Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

244
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#computersecurity

2 posts2 participants0 posts today
Public
Schneier on Security RSS

Why Take9 Won’t Improve Cybersecurity

There’s a new cybersecurity awareness campaign: Take9. The idea is that people—you, me, everyone—should just pause for nine seconds and think more about the link they are planning to click on, the file they are planning to downlo... schneier.com/blog/archives/202

Schneier on Security · Why Take9 Won't Improve Cybersecurity - Schneier on SecurityThere’s a new cybersecurity awareness campaign: Take9. The idea is that people—you, me, everyone—should just pause for nine seconds and think more about the link they are planning to click on, the file they are planning to download, or whatever it is they are planning to share. There’s a website—of course—and a video, well-produced and scary. But the campaign won’t do much to improve cybersecurity. The advice isn’t reasonable, it won’t make either individuals or nations appreciably safer, and it deflects blame from the real causes of our cyberspace insecurities...
#psychologyofsecurity#securityawareness#computersecurity
Public
Jan de Muijnck-Hughes

*Last Call*

I have a #PhD position for UK students, available with myself and @bentnib

This project will be looking at developing new methods for asserting the resilience of existing communicating systems by developing new static analysis methods derived from advanced programming language research.

*Hard Deadline*: Wednesday 16th April 2025

You will belong to @StrathCyber and @mspstrath, as well as gaining access to @spli

strath.ac.uk/studywithus/postg

(Ignore the deadline on the advert)

Please spread the words.

www.strath.ac.ukTowards Type-Driven Assurance of Communicating Systems | University of Strathclyde
#dependentTypes#formalMethods#idris
Replied in thread
Public *
Ramin Honary

US Cyber Agency Puts Election Security Staffers Who Worked With the States on Leave https://www.securityweek.com/us-cyber-agency-puts-election-security-staffers-who-worked-with-the-states-on-leave/

@percepticon so the people responsible for securing elections in the US are on administrative leave now…

By now, anyone who isn’t speaking as if the US was a democracy (in the past tense) is severely misinformed.

#uspol#democracy#trump
Public
beSpacific

In trying to make sense of the #wrecking ball that is #ElonMusk and Trump’s #DOGE, helpful to think about Evil Housekeeper Problem. It’s a principle of #computersecurity roughly stating that once someone is in your hotel room with your laptop, all bets are off. Because the intruder has physical access, you are in much more trouble. And the person demanding to get into your #computer may be standing right beside you. #natsec #security #IT #networks technologyreview.com/2025/02/0 #CFPB #financialsystem

MIT Technology Review · From COBOL to chaos: Elon Musk, DOGE, and the Evil Housekeeper ProblemBy Dan Hon
Public *
Bruce MacDonald

Brian Krebs: "Experts say it is extremely difficult for former members of violent street gangs to gain a security clearance needed to view sensitive or classified information held by the U.S. government. That’s because ex-gang members are highly susceptible to extortion and coercion from current members of the same gang, and that alone presents an unacceptable security risk for intelligence agencies.

"And make no mistake: The Com is the English-language cybercriminal hacking equivalent of a violent street gang."
krebsonsecurity.com/2025/02/te

Placeholder photo of Pepper, the Australian kelpie, to prevent the article from inserting into the timeline a photo of a person wearing shorts in the office.
#uspol#ComputerSecurity
Public *
Ramin Honary
Be careful if you are running an #Ollama web server

According to this article if you run Ollama as a web server, meaning you are running an LLM model locally on your server or home computer, but you have a web portal open to it so people in your organization or home can connect to your server and ask the LLM questions, the Ollama web server is apparently full of security holes. The article mentions three problems:

  • It can leave your computer vulnerable to DDoS attacks from the public Internet
  • The push/pull feature for uploading/downloading models is vulnerable to man-in-the-middle attacks (possibly? as is my understanding)
  • DeepSeek is not a security issue in and of itself, but since DeepSeek is so easy for hobbyists to use, this is causing a larger number of people to use Ollama, increasing the number of people who are vulnerable.

Quoting the article:

the API can be exposed to the public internet; its functions to push, pull, and delete models can put data at risk and unauthenticated users can also bombard models with requests, potentially causing costs for cloud computing resource owners. Existing vulnerabilities within Ollama could also be exploited.

Hackread - Latest Cybersecurity, Tech, Crypto & Hacking News · 7,000 Exposed Ollama APIs Leave DeepSeek AI Models Wide Open to AttackFollow us on Bluesky, Twitter (X) and Facebook at @Hackread
#tech#AI#OpSec
Public
IT News

Does Banning TikTok solve the National Security Issue? - TikTok is set to be blocked in the U.S. after the Supreme Court upheld a law that effecti... - nytimes.com/video/technology/1 #defenseandmilitaryforces #computersandtheinternet #politicsandgovernment #decisionsandverdicts #mobileapplications #tiktok(bytedance) #computersecurity #supremecourt(us) #companyreports #unitedstates #socialmedia #rednote

www.nytimes.com · Video: Does Banning TikTok solve the National Security Issue?TikTok is set to be blocked in the U.S. after the Supreme Court upheld a law that effectively bans the app. TikTok, a Chinese-owned social media platform, has drawn scrutiny from lawmakers for its national security risks and its ties to China. Sapna Maheshwari, a business reporter for The New York Times, examines the security concerns and the reactions to the news.
ExploreLive feeds
About