Tag: #DataSecurity

50 Years of Wow

–>50 Years of Wow- I lived through 5 decades of computing milestones

The Stone Age of computing.
Everyone’s all, “Wow, chatGPT, amazing, a real milestone, everything will change from now on”. And they’re right – but probably don’t realize that this is not the first time something like this has happened. In fact there’s been wave after wave of computing technological innovation ever since the industry got started in the 1950’s. Here are some of the waves I’ve experienced personally.

Chris Wysopal on Twitter: “Computer scientists from Stanford University have found that programmers who accept help from AI tools like Github Copilot produce less secure code than those who fly solo.” Looks like there will be a market for AI vuln remediation!

“Here’s a list of 43 cybersecurity YouTube channels:
1. Hak5 — General cybersecurity coverage.
2. The XSS Rat — Everything bounty hunting.
3. ITProTV — General cybersecurity coverage.
4. Infosec Institute — Cybersecurity awareness.
5. Cyrill Gössi — Extensive cryptography videos.”

ALL THE BANKS ARE BROKE BECAUSE
https://www.youtube.com/shorts/ao_l4ulpr7I

@PeterZaitsev Dec 25 Looks like Lawyers driven behavior. Unfortunately being honest with customers may well conflict with minimizing legal exposure
LastPass Just Sent This Email to Let Customers Know Their Encrypted Passwords May Have Been Hacked

Bankman-Fried Judge Recused Because Husband’s Firm Advised FTX
https://www.bnnbloomberg.ca/bankman-fried-judge-recused-because-husband-s-firm-advised-ftx-1.1863101

SEC General Counsel Quits After ‘Cozy Relationship’ With SBF and FTX
SEC General Counsel Dan Berkovitz said that he was leaving the agency on January 31, according to a Dec. 22 report by the Washington Examiner.The government official had previously “wined and dined” with FTX founder Sam Bankman-Fried and his lobbyists, it added. “After thirty-four years of public service, it is time for me to pursue new and different challenges and opportunities,” Berkovitz said. Additionally, Berkovitz is a former commissioner of the Commodity Futures Trading Commission (CFTC). Furthermore, his announcement comes on the same day that SBF was granted bail for $250 million.

Connections with FTX revealed via @PublicsTrust FOIA.https://t.co/ItvOt3CGwe

— Protect the Public’s Trust (@PublicsTrust) December 22, 2022

SEC’s Backroom Deals With Bad Actors

The Examiner revealed that Berkovitz had a “cozy relationship” with SBF and FTX. It cited emails obtained by the watchdog Protect the Public’s Trust, which also reported on the resignation. SBF, FTX General Counsel Ryne Miller, and FTX President Brett Harrison met with Berkovitz at a luxury restaurant in Oct. 2021, it reported. Michael Chamberlain, director of Protect the Public’s Trust, said:

“If ever there were a scene to conjure up a vision of a D.C. rigged toward corrupt insiders at the expense of the little guy, it would be difficult to top this one,”

“Not long before its collapse and a raft of fraud charges, SBF and his gang were wooing one of their would-be regulators no doubt to try to manipulate the regulations to their advantage,” he added. Republican Senator Tom Emmer also alluded to multiple meetings between the SEC and FTX, He said that they were crafting a special regulatory framework to benefit FTX. Additionally, in reference to SEC chair Gary Gensler’s comments about using every tool available to enforce compliance, he said:

“Making backroom regulatory deals with bad actors is not a tool in the SEC’s toolbox.”

.@GaryGensler and the SEC had more meetings with SBF and FTX/IEX than anyone else in crypto, allegedly to craft a special regulatory framework designed to benefit FTX alone.

Making backroom regulatory deals with bad actors is not a tool in the SEC’s toolbox. https://t.co/LgigWeM8v5

— Tom Emmer (@RepTomEmmer) December 22, 2022

Federal Regulators Responsible

Chamberlain went on to state that government officials and regulators should also be held accountable:

“While the collapse of FTX and the behavior of its executives has certainly made a lot of news, the actions of federal officials should also be under scrutiny.”

