Not that ‘responsible’ disclosure shit again 🙄 No vendor uses that term unless they want to call someone irresponsible. Even if someone drops 0day, patch & move on. Going after a researcher is a great way to turn 1 bad relationship into many terrible relationships.

I've written something about Microsoft's apparent stance that not following made up responsible disclosure frameworks is criminal activity. doublepulsar.com/microsofts-s...

Tony Blair’s views on AI are slightly coloured by the amount of money he’s trousering for them.

GitHub’s absolutely full of zero days they don’t remove by policy. (For competitor products).

I’ve done something terrible

What an idiot. His way to try to explain this away is adding a comma in "lower value human capital" www.bbc.co.uk/news/article...

lapsus$ guys are claiming the github thing, saying they're doing a crossover with TeamPCP cyberplace.social/@GossiTheDog...

We're vastly overdue for a parody documentary show about a cast of disparate oddballs deciding the economy is bad enough that starting a k-pop band is their best idea. "That's Rodney, he's the cute one. That's Jennie, she has two mortgages. Ooo, and that's Kevin, he can dance and has diabetes."🤣

If anybody at Microsoft fancies a free SSIRP, somebody please fix the Entra ID tenant name phishing - the team responsible can't just stick their head in the sand forever, it's a simple injection. cyberplace.social/@GossiTheDog...

I’ve dealt with several thousand cyber incidents over the past 5 years, and currently lead a global emerging threat team. Amount of those being GenAI incidents: zero. Amount being foundational causes: every single one.

Subnautica 2 launched 20 minutes ago. Safe to say Krafton will be forced to pay out the $250 million bonus it tried very hard (via advice of ChatGPT) to avoid paying

it's the state opening of parliament in the UK tomorrow, and I'm mildly concerned I may get a call at 8am to step in to be Prime Minister

When I was at Microsoft doing threat intel, when something happened (COVID or whatever) we'd get a request from up top to search customer data and find threats themed around the current event. It sucked. Anyway, good luck to all the threat intel people at security vendors, who are now AI marketers.

"Yup, all that data's been deleted, trust us, bro"

If you've ever played MindsEye and wondered what the hell happened, at one point it was supposed to be a blockchain play to earn game 🤣

Microsoft employees should not have sided with their employer and tutted at employees protesting about Gaza - as it turns out said protesting employees were right. cyberplace.social/@GossiTheDog...

Tempted to post this to LinkedIn to trigger a bunch of executives

Every so often I encounter somebody who thinks I'm mad at them on the internet. I'll be honest - I can't remember who I'd be mad at, or why, or hardly who anybody even is. I remember Ned's dogs and that's about it.

PHANTOM OFFICE: Elon Musk’s AI company xAI that runs X chatbot Grok has quietly moved its official European point of contact for users to Estonia – to a building whose owner says it has no contract with the company or its representatives. Gift link: www.ftm.eu/articles/elo...

Absolutely massive cock up with Forza Horizon 6 launch - devs accidentally uploaded full release, unencrypted and without DRM, to Steam over a week before even early access launch. People have torrented it and are casually playing on YouTube etc. www.youtube.com/watch?v=7-r8...

This game is incredible, it’s a masterpiece. Well written, perfect vibes, hilarious and heartfelt.

I will never not be baffled by a society that has "left wing extremism" as its boogeyman when it literally amounts to a belief that it would be good if people were fed, housed, and not murdered

Asha somehow managed to convince Satya to halt development on Gaming Copilot (Phil didn’t like it either). This is really smart.

Happy May the Fourth here is the only music video dub I ever created

I've never seen The Traitors but 100% watching this for Bella Ramsey having a conversation with Ross Kemp. She is my queen.

Microsoft probably want to get the VibeVoice people to fix their Github security disclosure process It says to contact MSRC, MSRC say they don't cover VibeVoice and close the reports.

I hope Dig Dig bit his dick off.

6 hours of Kiln today. It’s great - a team objective game where you design your own pottery and then fight with it. There’s so many fun details, eg if you design yourself correctly you can fit through shortcuts in the maps.

Microsoft SBC season 27 episode 5: Nelson does a spot of Vibe Compliance

yesterday I reported on GitHub employee concerns about reliability and leadership, and then hours later GitHub suffered a catastrophic outage 😬 www.theverge.com/news/918001/...

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened. doublepulsar.com/microsoft-vi...

If anybody thinks I think GenAI cyber risks are overblown as I’m a Luddite - no, lead a global team of people who deal with emerging cyber threats and have done for years. We find the weird stuff. Amount of time I have spent dealing with incidents from GenAI cyber threats to date: zero.

My favourite Mastodon thing is being consistently able to drop news stories several months early as nobody can figure out how to use Mastodon 🤣 cyberplace.social/@GossiTheDog...

Orgs aiming to implement a Mythos-ready security program when they have a flat network with default creds everywhere and ransomware actors casually logged in.

Can confirm

I feel like I’ve fallen out of love with cybersecurity. It used to be, to me, about protecting people. Now it’s just become an endless grind of people trying to protect budgets through GenAI fear. So much of cybersecurity now is just total nonsense.

Orgs aiming to implement a Mythos-ready security program when they have a flat network with default creds everywhere and ransomware actors casually logged in.

Well done to the US government for publicly supporting the losing side in an election.

My thoughts on Anthropic Mythos. It's not the end of world (and quite frankly so far appears to be completely irrelevant to the real world). cyberplace.social/@GossiTheDog...

I talked to somebody who works at Anthropic recently, they said it’s the most alarming corporate culture they’ve ever seen and feels more like a cult than an employer.

there's so many lol moments in this story guys I think GenAI might be a grift, not sure, something gives me the feeling 🤌

time to organise a GoFundMe for US cybersecurity

Yeah Project Glasswing seems cool and all but when you're screaming from the rooftops about "OUR AI IS SO POWERFUL WE CANT RELEASE IT BECAUSE THE RISKS ARE TOO GREAT" then what you're really doing is product marketing.

every major infosec vendor, standard and threat intelligence circle being based in the US or Israel is fucking stupid. I don't think people are defending democracy any more, they're helping genocide.

Hope everyone is enjoying the precedents our government is setting entirely without even an illusion of democratic process or control.