handmade.social

0 posts0 participants0 posts today

Keep Data PrivateThe biggest lie in tech? “If you have nothing to hide, you have nothing to fear.” <a href="https://mastodon.world/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> isn’t about hiding - it’s about control. Your medical history, political views, private conversations - do you want corporations or governments deciding how to use them? Mass surveillance isn’t about safety. It’s about power. Take yours back. <a href="https://mastodon.world/tags/KeepDataPrivate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeepDataPrivate</a> <a href="https://mastodon.world/tags/dataprivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataprivacy</a> <a href="https://mastodon.world/tags/SecureByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecureByDesign</a> <a href="https://mastodon.world/tags/dataprotection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataprotection</a> <a href="https://mastodon.world/tags/privacyMatters" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacyMatters</a> <a href="https://mastodon.world/tags/StopSurveillance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#StopSurveillance</a>

Jan de Muijnck-HughesI have a funded <a href="https://discuss.systems/tags/PhD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PhD</a> position for UK students, available with myself and <a href="https://types.pl/@bentnib" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bentnib</a> This project will be looking at developing new methods for asserting the resilience of existing communicating systems by developing new static analysis methods derived from advanced programming language research.Deadline: Thursday 20th March 2025You will belong to <a href="https://mastodon.acm.org/@StrathCyber" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@StrathCyber</a> and <a href="https://mastodon.acm.org/@mspstrath" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@mspstrath</a>, as well as gaining access to <a href="https://mastodon.scot/@spli" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@spli</a> For now more details about the project are on my personal website.<a href="https://tyde.systems/page/position/2025-jarss/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tyde.systems/page/position/2025-jarss/</a>Please spread the words. <a href="https://discuss.systems/tags/dependentTypes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependentTypes</a> <a href="https://discuss.systems/tags/formalMethods" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#formalMethods</a> <a href="https://discuss.systems/tags/idris" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#idris</a> <a href="https://discuss.systems/tags/programmingLanguageTheory" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programmingLanguageTheory</a> <a href="https://discuss.systems/tags/typeTheory" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#typeTheory</a> <a href="https://discuss.systems/tags/idris2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#idris2</a> <a href="https://discuss.systems/tags/computerSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#computerSecurity</a> <a href="https://discuss.systems/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://discuss.systems/tags/securityByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityByDesign</a> <a href="https://discuss.systems/tags/secureByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#secureByDesign</a>

Claroty💡 On Nexus, Jim LaBonty writes about <a href="https://infosec.exchange/tags/SecureByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecureByDesign</a> and integrating security from the outset in the overall <a href="https://infosec.exchange/tags/OT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OT</a> and <a href="https://infosec.exchange/tags/manufacturing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#manufacturing</a> system interconnect design. We can no longer just bolt on <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> capabilities after systems are in production. Secure-by-design practices must be a top-down priority. Executives must insist upon this from their CISOs, application and network development teams alike. <a href="https://nexusconnect.io/articles/secure-by-design-in-manufacturing-is-not-an-empty-concept" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nexusconnect.io/articles/secure-by-design-in-manufacturing-is-not-an-empty-concept</a>

Chris WysopalTomorrow morning I will be giving the keynote for Microsoft BlueHat Conference. I first stepped onto the Microsoft campus in 2002 as a consultant to help build IIS 6.0 (Windows web server) securely. Tomorrow I will talk about how hackers first pointed out the need for vendors to secure software products during development and then later worked with developers to build products more securely. <a href="https://infosec.exchange/tags/SecureByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecureByDesign</a> is a 20+ year old idea.

Amanita SecurityFollowing our initial article on the Cyber Resilience Act's objectives, we’re back with a comprehensive exploration of its essential requirements. 🔍In our latest article, "Reflections on Cyber Resilience Act Requirements," we break down the technical aspects including:- Ensuring no known exploitable vulnerabilities when products hit the market. - Adopting a 'Secure by Default' stance while allowing tailored solutions. - Implementing robust mechanisms for automated security updates. - Upholding data confidentiality, integrity, and resilience against unauthorized access or manipulations. - Minimizing attack surfaces and ensuring product lifecycle security. - etc.Read the full article here: <a href="https://www.amanitasecurity.com/posts/reflections-on-cyber-resilience-act-requirements/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.amanitasecurity.com/posts/reflections-on-cyber-resilience-act-requirements/</a>These requirements will mean more than pure compliance — it requires instilling a culture of security by design and by default when developing your connected devices. But interpreting and implementing these intricate mandates can be challenging, especially when balancing time to market and cost.Ready but not sure where to start? Don’t navigate these waters alone. Reach out for a friendly chat and discover how we can assist you. Feel free to contact us at hello@amanitasecurity.com for personalized advice and solutions tailored to your organization’s unique needs.<a href="https://infosec.exchange/tags/IoTSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IoTSecurity</a> <a href="https://infosec.exchange/tags/ProductSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ProductSecurity</a> <a href="https://infosec.exchange/tags/SecureByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecureByDesign</a> <a href="https://infosec.exchange/tags/EURegulations" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EURegulations</a> <a href="https://infosec.exchange/tags/CyberResilience" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberResilience</a>

Mike Williamson"Memory safety vulnerabilities remain a pervasive threat to software security. At <a href="https://infosec.exchange/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> we believe the path to eliminating this class of vulnerabilities at scale and building high-assurance software lies in Safe Coding, a <a href="https://infosec.exchange/tags/SecureByDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecureByDesign</a> approach that prioritizes transitioning to <a href="https://infosec.exchange/tags/memorySafe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#memorySafe</a> languages."<a href="https://security.googleblog.com/2024/09/eliminating-memory-safety-vulnerabilities-Android.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://security.googleblog.com/2024/09/eliminating-memory-safety-vulnerabilities-Android.html</a>

netromI'm a fan of less poetic names for threat actors! > Easterly also implored the audience to stop "glamorizing" crime gangs with fancy poetic names. How about "Scrawny Nuisance" or "Evil Ferret," Easterly suggested. <a href="https://www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/</a>Secure by Design enumerates good security principles and strategies: <a href="https://www.cisa.gov/sites/default/files/2023-10/Shifting-the-Balance-of-Cybersecurity-Risk-Principles-and-Approaches-for-Secure-by-Design-Software.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.cisa.gov/sites/default/files/2023-10/Shifting-the-Balance-of-Cybersecurity-Risk-Principles-and-Approaches-for-Secure-by-Design-Software.pdf</a><a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cisa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cisa</a> <a href="https://infosec.exchange/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://infosec.exchange/tags/software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#software</a> <a href="https://infosec.exchange/tags/vendors" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vendors</a> <a href="https://infosec.exchange/tags/crime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#crime</a> <a href="https://infosec.exchange/tags/mWise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mWise</a> <a href="https://infosec.exchange/tags/securebydesignpledge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securebydesignpledge</a> <a href="https://infosec.exchange/tags/securebydesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securebydesign</a>

Recent searches

Search options

Administered by:

Server stats:

#securebydesign