lol of the day - noticed I’m quoted in this article, but I never spoke to the publication and the quotes are made up.

[fbarton@infosec.exchange]

@0xabad1dea @john_philip_bell @GossiTheDog the “weakest link” In security being the human is such a trope… and completely incorrect
If anything the humans in the chain are the strongest link, and some of our best detectors!

(Okay with that said… some specific humans may best detect by triggering malware…)

[androcat@toot.cat]

@GossiTheDog Sue them for infringement and defamation

[john_philip_bell@defcon.social]

@fbarton @0xabad1dea @GossiTheDog
My earlier joking about LLMs aside...

I too would not agree that humans are 'the weakest link', there surely are cases where 'a human' was 'a weakness', but in the context of Dr. Reason's swiss cheese model, rarely the weakest in the overall design of any system.

After all, a key objective of proper cybersecurity is exactly to mitigate the human factor, so arguably, by definition if it came down to a human, something more critical failed. (Design, GRC, etc.)

(From maker-checker to insider threat - the field is supposed to be designed to reduce the weakness of the human factor, if anything that failed.)

[klefstadmyr@social.vivaldi.net]

@GossiTheDog And the next time you DO say something - correct or not - we have to check several times to make sure you actually said it. We live in interesting times indeed.

[ireneista@adhd.irenes.space]

@0xabad1dea @GossiTheDog yeah we'd be pursuing legal action. that's really fucked up.

[adriano@lile.cl]

@GossiTheDog ok but what is a "Bitch Eating Crackers attack"?

[dmtomas@mastodon.social]

@GossiTheDog @john_philip_bell @0xabad1dea but, but - I have read an article that says differently;) - and I’m already poking my llm to generate an article saying “cyber security experts (like Kevin Beaumont) are suggesting to swap people for AI’s in your corporations, because “people are the weakest link”

[kristen_d@mastodon.social]

@GossiTheDog Fuck AI. I will never willfully use (yes I know banks and too many others are forcing it on us already) and if I know something was written with it, I won't read it.

[meltedcheese@c.im]

@GossiTheDog @klefstadmyr was interviewed many times in my career and NOT ONCE was I quoted accurately or without sensationalism. #NothingToSeeHere

[klefstadmyr@social.vivaldi.net]

@meltedcheese @GossiTheDog Good point.

[ferricoxide@blahaj.zone]

@GossiTheDog@cyberplace.social

New "quoting" method:

<PERSON> would have said "<THINGS>" had we asked them and not used AI to extract a likely statement from their other writings and other works that our AI scraped.

?

[diami03@infosec.exchange]

@GossiTheDog Curious....what do you do in this situation?

[ralph@hear-me.social]

@GossiTheDog

#alttext

techbuzz.ai the tech buzz.
"BEC attacks are incredibly effective because they don't require sophisticated malware or zero-day exploits," says cybersecurity researcher Kevin Beaumont. "They exploit the weakest link - human decision-making under time pressure. A single compromised email account can yield millions if the attacker times it right."

[cosvak@mastodon.world]

@GossiTheDog first that actor from the live action One Piece show, now you?