I need a new laptop to replace my almost dead early 2015 MacBook Pro. I’m really torn between a Librem 14 from @purism or buying a new MacBook. Cost isn’t a factor, but privacy is. So far I’ve been mostly ok with Apple’s stance and ecosystem as someone who’s been doing offensive AppSec full time for almost 10 years, maybe it’s time to switch.
@shellsharks@purism It does a lot actually. My experience so far with M1 is that other processor companies need to really make some serious progress. I’m leaning towards an M2 Air if I go Apple.
Does anyone know where I can get an Ubiquiti Dream router? I’ve dealt with a scam on eBay and a supposed “lost package” from a seller on Amazon. Been trying to purchase one for almost two months now. Don’t understand why Ubiquiti can’t keep these in stock on their own sites as I’m at the point of abandoning their products since I can’t seem to actually acquire any.
I'm curious to know what security professionals think of the new intelligence assessment from the UK about AI increasing the number and impact of cyber attacks in the next 2 years.
Do you buy this assessment, or is it wrong? Why or why not?
-- AI will almost certainly increase the volume and heighten the impact of cyber attacks over the next two years. However, the impact on the cyber threat will be uneven (see table 1).
-- The threat to 2025 comes from evolution and enhancement of existing tactics, techniques and procedures (TTPs).
-- All types of cyber threat actor – state and non-state, skilled and less skilled – are already using AI, to varying degrees.
-- AI provides capability uplift in reconnaissance and social engineering, almost certainly making both more effective, efficient, and harder to detect.
-- More sophisticated uses of AI in cyber operations are highly likely to be restricted to threat actors with access to quality training data, significant expertise (in both AI and cyber), and resources. More advanced uses are unlikely to be realised before 2025.
-- AI will almost certainly make cyber attacks against the UK more impactful because threat actors will be able to analyse exfiltrated data faster and more effectively, and use it to train AI models.
-- AI lowers the barrier for novice cyber criminals, hackers-for-hire and hacktivists to carry out effective access and information gathering operations. This enhanced access will likely contribute to the global ransomware threat over the next two years.
-- Moving towards 2025 and beyond, commoditisation of AI-enabled capability in criminal and commercial markets will almost certainly make improved capability available to cyber crime and state actors.
@dangoodin So from what I’ve been seeing in consulting around AI security and how various companies are either already using it or planning to use it, they are absolutely not aware of the risks. Especially when it comes to data exposure. This goes beyond just secure coding and many of the right people are not involved.