As we consider the AI frenzy in cybersecurity, it’s worth paying attention to key questions being asked by AI researchers.

Tell me you don’t grok hacker culture by telling me you don’t grok hacker culture - which extends far beyond cybersecurity.

Criminals suck. This marketing is atrocious. Hackers evolve everything around them.

Tsk tsk.

(Industry) analyst life comment: I'm in the 'my RSA schedule is completely packed, how about we pencil something in for Black Hat USA' phase of planning my meetings ... :-) #archat

This legit tears me up. My heartfelt congratulations to him and the family. Oh goodness, this is so freaking awesome... love this!!!!!!

The Israel-Hamas War has always been a snapshot of a much larger struggle between Iran and its terror proxies — and increasingly Russia and China — and western democracy.

This is how Israel, Ukraine and Taiwan are interconnected and must all receive our support immediately.

Telesystem Criminals suck.

#HackingIsNotACrime

posting this for no reason whatsoever

'O.J. Simpson, a convicted kidnapper and armed robber, who was previously found liable in civil court for two brutal murders, and also played some professional sportsball, died at age 76.'

Fixed it for you NBC News.

Worth reading or rereading: The Undoing Project, about Danny Kahneman and Amos Tversky, by the amazing Michael Lewis. It's astonishingly good, and hilarious, and quite moving.
amazon.com/Undoing-Projec…

This is a key point on application of AI to cybersecurity. Let’s be clear about which are the use cases where the failure rate (be it false positives or false negatives) is acceptable? We’re far far away from full autonomy…

You need a safe code with your family 📞

There have been growing reports over the last year or so of AI being used in scam phonecalls to deepfake the voices of people’s loved ones.

The criminals scare the call recipient, scamming them into handing over money.

The xz discovery - tied to a small (to a human) variation in sshd response times - reminds me of Clifford Stoll’s 25c accounting discrepancy in the Cuckoo’s Egg…
We undervalue expertise and attention to detail at our own peril.

Even the people who are paid to work on open source are working after hours in the trenches doing late night PRs with the people who aren’t. There is simply too much work to be done and not enough time and core maintainers to do it

Taking a moment to give thanks to the universe for having given us someone like Daniel Kahneman, who passed today at age 90. A true intellectual giant, he upended economics and psychology. May we honor his memory and apply his teachings.

Unprompted testimonial of how much I appreciate mynoise.net as a site to generate background sounds to help with concentration. Highly recommended... myNoise & more...

You don't need to ask why American journalism is broken when major media companies pay $300,000 per year contracts for opinion voices like Ronna McDaniel and $200 per article for fact-based freelance journalism.

This.

Adding to the refreshing thread that Phillip Wylie kicked off on normalizing rejections - I hover around 15-20% acceptance rate even after good efforts following CFP instructions and all. Remember the Michael Jordan quote about shots missed...

If Trump gets elected, then the American people will have spoken, & the President-elect's constitutional prerogatives & need for an orderly transition will give way. He can be briefed on the day Biden concedes. But until then, the 'norm' of normalcy is more important to protect.

This is one of the most profound truths that we often fail to properly handle in InfoSec. We keep improving security as demanded by changing circumstances (regulatory, market perception, changing tech and threat landscape), but it is ultimately just a cost of doing business.