Skip to main content

Items tagged with: infosec

Search

Items tagged with: infosec


Who would want to protect the people in charge at this point with their #Infosec ?

Seriously.


“Unless you are using #GPG, email is not end-to-end encrypted, & the contents of a message can be intercepted & read at many points, including on Google’s email servers,” said Eva Galperin, director of #cybersecurity at the Electronic Frontier Foundation.

#NationalSecurity experts have expressed alarm over the #Trump admin’s denial that the leaked #Signal chat contained #classified information.

#Gmail #Signalgate #Signal #OpSec #InfoSec #military #idiocracy #kakistocracy


Data #security experts have expressed alarm that US #NationalSecurity professionals are not…[just]…using the govt’s suite of secure encrypted systems for work communications such as JWICS, the Joint Worldwide Intelligence Communications System.

Most concerning, however, is the use of personal email, which is widely acknowledged to be susceptible to hacking, spearfishing & other types of digital compromise.

#Gmail #Signalgate #Signal #OpSec #InfoSec #military #Trump #idiocracy #kakistocracy


The use of personal email, even for unclassified materials, is risky given the premium value foreign #intelligence services place on the communications & schedules of senior govt ofcls, such as the #NationalSecurity adviser, experts say.

…Waltz has also created & hosted other #Signal chats w/Cabinet members on sensitive topics, including on #Somalia & #Russia’s war in #Ukraine, said a senior #Trump admin official.

#Gmail #Signalgate #OpSec #InfoSec #military #idiocracy #kakistocracy


#MikeWaltz has had less sensitive, but potentially exploitable information sent to his #Gmail, such as his schedule & other work documents, said ofcls, who, like others, spoke on the condition of anonymity to describe what they viewed as problematic handling of information. The ofcls said Waltz would sometimes copy & paste from his schedule into #Signal to coordinate meetings & discussions.

#Signalgate #NationalSecurity #OpSec #InfoSec #military #Trump #idiocracy #kakistocracy


A snr #MikeWaltz aide used the commercial email service for highly technical conversations w/colleagues at other govt agencies involving sensitive #military positions & powerful #weapons systems relating to an ongoing conflict, acc/to emails reviewed by WaPo. While the #NSC official used his #Gmail account, his interagency colleagues used govt-issued accounts, headers from the email correspondence show.

#Gmail #Signalgate #Signal #NationalSecurity #OpSec #InfoSec #Trump #idiocracy #kakistocracy


The use of #Gmail, a FAR LESS secure method of communication than the encrypted messaging app #Signal [which isn’t secure enough for these kinds of comms either], is the latest example of questionable #security practices by top #NationalSecurity ofcls already under fire for the mistaken inclusion of a journalist in a group chat about high-level planning for #military ops in Yemen.

#Signalgate #Signal #OpSec #InfoSec #military #Trump #idiocracy #kakistocracy


Maybe I’m just paranoid, but what could possibly go wrong with this idea? Grimace.

“Based on the analysis of this data, Microsoft can remotely apply fixes such as removing problematic drivers or updates and changing configuration settings.”

bleepingcomputer.com/news/micr…

#microsoft #windows #infosec #security


Sensitive content


#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(8/8)

... in the interests of the state? The answer is primarily that 👉it wanted to … strengthen the state authority itself;👈 it concentrated on the power of the state … Primarily to the state’s external power, in relation to other states."

primary source:
fee.org/articles/mercantilism-…

//


#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(7/n)

... of 👉economic policy [as a conception of society in which all interests were to be made obedient to the monarch captured in the famous phrase of the #French #king, Louis XIV – ‘I am the State’]👈."

"#Mercantilism as a System of Power

What was the object of mercantilism in using economic forces...


#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(6/n)

... historian #EliHeckscher)

Why #Trump espouses it, could easily be explained by the central element of this policy introduced in the late absolutist reign of the #SunKing, #LouisXIV:

"#Mercantilism as a Conception of Society

Mercantilism revealed a fairly uniform conception of general social phenomena in the field of economics, and this, too, reacted in many ways on the...


