Notices by Lukasz Olejnik (lukaszolejnik@mastodon.social), page 2

Cyber security is a very broad field and industry today.

After four years of attempts, Google is backtracking from plans to phase out third-party cookies? https://privacysandbox.com/intl/en_us/news/privacy-sandbox-update/

My comment at WIRED about the global Windows outage. Our civilization depends on software, and that in turn depends on many other software components, of various vendors, suppliers. Something goes accidentally wrong, and a large part of the economy is affected or goes down. https://www.wired.com/story/microsoft-windows-outage-crowdstrike-global-it-probems/

#cybersecurity

Critical vulnerability in RADIUS protocol (=everybody vulnerable) allows forging authentication messages and unauthorized network access. This flaw is due to the use of an obsolete MD5 hash function, and a novel chosen-prefix collision attack.
"If you are an end user, there is nothing that you can or should do" https://www.blastradius.fail/pdf/radius.pdf

The joys of direct democracy! Today, June 9, 2024, a referendum is being held in 🇨🇭Switzerland🇨🇭 regarding the initiative "Pour la liberté et l’intégrité physique" (Stop mandatory vaccinations). This initiative demands that any state intervention in the physical and mental integrity of individuals requires their consent. This means that people who do not wish to be vaccinated cannot be forced to do so nor discriminated against for their choice.

Israel allegedly conducted cyberespionage operations on International Criminal Court (ICC) for 9 years. Allegedly to intimidate the ICC and disrupt investigations into potential Israeli war crimes in Gaza. https://www.theguardian.com/world/article/2024/may/28/spying-hacking-intimidation-israel-war-icc-exposed

Germany recalled its ambassador to Russia for 'consultations in Berlin' following an alleged cyberattack on German political party. Such consequences as a result of a cyberattack happened for the first time in history (world scale). https://apnews.com/article/germany-russia-hacking-ambassador-3de67e3b5ff0aaa0162e1cad36cb7a0b

In the 46-year-old Voyager 1, a processor failed, preventing data transmission. NASA devised a way to reallocate its functions to other hardware, sending an update 24.14 billion kilometers from Earth (taking 45 hours for round-trip communication). It works. https://blogs.nasa.gov/voyager/2024/04/22/nasas-voyager-1-resumes-sending-engineering-updates-to-earth/

My book 'PROPAGANDA: from disinformation and influence to operations and information warfare' treats the subject adequately, comprehensively, broadly, expertly. Information surrounds us. How does information influence work? An expert arrangement of the subject. https://blog.lukaszolejnik.com/propaganda-my-book-on-information-security/

#book #mybook #cybersecurity #propaganda #author #disinformation #informationsecurity

NASA remotely dumped and fetched memory contents of Voyager 1 (24,356,463,824 km from Earth). This is legal - Voyager 1 is not subject to any Earth's State jurisdiction. https://blogs.nasa.gov/sunspot/

The US military tracked Putin's movements. How? His comrades (advisers, drivers, etc.) had smartphones and were browsing the internet, using apps. Ads were displayed to them. And data traces from advertising networks revealed everything. https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/

Apple made a fast change and reverses course. Progressive Web Applications will be available in iOS/iPhone. Digital Markets Act works. The modest campaign helped. It's great that such big and influential companies listen to well-informed points!
https://developer.apple.com/support/dma-and-apps-in-the-eu/#browser-alt-eu
https://letter.open-web-advocacy.org/

Australian supermarket chain Pak'nSave introduced a chatbot suggesting recipes for budget-conscious shoppers with leftover ingredients. Unfortunately, the bit suggested a recipe that, if followed, would have resulted in the creation of a toxic chloramine gas. https://www.sbs.com.au/news/article/supermarket-chatbot-suggests-recipes-for-toxic-gas-and-poisonous-jelly/u4cw51rtw

Security vulnerability in... qsort. Yes, the glibc's sort algorithm. It's all over the place on systems running the Internet. "All versions from at least September 1992 are affected". That makes it a more 32 years old bug. https://www.openwall.com/lists/oss-security/2024/01/30/7

In Indonesia generative AI/deepfake tech has been used to "resurrect" a former (late) president/dictator Suharto. Elections next month. The video was posted by a politician from Suharto's party. "Suharto" called to vote on the party (again, he's dead since 2008).

My prediction from 2020 came true. Expect more. States must urgently pass laws prohibiting posting of such manufactured content without any labels/disclaimers explaining the nature of the manufactured content.

https://www.benarnews.org/english/news/indonesian/suharto-deepfake-used-in-election-campaign-01122024135217.html

If things go well I'm soon going to sign a contract with a Publisher to do a 2nd book :-)

Just a few months after the launch of ChatGPT, copywriters and graphic designers (freelancers) have been affected by a significant drop in the number of contracts received, and in those that have received them - a drop in earnings. being more skilled was no shield against loss of work or earnings. Being more skilled was no shield against loss of work or earnings
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4527336 #ai #aftificialintelligence #chatgpt #gpt

My privacy analysis of EU #eIDAS proposal. Dated 2022, I was consulted on the level of EU Parliament work. My recommendation was to remove the flawed-certificate requirement. https://blog.lukaszolejnik.com/privacy-analysis-of-european-eid-regulation-proposal/

The problem is that the proposal is now nearly finalised and the mechanism persists. The risk is the construction of surveillance capability in Europe.

Meta/Facebook uses users' Facebook posts and Instagram photos to train their AI models. They have it all for free. Obvious profit. Indeed, soon they will even want to pay a fee for using Facebook/Instagram :)

10 years ago we were concerned by exploitation of data for advertising purposes. Today it's life mining to process data to use as theirs by "AI" "models"? Privacy research becomes issue of human dignity.

https://www.reuters.com/technology/metas-new-ai-chatbot-trained-public-facebook-instagram-posts-2023-09-28/ #GDPR #digitalservicesact #aiact #ai #artificialintelligence

Misinformation, or at least confusion or badly informed policy-making, spread by European Commission.

They use the buzzword term "web 4.0" (39 times!). Problem? It does not exist! In line with @w3c Technical Architecture Group documents, there is only one web. https://ec.europa.eu/newsroom/dae/redirection/document/97337