Eric Skinner

@fqure @gruber @rmondello Loren Brichter, I believe. @lorenb

@gruber @rmondello Who’s the pull to refresh guy? A billions of gestures a day. THAT is lore

This guy is a liar and a bad liar at that. Total fraud. There was a singular champion of this feature at Apple and that person is @rmondello — who called this guy out in this very thread. (A number of Ricky’s colleagues at Apple are vouching for Ricky here too. Just scroll down.)

@PierrePoilievre Coming from the guy who hasn't released a costed platform yet. Easy to take shots at everyone else, but what's your plan? I'm keen to read it.

Mark Carney has a plan to outspend Justin Trudeau. You can't afford a 4th Liberal term. Vote for Change. Vote Conservative.

In just 7 days, the cybersecurity event of the year goes live! Adapt. Anticipate. Act. Learn cutting-edge strategies to shift from reactive to proactive security with global experts. Secure your spot: spr.ly/6017FvPkZ #ProactiveSecurityStartsHere #Cybersecurity

@Jahfer @harleyf @TgfHfr Sadly, this plan doesn't actually involve trains going any faster than today. Just on dedicated track, so journeys are a little shorter. Un-ambitious.

@harleyf hfr-tgf.ca @TgfHfr

I think about this daily. Who is solving this and how can I help them?

@corg_e Nice try by Microsoft, but still does nothing against MFA proxy attacks e.g. Evilginx...

@ScrumWhat @bettersafetynet I agree — and measuring efficacy is hard for most orgs. If only there were a tool for that (jk jk but seriously what do you think works?)

Its Noon on a Monday, and I've already had 2 calls with organizations that had more tools than they knew how to use / could use / had properly deployed / and were still asking for info on more. TOOLS ARE NOT THE ANSWER! You need to be measuring the efficacy of your stack 1st!

@JoseTheDurval @matthew_d_green techcrunch.com/2024/03/26/fac…

@matthew_d_green Where can I find a realiable source to read up on this?

This thing Facebook did — running an MITM on Snapchat and other competitors’ TLS connections via their Onavo VPN — is so deeply messed up and evil that it completely changes my perspective on what that company is willing to do to its users.

@_ramsaybrown @RachelTobac I’m with you on this guess.

@RachelTobac 1095. The oil smudges from fingers get progressively smaller; suggesting the 5 is being pressed last and 1 first

Here’s a fun social engineering / physical security quiz! Based on this picture of a door lock, what do you think the passcode is for entry? Please include the order the characters are entered.

Microsoft patched a Defender SmartScreen today. @TrendMicro @thezdi discovered it exploited in the wild and has had pre-disclosure protection in place (e.g. in TippingPoint IPS and endpoint behavioral detection) and has broader day-1 coverage now. trendmicro.com/en_us/research…

Also, auto insurance providers should be charging higher premiums specifically for vehicles that are vulnerable to these attacks. Then the manufacturers (notably Toyota) would finally be motivated to do something about it. Note that this is not an "every car" problem.

Banning the @flipper_net is a knee-jerk reaction to the serious problem of car theft. Criminals can use a wide range of alternate tools with the same effect. The govt should be pushing car manufacturers (Toyota in particular) to urgently improve security.

Great blog from my colleague @shanmurphycyber on last weekend’s deepfake scam in Hong Kong.

@andrewsmhay Marsh posts an interesting regular report called its "Global Insurance Market Index". Worth a look.

Does anyone have any data on cyber insurance spend/averages/trends?

Great updated guidelines from @CISACyber on how to #StopRansomware. Lots of great advice in here on how you can protect your organization. cisa.gov/sites/default/…

Tom Hanks’s AI-faked likeness used in an ad. Attackers can use the same technique to fake audio/video verification for BEC attacks. Suspicious-looking payment request from the CEO? Don’t trust the phone number in the email, have a process! gizmodo.com/deep-fake-tom-…

@steffanwatkins @avischarf @flightradar24 @Gerjon_ @petchmo Hey @steffanwatkins I’m curious if you know how the faking works. Does Flightradar24 just blindly trust what gets uploaded by contributors? Seems messy.

@avischarf @flightradar24 @Gerjon_ @flightradar24 @petchmo someone needs to remove the fake EP-PUS data from FlightRadar24 immediately. You are being quoted as an authoritative source and are an unwitting party helping spread disinformation right now. #31ed320b" target="_blank" rel="nofollow noopener">flightradar24.com/data/aircraft/… #31eccaed" target="_blank" rel="nofollow noopener">flightradar24.com/data/aircraft/…

Shortly after the destruction of the An-225, a fake track popped up on Flightradar24. Although many found this amusing, it showed to me that it pro-🇺🇦 folks are able to produce fake flight tracks on Flightradar24. Was today's EP-PUS flight another one? twitter.com/aviationbrk/st…

While not much is known right now, it’s sobering to consider that if a presumably well-funded and skilled security team at MGM can get hit, cyber defenders sure do have a tough job.

@s_guilbeault Mr Guilbeault, the govt is doing a catastrophically bad job of communicating this effectively to the public. Meanwhile the Conservatives are running circles around you with their messages. When are you going to start communicating seriously and intensely? Time is running out.

Every penny of the federal fuel charge goes back to Canadians in the same province it was collected. A majority get MORE back than they pay upfront. ⛽️ Meanwhile, refinery margins doubled = 25+ cents/L gas increase. 🤔 No rebates on that.

If you’re at #BlackHat2023 drop by Mandalay I today at 1:50pm for what I think will be a pretty interesting session. We will indeed give out a $100 gift card for the most interesting question.

Thank you @Fox0x01 for a great #BlackHat2023 keynote in AI risks and opportunities — and thanks for the shoutout to @TrendMicro’s session on Azure ML… check that out at #uncovering-azures-silent-threats-a-journey-into-cloud-vulnerabilities-33073" target="_blank" rel="nofollow noopener">blackhat.com/us-23/briefing…