Michael Weiss

@mweiss@infosec.exchange
88 Followers
41 Following
1.4K Posts

New, by me: Digital Pollution: The Hidden Cost of Insecurity

What do smoke signals, toxic rivers, and data breaches have in common? More than you think.

The internet has a pollution problem...and it’s not the kind you can just scroll past.

Why are breaches so routine? Why do companies shrug and move on? Spoiler: it’s all about who pays the price.

Let's take a deep breath and dive into the digital smog in which we’re all living. And what it will take to fix it.

#digitalpollution #cybersecurity #infosec #moralhazard #securityeconomics

https://www.securityeconomist.com/digital-pollution-the-hidden-cost-of-insecurity/

Digital Pollution: The Hidden Cost of Insecurity

From smokestacks to server racks, the story stays the same: profits are hoarded, harms and costs outsourced.

The Security Economist

New, by me: Digital Pollution: The Hidden Cost of Insecurity

What do smoke signals, toxic rivers, and data breaches have in common? More than you think.

The internet has a pollution problem...and it’s not the kind you can just scroll past.

Why are breaches so routine? Why do companies shrug and move on? Spoiler: it’s all about who pays the price.

Let's take a deep breath and dive into the digital smog in which we’re all living. And what it will take to fix it.

#digitalpollution #cybersecurity #infosec #moralhazard #securityeconomics

https://www.securityeconomist.com/digital-pollution-the-hidden-cost-of-insecurity/

Digital Pollution: The Hidden Cost of Insecurity

From smokestacks to server racks, the story stays the same: profits are hoarded, harms and costs outsourced.

The Security Economist

This is some really smart digging: realizing that Claude Code does not require user interaction for certain bash commands, they discovered that DNS lookups were specifically allowlisted, clearing a trivial path for well-known DNS exfiltration methods.

So when I say “all these implementations are ignoring years and decades of lessons learned the hard way” it’s not hyperbole. Anthropic 100% cleared the path for DNS exfil here.

h/t to @cR0w - thank you!

#infosec #genai

https://embracethered.com/blog/posts/2025/claude-code-exfiltration-via-dns-requests/

Claude Code: Data Exfiltration with DNS · Embrace The Red

Embrace The Red

It's about to be #patchtuesday but this one is bittersweet. This month will be my last patching my own personal #windows installations. With the upcoming end to #windows10 support, I'm migrating to #linux .

This month marks the end of my continuous personal Windows use dating back to #windows3 in 1990, 35 years ago. I went to work at #microsoft just as #windowsforworkgroups 3.11 went into beta in 1993. Through a very random set of circumstances, I gave the first press demo of #windows95, to the tech reporter for the #houstonchronicle . Years later, I managed a wonderful team for #windows7 security assurance, and I couldn't be prouder of what we accomplished.

My relationship with Windows runs deep, to say the least. But the time has come for that relationship to end. I will migrate my main computer in about a week.

👋  😢

So, I'm at DEFCON. I'm releasing a tool tomorrow called Freon.

Freon is intended to help international software teams resist government backdoors by decentralizing code signing.

Freon uses FROST (compat with Ed25519) and age (for encrypting each share).

If you're here, come to the DEFCON Furs at 2:30 pm. I'll be in fursuit for my talk announcing it. Should be a fun time!

(If you're not here, I have a blog post scheduled to go live at the same time.)

Either way, Freon will be open source. :3

Don't you hate how people are always trying to pass the buck?

Let's imagine you're colorblind. The kind of colorblindness that only allows you to see grayscale - no colors at all - but everything else is fine.

You're stressed and need fidget toy - so a friend hands you a ball, roughly filling your hand. It's hard, but somewhat squishy, and has a weird fabric-like, furry texture. You now want to know what color that ball is. But, well, you're colorblind, and your friend already disappeared and isn't reachable - probably riding a Deutsche Bahn train or something.

So you take a picture and post it to a "what color is this?" subreddit. Seems reasonable. You get 200 responses - 198 of them say "it's yellow", two of them say "it's pink". A few people helpfully say it's a "tennis ball". That's helpful, because even the Wikipedia article states that only yellow and white tennis balls are officially approved colors. Sweet.

A few days later, a random person approaches you and says "wow, cool ball - what color is it?" and you say "yellow!". Alright, end of the chat. A LLM would do exactly the same - given the "yellow" responses far outnumbered the "pink" responses, your ball is probably yellow. Ball==yellow is something both you and the LLM "learned". A few weeks after that, another friend asks you "ALice has a ball, too! Do you know which color her ball is?" - and now it gets interesting.

