Chloe Fletcher

49 Followers
40 Following
132 Posts
Just one of a million people in infosec
Countdown until "yes, we were breached but it wasn't that bad".
Which will be followed by "ok, it was that bad - but it could have been worse!"
Followed by "it was worse"
The Wall of Sheep is going strong. I see Phil logged into his private Nextcloud server over HTTP on the DEFCON network

I'm going to prove a point and you're going to help me.

If you're a member of the information security and/or cybersecurity profession, and you have clicked on a phish in the last, say, five years, share this post. If you have not, star this post.

Someone's trying to say that you can punish people out of clicking on scam links and I say that not only can you NOT prevent phishing by punishing people, but the most skilled #infosec and #cybersecurity people in the world can and do get phished as well.

As the security backlash has grown against Microsoft's Recall feature, it at least seemed the screenshots it silently takes every 5 seconds are stored such that a hacker would need administrator privileges to access them.

Turns out even that safeguard is easily bypassed.

https://www.wired.com/story/microsoft-windows-recall-privilege-escalation/

Microsoft’s Recall Feature Is Even More Hackable Than You Thought

A new discovery that the AI-enabled feature’s historical data can be accessed even by hackers without administrator privileges only contributes to the growing sense that the feature is a “dumpster fire.”

WIRED
If an AI model was as routinely wrong as Elon, people wouldn't use it.
Me trying to explain modern development practices to normies:
Me: yeah, we don’t know how long it will take, or how much it will cost, tbh we don’t really know what we’re going to make. We need to figure that out. Get a feel for the people and the problem, make some stuff that seems useful and see how it goes.
Them: What kind of hippie bullshit is this???
Me: You should’ve seen the crap we made when we thought we knew what we were doing…
Them: Who would go along with this nonsense?
Me: … the people who had to deal with what we made before…?
Them: What part of this even partially resembles Engineering???
Me: so… the thing… that we’ll figure out is the thing we should make?
Them: yeah?
Me: Well, we’ll do that… But At Scale!
Them: what on earth does that even mean??? Gimme my money back!!!
Sam Bankman-Fried sentenced to 25 years in jail over FTX fraud

A New York judge sentences Sam Bankman-Fried for stealing $US8 billion from customers of the now-bankrupt FTX exchange he founded.

ABC News
Bluetooth successfully added to my skateboard :-)
VESC tool makes it easy to lock Bluetooth access a list of devices already paired, which is imperfect security but better than most out of the box units offer (which is none at all).