@chetwisniewski@securitycafe.ca avatar

chetwisniewski

@chetwisniewski@securitycafe.ca

Director, Global Field CTO at Sophos, frequent speaker and press go to. Said opinions are mine, not the company.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

SomeGadgetGuy, to windows
@SomeGadgetGuy@techhub.social avatar

It just clicked in my brain. What I haven't been able to articulate about why I'm so anxious about Recall. I'm sure others have already gotten to where I am.

It's worse than "a system that tracks everything you do" and stores that info in a basic database that could be easily compromised.
It's worse than a nanny surveillance tool for companies to spy on their employees.

It's inescapable.

It doesn't matter if I make a dozen "how to disable recall" tutorials. The second YOUR data shows up on someone ELSE'S screen, it's in THEIR recall database.

It won't matter if you're a master expert specialist. You can't account for EVERY other computer you've ever interacted with. If a family member looks up an old email with your personal data in it, your data is now at risk.

If THEIR system is compromised YOUR data is at risk.

I just went from "vague feeling of unease" to "actively writing templates to canvas elected officials, regulators, and attorneys general."

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@SomeGadgetGuy imagine how all the people who are required to have privacy film on their laptop screens feel...

chris, to fediverse
@chris@mstdn.chrisalemany.ca avatar

If you want your name (you don't need to be Canadian!) on the letter that goes to officials in Canada's Parliament advocating for using services you need to let me know before 9AM PDT tomorrow (Monday Jun 3).

Letter is here:
https://chrisalemany.ca/2024/05/31/open-letter-to-parliament-of-canada-adopt-open-services-for-social-communications/

I'll continue adding signatures to the web version after that deadline.

This will be the only time for non-Canadians to make their voice heard!

I may have another Canadian-only opportunity for action at a later date.

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@chris yes please!

chetwisniewski, to ai
@chetwisniewski@securitycafe.ca avatar

I don't think we give Meta, Google and OpenAI enough credit for their AI LLM accomplishments. I mean, who would have imagined we could spend billions of dollars and warmed the planet a few degrees all to teach computers to not be able to do math. It really is an astonishing achievement. #AI #generativeAI

GottaLaff, to Canada
@GottaLaff@mastodon.social avatar

We get mail in #Canada now: I just got a 24 cent “Love Boat” residual. Drinks for everyone!🥂

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@GottaLaff Damn it, now I've got that theme song stuck in my head. Next time just stop by my house in Yaletown and ask me for a quarter :P

chetwisniewski, to infosec
@chetwisniewski@securitycafe.ca avatar

This situation with RoboForm is why we can't have nice things. People need to not only possess, but trust password managers until such time we finally move on to superior identity verification.

It's terrible to have a flaw that requires a re-encrypt event, but it is tragic and unnecessary to cover it up and not take your lumps and prompt a corrective action.

This undermines trust in the concept, not just the product.

mjg59, to random
@mjg59@nondeterministic.computer avatar

Loving the ubuntu.com experience of refusing to accept any cookies and then getting a new popup on every single new page

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@mjg59 It's your own fault. They were trying to set the dontDisplyCookie cookie to true...

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

My interview on CKNW about ransomware is now online: https://open.spotify.com/episode/1rgMgRmP9bC0lsfcYhhyMS?si=UdcOcxL0TzWdsg1pstWQZQ

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

OK, let's try this again. I will be on Mornings with Simi on CKNW tomorrow morning at 08:15 discussing the London Drugs situation and the impact of ransomware. https://globalnews.ca/bc/program/the-simi-sara-show/

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

Idea: Zoom introduces a Widevine option to DRM protect Zoom calls to prevent MS Recall from spying on me.

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

For Vancouverites who are early Sunday risers you can catch me chatting London Drugs and ransomware on CKNW tomorrow morning (26 May) at 8:06AM PDT

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

Sadly, Scotty, the host has come down I'll, so this was just cancelled. Reruns today instead...

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

I can't seem to find it, but it seems like someone on here mentioned a federated alternative search project (as in to replace Google and Bing). Does anyone know of one?

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@chewie Ahh, yes, Yacy. I ran a Yacy server a few years ago. The idea was promising, but the results disappointing. Maybe I shall give it another whirl. Thanks!

NanoRaptor, to random
@NanoRaptor@bitbang.social avatar

Most people on earth can’t remember anything before 1997.

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@NanoRaptor In fairness I am much older than that, but a lot of the time I am not great at remembering things before 1997 (ask my partner... we met in 1995, but I am told I got it all wrong)

kylie.robison, to random

Google confirms it manually removes odd AI search results, and I discussed the company's super-smart-search ambitions with Gary Marcus (who remembered a time when a Meta AI model told people to eat glass) https://www.theverge.com/2024/5/24/24164119/google-ai-overview-mistakes-search-race-openai

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@kylie.robison He actually told you that with a straight face? Like, he actually believes that they can manually fix billions of errors? Or is what he really believes is they can stamp out the most obvious absurdities and then we have to live with everything else being lies that are too believable and that they can't bother to quash?

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

Busy media week! I am now booked for CKNW at 8:05 PDT on Sunday to discuss ransomware and data leaks...

mattblaze, to photography
@mattblaze@federate.social avatar

Waldorf-Astoria Hotel (with neighbors), NYC, 2017.

Luxury pixels at https://www.flickr.com/photos/mattblaze/32609074081

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@mattblaze @jvagle You can't just dock your zeppelin?

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@jvagle @mattblaze Yes, yes.

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

I am booked to be on BC Today on CBC TV, GEM, Radio 1, and YouTube at noon today (Friday 24 May) for a ~20 minute discussion on London Drugs ransomware leaks and Cybersecurity in general. Join us if you're free and interested!

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

And I got preempted. Might be on On the Coast instead. Stay tuned ;)

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@chris got preempted, nevermind. Might be On the Coast now, unclear.

chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

For friends in BC I will be on CTV tonight talking with Penny Daflos talking about the ransom attack against First Nations Health and on CBC and Global TV discussing the London Drugs ransomware leaks that were published this afternoon.

NanoRaptor, to random
@NanoRaptor@bitbang.social avatar

What are some numbers in your field that anyone else in the field would identify without even thinking about it, but folk outside may have no idea. Just the numbers, no explanations. Yet.

105 148 210 297 420 594 841 1189

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar
chetwisniewski, to random
@chetwisniewski@securitycafe.ca avatar

Moved some stuff today to my storage locker. Got me thinking of @spike @threatresearch and his work at the Media Archaeology Lab. My original Amiga 1000 serial number 700. Price tag shows original $1295 USD price from 1985, $3775 today. 256 KB RAM if I recall. Amazing system at the time.

Amiga 1000 price tag at $1295.00 USD from 1985

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@bazcurtis This was be no means my first computer, simply the oldest I still have in box. My first was a Commodore PET, albeit it had 2K of RAM.

GossiTheDog, to random
@GossiTheDog@cyberplace.social avatar

For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default.

From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers."

Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database.

video/mp4

chetwisniewski,
@chetwisniewski@securitycafe.ca avatar

@GossiTheDog Encrypted? the SQLite DB that is.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • provamag3
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • anitta
  • Leos
  • tester
  • JUstTest
  • All magazines