#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(5/n)

... commodities, was the theory of the danger from which economic policy was chiefly 👉to protect a country lay in having too many goods [imported from other countries].👈

Mercantilism as a Monetary System

The👉 connection between money and goods in the mercantilist conception of economics was represented in the balance of trade theory👈 … "

("Mercantilism (1935), Swedish economic..


#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(4/n)

...commerce, and trade into directions different from how individuals in the market may have wanted to direct their own activities, the more it created incentives for “#Smuggling” – #BlackMarkets – to get around the controls."👈

The basics:

"#Mercantilism as a System of Protection

The attitude of mercantilism towards the means of supplying the wants of human beings, i.e., towards...


#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(3/n)

... of souvereign and autonomous states, while the #US will be impoverished by the economic fallout of the #TrumpTariffs. They constitue a #Mercantilist trade policy, which has historically been proven to be detrimental to its practitioners: it gives rise to #Smuggling and anarchy:

"👉The more the government’s #Mercantilist policies attempted to restrict and divert manufacturing,...



#CEUM

#CdnPol #CANpol #USpol
#CETA #InfoSec #Democracy #NationalSecurity
#Mercantilism

(1/n)

While I agree with the spirit of your post, the timing for the #EU deal (#CETA, if you are referring to that) predates the #Trump presidencies:

"... Officials announced the launch of negotiations on 6 May 2009 at the #Canada-#EU Summit in #Prague...."

"...#JustinTrudeau, Prime Minister of Canada, travelled to #Brussels on 30 October 2016 to sign..."

en.wikipedia.org/wiki/Comprehe…


So the big conversation happening now among my friends and associates is about travel, privacy, and safety when coming in close contact with TSA, ICE, or whoever wears a gotdamn uniform of some kind.

We're all reading that article from EFF, looking up how to use burners, #infosec for dummies, etc. It's a lot.

Today, I let myself feel the anxiety at the thought of traveling without my regular devices. But then I was like, Wait. You've been here before. You didn't get a cellphone until....2001ish?

It was a Nokia phone. Not even a flip phone. Just a chonky Nokia, blue, with buttons and a screen to show me phone numbers. Did I have texting? I don't think so.

I went all the way to Amsterdam without a cell phone

There was no GPS. No maps. No scrolling. I traveled and read books or wrote about my random hook ups in my paper journal. I saved it all for my blog. I went to INTERNET CAFES.

That reassured me, a little.

Roll it back to 1998, folks. We did it before.


An ok overview of security considerations & mitigating controls to protect privacy and reduce risk of harm when crossing the US border.

The author misses some utterly crucial details however.

1) When your encrypted device is on, it is in an *unlocked* state. Only by powering off such a device is it in an encrypted state. Further, MicroSD cards are often unencrypted. Check before you fly, and power off before the border.

2) (next post)

theguardian.com/technology/202…

#privacy #infosec


#Republicans in the #House hearing are mostly ignoring the #Signal chat. Rep #DanCrenshaw, Republican of Texas, was one of the few to even bring it up.

“I will note I always use fire emojis when I see terrorists getting killed,” he said.

🙄
#law #NationalSecurity #SignalGate #Trump #idiocracy #kakistocracy #intelligence #InfoSec


The fact that senate confirmed members of the national security apparatus were copacetic to use a consumer grade (although rather secure) communication tool rather than the definitely existing communication tools that might not be on their mobile device (probably for a #InfoSec reason). Was there any indication that there was anyone who said "take this offline, this isn't secure"


[Parnell stmnt cont]

“The American people see through the Atlantic’s pathetic attempts to distract from President #Trump’s #NationalSecurity agenda.”

Several retired military commanders have pushed back on the claims that the details in #PeteHegseth’s messages were not classified.

#law #SignalGate #Signal #idiocracy #kakistocracy #intelligence #InfoSec


#JasonCrow showed the advanced air defense systems the #Houthis have, & then said it was outrageous that the #Trump admin was not accepting responsibility for the leak. “It is a leadership failure, & that’s why Secretary #Hegseth, who undoubtedly transmitted #classified sensitive operational information via this chain, must #resign immediately,” he said.

#law #NationalSecurity #SignalGate #Signal #idiocracy #kakistocracy #intelligence #InfoSec


Rep #JasonCrow, #Democrat of Colorado, asked #TulsiGabbard if she was traveling during the time of the attack & the #Signal discussion. She said she was traveling in Asia, but did not recall what country.

