vm666

@vm666@mastodon.hofud.com

I used to write #software mainly in #C and also a bit in #Perl
I don't like #Python that much but I have no choice.
I switched to #cybersecurity #infosec at the end of the previous century.
My home and pro computers run #Linux
I shoot #photo from time to time.
I play #chess #échecs (about 1400 ELO on chess.com)
French is my mother tongue and I can speak English. I studied a bit but never practised enough Greek, German or Arabic.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

vm666, to infosec French


Operation
0-click against

https://securelist.com/trng-2023/

https://media.ccc.de/v/37c3-11859-operation_triangulation_what_you_get_when_attack_iphones_of_researchers

patrickcmiller, to random

After hack, 23andMe gives users 30 days to opt out of class-action waiver https://arstechnica.com/?p=1989247

vm666,

@patrickcmiller
Is this valid?

dantemercurio, to Cybersecurity
@dantemercurio@ioc.exchange avatar

New SEC rule that requires a public company to disclose a cyber breach within four days if materially relevant to investors.

I’m for timely disclosure and current lack of guidelines should be addressed, but bit torn on this. Four days feels like a short time in regards to a forensics investigation and seems a bit arbitrary. Going public that early may hinder investigations and also pose a risk that inaccurate information is relayed. The full extent of the breach and data compromised may not be fully known and the bad actors may still be on the network being tracked.

Thinking a rule defining disclosure after containment might be better. Anyone else’s thought on this?

https://www.reuters.com/technology/us-sec-set-adopt-new-cyber-rule-unveils-brokerage-ai-proposal-2023-07-26/

vm666,

@dantemercurio
"within four days if materially relevant to investors"

As you said, 4 days for thorough forensics investigation is too short.I wonder how one can be sure that the incident is "relevant to investors"
Did they define how much is "relevant" BTW?

Gigoince, to random French
@Gigoince@diaspodon.fr avatar

Du sel Label rouge ? C'est quoi l'intérêt ? Lutter contre le sel de contrebande bulgare à base de sucre ?

vm666,

@Gigoince Le sel de Guérande est 100% naturel alors que le sel chinois est fabriqué en brûlant du sodium dans le chlore, deux horribles produits chimiques !

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • mdbf
  • ngwrru68w68
  • tester
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • InstantRegret
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • DreamBathrooms
  • megavids
  • tacticalgear
  • osvaldo12
  • normalnudes
  • cubers
  • cisconetworking
  • everett
  • GTA5RPClips
  • ethstaker
  • Leos
  • provamag3
  • anitta
  • modclub
  • lostlight
  • All magazines
    •