Pulse of Truth

This magazine is not receiving updates (last activity 0 day(s) ago). Subscribe to start receiving updates.

Car , in Kaiser Permanente handed over 13.4M people's data to Microsoft, Google, others

Perhaps somewhat ironically, social media is seemingly the only source of data you have control over these days. You can choose to not upload information on Facebook, Instagram, YouTube, etc. You have no choice on if your healthcare provider, insurance agency, school, utility provider, or place of work upload information.

EmperorHenry , in FBI warns against using unlicensed crypto transfer services
@EmperorHenry@infosec.pub avatar

"Licensed" means they've registered with the feds, if they've done that, it means the feds can monitor your transactions.

Use Monero over Tor with obfuscation. Double the untraceability.

TC_209 , in AI Can Tell Your Political Affiliation Just by Looking at Your Face, Researchers Find

No it can't.

shalafi , in AI Can Tell Your Political Affiliation Just by Looking at Your Face, Researchers Find

As a human I feel like I can make a damned good guess as to someone's politics by looking at them. We're really, really good at picking up clues from faces, even if we're not conscious as to why we're getting those clues.

Despite being an avid shooter, I'm very liberal. No one I've talked to, or been around, regarding guns has ever assumed I'm conservative. In fact, I've noticed they're damned careful to dance around politics around me.

Maybe it's the long hair? OTOH, I can be red necked out in my attire and holding an AR-15 and people still won't being up conservative views. And I'm in a very conservative area where it's safe to assume a guy that looks like me is a Trump voter.

I could see an AI correlating 10,000 facial cues to make an accurate guess. Interesting to think on.

gregorum , in Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases
@gregorum@lemm.ee avatar

suddenly every crime is a "serious crime"

SendMePhotos , in Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam

They say it's sophisticated but... How? The domain isn't the same. It's similar. That's a flag. A phone call from any number is not a sign of credibility.. I will realize that I am not bulletproof, but I feel like this sophisticated attack, at its root, seems the same as any other.

EmperorHenry , in Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam
@EmperorHenry@infosec.pub avatar

Someone who actually works at a service will never need you to enter your password into anything

JJROKCZ , in MGM Resorts Sues US FTC to Stop Investigation of Casino Hack

Hope the feds tear them appart with fines and dissolve mgm

resetbypeer , in How Google’s 90-day TLS certificate validity proposal will affect enterprises

Lets encrypt has this already by default. Managing this means automation but with that you may shift the problem. When automation is done poorly (esp when least privileged access is not done correctly). Hence that IAM is one of the cornerstone's of zero trust.

CorrodedCranium , in Apple AirPods Bug Allows Eavesdropping
@CorrodedCranium@leminal.space avatar

Really misleading title. It was patched. It should say allowed. You can still edit the post to fix this OP

wizardbeard , in Apple AirPods Bug Allows Eavesdropping

Misleading. When trying to connect to a device, an attacker can spoof being said device to get the airpods to connect to them instead. Similar to SSID spoofing with Wi-Fi.

Nothing in the linked article indicates this allows eavesdropping on existing connections.

finley , in How Sweden's push to go cashless has left consumers and the country vulnerable to online fraud; value of fraudulent transactions has doubled since 2021 (Bloomberg)

when new technologies roll out to replace old methods of doing things, governments should work harder on tech literacy surrounding these new solutions.

eskimofry ,

Whenever we introduce new stuff like this we limit the experiment to youngsters and keep around the old reliable as a failsafe.

All it takes for any software to fail is pulling the plug.

Eheran ,

So you think banking would in any way still work with the plug pulled?

prettybunnys , in Since joining NATO, Sweden claims Russia has been borking Nordic satellites

This is a weird use of the word “bork”

zero_spelled_with_an_ecks ,

Yeah, not even cooking anything.

prettybunnys ,

It took me a second to realize the “bork” you meant lol.

bork bork bork

SapphironZA , in A disgruntled ex-employee at a Singaporean IT firm caused carnage after deleting over 180 servers

Company should also be sued for negligence for not revoking access to former IT admin.

IsThisAnAI ,

Lololol, what damages? It's amazing how many people immediately think the courts care or should.

Mistake, just sue!

sonori , in Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship
@sonori@beehaw.org avatar

Signals emissions from ships is something the navy takes very seriously. Not only is it a risk for the usual secure environment reasons, but it can be used to identify and track a ship’s location from those nice 100+m unfurling signals intelligence satellites with sufficient precision to launch and target an medium to long range anti ship missile.

The Houthis may not have many of those satellites, but Russia and China do, and might be willing to slip some coordinates along with an request to Iran to ship over an appropriate missile to Yemen if they want to really distract some Americans. As such it’s probably not a good time for sailors to get sloppy, though that’s probably always true.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • pulse_of_truth@infosec.pub
  • test
  • worldmews
  • mews
  • All magazines