|
BonHair posted:I still believe that GDPR was written by people who knew how loving wild it was, but passed the political layer without anyone noticing. And they're rolling out NIS2 for critical infrastructure (including subprocessors) and DORA for banking, it's gonna be fun to see the fallout of those too. What's even worse is that US lobbying that took place before the GDPR proposal was made public, so while the people who originally wrote it might have had the best of intentions, the US government still got their say. Fixed the link for you. Also, this is just the latest article in a long conversation that's been ongoing in parts of the IT industry, about how every single other installation technician has to go through some kind of training and certification process - and will face fines et cetera, if they gently caress up. Contrast this with IT, where it's not just possible but quite likely that a computer toucher can end up having their software be an integral part of a large system with a security threat that it was never meant to stand up against.
|
#
?
Apr 17, 2024 18:17
|
|
|
|
| # ? Apr 19, 2024 16:18 |
|
|
Wibla posted:Do you have a link to more info about this? https://www.securityweek.com/destructive-ics-malware-fuxnet-used-by-ukraine-against-russian-infrastructure/
|
|
#
?
Apr 17, 2024 21:52
|
|
|
some kinda jackal posted:Congrats and sorry in advance, I don't think this thread counts toward a CPE :[ we’re getting to the point in the yospos secfuck thread where it’s starting to feel like it should count, from the WebPKI content alone
|
|
#
?
Apr 17, 2024 22:24
|
|
|
Subjunctive posted:yospos secfuck thread gently caress, why isn't that in my bookmarks!
|
|
#
?
Apr 18, 2024 02:03
|
|
|
it's been absolute gold lately too
|
|
#
?
Apr 18, 2024 02:13
|
|
|
we got Amir!
|
|
#
?
Apr 18, 2024 02:23
|
|
|
Subjunctive posted:we got Amir! 
|
|
#
?
Apr 18, 2024 12:29
|
|
|
Subjunctive posted:we got Amir!  We're all cheering for the man.
|
|
#
?
Apr 18, 2024 17:07
|
|
|
Who's Amir?
|
|
#
?
Apr 18, 2024 23:01
|
|
|
Amir is everyone.
|
|
#
?
Apr 18, 2024 23:10
|
|
|
(Amir is a guy at Google—I think?—who is involved in the WebPKI root programs and is asking tough questions in Entrust’s root program compliance incident reports.) https://open.substack.com/pub/webpki/p/entrust-considered-harmful-part-1
|
|
#
?
Apr 18, 2024 23:13
|
|
|
some kinda jackal posted:gently caress, why isn't that in my bookmarks! SECFUCKTHREAD
|
|
#
?
Apr 19, 2024 00:19
|
|
|
Subjunctive posted:(Amir is a guy at Google—I think?—who is involved in the WebPKI root programs and is asking tough questions in Entrust’s root program compliance incident reports.) God drat it, we just got couple expensive signing certificates from Entrust.
|
|
#
?
Apr 19, 2024 00:50
|
|
|
welcome to my world I have a whole mess of entrust issued OV certs
|
|
#
?
Apr 19, 2024 01:36
|
|
|
Sounds like things are getting bad out there with the Palo exploit. RIP to all the IR teams
|
|
#
?
Apr 19, 2024 01:41
|
|
|
RIP to my mailbox. Why the gently caress did I sign up for Palo Alto updates? I don't even have a PAN.
|
|
#
?
Apr 19, 2024 02:13
|
|
|
rafikki posted:Sounds like things are getting bad out there with the Palo exploit. RIP to all the IR teams   
|
|
#
?
Apr 19, 2024 04:30
|
|
|
|
| # ? Apr 19, 2024 16:18 |
|
|
Our network security guys are in the middle of upgrading from 10.1 on our old PA VPN boxes and have been high fiving each other every day they hadn't finished the upgrade to an affected version yet
|
|
#
?
Apr 19, 2024 05:46
|
|
