OutsideCasey

@0x00string@infosec.exchange I’m disappointed by people like that too, sometimes people need punching. “Cowardice in the face of responsibility” is a great line, says a lot about the state of affairs in so many of our societies silos.

@0x00string@infosec.exchange I feel like there’s a back story here.

#dogsofmastodon

@erwinrossen@mas.to @TheStoneDonkey@beige.party @Mistonas@mastodon.social it’s fatigue as well, everyone is bombarded about how they can’t trust anymore. All of big tech is out to get them. Govt is out to get them. News from more angles won’t help. It just adds to the dinn. Also, Google is the “devil they know.”

@MartinGuay “good luck with the middle ground” that’s the attitude I’m rejecting friend. Be well.

@MartinGuay You SAY I do, the reality is that the more things change, the more they stay the same. I’m not a troglodyte, I see the use in limited cases. But no, I do not have to take a side. I reject your premise. People have been fear mongering in Tech long enough. I won’t give up my agency or understanding, because someone is shouting “FOMO”. I’m certainly not going to trust the machine. The world doesn’t have to be 1 thing. There’s room for so much more variety.

@MartinGuay no, I don’t have to pick a side at all.

@kodamachameleon @nixCraft it is social media vendor’s responsibility, that’s why they include in terms of service (to avoid liability). They are lobbying to shift it away from themselves. All this is just large groups trying to offload risk. No one wants to hold this bag. The risk is too high. Which is entirely why it shouldn’t be done. The fact that they are lobbying so hard to off load the responsibility is the giveaway that it’s a bad idea.

@freevolt24 @nixCraft good analogy

@runevision nicely done, interesting work.

Spotted doing laps at PDX today.

@PogoWasRight my experience is limited to my org, we didn’t pay. We went through DR, rebuilt some environments. Another team identified the source of the breach (malicious email link), and we’ve done our best to improve policy and culture. That was the nail that finally got multi-factor auth approved by mgmt. Years ago now. It was a bad couple weeks with lots of OT.

@PogoWasRight it is certainly my opinion, but it’s ALWAYS. They are ALWAYS keeping the data. 100% There are no trustworthy extortionists.

@PogoWasRight deletion is impossible to verify. So the percentage you ask for would never be accurate. Anything an extortion group shows you is not trustworthy. Trusting them at *all* is a mistake. *ANY org* paying out for ransomeware extortion raises the threat for *EVERY* potential victim. Doing so gives the threat actor incentive to continue their behavior. Paying won’t protect you from next time. Defense in depth and tested offline backups or immutable storage snapshots.