Crow made the point that the #Houthis have been able to shoot down U.S. MQ-9 Reaper drones, one of the weapons used in the strike on #Yemen & got #Gabbard to say she knew Houthis had that capability.

#law #NationalSecurity #SignalGate #Trump #idiocracy #kakistocracy #intelligence #InfoSec


While Rep Raja Krishnamoorthi, #Democrat of IL, spoke, he displayed an oversized printout of the #Signal texts published by #TheAtlantic this morning. #Krishnamoorthi referenced the graphic multiple times while questioning Lt. Gen. Jeffrey Kruse, director of the #Defense #Intelligence Agency, on whether the information detailing operational plans was #classified or not.

Kruse admitted his agency would define the type of information shared as classified.

#law #NationalSecurity #Trump #InfoSec


In the #intelligence hearing, Rep #JoaquinCastro, #Democrat of Texas, took issue with the intelligence officials saying the information in the #Signal chat on the #Houthi strikes was not #classified. “You all know that’s a lie,” he said. “It’s a lie to the country.”

#law #NationalSecurity #SignalGate #Trump #idiocracy #kakistocracy #intelligence #InfoSec


John #Ratcliffe, the #CIA director, said the newly released portions of the chat show that he did not share #classified information there. “My answers haven’t changed,” he said. “I used an appropriate channel to communicate sensitive information. It was permissible to do so. I didn’t transfer any classified information.”

#law #NationalSecurity #SignalGate #Signal #Trump #idiocracy #kakistocracy #intelligence #InfoSec


#EdwardCoristine is among the most visible members of the #DOGE effort that has been given sweeping access to official networks as it attempts to radically downsize the U.S. government.

Past reporting had focused on his youth - he is 19 - and his chosen nickname of "#BigBalls," which became a pop culture punchline. #Musk has championed the teen on his social media site X, telling his followers last month that "Big Balls is awesome."

#USpol #InfoSec #NationalSecurity #Trump


Exclusive: #DOGE staffer, '#BigBalls', provided tech support to #cybercrime ring, records show

The best-known member of Elon #Musk's U.S. DOGE Service team of technologists once provided support to a cybercrime gang that bragged about trafficking in stolen data & #cyberstalking an #FBI agent, according to digital records reviewed by Reuters.

#USpol #InfoSec #NationalSecurity #Trump
reuters.com/world/us/doge-staf…




The problem Aral is that US news is *searching hard* to demonstrate phishing attacks, keylogging, and backdoors / OS malware as somehow issues with #signal. Just saw an NBC piece that was atrocious where they blamed bogus QR codes as somehow a Signal problem. They'll find #infosec people to either scramble the facts or talk about phishing and be taken out of context.


“If these idiots are accidentally roping in the editor of the Atlantic on secret war deliberations, what are the chances they’re making other serious information-security mistakes, including ones that create openings for foreign intelligence agencies? Probably pretty high.” #trump #infosec #signal

thebulwark.com/p/high-cost-of-…


#SignalGate #USpol #Infosec

I'd like to reply to that with the following quote from #PeteHegseth himself:

mastodon.social/@flexghost/114…


Remember when Pete Hegseth said anyone reckless with sensitive government information should be fired on the spot and criminally prosecuted?

Pepperidge Farm remembers.

#ButHerEmails



If you also use BlueSky I have provided you a Short Stack there:

tisiphone.net/2025/03/25/blues…

It is mostly a duplicate of the Short Stack here:

tisiphone.net/2025/03/18/updat…

These are intel-ish news feeds mostly consisting of people who post a lot of relevant articles, commentary, and punditry. tldr; follow these and keep updated on cyber stuff.

#cybersecurity #infosec


Moral of the story: be sure to first sweep your hot cars for any AirTags, LowJacks, etc #privacy #InfoSec

[…] detectives used GPS on a [stolen] car identified during the robberies to trace it back to a meeting spot used by the group. [who] would […] move “large pry bars and jaws of life tools” into stolen vehicles used in the robberies while intentionally leaving their cellphones [behind] to avoid being caught. They returned to the meeting locations.

washingtonpost.com/dc-md-va/20…