s ruling in a suit from Big Media that would terminate libraries’ last option to own and preserve digital books.
QT internetarchive: We will appeal.
#DigitalRightsForLibraries #EmpoweringLibraries
http://blog.archive.org/2023/03/25/the-fight-continues/
The Fight Continues - Internet Archive Blogs
Today’s lower court decision in Hachette v. Internet Archive is a blow to all libraries and the communities we serve. This decision impacts libraries across the US who rely on controlled digital lending to connect their patrons with books online. It hurts authors by saying that unfair licensing models are the only way their books […]
Patrick C Miller 
Full Committee Hearing to Examine Cybersecurity Vulnerabilities to the United States' Energy Infrastructure - Thursday, March 23, 2023, at 10:00 Eastern - https://www.energy.senate.gov/hearings/2023/3/full-committee-hearing-to-examine-cybersecurity-vulnerabilities-to-the-united-state-s-energy-infrastructure
Vern McCandlishIf someone you follow brings you value, take the time to let them know, and do it often. This act of kindness and appreciation has value all on its own, but it also has added importance because there are legions of hurt and hateful people that don't hesitate to try and regularly tear them down. It would be a shame if those hateful and hurtful voices were the only ones the people that we valued ever heard.