Roger A. Grimes

Computer security geek

@knowbe4

Posts are opinions of my own that do not reflect KnowBe4

[Roger A. Grimes @rogeragrimes]

I'm excited to announce that the 3rd edition of A Data-Driven Computer Defense is available for sale.
https://t.co/aJzbmGNZr2

#knowbe4 #webinar #computersecurity #internetsecurity #cybersecuritytips #cybersecurity #infosec #cybersecuritynews #hacking #ciso #datadrivendefense

[Roger A. Grimes @rogeragrimes]

If AI productivity increases are so awesome...why is US GDP under 2%? US GDP, at best, is predicted to hit 2.5% in the next year or two, even with AI included. Most US GDP predictions are at the low 2% for the next half-decade or longer. We had 4% GDP before AI. What am I missing

[Roger A. Grimes @rogeragrimes]

Great read on how responding incorrectly to one text message and sharing an SMS code sent to him caused this guy and his family a ton of financial pain and hardship as his identity was stolen.

https://t.co/AtVQQdy60F

[Roger A. Grimes @rogeragrimes]

@DailyDarkWeb Yeah, but the odds they will be out of prison or alive in 5 years is very,very low...it has been researched before

[Roger A. Grimes @rogeragrimes]

@hello__caitlin Haha...the real solution is to use a better device ID than our browser's fingerprint. The Trusted Computing Group's Device ID is a far better solution.

[Roger A. Grimes @rogeragrimes]

Check out my latest article: US Government Gets PQC Threats Exactly Backward And You Should Ignore Their Recommendations https://t.co/xAGlqw62PO

[Roger A. Grimes @rogeragrimes]

Anything less than quantum cryptography is just a temporary step

[Roger A. Grimes @rogeragrimes]

@matthew_d_green OK, what I can find says it was weakened, but is still considered cryptographically strong. 2^298 protection.

[Roger A. Grimes @rogeragrimes]

@matthew_d_green I found the pre-print: https://t.co/rY7Mz1kohU What is its impact? Is there a link to a good discussion on the practical impact?

[Roger A. Grimes @rogeragrimes]

@matthew_d_green Can someone re-post the original source about this?

[Roger A. Grimes @rogeragrimes]

@gabsmashh That hacker was so stupid!!! or next year's Defcon presentation??

[Roger A. Grimes @rogeragrimes]

@LisaForteUK People are OMG, that cup must be decades old. Nope, likely left just a few years ago. Caves are moist places.

[Roger A. Grimes @rogeragrimes]

@LisaForteUK There might be more to the story, such as it created a hostile situation, law enforcement was called. It created such a change in the time to take off that they lost their slot and things cascaded from there??

[Roger A. Grimes @rogeragrimes]

@HackingDave Thanks for sharing. Yeah, not sharing the last name...just the first...is just one red flag.

[Dave Kennedy @HackingDave]

Be careful out there.. it appears there is an account here: @ (intentionally removing @ sign): filipe_eh

I got a DM requesting time to be on Bloomberg, claiming to do a story on AI security. They get you to go to a calendly invite which I'm pretty sure its a backdoor authorization to your account.

If you go through the history of the account, it was a dude at the gym at one point. Now looks to be a women persona claiming to be through bloomberg.

Was not able to find anyone named Ehsa Filipe working at Bloomberg, and they appear to be reaching out to a lot of folks in cybersecurity as well as other industries.

I reported it, just giving everyone a warning to be careful on this one.

@business - would take a look at this one, impersonating your company.

[Roger A. Grimes @rogeragrimes]

Claiming we need mass warrantless surveillance to protect me and society from criminals is not the great selling point you think it is.

[Roger A. Grimes @rogeragrimes]

Podcast on the current state of quantum computers, post-quantum prep, and when we think Q-Day will happen, w/ Roger A. Grimes and super-knowledgeable quantum communicator, Marin Ivezic. Hosted by my goodfriend James McQuiggan of https://t.co/Oju0fUGbTL.

https://t.co/pSHHISxwW5

[Roger A. Grimes @rogeragrimes]

CISA warns of Gunra Ransomware
https://t.co/4GU1o8EPPm

One of my biggest takeaways is that primary and secondary site backups were deleted. If your backups are online, they are available to hackers

[Roger A. Grimes @rogeragrimes]

More than half of AI-generated patches are broken.

https://t.co/Lorc893Mt1

This is not good, but it will improve over time to the point that it is better than most/all humans

[Roger A. Grimes @rogeragrimes]

@WUTangKids This doesn't seem like the worst idea. We need more air traffic controllers. We need a way to attract more to the field. It's not like they won't be trained and tested before they are released into the world. I know a few air traffic controllers...they aren't rocket scientists

[Roger A. Grimes @rogeragrimes]

Check out my latest article: The Quantum Answer Is Nature’s Answer https://t.co/RrqMcPtfk4