2026-10-07T07:29:56Z https://nostr.now Doug Levin https://nostr.now/npub12wksv6ypzergs2wae7kegmgg82ape4jufrwllnr54chtct254klq88z5fq https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/317/290/967/076/654/original/f9c3b30e18ad2df2.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/317/290/967/076/654/original/f9c3b30e18ad2df2.jpg https://nostr.now/nevent1qqs93n053c8hvcakspky6e9fze0th947672854c69028dcjr8q6226qzypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmueqfljz In reply to <a href='/nevent1qqs2v7n3hfjnjv88h8tfzv33dcml9a3mhxzuesphwz7et28q2k2yl2qfput3u'>nevent1q…ut3u</a><br/>_________________________<br/><br/>there are significant differences in cultures/regs/tech in diff sectors, not something generalists are very well equipped to navigate IMHO 2026-09-16T17:38:00Z https://nostr.now/nevent1qqsd3yp5j6mgm5lte3rqu8j575gl6n9gpgaaj4q2nv2zyq2pqj3jx0qzypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmu0ff8dm Alexandria man arrested for allegedly destroying multiple license plate readers <a href="https://www.alxnow.com/2026/07/14/alexandria-man-arrested-for-allegedly-destroying-multiple-license-plate-readers/">https://www.alxnow.com/2026/07/14/alexandria-man-arrested-for-allegedly-destroying-multiple-license-plate-readers/</a><br/><br/>&#34;A city resident alerted police...that a man parked a dark-colored Subaru Forester on the curb next to a Flock Safety Automatic License Plate Reader camera...“and climbed on top of the vehicle to destroy the Flock ALPR camera at that location with a baseball bat,” according to a recently released search warrant affidavit.&#34;<br/><br/>&#34;The suspect was arrested sitting outside of his home and charged with an open container violation (a Class 4 misdemeanor), possessing a fake identification or driver’s license (a Class 2 misdemeanor) and destruction of property worth more than $1,000 (a Class 6 felony). &#34; 2026-07-15T14:17:34Z https://nostr.now/nevent1qqsrm0m3sussxxjl483pl3wnay7vlvmenmc97kdf5473ql556hnz7lqzypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmuhgcwsn Serious question for infosec colleagues. Is it expected and/or reasonable for a company to require an NDA to review SOC 2 or other security documentation they publicly claim to have?<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/984/214/575/081/original/ae1964a650c36347.png"> <br/> 2026-05-20T12:55:23Z https://nostr.now/nevent1qqsryadt96fekrfttfk06dne87vfnpy3k0wcp9du99tkglugx4hjwmczypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmuemvzh7 &#34;Why AI Literacy Instruction Needs to Start Before Kindergarten&#34; !?!?<a href="https://www.the74million.org/zero2eight/why-ai-literacy-instruction-needs-to-start-before-kindergarten/">https://www.the74million.org/zero2eight/why-ai-literacy-instruction-needs-to-start-before-kindergarten/</a><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Kevin Beaumont</span> (<span class="italic">npub1lcc…lcye</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1uu7gddsfwccptfz3wgqqgxz0wuwx302e07k3u475he6qzasfkz4q0hgs7t" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Marcus Hutchins :verified:</span> (<span class="italic">npub1uu7…gs7t</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub16nrwzm3fcej7ar8wwsd0lmjwjdtjryp5fd7v35r8f9a28mkjmlrq5r879s" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>funnymonkey</span> (<span class="italic">npub16nr…879s</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1fdrpydz4n2dpgpy5xhsa6rjg8ytggn82mt0addw6sf93272nhhnqsjlvhs" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Cory Doctorow</span> (<span class="italic">npub1fdr…lvhs</span>)</a></span> #edtech #ai 2025-07-25T13:08:37Z https://nostr.now/nevent1qqs0fvez5prj55eggtds77lan8ch3h8kf6wqmtjutwgjs6eg038tsuqzypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmudxhssp No good deed goes unpunished: &#34;Teen Hacked Traffic System to Improve Congestion and Faces Legal Consequences&#34; <a href="https://www.sierradailynews.com/national-news/teen-hacked-traffic-system-to-improve-congestion-and-faces-legal-consequences">https://www.sierradailynews.com/national-news/teen-hacked-traffic-system-to-improve-congestion-and-faces-legal-consequences</a><br/><br/>Quote: “He didn’t disable anything or cause danger,” said a traffic engineer speaking on condition of anonymity. “Honestly, his code was more efficient than what we were using.” 