Tim Dafoe

Canadian information security professional. CSA P125 TC and SMC JTC 1/SC 27 member. Former Guardent, UUNET. All opinions are my own.

[Tim Dafoe @timdafoe]

Consequences of diminished public confidence in the telephone, scam scourge: contact tracers in MA and WA struggle to get contacts to answer their calls. https://t.co/A3erCVV7bt https://t.co/GGqLuIn6lV (3:15)

[Tim Dafoe @timdafoe]

Nova Scotia announces new "Department of Cyber Security and Digital Solutions" - becoming the latest province to combine and elevate digital services and #cyber. 🇨🇦

[Nova Scotia Gov. @nsgov]

New Department to Focus on Digital Services, Programs https://t.co/nWXF9RY0LU

[Tim Dafoe @timdafoe]

That said, it's clear that serious concerns regarding member state enforcement persist.

[Tim Dafoe @timdafoe]

Happy 5th birthday, GDPR.

[Digital EU 🇪🇺 @DigitalEU]

🔐 Your data, your right & your choice.

Today marks 5⃣ years since the #GDPR entered into force, ensuring Europeans stay in control 🎮 of their #PersonalData in the digital world.

🇪🇺 #EUDataProtection setting global standards🌍

[Tim Dafoe @timdafoe]

Significant updates to the SPARTA #spacecyber framework, including a mapping to @ESA SPACE-SHIELD as of v1.3.1: https://t.co/84f4rrjJEd

[Tim Dafoe @timdafoe]

A welcome move up, and one that reflects how such roles are now structured in Canada's public sector.

[Tim Dafoe @timdafoe]

Canada's National CIO Sub-Committee on Information Protection is now the National CISO Committee on Information Protection. 🇨🇦 #PSCIOC

[Tim Dafoe @timdafoe]

Just after #CYSAT2023, @ESA released their own ATT&CK-inspired #spacecyber effort, SPACE-SHIELD: https://t.co/03P6kQLj3J

[Chris Hadfield @Cmdr_Hadfield]

Your poetry and melodies are an eternal inspiration. Rest in peace now, Gordon Lightfoot.

[Tim Dafoe @timdafoe]

@Astro_Jeremy Huge congrats Jeremy. 🇨🇦

[Tim Dafoe @timdafoe]

Met some great people, and I'm glad this opened the door to more @ResDatAll participation in the future.

[Tim Dafoe @timdafoe]

The @CanCOVID initiative ends operations today. Very proud to have joined in April 2020, contributing input on information handling to @ResDatAll and EN app risk to the COVID-19 Task Force, and sharing sector-specific alerts and training.

[Tim Dafoe @timdafoe]

Nice SPARTA framework shoutout in announcement Thu. that @SpaceISAC has stood up an Operational Watch Center: https://t.co/yv7mi9GJeG #spacecyber

[Tim Dafoe @timdafoe]

One key finding seems oh so familiar: training and processes can help to mitigate human error, a factor in a "considerable" number of DC/service outages, but one that can be tackled directly.

[Tim Dafoe @timdafoe]

From today's @UptimeInstitute event: serious outages for DCs/services are down somewhat, but cost more when they happen. In fact, for some large bank/airline/co-lo outages 2019-on, Uptime reports losses in the ballpark of 50-100M USD.

[Tim Dafoe @timdafoe]

Full @UptimeInstitute 2023 outages report available here: https://t.co/WbnyV5RHBF

[Tim Dafoe @timdafoe]

Great working with @bbaileycyber on this latest post - how the #PCspooF TTEthernet paper influenced SPARTA countermeasures: https://t.co/uhVjmUWd3P #spacecyber

[Tim Dafoe @timdafoe]

@bbaileycyber Back at you!

[hex nomad @hexnomad]

Couple of bugs I reported to @msftsecresponse got patched today. The most severe is classified as unauthenticated network RCE! #cve202323415 #cve202323426 Demo:

[Nozomi Networks @nozominetworks]

Nozomi Networks Labs discovers nine vulnerabilities in Sewio Real Time Locating Systems (RTLS). Of the nine disclosed, four are critical, while two are unpatched with fixes in progress.

Read our blog to learn what you can do to safeguard affected devices. https://t.co/ieCStGsmEZ