#RSAC is bustling — AI + security is huge: #StrongerTogether? - ReversingLabs

#RSAC #AI snacks #StrongerTogether:

At #RSAC, you can’t move for #AI chatter. How will it help with #SoftwareSupplyChain #security? And will it help bad actors?@MosconeCenter is full of people again. In this week’s #SSBlogwatch we believe the hype. For @ReversingLabs’ @SecuredSoftware: https://t.co/2SaXAzF1II

— @Richi 🤓 Jennings (@RiCHi) April 26, 2023

FINALLY! Google Makes 2FA App Useable — BUT There’s a Catch - Security Boulevard

2FA OTP ASAP?

:@Google’s #2FA #OTP app now remembers settings between installs. $GOOG’s #Authenticator app has been worse than useless.

But Google might have reduced your security. In today’s #SBBlogwatch, we sync our thoughts.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/OqBnSHvkZY

— @Richi 🤓 Jennings (@RiCHi) April 25, 2023

Governments Try to Ban Encryption (Yet Again) - Security Boulevard

CSAM: Déjà Vu

Yet again, they’re tugging on the “think of the children” strings.

Really? This tired old argument again? In today’s #SBBlogwatch, we repeat ad nauseam: You can’t make #math illegal.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/ZoFovPDZQ1

— @Richi 🤓 Jennings (@RiCHi) April 24, 2023

EU cyber laws ‘will’ make FOSS devs liable - ReversingLabs

The Python Software Foundation is very, very unhappy with the draft Cyber Resilience Act (CRA) and Product Liability Act (PLA).

European lawmakers want all software makers to be liable for security holes. Even non-profit or hobbyist developers could be sued for negligence.

The EU’s draft Cyber Resilience Act (CRA) and Product Liability Act (PLA) would “create a chilling effect” and do “irreparable harm,” according to the organization behind Python and PyPI. When replicated across other parts of the software supply chain ecosystem, we risk the whole house of cards crashing down — as devs race to limit their liability.

The goal might be laudable, but some aspects need a major rethink. In this week’s Secure Software Blogwatch, we fear unintended consequences.


Read more: EU cyber laws ‘will’ make FOSS devs liable

Drop Everything: Update Chrome NOW — 0-Day Exploit in Wild - Security Boulevard

It’s Help|About time:

:@GoogleChrome has high-severity vuln. Scrotes already exploiting it.#CVE20232033 is a nasty zero-day that needed @Google to rush out an emergency patch.

In today’s #SBBlogwatch, we head for the hamburger.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/KoDNHxIRyk

— @Richi 🤓 Jennings (@RiCHi) April 17, 2023