Viewing profile — sybercecurity

That isn't the first question. The first question is: "How many people in the organization besides your boss has access?"

A subset of problems would be "how to differentiate citizen's agents from scammers/DoS attacks".

Sales pitch for a rocket company.

Wonder if "internet content subscriptions" could be an indicator of overall economic health. When people see their budgets being stretched, many look to cut expenses and unread new…

Was following this work for the past few years. There were several proposals on how to do this from DNS RRs, to HTTP headers and TLS extensions. I appreciate the effort, but wonder…

Yes, but it would require lawmakers and regulators to put reforms in place to move away from financializing-all-the-things to something different. Right now, the money is in financ…

Getting timeouts from dig, but the gTLD servers still show the delegation. So it's a problem with the usps.com auth zone servers.

I am starting to believe the theory that the IT industry (well, the Silicon Valley part) is just chasing the dragon to try and relive the glory days of the early Internet boom. So …

I think the term someone coined is "Doomtrolling" - the tendency to oversell AI as fundamentally upending IT, security, the economy, social order, etc. Both sides (pro and anti AI)…

It likely isn't: https://arxiv.org/abs/2512.10100 Feels like the days when SQL injection was seen all the time. We learned mixing instructions and data is a bad idea and a constant…

Having a light truck really comes in handy, this might fill that need. Range wouldn't be an issue most of the time. Just depends on how big the market is with these groups: Young p…

Fear or ignorance? I've had similar discussions back in the day and there were two themes in all the arguments: 1. Major cloud providers are professionals (implying you somehow are…

Because it's an EO, which is not a law. EOs can only direct how the executive branch functions. Sometimes it could include calls for regulation if there are pre-existing regulatory…

This looks aimed at influencers at first. The only feature touted is more data about viewers and followers. If it were a non-horrible version of social media, maybe. I get the feel…

Or lean into the "science" part of CS. There is a lot to examine about how complex systems actually operate. Like what does "typical" network traffic look like? Is there even such …

Of those that do have SPF RRs (most), curious to see if any have "~all" set, which basically negates every policy part that comes before it. Or how large the number of approved sen…

Probably endgame plus getting "too big to fail" and getting gov't bailouts if things don't work out. It's part of the lobbying theme that LLMs are the next great power struggle.

In some ways this feels like the first few years of the USSR. Productivity was measured by input usage, not output. So you had factories that made furniture and light fixtures wher…

AI is also bad at identifying things that don't exist, but should.

The first time someone fell for a phishing email that was LLM generated we had proof of AI telling convincing lies.

Zero tolerance can lead to a new type of bullying: state sponsored. I remember a younger colleague who talked about her school experience, this was just at the start of zero tolera…

Maybe less "Brave New World" and more "Dune". This feels like trying to create mentats.

That has been the assumption in most of these cases. The agency must already have a list of people they want, so a short window keeps the risk of someone else jumping to the front …

The trouble with IPv6 pitch was that there are a lot of additional features beyond "more address space". However, other solutions and workarounds were developed so that those featu…

Two possibilities: 1. Fear that a major vulnerability is found in a commonly used software package that puts multiple major banks and e-commerce sites at risk 2. Fear that major vu…