evan_a_a

4 ms·

31.
by evan_a_a 5mo ago
It is an investment problem, they need to invest in security expertise, not security products and services. And that is the sad part, absent the company really caring to spend that money or an external demand (regulatory or customers) it ju
32.
by evan_a_a 5mo ago
The company I work for (consulting) upended the entire strategy to basically use pentests to sell managed services (XDR, NDR, SOC, vuln scanning, "continuous pentest") that does nothing to meaningfully move the needle on security.
33.
by evan_a_a 5mo ago
I forsee issues with really getting use out of any commodity language model in the hardware security context, because hardware systems notoriously lack standardization. And often times, the technical knowledge (datasheets, app notes) is loc
34.
by evan_a_a 5mo ago
I mean it in the sense that AI security hype and the larger geopolitical environment has woken up a lot of people to the reality that they need to consider security. And the ones that haven't woken up yet will get a wakeup call when th
35.
by evan_a_a 5mo ago
Whenever I tell people I work in computer security, their first question is "are you worried about AI taking your job"? To which I just laugh and respond "AI is job security"
36.
by evan_a_a 6mo ago
spoilers
37.
by evan_a_a 6mo ago
>branded chaos I'm gonna use this term from now on, thanks.
38.
by evan_a_a 6mo ago
Orion is a Lockheed (CM) and Airbus (ESM) project.
39.
by evan_a_a 7mo ago
SMS is mandated by the FAA
40.
by evan_a_a 7mo ago
encryption does not protect against malicious modification; authentication does.
41.
by evan_a_a 7mo ago
What you're describing is already well known in the aviation industry. Promotion of a positive safety culture is a key element if the Safety Management System (SMS) framework https://www.faa.gov/about/initiatives&#
42.
by evan_a_a 7mo ago
I'm using Startmail, based in NL: https://www.startmail.com
43.
by evan_a_a 7mo ago
Australia is a member of five eyes and the US basically treats them like the 51st state.
44.
by evan_a_a 7mo ago
direct from the media server https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...
45.
by evan_a_a 7mo ago
MS was (and still is it seems) unable to produce the data flow diagrams that FedRAMP wanted, ones that other cloud providers had no problem with. If the documentation is in such dire state, then the system itself is likely to also be in a d
46.
by evan_a_a 7mo ago
>2) The Tesla section is interesting. I'm not saying that you are wrong, just that their methods have not produced the promised results yet The flaw in Tesla's engineering choice to rely on a camera based system for self drivin
47.
by evan_a_a 8mo ago
What a waste of taxpayer dollars. There’s endless amounts of open land to put real solar farms on but no, let’s spend money on this nonsense. https://youtu.be/7vItnxhWRqw
48.
by evan_a_a 8mo ago
This is a literary device. The article continues to explain why this isn’t a simple problem, and it’s clear from the conclusion that the author understands the complexity. >But it’s good to be reminded that we know a lot less about the w
49.
by evan_a_a 8mo ago
He offers no proof, just “trust me bro”. If they actually had found flaws, they would’ve reported them. WhatsApp uses the Signal protocol, which is built by actual cryptographers using proper formal proofs. In contrast, MTProto is not desig
50.
by evan_a_a 8mo ago
This is typical for the senate. It’s called the “pro-forma session”. This is primarily done so that the senate is never truly in recess and thus blocks the president’s power to make recess appointments. https://legalclarity.org&#
51.
by evan_a_a 9mo ago
In Spain the high speed network is separate from the traditional network too. There is some inter connectivity to allow for high speed trains to call at traditional stations, but the high speed network is for high speed trains only.
52.
by evan_a_a 9mo ago
In engineering the simple solution is often the best solution. Creating a demand-side network of devices is not that. Plus, such a system would provide even more ways for nefarious actors to sabotage the grid, by influencing the demand side
53.
by evan_a_a 9mo ago
I have bad news on that front. https://tee.fail/
54.
by evan_a_a 9mo ago
Bulgaria has been an EU member state since 2007. This is only about adoption of the euro.
55.
by evan_a_a 10mo ago
This is a very standard part of responsible disclosure. Hacker finds bugs -> discloses them to the vendor -> (hopefully) the vendor communicates with them and remediates -> both sides publish the technical details. It also helps to
56.
by evan_a_a 1y ago
>They provide third party API's to use APPLE's RCS-Service. The alternative would have been to support registering alternative RCS-services as default on the OS (and then, allow the user to choose a service). RCS messaging is c
57.
by evan_a_a 1y ago
FedNow is a technological solution for instant payments, not a regulation. It’s a voluntary system for the banks to join. Further, banks are not required to offer instant payment services to their customers. The analogous technological solu
58.
by evan_a_a 1y ago
The EU has already figured this out with the recently passed instant payments regulation [0]. As of 2024 are 5,304 banks in the EU [1], so the number of banks really isn’t an excuse. The US banking system lags the rest of world by a mile, b
59.
by evan_a_a 1y ago
Bizum is for P2P instant payments and it’s operated by a consortium of Spanish banks, not Banco de España.