medina

> “The Chinese government's espionage operation deeply penetrated networks of at least nine U.S. telecom companies, including AT&T and Verizon,” said Sen. Cantwell. “They exploited the wiretapping system that our law enforcement agencies rely on under the Communications Assistance for Law Enforcement Act -- known as CALEA. These systems became an open door for Chinese intelligence. Salt Typhoon allowed the Chinese operation to track millions of Americans’ locations in real time, record phone calls at will and read our text messages.”

Comment · 2 years ago

> engineers at Weaveworks built the first version of Flux > Weaveworks donated Flux and Flagger to the CNCF

https://fluxcd.io/blog/2022/11/flux-is-a-cncf-graduated-proj...

> Weaveworks will be closing its doors and shutting down commercial operations > Alexis Richardson, 5 Feb 2024

https://www.linkedin.com/posts/richardsonalexis_hi-everyone-...

If the project has legs, it's now under CNCF.

Comment · 4 years ago

MS led consortium (and underwrote largest), 21-27% each spread out across MS, BofA, Barclays, MUFG + smaller to others. (ref: https://www.bloomberg.com/news/articles/2022-10-07/morgan-st...)

(Edit: typo)

Comment · 4 years ago

Re-discovering Active Directory Enhanced Security Administrative Environment (ESAE) / Red Forest design, in cloud :-)

Comment · 5 years ago

More on this: https://www.lawfareblog.com/lawfare-podcast-israels-cyber-un...

[T]he Israeli government’s “Cyber Unit” [is] an entity that, among other things, reaches out to major online platforms like Facebook and Twitter with requests that the platforms remove content. It’s one of a number of such agencies around the globe, which are known as Internet Referral Units. Earlier in April, the Israeli Supreme Court gave a green light to the unit’s activities, rejecting a legal challenge that charged the unit with infringing on constitutional rights.

Comment · 6 years ago

Not sure what you mean laws but there is certainly regulatory guidance that assessors will be using.

The agencies consider single-factor authentication, as the only control mechanism, to be inadequate for high-risk transactions involving access to customer information or the movement of funds to other parties. Financial institutions offering Internet-based products and services to their customers should use effective methods to authenticate the identity of customers using those products and services. The authentication techniques employed by the financial institution should be appropriate to the risks associated with those products and services. Account fraud and identity theft are frequently the result of single-factor (e.g., ID/password) authentication exploitation. Where risk assessments indicate that the use of single-factor authentication is inadequate, financial institutions should implement multifactor authentication, layered security, or other controls reasonably calculated to mitigate those risks.

medina

Recent submissions

VulnHunter: Capital One's agentic AI code security tool c capitalone.com

VulnHunter: Capital One's agentic AI code security tool capitalone.com