Now Online Safety Act is law, UK has ‘priorities’ – but still won’t explain ‘spy clause’

November 21, 2024 at 05:46AM The UK government has outlined plans under the Online Safety Act to enhance online safety by mandating platform providers to prevent online harms. It emphasizes protecting children and promoting collaboration with Ofcom. However, it lacks details on the controversial Section 122 regarding law enforcement access to private communications. ### Meeting … Read more

ChatGPT Exposes Its Instructions, Knowledge & OS Files

November 15, 2024 at 05:24PM ChatGPT’s architecture may expose sensitive data and internal instructions, raising security concerns. Despite OpenAI’s claim of intentional design, experts warn this could enable malicious users to reverse-engineer vulnerabilities and access confidential information stored in custom GPTs. Users are cautioned to avoid uploading sensitive data due to potential leaks. ### Meeting … Read more

Public sector cyber break-ins: Our money, our lives, our right to know

November 4, 2024 at 05:34AM Transport for London experienced a significant cyber attack in September, exposing customer data and affecting ticketing systems. Initial claims of minimal damage were contradicted by customer complaints. The piece argues for greater transparency in public sector cybersecurity, suggesting the need for independent investigations to improve accountability and prevent future breaches. … Read more

SEC Fines Companies Millions for Downplaying SolarWinds Breach

October 25, 2024 at 05:09PM The SEC has charged four companies for inadequate disclosures related to the 2020 SolarWinds breach. Unisys faced the largest penalty of $4 million. The SEC aims to deter vague breach disclosures and stresses the importance of precise communication to avoid future legal ramifications, urging closer collaboration between CISOs and legal … Read more

4 Instructive Postmortems on Data Downtime and Loss

March 1, 2024 at 06:15AM The text discusses the concept of “blameless” postmortems in tech companies and provides detailed examples of such postmortems from GitLab, Tarsnap, Roblox, and Cloudflare. These case studies uncover the root causes of outages, the impact of the incidents, and the lessons learned in data security and continuity planning. The examples … Read more

US senator: Govts spy on Apple, Google users via mobile notifications

December 6, 2023 at 02:59PM U.S. Senator Ron Wyden disclosed that governments worldwide request mobile push notifications from Apple and Google to surveil users. Wyden urged the DOJ to allow tech companies transparency regarding these demands. Both companies have voiced support for informing users about such government data requests in their transparency reports. Meeting Takeaways: … Read more