CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Back in my PayPal days, we had someone that would coordinate calls with vendors, ensured they skipped the 10 minute intro/origin story/market blurb, and stuck to a tight agenda focused on our needs. I didn’t know how good we had it.
1
1
It’s like asking what would make buying a new car from a dealership better. The whole process is geared for sales, regardless if the product is a good fit.
1
1
Searching @Google for "raspberry pi" turned up 31 pages of ads and nothing else.
/cc @Raspberry_Pi
3
Facebook can still run hashes against photoDNA prior to encryption. E2E encryption and photoDNA are not mutually exclusive.
I reminded of the book, Lawyers Without Rights, in which the law became a tool for suppression.
#BREAKING: 5-4 #SCOTUS, in an opinion by Chief Justice Roberts, holds that partisan gerrymandering claims are categorically non-justiciable, and cannot be resolved by federal courts.
Huge, huge decision:
supremecourt.gov/opinions/18…
There’s a cost of harm to not having E2E encryption. Perhaps fighting CSAM outweighs those risks, but they do exist and are not addressed by exclusively framing the decision based solely on access to illegal content.
1
It could be, the Facebook press release is vague and only refers to removing content from “Facebook” and the BBC article called out secret FB groups, which made me think it was concentrated there.
1
Keep in mind that John cited takedown numbers from closed Facebook groups. That’s on the main platform and isn’t getting E2E encryption. I don’t know how many pictures are sent via Messenger, but FB could still capture hashes and send with encrypted message for detection.
2
I’m not one to advocate for corporal punishment, but public flogging feels right for these robocall criminals.
FTC, law enforcement partners announce new crackdown on illegal robocalls. U.S., state, and local enforcement stops companies responsible for over one billion calls: ftc.gov/news-events/press-re… #STOPRobocalls2019
The challenge is you want airtight E2E encryption for activists and journalists operating in repressive countries, but that makes it more difficult if you rely on surveillance to combat criminal activity. Yet surveillance capabilities can be compromised by foreign adversaries.
2
Need some inspiration?
Early female comedian Phyllis Diller donated her "gag file" of 52,569 jokes to the Smithsonian. They're all transcribed and available online:
transcription.si.edu/browse?…
Interesting, @CarbonBlack_Inc alerts every time I use Chrome to download a file. Maybe it’s related?
This does a good job of explaining the situation for asylum seekers from Central America.
wola.org/analysis/fact-sheet…
2
Even locked shred bins often don’t have a one-way chute, so just flip them upside down and shake out the documents.
4
I can’t speak to intent, but clearly the outcome demands reform and accountability. And I purposely called out “federal custody” because it’s the entire system, not just Border Agents, including for-profit detention centers.
1
For my kids, we celebrate failure and effort, and focus on the opportunity to learn and grow.
Learning is all about making mistakes.
1