Notices tagged with security, page 7

The #security community truly deserves better than the current status quo it gets from so many of its vendors.

Vendors shouldn’t narcissist’s prayer and gaslight you after they cause harm! They should respect their accountability rather than litigate against their victims.

I legit cannot wait until security practitioners realize how much better their lives could be, and the joy they will feel being free of jank tooling.

#FactCheck

#Trump: “She wants to take away your guns.”

False.

MVP #KamalaHarris, in 2019, said she supports a gun buyback program for #AssaultWeapons, not all #guns. Her campaign recently said that she no longer supports a buyback program.

Her running mate, Gov #TimWalz, is a gun owner & a hunter.

When #Walz signed 2023 MN gun law he said, "This is NOT about the #SecondAmendment, This is about the #safety & #security of our communities. That's what's happening here today."

#TrumpLies

Tödlicher Titanic-Tauchgang: Familie eines Opfers fordert 50 Millionen Dollar

Auf dem Weg zur Titan implodierte im Sommer 2023 das Kohlefaser-Tauchboot Titan. Der Nachlass eines Besatzungsmitglieds verklagt jetzt den Betreiber.

https://www.heise.de/news/Toedlicher-Titanic-Tauchgang-Familie-eines-Opfers-fordert-50-Millionen-Dollar-9829368.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Recht #Security #Verkehrssicherheit #Wissen #news

CISA warns of hackers abusing Cisco Smart Install feature - CISA recommends disabling the legacy Cisco Smart Install feature after seeing it abused b... https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-abusing-cisco-smart-install-feature/ #security

2.9 billion hit in one of the largest data breaches ever — full names, addresses and SSNs exposed

https://www.tomsguide.com/computing/online-security/29-billion-hit-in-one-of-largest-data-breaches-ever-full-names-addresses-and-ssns-exposed

#tech #technology #security #cybersecurity #datasecurity

"Apple is eliminating the option to Control-click to open Mac software that is not correctly signed or notarized in macOS Sequoia"

You can still run Mac apps you download from the net, but you'll need to go through System Settings -> Privacy and Security to enable it.

Apple making it harder to support Indie devs who choose to stay outside the App Store. Safer for users? Perhaps. But not sure how hiding the old Control-click way is any safer.

https://www.macrumors.com/2024/08/06/macos-sequoia-gatekeeper-security-change/
#Apple #Mac #Security

#Walz signed a #PublicSafety package including a "#RedFlag" #law that allows family members, roommates or law enforcement to petition the courts to remove #firearms from the possession of anyone deemed a danger to themselves or others.

Another law in the package required private gun transfers to be subject to #BackgroundChecks.

"This is NOT about the #SecondAmendment," Walz said. "This is about the #safety & #security of our communities. That's what's happening here today."

#HarrisWalz2024

#Ventoy Security Concerns (please boost for visibility)

Ventoy is a popular utility for making USB drives containing multiple operating systems in the form of bootable image files. While very useful in theory, the source tree contains numerous binary blobs without source code. This issue has been brought up to the authors multiple times, have not been corrected, and have even gotten worse (more blobs have been added to the code over time). This is a potential malware vector, similar to the "test files" in the xz-utils backdoor catastrophe.

Recently the author has ignored a very lengthy thread raising security concerns because of these binary blobs. Given the amount of attention the thread has gotten, this seems strange, especially given that the authors have been active since then. https://github.com/ventoy/Ventoy/issues/2795

Stranger yet still, a video by Veronica Explains (@vkc) on how to create bootable USB flash drives got flooded by comments heavily suggesting the use of Ventoy and even being somewhat accusing because Veronica didn't advertise Ventoy. This is... not anything I've seen users of ANY open-source project do, and it feels similar to the social engineering done against Lasse Collin that convinced him to add Jia Tan as a maintainer, thus compromising xz-utils. See the comments of https://www.youtube.com/watch?v=QiSXClZauXA&t=3s

If you're using Ventoy, you may want to consider ceasing its use for the time being out of an abundance of caution. If you truly need its functionality, you might look into something like the IODD SSD Enclosure (https://www.iodd.shop/HDD/SSD-Enclosure) which can emulate an optical drive and allows you to select an ISO saved to the drive to boot from.

#linux #boot #security #malicious #backdoor

#ElonMusk said he wanted #Grok to be unfiltered & “answer spicy questions that are rejected by most other #AI systems.”

The secretaries of state, who are the chief #elections officers in their states, are objecting not to Grok’s tone but its factual inaccuracies & the sluggishness [unwillingness] of the company’s move to correct bad information.