2025-06-28T12:07:19Z https://nostr.now/nevent1qqsgq3ht7spfgdgwvu9v26kh2gsw2u03dpa8hl5z6pkcscxfu0se9aszypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmufz6wfv Shot: US considers banning TP-Link routers over cybersecurity concerns <a href="https://securityaffairs.com/172128/uncategorized/us-considers-banning-tp-link-routers.html">https://securityaffairs.com/172128/uncategorized/us-considers-banning-tp-link-routers.html</a><br/><br/>Chaser: Today, NY Times Wirecutter recommends.... wait for it... TP-Link routers, writing: &#34;we’ve spent hundreds of hours testing and evaluating more than 110 routers, and we’ve determined that the best router for wirelessly connecting your laptops, your smart devices, and anything else your daily life depends on is the TP-Link Archer AX3000 Pro.&#34; <a href="https://www.nytimes.com/wirecutter/reviews/best-wi-fi-router/">https://www.nytimes.com/wirecutter/reviews/best-wi-fi-router/</a> 2024-12-19T14:11:10Z https://nostr.now/nevent1qqszn570ztmcx6y828hx0mae4mhsy86auq9y9ltr88lael4y7zawcfszypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmu7mrksa This weekend I spent half a day remediating an elderly relative&#39;s Win 11 home laptop. Totally overpowered and overpriced for her needs, it was recommended to her by BestBuy when her old machine was complaining it wasn&#39;t compatible with the new MS OS rollout :(<br/><br/>Both her OS and primary email were compromised. The threat actor did not disable Defender but just excluded every important directory from scans. May have also punched a hole in her device firewall for all I could tell. <br/><br/>Only reason she even knew an issue had occured was due to issues with her email. She stopped receiving any emails and we reached out upon recieving what appeared to be a phish from her account. (No link to click in initial message, but an invitation to a longer urgent conversation.) <br/><br/>Turns out they just redirected her email to her outlook account email (which she didn&#39;t even know she had, but was generated as part of her Win 11 install). They created a new alias and added some other rules to auto-forward further comms. FWIW, the rogue device attached to her account was coming from a TX location - many states away from us.<br/><br/>No 2FA, no adblocker, no password manager, no understanding of firewalls, what makes a password stronger vs weaker, confused by messages about actions that were computer/browser/OS related.<br/><br/>But look. She&#39;s 80+. I only had a few hours to investigate and remediate. I can&#39;t change all that and expect her to manage it on her own.<br/><br/>How the f*ck is it possible that an average user can manage this stuff? Why is Win such a trash fire? Can&#39;t MSFT make a default config for non-technical home users that is locked down by default? She has literally ZERO chance against threat actors on the modern web. <br/><br/>We in tech have totally lost the plot...<br/><br/>I am NOT looking for advice (just use Linux or w/e). I am venting about shit UI, shit tech co&#39;s pushing the next new crap tech for no other reason than $, and the state of the modern web. 2024-10-07T13:31:19Z https://nostr.now/nevent1qqs86h49kazj7m3ujc5n0m2jkrds4l74fnqegegmdx6mfztghzzj4yczypf66pngsytydzpfmh86m9rdpqat58xkt3ydml7vwjhza0pd2jkmudmmr2t After phishing test gone wrong, UC Santa Cruz apologizes for false alert about Ebola case <a href="https://lookout.co/uc-santa-cruz-after-phishing-test-gone-wrong-uc-santa-cruz-apologizes-for-false-alert-about-ebola-outbreak/">https://lookout.co/uc-santa-cruz-after-phishing-test-gone-wrong-uc-santa-cruz-apologizes-for-false-alert-about-ebola-outbreak/</a> #infosecgonewild 2024-08-21T13:19:18Z