Gareth Rees

Avid interest in security, technology & automation, all tweets are my own and not that of my company.

[Gareth Rees @Gareth_Tech]

AI Agent wipes out Pocket OS's entire company database in 9 seconds https://t.co/56PQH6Mn15

[impulsive @weezerOSINT]

Windows defender has been compromised.
right now there is a public unpatched exploit that gives any app on your windows PC full system admin access. no password. no popup. nothing

your antivirus doesnt stop it. your antivirus IS the exploit. windows defender is the attack vector

ransomware gangs can use this to encrypt your entire machine and steal every saved password, browser session, and discord token you have. fully patched windows 11. real time protection on

thread

[Gareth Rees @Gareth_Tech]

Security Consultants 10 - Gov 0
This is what happens when Gov ignore professionals.

[Paul Moore - Security Consultant  @Paul_Reviews]

Bypassing #EU #AgeVerification using their own infrastructure.

I've ported the Android app logic to a Chrome extension - stripping out the pesky step of handing over biometric data which they can leak... and pass verification instantly.

Step 1: Install the extension
Step 2: Register an identity (just once)
Step 3: Continue using the web as normal

The extension detects the QR code, generates a cryptographically identical payload and tells the verifier I'm over 18, which it "fully trusts".

This isn't a bug... it's a fundamental design flaw they can't solve without irrevocably tying a key to you personally; which then allows tracking/monitoring.

Of course, I could skip the enrolment process entirely and hard-code the credentials into the extension... and the verifier would never know.

[Gareth Rees @Gareth_Tech]

Unbelievable that a Gov Org has allowed this.
#gdpr #security

https://t.co/9FIob7Ec1m

[Gareth Rees @Gareth_Tech]

Worth reading... #DigitalID #uk

[Andrew Martin 🇬🇧🏴󠁧󠁢󠁥󠁮󠁧󠁿🚜 @andr3w_marntm]

https://t.co/tI6LNSvxxo

[Gareth Rees @Gareth_Tech]

Wow thats a shocking abuse of data. #UKgov

Electric car drivers ‘spied on by government’ through phones https://t.co/SxYU5HIxuq

[Gareth Rees @Gareth_Tech]

The New ChatGPT Caricature Trend Comes With A Privacy Warning https://t.co/83allkNpo6

[Gareth Rees @Gareth_Tech]

Microsoft Starts Sharing Your Location With Your Employer via @forbes https://t.co/twSR4vxgAk

[Gareth Rees @Gareth_Tech]

Or they could talk to the industry experts...

UK government targets VPNs in online safety consultation as Lords vote for ban | TechRadar https://t.co/B3JyJMyOPe

[Gareth Rees @Gareth_Tech]

Samsung in hot water for allegedly 'spying on' TV users (Update) - Android Authority https://t.co/RtMwCxAOb8

[Gareth Rees @Gareth_Tech]

How to disable ACR on your TV (and why doing so makes such a big difference) | ZDNET https://t.co/JynOsWhplC

[Gareth Rees @Gareth_Tech]

Most governments and economies, would not survive without VPNs yet the #ukgov seek to destroy them. 🤡s

UK MPs target VPNs in latest Online Safety Act debate | TechRadar https://t.co/NOeeOKrpbM

[Gareth Rees @Gareth_Tech]

That did not take long...

[Gareth Rees @Gareth_Tech]

Unbelievable..
Creating apps like Signal or WhatsApp could be 'hostile activity,' claims UK watchdog | TechRadar https://t.co/OIOsSXngKa

[Gareth Rees @Gareth_Tech]

That cannot be a good thing.

[Signal @signalapp]

We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe.

https://t.co/015qmQnIS2

[Gareth Rees @Gareth_Tech]

100% well said!

[Chris Littlewood @chrislittlewoo8]

Digital ID for every adult is not progress. It is the end of a free society dressed up as convenience.

I am a cyber security specialist. This is my take.

They are selling it as a fix for illegal migration. That is bollocks.

We spend hundreds of billions a year on cyber security and yet the volume of breaches is breaking records. The threat is growing faster than the spend.

Digital ID will not stop boats. It will not stop trafficking gangs. It will not fix a broken border.

Criminals will work around it.

Honest citizens will pay the price.

It builds giant data banks that track where you go, what you buy, what you read and who you speak to.

It links your identity to every checkpoint in daily life.

One breach and your life is exposed.

Look at Jaguar Land Rover and the airports in recent weeks. Now imagine that at national scale on an ID system tied to everything you need to live your daily life.

Here is the risk that ministers will not admit.

Ransomware seeded through a supplier or an insider:

It lies quiet for months.
It rolls through the backups.
On trigger day the register and the recovery sets are both encrypted.

Payments fail. Health and benefits stall. Borders slow. Citizens are frozen out until a ransom is paid or the state rebuilds from scratch.

Centralise identity and you centralise failure.

Do not fall for the pitch.
Function creep is certain.
It starts as login.

It becomes access to money, travel, speech and public services.

It turns rights into permissions controlled by the state and its contractors.

It creates a single point of failure for criminals, insiders and hostile states to target.

It will punish the elderly, the poor and anyone who is not always online.

It will centralise risk and outsource blame.

It will not stop fraud.

It will not stop illegal migration.

It will build the machinery for a social credit system by stealth.

If ministers cared about the border, they would enforce current laws, resource patrols and processing, close loopholes and remove those with no right to stay.

You do not need a national ID to do any of that.

We scrapped ID cards in 2010 for a reason.

Britain does not need a central register to prove age or status.

Yes to privacy first proofs. No to a database state.

[The Hacker News @TheHackersNews]

🛑 China-backed hackers have silently breached top U.S. legal, SaaS & tech firms—hiding for 393 days with a custom backdoor called BRICKSTORM.

They’re stealing emails, cloning servers & staying invisible to security tools.

Read → https://t.co/QywugIAio1

[Gareth Rees @Gareth_Tech]

Wow... they don't understand do they...

A New Bill Aims to Ban Both Adult Content Online and VPN Use. Could It Work? - CNET https://t.co/3wCDhBFrQ5

[Gareth Rees @Gareth_Tech]

Indeed..

[Big Brother Watch @BigBrotherWatch]

⚠️The UK's worst data breaches warn us about the dangers of a digital ID

Forcing the entire British adult population onto a centralised database would create a honeypot for hackers, putting privacy, safety & dignity at risk.

Read⤵️
https://t.co/lPI3cZ8p6n

[Gareth Rees @Gareth_Tech]

Petition: Do not introduce Digital ID cards https://t.co/QZKMMszx74