Saso Virag

Been there, done that, didn't get a t-shirt because I'm too old to be bought by vendor-ware.

Security; risk; information use, misuse, and abuse.

[The Provost / سيدة الفتنة @MsEntropy]

Random question for Violent Asshole Monitoring Twitter:

Anyone know off the top of your head any recently [last 5-7 years] thwarted incel-inspired attacks?

For some reason I’m drawing a blank.

[Saso Virag @VS_]

@securitybrew Team Rob & Snoop’s co-CEOs. :-)

[Dr. Anton Chuvakin @anton_chuvakin]

Now, I just send those people to read this excellent piece https://t.co/Lld9pKq3EH by @philvenables but I am uncertain if it cures them of their delusions or not....

[Dr. Anton Chuvakin @anton_chuvakin]

Yes, I still see people who equate "defense in depth" with "using two firewalls of two different brands in series." YES, THEY STILL EXIST, these people. #random

[Robert Graham @robertgraham]

This is probably why I don't get invited to do more panels. Right after the audience applauds the speaker who said "be suspicious of suspicious things", I go on a rant how they are all wrong.
https://t.co/8OBkRrGJTQ

[Stefano Zanero @raistolo]

@anton_chuvakin Also because “buried in concrete and sunk” lacks availability, so, by definition, not secure 😂 I always hated that phrase!

[Dr. Anton Chuvakin @anton_chuvakin]

Are there technologies that are "inevitably secure", defined as secure no matter what the user does with it?

Please don't use "buried in concrete, then sunk to the ocean floor" examples, I mean the tech that is actually used... #random

[Saso Virag @VS_]

Indeed. Especially since “cyber” now includes EW, IO, kinetic attacks of critical infrastructure, and everything else that used to be included under the “information warfare” umbrella.

“I can’t define ‘cyber’, but I know it when I see it.” https://t.co/4iUMPGfdBg

[The Economist @TheEconomist]

“It is a fallacy to say that cyber has not been a factor in the war in Ukraine,” Sir Jeremy Fleming, the director of @GCHQ, wrote earlier this year. “It is a very modern digital and cyber war, as much as it is a brutal and destructive physical one” https://t.co/m33Q53dnXh

[Saso Virag @VS_]

Somebody leaked the minutes of my last meeting with the $SECURITY_VENDOR.

[Kyle Bailey @KyleBailey22]

Doing incident response without all of your log data in a SIEM

[Saso Virag @VS_]

Previous tweet, but also

[🌻 @[email protected] @twetzling]

More on the deficits in current European legal frameworks & oversight practice on this topic and a nascent agenda for positive change: https://t.co/XhAKZsAaIR

[🌻 @[email protected] @twetzling]

Having discussed this further w/ oversight practitioners & reviewing several legal frameworks @dietricharlotte and I argue that there is a pressing need in Europe to curb the risk of disproportionate use of such data by intel services.

[🌻 @[email protected] @twetzling]

Non-compulsory gov access to personal data can be tied to automated open-source intelligence (OSINT) and the acquisition of enormous personal data through purchases from data brokers ... but the options are plenty

[🌻 @[email protected] @twetzling]

Yet, non-compulsory modes of government access to personal data are missing from the discussion. They are a non-topic in the EU-US DPF and - as argued by @ashgorski - are also beyond the scope of the U.S. Executive Order 14086 . Source: https://t.co/OFKBiY4N45

[🌻 @[email protected] @twetzling]

Having skimmed through the text, I want to share a 🧵 on what I found missing in the document. It ties to the assumption highlighted below:

[🌻 @[email protected] @twetzling]

The @EU_Commision published a comprehensive draft decision “on the adequate level of protection of personal data under EU-US Data Privacy Framework” today. #surveillance https://t.co/1flD1Iymcn

[Dee Madigan @deemadigan]

This sentence is screaming for a sub-editor.

[Clare O'Neil MP @ClareONeilMP]

This project will be led by 3 experts: Andy Penn, Rachael Falk and Mel Hupfeld. In addition, some of the biggest cyber guns from around the world have agreed to help. @ciaranmartinoxf will lead a global cyber expert panel, who will ensure our work really is world-leading. #NPC

[Clare O'Neil MP @ClareONeilMP]

The Cyber Security Strategy will:
-Bring the whole nation into the fight to protect our citizens & economy
-Strengthen critical infrastructure & gov networks
-Build sovereign capabilities
-Strengthen our international engagement so we can be a global cyber-leader
#NPC