Chinese Tech: Banned in DC, but not in the States - Security Boulevard

‘Oh, Bother,’ Said Pooh: There’s a massive loophole in the federal ban on Chinese technology from sus firms such as Huawei and ZTE: It doesn’t stop states from buying it.

3/ It’s almost as if states had some sort of constitutional independence—who’d a thunk it?

In today’s #SBBlogwatch, we go hunting for heffalump.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/0QtEyKps5P

— @Richi 🤓 Jennings (@RiCHi) October 31, 2022

OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1 - Security Boulevard

Worse Than Heartbleed?
OpenSSL has a new “critical” bug. But it’s a secret—until next month.

It’s a big, fat, hairy deal. OpenSSL is in just about everything.

In today’s #SBBlogwatch, we make sure our #SBOM​s are up to date.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/CdrJbcSpXq

— @Richi 🤓 Jennings (@RiCHi) October 28, 2022

Meta Income Down by Half | Will Apple Make it Worse? | Linux Secure Boot Fix - DevOps.com

The moral of the story: Your time is limited—so don’t waste it living someone else’s life

In this week’s #TheLongView:
1⃣ @Meta’s latest results are *very* bad,
2⃣ @Apple wants its cut of @Facebook ads, and
3⃣ Lennart “@pid_eins” Poettering proposes a new #SecureBoot for #Linux.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/9FGhbIS8yc #DevOps

— @Richi 🤓 Jennings (@RiCHi) October 27, 2022

Google pairs GUAC with SLSA to take a bite out of software supply chain insecurity - ReversingLabs

Dip into this tasty repo: Google is putting its weight behind a project to offer a comprehensive view of your software. Enter GUAC: Graph for Understanding Artifact Composition.

3/ It’s an #OpenSource project. In this week’s #SSBlogwatch we go to @GitHub and check it out.

For @ReversingLabs’ @SecuredSoftware: https://t.co/wg73kjbuK4

— @Richi 🤓 Jennings (@RiCHi) October 26, 2022

Chinese Huawei ‘Spies’ Charged — FBI is Mad as Hell - Security Boulevard

China pwned by U.S.
The Chinese government sent two spies to extract information about the U.S. case against Huawei. But they didn’t expect their contact to be a double agent.

Interesting timing, with the announcement right after #XiJinping changed the constitution to stay in power indefinitely.

In today’s #SBBlogwatch, we won’t share our hunny with heffalumps or woozles.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/WNiFqjIFL1

— @Richi 🤓 Jennings (@RiCHi) October 25, 2022