circuit_cat

4 Followers
31 Following
157 Posts

What's this button do?

Security+ ...and that's it, thus far.

Aspiring GRC

#NoAI #StoptheHoard #infosec

The first challenge at #bsidesnyc ?

How to get out of the lobby. 

@elliotjaystocks Cry about it. Then burn.
@GossiTheDog What is this? Other than gorgeous?
@schmutzie Yeah, although curious; didn't realize Canada had slightly-better privacy protections than the U.S., figured it was either all on-par with the EU or nothing like down here.

@schmutzie They've also got one under "Personalized Shopping", starting next year -

> Starting early summer 2025, we’ll be building more personal experiences for you. You can opt in and out of sharing at any time by adjusting this setting.

@hacks4pancakes didn't...wasn't it the NBA all-star game that abandoned Georgia over their Don't Say Gay Bill? If the NBA can move an entire three-day basketball tournament (iirc, at the last minute), all these other firms can get a different hotel.

Ah, THAT'S why the #NYMTA hosted a cybersecurity conference 

https://therecord.media/railroad-cyberthreats-tsa-regulations

Cyberthreats to railroads loom as industry and TSA grow an uneasy partnership

U.S. railroad companies and the federal government are working to build trust after a rollout of cybersecurity regulations in 2022 rankled the industry. Experts say the stakes are high.

A few days early maybe but it's time for the October Surprise! No it's not a candidate's secret love child or yet another attempt at subverting democracy, IT'S:

Print Spoolers committing RCEs

https://securityintelligence.com/news/fysa-critical-rce-flaw-in-gnu-linux-systems/

#cups #CupsBleed #cve_2024_47076 #cve_2024_47175 #cve_2024_47176 #cve_2024_47177

FYSA - Critical RCE Flaw in GNU-Linux Systems - Security Intelligence

A severe, unauthenticated remote code execution (RCE) flaw has been discovered in GNU Linux systems. The vulnerability, rated CVSS 9.9, affects multiple Linux distributions and has the potential to be exploited by threat actors to gain unauthorized access to sensitive systems.

Security Intelligence

Also, while I was unfortunately unable to attend, I'm very disappointed #PennState has chosen "AI for Good" (and reportedly throwing it's weight behind 'creative' #AI alongside more acceptable analytical AI) as the inaugural subject of its first Global Impact Forum (#TGIF) Seems to be a bit contemptuous of the work the students in PS Law and the Stuckeman School are achieving.

https://www.psu.edu/news/outreach/story/inaugural-gsv-x-penn-state-ai-conference-be-held-sept-22-25-philadelphia

#aithreat

Inaugural GSV x Penn State AI conference to be held Sept. 22-25 in Philadelphia | Penn State University

Education professionals, entrepreneurs and AI-industry experts are invited to attend the inaugural East Coast Global Silicon Valley (GSV) x Penn State event. The Global Impact Forum will be held Sept. 22-25 at the Pennsylvania Convention Center in Philadelphia.

I had an opportunity to chat with #AI proponents recently. The recurring theme from them every time it was brought up how generative AI is in flagrant violation of #copyright laws, is that technology has advanced beyond law, and 'that horse has left the barn'. That particular phrase was oft repeated, which, pardon my curtness, is abject bull.

OpenAI ADMITTED it must use copyrighted work to function, and does not obtain proper permission. Therefore, it confessed to being violation of copyright law.

A court order directing them to purge their improperly obtained items would be a VERY FAST way to put that horse 'back in the barn', so to speak...or more appropriately, the glue factory.

#StopTheHoard

Edit: source on the admission - https://www.engadget.com/openai-admits-its-impossible-to-train-generative-ai-without-copyrighted-materials-103311496.html

OpenAI admits it's impossible to train generative AI without copyrighted materials

OpenAI said it's "impossible to train today's leading AI models without using copyrighted materials."

Engadget