Posts by taosecurity@infosec.exchange
 (DIR) Post #AQgDxDD5YabKkOQgeu by taosecurity@infosec.exchange
       2022-12-16T22:46:30Z
       
       0 likes, 0 repeats
       
       Can anyone recall this sort of "triggered migration" from one platform to another? Usually a new one starts, and people slowly lose interest in the old platforms.
       
 (DIR) Post #AS2oTHLq8tSBouPyWO by taosecurity@infosec.exchange
       2023-01-26T19:03:57Z
       
       0 likes, 1 repeats
       
       @internetarchive I love ILL. I've used it quite a bit for #martialarts #history research. It reminds me that so long as one copy of a book is available and catalogued in a public library, via ILL it is theoretically available to many people.
       
 (DIR) Post #ASTN9YeDfdbJBtA2CG by taosecurity@infosec.exchange
       2023-02-08T14:33:44Z
       
       1 likes, 0 repeats
       
       @kimzetter You mean this Seymour Hersh? https://www.vox.com/2015/12/21/10634002/seymour-hersh-syria-joint-chiefs 😆​
       
 (DIR) Post #ASTNLfOaPMKJasceau by taosecurity@infosec.exchange
       2023-02-08T14:30:40Z
       
       1 likes, 1 repeats
       
       I largely agree with #BruceSchneier here, although there are limitations to using an approach backed by non-conflict safety-oriented analogies (car crashes, fresh food, fire-resistant pajamas [!] -- good luck vs a weapon). Still..."[I]mprove government software procurement... to evaluate the security of the software and the security practices of the company, in detail, [and] to ensure that they are sufficient to meet the security needs of the network they’re being installed in. If these evaluations are made public, along with the list of companies that meet them, all network buyers can benefit from them."and"The government needs to set minimum security standards for software that’s used in critical network applications, just as it sets software standards for avionics."https://www.schneier.com/blog/archives/2023/02/solarwinds-and-market-incentives.htmlWhile still a step forward, Mr Schneier's approach still has problems:1) regulatory capture of government agencies by scrutinized vendors;2) irrelevant assessments leading to irrelevant results;3) apathetic / ignorant / incapable customers who cannot put any useful government assessments to work in their environments.While harsh, I advocate for regulation and practices that price insecure organizations out of the market. If it's too expensive to run your insecure IT, then you'll look for cheaper alternatives.#cybersecurity
       
 (DIR) Post #ASaK22hhENgeSo7ezo by taosecurity@infosec.exchange
       2023-02-11T22:56:37Z
       
       0 likes, 1 repeats
       
       This is how you kill a programming language. How can the #Google #golang team be so deluded?! https://www.theregister.com/2023/02/10/googles_go_programming_language_telemetry_debate/
       
 (DIR) Post #ASah9km64Y5c7VpJse by taosecurity@infosec.exchange
       2023-02-12T03:07:14Z
       
       0 likes, 2 repeats
       
       WSJ calling the Canada #UFO #UAP a balloon: “Canadian Defense Minister Anita Anand described the object as cylindrical to reporters Saturday night and said it was shot down at an altitude of about 40,000 feet. She said it appeared to be smaller than the downed Chinese balloon.The latest object appeared to be a small metallic balloon with a tethered payload, according to U.S. officials familiar with the situation.A Canadian patrol aircraft is trying to pinpoint the debris from the destroyed object. Ms. Anand said she wouldn’t speculate on the object’s origins.“The importance of this moment should not be underestimated. We identified the object together and we defeated this object together,” Ms. Anand said of the joint U.S.-Canada mission.She added this marked the first time in the history of Norad that jet fighters shot down an object. Norad was a central part of the U.S. and Canadian military’s Cold War deterrence strategy against the former Soviet Union.” https://apple.news/AcXMj0SJVRYejzVuWx47agg
       
 (DIR) Post #AScppgFaTJuiCT2m48 by taosecurity@infosec.exchange
       2023-02-08T15:21:03Z
       
       0 likes, 1 repeats
       
       @crowdstrike has selected the sensor built by my company @corelight for their #IncidentResponse, #CompromiseAssessment, and #NetworkSecurityMonitoring services. I'm pleased that Crowdstrike customers will benefit from our offering and that #Crowdstrike promotes NSM as a core #cybersecurity service. https://corelight.com/company/corelight-expands-partnership-with-crowdstrike-to-provide-network-detection-and-response-technology-for-crowdstrike-services
       
 (DIR) Post #ASi6FMnA0iwYR8oiPo by taosecurity@infosec.exchange
       2023-02-15T17:09:37Z
       
       0 likes, 1 repeats
       
       My fellow alum Chris Lehto broke down the audio of the F-16 shoot down of the Lake Huron object. He was impressed by the demeanor of the pilots and noted they are concerned that due to the small size of the object, it’s difficult to see. They can’t really get a gun solution because it’s slow and small. However they can see it on their thermal targeting pod and can get a firing solution for the Sidewinder. https://www.youtube.com/live/_YyHi8UmIHo #UFO #UAP
       
 (DIR) Post #ATHtqlaYzSN9RN2h6W by taosecurity@infosec.exchange
       2023-03-04T22:56:34Z
       
       0 likes, 1 repeats
       
       This Reg story about #ChatGPT telling Alexander Hanff that he had died in 2019, and then creating false links to the Guardian news site as “proof,” is deeply disturbing. https://www.theregister.com/2023/03/02/chatgpt_considered_harmful/
       
 (DIR) Post #ATgWPrlPY6Dq1oYgam by taosecurity@infosec.exchange
       2023-03-16T20:40:42Z
       
       0 likes, 0 repeats
       
       @micahflee we need everyone in the media to reinforce the fact that #LargeLanguageModels like #ChatGPT are programmed to generate text in response to a prompt, not answer questions factually. They could digest the most reliable sources available and still create 100% bogus results, a phenomenon popularly called #hallucination.
       
 (DIR) Post #ATvtgd62XyqdmJZKSG by taosecurity@infosec.exchange
       2023-03-24T01:16:35Z
       
       0 likes, 1 repeats
       
       “Some people say, “Give the customers what they want.” But that’s not my approach. Our job is to figure out what they’re going to want before they do. I think Henry Ford once said, “If I’d asked customers what they wanted, they would have told me, ‘A faster horse!’” People don’t know what they want until you show it to them. That’s why I never rely on market research. Our task is to read things that are not yet on the page.” #SteveJobs Steve Jobs, Walter Isaacson, 2011
       
 (DIR) Post #AUcYOPF2Juy6hU6dRA by taosecurity@infosec.exchange
       2023-04-13T20:48:47Z
       
       0 likes, 0 repeats
       
       That was fast. Innocent until proven guilty, but this guy is probably toast. Good riddance. https://www.washingtonpost.com/national-security/2023/04/13/suspect-pentagon-documents-leak/
       
 (DIR) Post #AWPoMnRe4l90jsB0Cm by taosecurity@infosec.exchange
       2023-06-06T13:00:19Z
       
       0 likes, 0 repeats
       
       @brewsterkahle Historians: Life is made up of sources
       
 (DIR) Post #AuClffL6JZN809pfKC by taosecurity@infosec.exchange
       2025-05-18T02:50:53Z
       
       0 likes, 0 repeats
       
       @debian congrats on the release.