Notices by John Scott-Railton ☕ (jsrailton@mastodon.social), page 2

Normal tweet by a polling company.

#Trump #mugshot #poll #elections #indictment

The UK wants the ability to stop companies from patching vulnerabilities.

Catastrophically shortsighted.

Any tech product that stays will be suspect in the global marketplace.

The tech sector will flee.

Goodbye tech investment & jobs.

Hello #techsit

#UK #technology #tech #privacy #cybersecurity #law
https://www.justsecurity.org/87615/changes-to-uk-surveillance-regime-may-violate-international-law/

NEW RESEARCH: most popular Chinese keyboard app (450 million monthly users!) transmits every key typed to #Tencent in #China.

My @citizenlab colleagues found vulnerable encryption means the keystrokes could *also* be intercepted by 3rd parties.

Even in encrypted chat apps.

We did responsible disclosure.

The vulnerable encryption = fixed.

Sogou Keyboard users should update!

But they should also remain aware that everything you type still goes to the developer.

https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/

No. #Google's ex CEO is wrong.

The hubristic falsehood that only industry can develop proper regulations for itself because things are so complex is not new.

First, we already know how it plays out.

❌ 2008 Financial Crisis.
❌ Deepwater Horizon disaster.
❌Enron
❌Boeings dropping from the sky
❌Fukushima blowing up
❌The opiate crisis

And countless other epic messes & harms. THREAD 1/

Video: Meet the Press.
#AI #ChatGPT #LLM #regulation

The contents of libraries are being treated as more dangerous to kids than massacres.

Officials doing book bans always wind up on the wrong side of history.

Which they'd know.

If they read #books.

NEWS! Last week we exposed #spyware company #Quadream.

We'd figured out how to scan for their infrastructure & spot their infections.

We also found victims around the globe.

Today the reporting is in: the company is shuttering.

Win.

So, what happens next?

Well, I'd imagine they will try to take the IP and people elsewhere and/or rebrand.

Which highlights the limits of company-focused export control & regulations like #POTUS spyware executive order.

https://www.haaretz.com/israel-news/security-aviation/2023-04-16/ty-article/.premium/offensive-israeli-cyber-firm-quadream-closes-and-fires-all-employees/00000187-8b5c-d484-adef-ebdc048c0000

BREAKING: #tiktok admits to spying on multiple journalists.

And people connected to them.

Tracked their locations.

Some thoughts in aTHREAD 1/

https://www.ft.com/content/e873b98a-9623-45b3-b97c-444a2fde5874