#disinformation #InternetManipulation #Security #SocialMedia #Moderation #regulation #law #ElectionInterference #FarRight

The letter, spearheaded by #Minnesota #SecretaryOfState Steve Simon & signed by his counterparts Al Schmidt of #Pennsylvania, Steve Hobbs of #Washington, Jocelyn Benson of #Michigan & Maggie Toulouse Oliver of #NewMexico, urges #Musk to “immediately implement changes to #X’s #AI #SearchAssistant, #Grok, to ensure #voters have accurate #information in this critical #election year.”

#disinformation #InternetManipulation #Security #SocialMedia #Moderation #regulation #law #ElectionInterference

5 #SecretariesOfState plan to send an open letter to #ElonMusk on Mon, urging him to “immediately implement changes” to #X’s #AI #chatbot #Grok, after it shared w/millions of users #misinformation suggesting that #KamalaHarris was not eligible to appear on the #ballot for the 2024 presidential #election in multiple states.

#disinformation #InternetManipulation #Security #SocialMedia #Online #Moderation #FarRight
https://www.washingtonpost.com/politics/2024/08/04/secretaries-state-urge-musk-fix-ai-chatbot-spreading-false-election-info/

…There are times, though, when the system doesn’t work. 12 members of the Chinese #swimming team at the #Paris Games have had positive drug tests in recent yrs. None of them have ever been disciplined. The Chinese #antidoping authorities — w/the help of their country’s #security services [#MSS] — concluded the swimmers were all unwitting victims of contamination from food.

#doping #Olympics

#Violent Protests fueled by #FarRight #Disinformation Grip #UK in Wake of KnifeAttack at Dance Class

Far-right groups & #AntiImmigration protesters have taken to the streets after a mass stabbing in the town of Southport was followed by a wave of disinformation about the identity of the attacker.
#Security #Cybersecurity #Moderation #Extremism #racism #WhiteSupremacy #ElonMusk #AndrewTate #TommyRobinson
https://www.nytimes.com/2024/08/03/world/europe/southport-stabbing-uk-riots.html?smid=nytcore-ios-share&referringSource=articleShare&sgrp=c-cb

New blog post "Clang vs. Clang": https://blog.cr.yp.to/20240803-clang.html You're making Clang angry. You wouldn't like Clang when it's angry. #compilers #optimization #bugs #timing #security #codescans

The convicted #assassin who was the linchpin of the biggest prisoner swap in decades is a member of the most powerful #security agency in #Russia, the #Kremlin acknowledged Fri, & had served in a special unit w/some agents who now guard #Putin.

The ties help explain Putin’s determination to free the assassin, Vadim #Krasikov, from the #Germany prison where he was serving time for #murder.

#MafiaState #geopolitics #law #Security

#Kremlin Acknowledges Convicted #Assassin Is a Russian #FSB Agent

Vadim #Krasikov, who was returned to #Russia in the big prisoner swap, received a hero’s welcome from President #Putin, along w/others who were freed.

#Russia #MafiaState #geopolitics #law #Security
https://www.nytimes.com/2024/08/02/world/europe/vadim-krasikov-assassin-russia-fsb.html?smid=nytcore-ios-share&referringSource=articleShare&sgrp=c-cb

Huawei-Bann: Frühe "Zusicherungen", Verzögerungen und Lobbydruck

Lobbycontrol und FragDenStaat werfen dem BMDV vor, Huawei und Telekom schon vor dem teilweisen Ausschluss chinesischer 5G-Technik viel versprochen zu haben.

https://www.heise.de/news/Huawei-Bann-Fruehe-Zusicherungen-Verzoegerungen-und-Lobbydruck-9822488.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#G #Bundesregierung #DeutscheTelekom #Huawei #Mobilfunk #Security #news

One of the battlegrounds of war is us, and our social media.

#russia #Algeria #Ukraine #olympics #transphobia #TransPanic #misinformation #InformationWarfare #infosec #disinformation #warfare #sports #security #gender

Thursday’s prisoner swap, which saw American #journalists & a #security consultant, & a group of some of #Russia’s most prominent #dissidents & #PoliticalPrisoners, exchanged for a Russian group including a state #assassin, #spies & #hackers, was the biggest & most complex switch since the Cold War.

It took place at a time of #war, w/ #GlobalRelations between the #UnitedStates & Russia as bad as they have ever been.

#MafiaState #Hostages #ForeignPolicy #diplomacy #alliances #geopolitics #law