Red Cross Wants Shielding from Hacks via Digital Emblem - Security Boulevard

#ICRC thinks outside box: The International Committee of the Red Cross (ICRC) is proposing a digital version of its eponymous logo. The idea is that websites and other digital services that sport the “emblem” would gain protection from hacking under international law.

3/ Easy to mock, but it’s an interesting idea.

In today’s #SBBlogwatch, we give it space to ruminate.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/5WBwPEOPgP

— @Richi 🤓 Jennings (@RiCHi) November 4, 2022

OpenSSL Fiasco: What can DevOps Learn? | Elon Fires ‘50%’ of Twitter - DevOps.com

The moral of the story: If life were predictable, it would cease to be life—and be without flavor

In this week’s #TheLongView:
1⃣ The #OpenSSL project has egg on its face, and
2⃣ half of @Twitter’s staff are for the chop tomorrow.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/Ia7B1ToZ7a #DevOps

— @Richi 🤓 Jennings (@RiCHi) November 3, 2022

Reflection attacks: Don’t be part of the problem - ReversingLabs

We see you: Once again, Microsoft is under fire for shipping a service that can early be misused for DDoS attacks. CLDAP — basically LDAP over UDP — can be weaponized to generate huge spikes of bandwidth.

>

Learning from other devs’ mistakes is the only possible silver lining in this cloudy nightmare.

In this week’s #SSBlogwatch we take a long, hard look in the mirror.

For @ReversingLabs’ @SecuredSoftware: https://t.co/mgnJ0O39DI

— @Richi 🤓 Jennings (@RiCHi) November 2, 2022

FBI/CISA Failed: Biden’s Ransomware Summit Convenes, Impotently

Talking Shop at the Talking Shop: The International Counter Ransomware Summit is on in D.C., with representatives from 36 nations and blocs attending. Not including Russia, natch.

But will it amount to anything of substance?

In today’s #SBBlogwatch, we fear not.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/JQjGnok5eB

— @Richi 🤓 Jennings (@RiCHi) November 1, 2022

Chinese Tech: Banned in DC, but not in the States - Security Boulevard

‘Oh, Bother,’ Said Pooh: There’s a massive loophole in the federal ban on Chinese technology from sus firms such as Huawei and ZTE: It doesn’t stop states from buying it.

3/ It’s almost as if states had some sort of constitutional independence—who’d a thunk it?

In today’s #SBBlogwatch, we go hunting for heffalump.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/0QtEyKps5P

— @Richi 🤓 Jennings (@RiCHi) October 31, 2022