Marc Rogers
@cjunky.bsky.social
Ramblings of a Mad Englishman: Hacker @ BBC's Real Hustle & Mr Robot. Head of Sec @ DEF CON. Founder @ CTI-League, Ransomware Taskforce, w00w00, CDC NSF, (He/Him). Also Twitter @marcwrogers Mastodon cj@chaos.social
We are the mighty and the chosen. Our power cannot be contained. cultdeadcow.com/nsf/
The Official Pulpit of CULT OF THE DEAD COW@cultdeadcow.com · 9mo ago*FINAL MUSTER* CULT OF THE DEAD COW is saddened to report that longtime cDc Ninja Strike Force member, Delchi, has passed over the great rainbow teleconference bridge. He can now be found amongst the most blessed celestial engineers, venerating the great DemonSeed Elite, k-rad be his name. **
Delchi was a giant of a man in so many ways. It’s easy to forget that he was a legend in the DJ world, a master craftsman, an artist, an engineer, a pioneer and a hacker in the truest sense of the word. His light was so bright that everything seems a little darker now. I will miss you Brother.
NEW: The national security risks of Trump’s axing of DEI programs. The rollback is casting a wide net into the intel and DOD agencies. Fmr NatSec officials say it weakens operations, erodes morale and limits the U.S.’s ability to navigate global threats → www.nextgov.com/cybersecurit...
Trump’s anti-DEI efforts damage national security, former officials say
The rollback of diversity, equity and inclusion initiatives weakens intelligence operations, erodes workforce morale and limits the U.S. government’s ability to navigate global threats, former nationa...
nextgov.com
On today's Lawfare Daily, Stephanie Pell spoke to Maia Hamin, Trey Herr, and @cjunky.bsky.social about the Cyber Safety Review Board’s report on the 2023 Microsoft online intrusion, the lagging state of cloud security policy, and more.
Lawfare Daily: What Can Be Done to Improve Cloud Security with Maia Hamin, Trey Herr, and Marc Rogers
Discussing cloud security
lawfaremedia.org
Maia Hamin, Trey Herr, and @cjunky.bsky.social discuss a CSRB report on the 2023 intrusion into Microsoft’s cloud infrastructure, and what it reveals about the current state of cloud security policy.
Cloud Un-Cover: CSRB Tells It Like It Is But What Comes Next Is on Us
Lagging policy upholds a status quo in which cloud vendor’s design decisions about how their systems work (and work together) are almost entirely opaque.
lawfaremedia.org
It is important that we talk about government boundaries and ensure our rights are protected. However must make sure this conversation is bi-partisan, balanced and constructive. We must also make sure we don’t tear down our national defenses in the process. 5/5
We have no “cyber 9-1-1” in this country. There is no one to call when you face a cybersecurity attack if you don’t have the money for private incident response. Volunteering to protect our fellow citizens is a national institution in this great country. 4/5
Skilled cybersecurity workers volunteering to support these institutions makes a huge difference even if some feel the work we do is already available elsewhere. The simple fact is many organizations sit below the cybersecurity poverty line and need support. 3/5
The CTI League did not engage in censorship, it focused on protecting the health sector. Despite testimony to congress that it’s ridiculous hospitals need help the hard truth is they do. At least one major hospital per week is hot by a ransomware incident. Incidents at hospitals cost lives. 2/5
I have released a statement about our work in the CTI League. Yesterday I provided this and additional material as testimony to congress. Today we have made our github public and opened up all our files. cti-league.com/statement-by... Details are in this statement. 1/5
Statement by Marc Rogers on the CTI League | CTI League
Yesterday I provided testimony to Congress about the CTI League and addressed the allegations that it is somehow part of a government censorship apparatus. ...
cti-league.com
DEF CON. One week reminder to pack weather appropriate clothes.
Maximum advertising value for Diablo from dystopian atmosphere.
All the lovely people who posted a photo of their copy of my book. I’m humbled. 🥰
Random number generation the manual way. @ Deutschen Spionagemuseum
Last message from Lukas at the #offensivecon closing ceremony: Taking sides is hard but has to be done. We should all be mindful of how war affects our communities and have each others backs during these difficult times.
Some fabulous talks this year at #Offensivecon in Berlin. Parties have been like infosec reunions.
The AI Village’s Redteam event at DEF CON is picking up more attention.
DEF CON to set thousands of hackers loose on LLMs
Can't wait to see how these AI models hold up against a weekend of red-teaming by infosec's village people
theregister.com
My trip to the White House this week involved a lot of discussion about this. Especially the DEFCON bit. I’m excited to see crowd sourcing of AI security. While there are clear challenges, openness is definitely the way. Its also a GREAT opportunity for policymakers to engage and learn.
FACT SHEET: Biden-Harris Administration Announces New Actions to Promote Responsible AI Innovation that Protects Americans’ Rights and Safety | The White House
Today, the Biden-Harris Administration is announcing new actions that will further promote responsible American innovation in artificial intelligence (AI) and protect people’s rights and safety. These steps build on the Administration’s strong record of leadership to ensure technology improves the lives of the American people, and break new ground in the federal government’s ongoing effort…
whitehouse.gov
Im both excited and nervous for this. Allowing communities to have their own federated spaces is a great concept. However we need to avoid balkanisation and the creation of toxic echo chambers.
Jay 🦋@jay.bsky.team · 3y agoHey everyone! Want to let you know we’re not all going to be on bsky.social forever. We’ve been making progress towards federation, and will start off with a sandbox environment to prioritize safety and stability as we move towards distributing out control over the ecosystem.
I wrote an article with Sarah Powazek from Berkeley’s CLTC on how we need state and local resources to defend against cyberattacks. We have one of the most forward leaning National Cybersecurity Strategies, now we need to get boots on the ground to defend our schools, hospitals and businesses.
The key to making the US cyber strategy work: boots on the ground
Prioritizing work with academic institutions, localities and skilled volunteers is the best way of advancing America's cybersecurity needs.
cyberscoop.com
Probably one of the best pieces of reporting on the Solarwinds supply-chain attack. Excellent piece by Kim Zetter. Highly recommended reading.
SolarWinds: The Untold Story of the Boldest Supply-Chain Hack | WIRED
www-wired-com.cdn.ampproject.org
New to Bluesky? Check this out.
Emily Liu@emilyliu.me · 3y agoBluesky FAQ published! https://blueskyweb.xyz/faq • What is Bluesky? We're building a protocol that can make social networks work more like email, blogs, or phone numbers. The AT Protocol is close to completion, and the Bluesky app is a microblogging client built on it to showcase its features.
Its a pleasant change finding a feed that isn’t full of spam, trolls, and low quality outrage clickbait. Happy to see how long this lasts and enjoy it while it does.
Here is the approach to composable, community-controlled moderation that we think will create a positive open, public social network: https://blueskyweb.xyz/blog/4-13-2023-moderation It will take work to build this out. Perhaps the AT Protocol dev ecosystem can help bring this to life!
Composable Moderation
A customizable, composable approach to moderation that prioritizes safety and gives users and developers more control.
blueskyweb.xyz
You needed blocks. We cleared our calendars to finish building out blocks. Blocking has shipped to Bluesky web app users and will be available in mobile shortly (version 1.25, when it passes App/Play Store review — hopefully tomorrow morning). You can access this feature now at staging.bsky.app.