Gary Gensler also met with SBF around eight months before his crypto empire crumbled. At the meeting, they discussed the concept of a new SEC-approved crypto trading platform. If approved, SBF and his companies would have a clear advantage over its competitors.

Earlier this month, Democrat Representative Ritchie Torres blamed Gensler for the FTX collapse. “When it comes to FTX, Chair Gensler fundamentally failed as a regulator, and he has no one but himself to blame,” he stated at the time. The rabbit warren of deception goes deeper still. As reported by BeInCrypto, anti-crypto Senator Elizabeth Warren also had ties with the Bankman-Fried family.

Scandale de Cambridge Analytica : Facebook accepte de payer 725 millions de dollars à la justice-Libération

Hate Leader Nick Fuentes Is Recruiting Incels
The racist troll who dined with Trump is courting a new online following: raging misogynists.

Twitter’s mercurial new boss has allowed right-wing extremists to return, while banning reporters on flimsy excuses

’15 to 18 million Americans’ may lose Medicaid coverage in 2023
https://www.alternet.org/15-18-million-americans-medicaid/

——————–

Lawyers better get their sh’t together

NOBODY WILL EVER BE ABLE TO EXPLAIN TO ME
WHY THIS TOOK TILL 2023

ALL lawyers must take cybersecurity training

#NewYork will require attorneys to have 1 hour of annual training in #Cybersecurity, #DataSecurity, and #Privacy beginning in 2023. #CyberLaw

New York to Require Attorneys Receive Data Privacy, Security Training
https://www.secureworld.io/industry-news/new-york-attorneys-cybersecurity-privacy

With the risk of data breaches growing—and a quarter of law firms reporting in a 2021 survey that they experienced their own breaches—attorneys barred in New York must now formally brush up on their cybersecurity training.

Bloomberg is reporting that the State of New York is the first U.S. jurisdiction to require attorneys to complete one credit hour of cybersecurity, privacy, and data protection training as part of their biennial Continuing Legal Education (CLE).

The new requirement will go into effect July 1, 2023. Here are details on the new requirement from the New York State Unified Court System.

Courses focused on privacy and data protection with a bent toward cybersecurity are commonplace; New York attorneys can begin earning their new CLE credit as soon as January 1, 2023.

With recent headlines revealing breaches discovered when attorneys mistakenly sent sensitive data (e.g., the Alex Jones trial and Donald Trump’s lawyers’ release of emails via Dropbox link related to Jan. 6 Committee proceedings), attorneys need to learn how to prevent and/or respond to internal mishaps and external cyberattacks.

“As attorneys, we have an important ethical and professional duty to safeguard and protect the confidentiality of client information, including electronic information. Part of this obligation is to stay up to date with the fast-moving threat landscape, regardless of the area of law we practice or the size of our law firm. Failing to prioritize data security can lead to significant consequences for attorneys, including business interruption, data and financial loss, and reputational damage.

The current landscape requires lawyers to stay up to speed with changes in technology used to practice law and understand the need to protect and safeguard this information from threat actors. New York’s new CLE requirement is undoubtedly an important milestone in the industry.”

“While New York is the first state to do so, we expect to start seeing more states adopt similar requirements,” said Jane Petoskey, Esq., Associate Attorney. “New York’s requirement aligns with ABA Formal Opinion 477R (2017), 483 (2018), and 498 (2021), which set forth formal guidance on attorneys’ obligations related to cybersecurity responsibilities, as well as those arising from an electronic data breach or cyberattack.”

Jake Bernstein, Esq., Partner, added, “Both the American Bar Association (ABA) and states’ model rules of professional conduct already require attorneys to be aware of the risks that come with the benefits of the use of technology (see Model Rules 1.1, 1.6, 5.1, and 5.3), so as technology advances and security inherently becomes a greater issue, we expect more states to enforce more training related to attorneys’ cybersecurity and privacy practices.”

Here’s more on the new CLE program rules related to the cybersecurity, privacy, and data protection requirement.