Nostr notes by John Scott-Railton ☕

So many companies build consumer products with pervasive ...

2024-09-01T01:18:36Z

In reply to nevent1q…6vtk
_________________________

So many companies build consumer products with pervasive surveillance capabilities without planning for the inevitable moment when access demand come in.

By failing to plan for this in design decisions, you expose yourself & your consumers to pressure. And introduce society to new kinds of surveillance.

It's ethical conundrum in countries with a rule of law & judicial oversight. It is much more ominous when your product reaches countries with none of that.

#infosec #privacy #cybersecurity

JSR's law of data: if you collect it, they will come. ...

2024-09-01T01:07:32Z

JSR's law of data: if you collect it, they will come.

Investigators will eventually identify any consumer product that persistently records peoples' activities.

One day, they'll show up, requesting access.

If the data is consistently helpful, they'll stop asking & start demanding.

Once this happens enough the company will probably create a law enforcement portal to simplify access & save customers the trouble...

#infosec #police #cybersecurity #privacy #security #crime #surveillance

NEW: researchers say #TikTok screen time predicts level of ...

2024-08-18T01:39:02Z

NEW: researchers say #TikTok screen time predicts level of pro-#China views on key topics.

Why? They say #TikTok boosts pro-#China content & actively suppress criticisms of China.

E.g. they find sensitive topics like #Taiwan, persecution of #Uyghurs & #Tibet are buried by pro-#CCP influencer content & irrelevant vids.

By NCRI at Rutgers pairing psychological survey research & social media analysis.

https://networkcontagion.us/wp-content/uploads/NCRI-Report_-The-CCPs-Digital-Charm-Offensive.pdf

#infosec #tiktok #propaganda #infosec #cybersecurity

3/ Russian #Phishing, cont'd: Once you've bitten and ...

2024-08-14T16:39:36Z

In reply to nevent1q…uxn8
_________________________

3/ Russian #Phishing, cont'd: Once you've bitten and reply back, the attacker sends you a file that looks 'encrypted'.

The 'encrypted' file isn't actually encrypted.

Nor is this 'Google Drive' blurred preview in a PDF (another variant) a real thing.

But if you click on the links in those files, you'll get to a login screen.

This is the big moment, and if you enter your credentials here, the attackers get access to your account.

#infosec #cybersecurity #socialengineering

2/ Typical attack from this campaign: email seemingly from a ...

2024-08-14T16:36:05Z

In reply to nevent1q…2g6s
_________________________

2/ Typical attack from this campaign: email seemingly from a colleague you know well. It sounds like them.

They want you to look at an attached document.

But there's a twist: no attachment!

This is clever...

You've been taught to be suspicious of messages with attachments and links.

Good.

But this email has none.

Not as suspicious. What hacker would forget the attachment?

The 'mistake' is to lure you into asking for the attachment.

#infosec #cybersecurity #russia

NEW: sophisticated #phishing targets #Russia 's perceived ...

2024-08-14T16:34:06Z

NEW: sophisticated #phishing targets #Russia 's perceived enemies around the globe.

Journalists, US think tanks, Russian human rights groups, a former US ambassador & more were sent clever, credible approaches pretending to be their colleagues.

We think 🇷🇺Russia's spies are responsible & managed to identify two separate threat actors.

Collaboration between us The Citizen Lab (npub12h8…ac3t) & Access Now with First Department, Arhuna Team & resident.ngo

REPORT: https://citizenlab.ca/2024/08/sophisticated-phishing-targets-russias-perceived-enemies-around-the-globe/

#infosec #cybersecurity