Sergey Shkundaleu @archit3ct@social.ssbx.dev

Security poverty line. Many organizations fell behind it with more sophisticated threat actors out there. However organizations can buy their way out of it with more investments. What about individual consumers? Are the products that suitable for consumers? Are they stuck with big tech companies and their "free" products. That's why we started Ethiork project, to give individuals a hand to raise above security poverty line. https://www.ethiork.com/

Holidays are usually sweet spot for threat actors, because it's easy to go undetected over extended holidays. There is no sleep people involved in cybersecurity :( here is advisory from CISA and FBI https://us-cert.cisa.gov/ncas/alerts/aa21-243a

Product leaders today often met with a dilemma: what are those values you will never compromise on, even if that would cost you a job. I would say ethics should be one of those values, without ethics you but going to be able to build fruitful product or company.

... accidental typo in nmap scan leads to scanning of majority of network infrastructure, which leads to finding some unexpected ports on several host, which leads to a witch hunt unleashing wide variety of tools on to those hosts ... just to confirm that everything runs as expected ... as a result all tools on offensive security box has gotten most recent updates and skills brushed off ...

Those who still live under impression that data anonymization which tech giants tooting while selling your data left and right works read this article: https://nypost.com/2021/07/25/reporting-that-outed-catholic-priest-reveals-data-is-not-private/
Just pay close attention to "how" they investigate rather than what is reported. There are also articles from NY Times
https://www.nytimes.com/2021/02/05/opinion/capitol-attack-cellphone-data.html
and
https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-cell-phone.html
Your data is valuable, stop giving it away for free. #privacy

Doing what's right is always more expensive that just brushing symptoms on the surface.

Humanity as a whole is really good at finding solutions, but a terrible at root cause analysis, so we often would end-up remediating symptoms rather than solving problem. Private companies are quick to come up with new product and keep progress running at a stunning pace, but they can't solve the problems as their focus will be on symptoms that are on the surface, because those are visible to their shareholders, which put company and directors under high pressure.

At the beginning of the century we as a society accepted that internet is our future and now it has become irreplaceable. Today coffee makers, dishwashers and other devices from our home are connected to the Internet, so it's time for Zero Trust. Government already realized importance of this concept hard way, time to take embrace it on a personal level. https://info.summit7systems.com/blog/the-evolution-to-zero-trust #cybersecurity #zerotrust

When you put decision making authority on AI you will get environment optimized for robots not humans. Would you like to live in such environment?

While it is possible to achieve Internet Sovereignty from a big tech providers, you are still at the mercy of your infrastructure, at one day guys with "shovels" may start dinging and accidentally cut cables, so you need multiple providers with different cables so that when one is cut you can utilize second one.

Twitter rolling out Twitter Blue feature, so now people will pay Twitter for sale of their profiles to advertisers just to get access to so called paid features. On the other side of the spectrum is Mastodon totally open source and free from advertisers. Now we can say that even if you pay for something you can still be a product.