Leslie Forbes

Technical geek, Information Security and Linux evangelist. #InfoSec #Cyber blurting my own opinions only and all by myself (he/him)

[Matthew Prince 🌥 @eastdakota]

Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any sites a shadowy cabal of European media elites deemed against their interests. No judicial oversight. No due process. No appeal. No transparency. It required us to not just remove customers, but also censor our 1.1.1.1 DNS resolver meaning it risked blacking out any site on the Internet. And it required us not just to censor the content in Italy but globally. In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online.

That, of course, is DISGUSTING and even before yesterday’s fine we had multiple legal challenges pending against the underlying scheme. We, of course, will now fight the unjust fine. Not just because it’s wrong for us but because it is wrong for democratic values.

In addition, we are considering the following actions: 1) discontinuing the millions of dollars in pro bono cyber security services we are providing the upcoming Milano-Cortina Olympics; 2) discontinuing Cloudflare’s Free cyber security services for any Italy-based users; 3) removing all servers from Italian cities; and 4) terminating all plans to build an Italian Cloudflare office or make any investments in the country.

Play stupid games, win stupid prizes. While there are things I would handle differently than the current U.S. administration, I appreciate @JDVance taking a leadership role in recognizing this type of regulation is a fundamental unfair trade issue that also threatens democratic values. And in this case @ElonMusk is right: #FreeSpeech is critical and under attack from an out-of-touch cabal of very disturbed European policy makers.

I will be in DC first thing next week to discuss this with U.S. administration officials and I’ll be meeting with the IOC in Lausanne shortly after to outline the risk to the Olympic Games if @Cloudflare withdraws our cyber security protection.

In the meantime, we remain happy to discuss this with Italian government officials who, so far, have been unwilling to engage beyond issuing fines. We believe Italy, like all countries, has a right to regulate the content on networks inside its borders. But they must do so following the Rule of Law and principles of Due Process. And Italy certainly has no right to regulate what is and is not allowed on the Internet in the United States, the United Kingdom, Canada, China, Brazil, India or anywhere outside its borders.

THIS IS AN IMPORTANT FIGHT AND WE WILL WIN!!!

[Nat Wei @NatWei]

Today’s LCSP review: Sara Sharif’s murder was committed by her father and not prevented due to serious LA safeguarding errors. Home education was not to blame. Yet the same overstretched LAs will now oversee new home-ed registers. Will this prevent harm or cause more errors?

[Leslie Forbes @le54bes]

@HackingLZ Until UPNP came along

[Leslie Forbes @le54bes]

@techspence Let's enrich LDAP

[Leslie Forbes @le54bes]

@elonmusk I'm skeptical

[Leslie Forbes @le54bes]

Horizon scandal involving the Post Office being talked about in the House of Commons: was the word "dignity" even mentioned once in connection with the compensation of the victims or was this only ever about money?
Will they ever learn?

[Leslie Forbes @le54bes]

@Crezeh_ @nimblefew @LordDunners @jeremycorbyn Huh? What's the population of UK?
Add a few boatloads of people. Now what's the population? Negligible increase
Sorry, but you seem to think that all of them are incredibly wealthy if you want to count them (boat people) with the few billionaire families hoarding all the wealth

[Leslie Forbes @le54bes]

@HackingDave By now, this is surely on all product management and development release teams to learn to use grep on their code repositories and proactively alert customers (not that customers themselves are that responsive)

[Leslie Forbes @le54bes]

@tescomobile
What tools are available to help diagnose connection issues with 4G and 5G
Experiencing 3-4 bars signal and yet awful response times from basic browsing and even email

[Leslie Forbes @le54bes]

Good. Private Equity needs to die is own death, being the plunderers of our age. They should be ashamed of even trying to make money from public utilities.

https://t.co/KzYAJ5hqhV

[Leslie Forbes @le54bes]

@techspence You've nothing to boast about if you expect Nessus to find faults in AD configuration

[Leslie Forbes @le54bes]

@Cthulhu_Answers We were taught time, manner, place is the best order for an English sentence.
You'd really think an editor may catch stiffening like this...

[Leslie Forbes @le54bes]

This description is so funny about the uncovering of a bot on X.
And Musk was anxious about bots prior to buying the town square. I reckon they've proliferated on his watch

https://t.co/Iz8BCgMIow

[Leslie Forbes @le54bes]

@Reuters Quite sure he didn't earn it. It was paid him. Nobody has that earning capacity

[Spamhaus @spamhaus]

Here is a first class case of cybercriminals playing internet matryoshka🪆, hiding behind layers of decoy ISPs to hamper investigations and evade (superficial) customer vetting:

🇩🇪 aurologic GmbH (AS30823) → 🇮🇱 Whitelabel Solutions, Ltd. (AS214497) → 🇺🇲 Offshore LC (AS214472) → 🏴‍☠️ Dolphin 1337 Limited (AS215208) → 🏴‍☠️ Silent Connection Ltd. (AS215240)

AS215240 in particular has been a hotbed of abuse, hosting botnet controllers, phishing sites, brute-force attacks, and spam for months.

"This rings a bell," you might think - and you are right! Dolphin 1337 and Silent Connection are no strangers at all; despite both companies compulsory dissolved in January, their malicious networks remain active. Also, the route above is a textbook example of Spamhaus's "too many countries involved" rule 👉 https://t.co/yckOUM29Hr

More information on this incident can be found in this SBL listing - sadly, it is not the only one for aurologic GmbH 👉 https://t.co/rbcDBXISTV

We strongly recommend against providing services to entities whose AS or IP networks are listed in Spamhaus (ASN-)DROP - learn more here 👉 https://t.co/VmclctN5Vm

#BulletproofHosting #DROP #ThreatIntel #Botnets #Phishing

[Leslie Forbes @le54bes]

Remember when Trump started talking about tariffs on Canadian & Mexican imports his claim was that those countries were responsible for fentanyl volumes in USA. Now I wonder whether he still believes this? Or are there a bunch of others too like China?

https://t.co/kj2kc6Afa5

[Martin Lewis @MartinSLewis]

Pls help me spread word tomorrow (tue) 8pm on ITV I'll be talking you through how to check if you can boost your State Pension by possibly £10,000s. There is an urgent deadline coming after which many lose the opportunity.

This is a must watch for anyone age 40 to 73.

[Leslie Forbes @le54bes]

@GBAFReview Ha ha. Unintentional pun "SWIFT" resolution 😆

[Leslie Forbes @le54bes]

@flightradar24 flight LX288 (ZRH-JNB) turned around about half-way, and is returning to ZRH; return flight JNB-ZRH is of course cancelled

[Will @BushidoToken]

#ThreatHunting Tip of the Week:

Search proxy logs for 404 HTTP Response codes related to /s3.amazonaws.com/ and try visiting the hostnames.

If you see this (see below) then you may want to block it to prevent a software supply chain attack.

See the blog below for more info 🔍