Rails 7 FTW | WFH is SOP | 586M Passwords Dumped - DevOps.com

In this week’s #TheLongView:
1⃣ Ruby on @Rails 7.0 is go,
2⃣ #WorkingFromHome is still de rigueur, and
3⃣ @HaveIBeenPwned gets far, far bigger.

At @DevOpsDotCom: https://t.co/hcEzoNdi99

— @Richi 😷 Jennings (@RiCHi) December 21, 2021

Boston Cops buy Stingray Spy Stuff—Spending Secret Budget - Security Boulevard

Evil Twin Paid For by … Police all over the nation are using IMSI catchers—such as the infamous Stingray device—to surveil suspects. For example, Boston police spent over $600K in 2019 from a hidden budget (despite Stingray use being effectively illegal in Massachusetts).

Shame about that, because the @ACLU is off to court.

In today’s #SBBlogwatch, we plead the fifth (and the fourth). At @SecurityBlvd: https://t.co/3gIfaiFAw2

— @Richi 😷 Jennings (@RiCHi) December 20, 2021

NSO Zero-Click Exploit: Turing-Complete CPU in Image File - Security Boulevard

SEAR+GP0 vs. NSO: Researchers have reverse engineered NSO Group’s recent zero-click iPhone exploit—from the Pegasus spyware suite. And it’s a doozy: People are using words like, “terrifying,” “alarming,” “dangerous,” “weird,” “amazing,” “impressive,” “brilliant” and “ridiculous.”

It exploits a parser for #JBIG2—an obsolete file format. In today’s #SBBlogwatch, we wonder what other nasties lurk in unmaintained, legacy #OpenSource code.

At @SecurityBlvd: https://t.co/GojEm4oOSo

— @Richi 😷 Jennings (@RiCHi) December 17, 2021

U.S. Govt. CX EO | Mozilla Revenue | Log4j Latest - DevOps.com

In this week’s #TheLongView:
1⃣ Improving U.S. #government #CX,
2⃣ how much money @Mozilla make, and
3⃣ the latest on the #Log4j / #Log4Shell débâcle.

At @DevOpsDotCom: https://t.co/LfQimL14bL

— @Richi 😷 Jennings (@RiCHi) December 15, 2021

Apple AirTag Android App is Absolutely Awful—Tracker Detect Fail - Security Boulevard

Follow the Money: Apple is proud to announce its anti-stalking app for Android. The Tracker Detect app lets Android users scan for malicious, hidden AirTag trackers placed by stalkers, thieves and other bad people. Sounds great, right? Except …

Good grief. In today’s #SBBlogwatch, we get lost.

At @SecurityBlvd: https://t.co/YD5Ig76Q8p

— @Richi 😷 Jennings (@RiCHi) December 14, 2021