Kipp Bradford Discusses the Entanglement of Politics and Technology

Kipp Bradford wrapped up his keynote talk at the Hackaday Remoticon with a small piece of advice: don’t built bridges in the middle of the ocean. The point is that a bridge must connect two pieces of land to be useful and if technology isn’t useful to humanity, does it …read more

Continue reading Kipp Bradford Discusses the Entanglement of Politics and Technology

Collecting consumer contact information to alert individuals in case of data breach for B2B companies [closed]

If you are a B2B company [US], you may collect data on your clients as well as your clients’ customers. For example, let’s say the only thing you need to collect is your clients’ customers’ names.
In the case that your company has a data l… Continue reading Collecting consumer contact information to alert individuals in case of data breach for B2B companies [closed]

BSides Tampa 2020 – Vanessa Ferguson’s Track B 06 ‘The Ethics Of Data Collection’

Many Thanks to Adrian Crenshaw (AKA Irongeek), his Videographer Colleagues and the Presenters for Sharing Their Outstanding Videos Of BSides Tampa 2020.
Visit Irongeek for additional production credits and important information. Subscribe to Irongee… Continue reading BSides Tampa 2020 – Vanessa Ferguson’s Track B 06 ‘The Ethics Of Data Collection’

Privacy and Morality: Data’s Double-Edged Sword

When security professionals think of “good” data and “bad” data, we think of things including accuracy, reliability, recency and applicability. But a more significant question is about data collection and use. All too often we focus our attention on d… Continue reading Privacy and Morality: Data’s Double-Edged Sword

HackerOne cuts ties with mobile voting firm Voatz after it clashed with researchers

HackerOne, a company that pairs ethical hackers with organizations to fix software flaws, has kicked mobile voting vendor Voatz off its platform, citing the vendor’s hostile interactions with security researchers. It is the first time in its eight-year existence that HackerOne, which works with companies from AT&T to Uber, has expelled an organization from its security program. The decision comes after Voatz assailed the motives of MIT researchers who found flaws in the company’s voting app. “After evaluating Voatz’s pattern of interactions with the research community, we decided to terminate the program on the HackerOne platform,” a HackerOne spokesperson told CyberScoop. “We partner with organizations that prioritize acting in good faith towards the security researcher community and providing adequate access to researchers for testing.” It is the latest security-related setback for Voatz, which is trying to make inroads in a market dominated by traditional voting machine manufacturers. In the last […]

The post HackerOne cuts ties with mobile voting firm Voatz after it clashed with researchers appeared first on CyberScoop.

Continue reading HackerOne cuts ties with mobile voting firm Voatz after it clashed with researchers

Leave the pandemic out of your phishing simulations, Cofense says to industry

At least one anti-phishing company says it won’t be testing its customers with coronavirus-themed emails, out of concerns that it’s not socially responsible to play into fears around the current pandemic. Cofense says it has removed all COVID-19-themed spearphishing templates from its repository of attacks, and the Virginia-based company is recommending other organizations join it in a pledge to avoid using the global health crisis as fodder. Like other anti-phishing companies, Cofense sends fake emails to its customers to see if employees click on corrupted links or file attachments. “During a time when fears are justifiably running high, we believe it is wrong to confuse employees and exacerbate concerns further. We call upon the industry and organizations to join us in practicing socially responsible awareness training through thoughtful communication and education – not phish ‘testing,’” the company’s pledge, posted on LinkedIn Thursday, reads. Cybercriminals and suspected nation-state actors have been leveraging coronavirus-related lures in spearphishing […]

The post Leave the pandemic out of your phishing simulations, Cofense says to industry appeared first on CyberScoop.

Continue reading Leave the pandemic out of your phishing simulations, Cofense says to industry

What must be included in a good report writeup when submitting it to whoever (eg. paper skeleton)? [closed]

For some reasons this question is not about vulnerability reporting as many question I read, but rather about the writeup of a good, professional paper that states all details about hole.

I can think of some:

PoC
Date of writing
What el… Continue reading What must be included in a good report writeup when submitting it to whoever (eg. paper skeleton)? [closed]