VPNs Don’t Work on iOS — and Apple Doesn’t Care - Security Boulevard

VPN: The P is for PR — bad PR
“VPNs on iOS are a scam.” That’s what an angry security researcher would have you believe. He’s fed up of reproducing and documenting a serious iOS bug that Apple just won’t fix.

What use is a VPN that randomly leaks data?

In today’s #SBBlogwatch, we pit @DefensiveComput vs. @Tim_Cook.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/BAjWNngfIO

— @Richi 🤓 Jennings (@RiCHi) August 19, 2022

Agile Sucks (Redux) | Plus: DevOps on Mars - DevOps.com

The moral of the story: Summer’s lease hath all too short a date

In this week’s #TheLongView:
1⃣ #Agile is bad, but “Wagile” is worse,
2⃣ This prod is even worse than yours.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/azrc6nOTCd #DevOps @NASA @NASAJPL @MarsCuriosity

— @Richi 🤓 Jennings (@RiCHi) August 18, 2022

Just for devs: Best of Black Hat and DEF CON - ReversingLabs

Hacker summer camp is back, baby: Lots happened in Vegas last week. Most of it should have stayed in Vegas. But some of it bears digging out from piles of mediocre nonsense.

I’ll peruse the news of the week … so you don’t have to.

In this week’s #SSBlogwatch we sort the heat from the chai.

For @ReversingLabs’ @SecuredSoftware: https://t.co/H6DUkWpZlU #AEPICLeak #Electron

— @Richi 🤓 Jennings (@RiCHi) August 18, 2022

Gmail Lets Candidates Spam You — FEC FAIL - Security Boulevard

Email is a Mass Noun: Politicians convinced the Federal Election Commission (FEC) that Google must give them a free pass through Gmail’s spam filters. They want la GOOG to ignore user preferences and deliver their “delightful” fundraising missives direct to your inbox.

Oh, what a tangled web we weave.

In today’s #SBBlogwatch, we order the lobster Thermidor au crevette with a Mornay sauce, served in a Provencale manner, with shallots and aubergines, etc., etc. …

At @TechstrongGroup’s @SecurityBlvd: https://t.co/DnKlTnyyo8 @ShaeFlorentine

— @Richi 🤓 Jennings (@RiCHi) August 15, 2022

Cisco Pwned by ‘Russian’ Gang — Data Leaked, Egg on Face - Security Boulevard

MFA FAIL: Cisco got hacked by a ransomware gang—a broker for the UNC2447 threat actor, linked to the Yanluowang crew (pictured). This was way back at the end of May, but Cisco’s only now talking about it.

What a mess.

In today’s #SBBlogwatch, we try to learn from Cisco’s mistakes.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/F3WgYaRi9c

— @Richi 🤓 Jennings (@RiCHi) August 12, 2022