Sign in Subscribe

Gary Shewan

Gary Shewan

📍 UK

Survivorship Bias

This is a really good post from Microsoft. Transparency is becoming more important - for all companies. Results of Major Technical Investigations for Storm-0558 Key Acquisition | MSRC Blog | Microsoft Security Response CenterResults of Major Technical Investigations for Storm-0558 Key AcquisitionMicrosoft Security Response CenterMSRC My thoughts? Not on this but to

Understanding LLMs

Rather than just criticise the hype around Large Language Models (LLMs…I refuse to say AI). It’s good to try and get beyond that and gain a deeper understanding. Can local data be pointed at a local model which mitigates some of the Infosec concerns? A bit of reading,

Zoom, AI and Privacy

This is one for EU Compliance folk. How could Zoom think they can get away with an updated terms of service (27 July) that grants them rights to utilise customer data and content - globally? With no opt out? Additionally explicitly stating it could be used for ML/AI training.

Shared responsibility

What is your immediate feeling when you hear ‘Shared Responsibility Model’ with regards to Cloud? It never seemed (to me) to be a great relief to anyone. Unless it’s an answer to an audit question… The write up by Tenable below is good and thorough. Arguably, comms coming from

Personal BCP

Occasionally I'll think about a personal BCP. I've never lost my phone - but if you have then you'll know why I'm thinking about it. I don't carry a wallet anymore. Everything is contactless. Money, train or flight tickets? All

Online Safety Bill Concerns

Oh this is going to be a nasty car crash. “God, I wish we had been a lot more vociferous. The legislation sounded so outlandish that I thought surely someone else would step up and shoot it down. We clearly should have been in the room but there was no-one

Solarwinds investigation

Quite a debate about this: “The US SEC has roiled the cybersecurity industry by putting executives of SolarWind on notice that it may pursue legal action for violations of federal law in connection with their response to the 2020 attack on the company’s infrastructure that affected thousands of customers

Ransomware updates

Some interesting figures here on ransomware events: * Only 4% of ransomware victims recover all their data * Only 61% recover data at all * Typical experience is 25 days of disrupted business There are no end of products and services to defend/protect against this. But how many decades have we had

Working with LLMs

I’ve followed Rui Carmo for more years than I’d care to remember. I laughed out loud at his latest post trying to get a tool which gives GPT a harness to use web search and scraping. Notes from the AutoGPT FrontierToday is a bank holiday, so I had

Solarwinds supply chain attack

Excellent article by Kim Zetter in Wired breaking down the SolarWinds supply-chain attack. It does make your blood run cold a little. Two year dwell time, and a bit of luck in discovering it. Lovely nightmare fuel. The Untold Story of the Boldest Supply-Chain Hack EverThe attackers were in thousands