The LLM would immediately say "yellow". Of course it would. It makes sense. Yellow is the most likely response to that question.

But you're not an LLM - you're a human, and your brain is cool. Instead of saying "yellow", you respond "huh I don't actually know that? My ball is yellow, maybe she has a similar ball. But it could also be that she has a completely different ball that might a different color! Also, lol, I'm colorblind, so I can't really answer that anyway - you should ask Alice." And now, your brain is already doing better than any LLM. Your logical thinking engine already realized that you don't actually know something, and you're honest enough to just say that. Your job isn't to be a ball color guesser, you're just a person.

Wait, it's gets more fun! A few weeks after that, you hang out with me. You hand me your ball, and say "hey look at my cool yellow ball!". Oddly enough, my reaction is "huh? this ball isn't yellow, it's a pink tennis ball..." and now things get funky. If you were an LLM, you would either insist that no, your ball is absolutely yellow - or you'd come up with some kind of "oh, sorry for the misunderstanding - it's pink, you're correct", almost implying that my definition of color is different - and the next time someone asks you about the color of your ball, you'd still say "Yellow!!" again. Because of course, there's still only three people claiming it's pink, and still 198 people saying it's yellow.

But you're not an LLM. You're human, and your sexy human brain immediately goes into a "uhhh we have a conflict of information! how exciting! let's figure things out!" You now have to conflicting hypotheses, and you're thinking about ways to experiment on your ball to learn more. And you have an idea! You know your additive color mixing theory, so you realize that your phone camera can take pictures and you can look at the RGB values. If it's yellow, you'd expect to see lots of red and green but no blue - but if it's pink, you'd see lots of red and blue, but no green! You can test that!

So you take a photo, and... rgb(255, 0, 255). Turns out your ball is actually pink! It's still a tennis ball, but a fun one not meant for official tournaments, so it's pink! Wow! You immediately learned something new - and from now on, if someone asks you about the color of your ball, you'll say "pink!" and you'll have a heck of a story to tell alongside. Also, after some self-reflection, you realize that the subreddit your posted your image to wasn't a real "what color is this?" subreddit - it was one of those "false answers only" shitposting subreddits. Whoops.

This process of having assumptions, but being able to question them, to come up with tests for it, and to immediately change your opinion on something when you have good evidence for it is what makes humans awesome. You don't rely on the majority of people screaming "pink!" at you. You don't need to rely on manual weights that give some sources more weight than other sources - you can independently process information and deduct things. Give your brain a pat on the.. uh.. cranium.

LLMs can be a useful tool, maybe. But don't anthropomorphize them. They don't know anything, they don't think, they don't learn, they don't deduct. They generate real-looking text based on what is most likely based on the information it has been trained on. If your prompt is about something that's common and the majority of online-text is right, you'll most likely get a right answer out of the LLM. But if you're asking something that not a lot of real people had interactions on, the LLM will still generate text for you - but it might be complete nonsense. You're just getting whatever text is "statistically most likely".

If you're a coder stuck on something, identify a colleague or friend who is more knowledgeable in that specific area. They'll happily help you out and provide all sorts of fun added context that'll allow you to learn. If you're a nerd on the internet who enjoys ranting on social media, just do it yourself instead of having an LLM generate it, because that'll allow you to insert some bad jokes and a bit of your own personality to it instead of just getting a "default-feeling" text. If you're a manager in charge of something and you need to come up with new directions to push your company towards, go take a walk outside and listen to some cool music and let your ideas roam free - don't ask an LLM to generate the statistically-most-likely direction for your project, because that's by definition the opposite of creative and innovative.

Use your brains.

Hamilton taxpayers on the hook for full $18.3M cyberattack repair bill after insurance claim denied

The City of Hamilton must pay the more than than $18 million it has cost to recover from a ransomware attack themselves, after their insurance claim was denied.

CP24

@josephby it seems to me that Philz frontline employees should quickly organize, keep clocking in, but refuse to open the doors. If they do this in a coordinated fashion, they should have NLRA coverage, assuming the NLRA is still a functioning body.

They'd still be entitled to pay for the day, but the company gets zero revenue. The power goes both ways.

Reminder: on average, the expected value of minority common stock in a private company is zero.

> Those who hold common stock, like employees who bought stock during or after their years at the company, will see their stock canceled under the terms of the agreement, making those investments effectively worthless

https://missionlocal.org/2025/07/philz-coffee-private-equity-sell/

#sanfrancisco #philz #stocks

Philz Coffee close to closing deal to sell to private equity firm for $145 million

Employee stocks will be canceled as part of the deal; former employees point to culture change across Philz Coffee.

Mission Local