Ross

[Ross @ross_j_b]

@troyhunt Yes and no. CS is the root cause. Seems M365 got caught up in it - https://t.co/KgRfbsSK0T

[Ross @ross_j_b]

@GergelyOrosz It’s worse. Even if you’re not running CrowdStrike M365 does 😬 You might not be broken, but they are, and plenty of people rely on them.

https://t.co/KgRfbsSK0T

[Ross @ross_j_b]

@turboCodr @HackingLZ Risk from NDR is manageable (TLS+cert pinning = no insight into data on the wire). EDR can poke around in files, process memory etc. It’s far more invasive and you can’t realistically manage that risk. Your research data could get flagged and uploaded for review

[Ross @ross_j_b]

@francessmith @implausibleblog Like Bojo’s WhatsApp messages? Oh wait. They were unlawfully destroyed to prevent disclosure. Maybe that was a one off eh, and not part of a systematic failure to disclose information that made the Tories look bad? 😂

[Ross @ross_j_b]

@UK_Daniel_Card Tbf DV is always gonna mean on-site. £45k? Not great, but I’ve worked for less. Central London?!?! 😂🤡 Gonna cost you your take home in rent/train fares!

[Ross @ross_j_b]

@BristOliver @davidchild Generating traffic. Seems to have worked 🤷‍♂️

[Ross @ross_j_b]

@BristOliver My heating just came on -.- If it’s not the government it’s aliens

[Ross @ross_j_b]

@Mr_John_Oxley Smells awfully like voter suppression…

Waiter: can I take your order?
You: whatever. It’s all the same
Waiter: here’s the salad
You: I didn’t want that!

If you choose not to vote, you’ve no right to complain about what you get.

[Ross @ross_j_b]

@UK_Daniel_Card Decide what risk you’re *actually* willing to accept/manage. Don’t go on holiday w/o insurance then bitch when it’s cancelled. Don’t expose X to the interwebs then bitch when it gets 0-day’d. Have insurance. Or STFU.

[Ross @ross_j_b]

@UK_Daniel_Card Nerd: But TLS?!?!
User: *clicks “connect anyway”*
😂

[Ross @ross_j_b]

@BristOliver 23%?! That high? 😢 Tbh it looks like the bookies agree with you, but it feels pretty generous right now. Based on history I’m feeling a flutter on getting knocked out of the quarters.

[Ross @ross_j_b]

@UK_Daniel_Card Tbf it’s good to get a reality check sometimes and realise that for 99.99% of people, “cyber security” is something from an ‘80s film. Sadly. Spin up a new Twitter/LinkedIn account and see what you see - it sure ain’t cyber security

[Ross @ross_j_b]

@redhousepodcast @TurboSmiff @Frances_Coppola @DeborahMeaden “…a link to upload the required documents”

That’s likely what went wrong 😉 What happens when nobody uploads the documents? Giving ppl a job before the vetting is completed is a choice. Just not a good one.

[Ross @ross_j_b]

@DanNeidle Is there any reliable data on how many ppl are affected? Headlines are great, but making policy based on 100 ppl ain’t. Is it 100? 1000? 10k? More?

Marginals can inventivise pension contribs - it’s not *all* bad (necessarily)

[Ross @ross_j_b]

@BristOliver More of a misjudgement than a misunderstanding. The liberal arts grads in the press can’t use units for toffee. Always verify from source.

It’s 44GWh (~140TW). But hey, what’s 2x orders of magnitude between friends?

[Ross @ross_j_b]

@UK_Daniel_Card @elonmusk Private means sellable (analytics stuff) 🤷‍♂️

[Ross @ross_j_b]

@BristOliver @chrischirp His “The dominant SARSCoV2 variant in the US will soon be KP.3.” statement isn’t supported by the data in the deck*. Ppl are taking it at face value however. I suspect that was the idea :/

* JN.1+FLiRT is ~2x prevalence vs KP.3 and increasing

[Ross @ross_j_b]

@RepJackKimble Tommy’s not big on boats in tbe Channel…

[Ross @ross_j_b]

@UK_Daniel_Card I mean, I believe the Snowflake statement. It’s just *really* specific. It doesn’t deny the alleged intrusion method (creds stolen, no MFA).

“…we do not believe this activity is caused by any vulnerability, misconfiguration, or malicious activity within the Snowflake product,"

[Ross @ross_j_b]

@UK_Daniel_Card So, the ability for a random to use stolen creds from an unexpected location without MFA is intentional?… 🤔