Infosec Reading List - August 2021

On a monthly basis I will publish my reading recommendations which mainly focus on Information Security (InfoSec) and Outdoor Sports. All InfoSec Reading Lists can be found here. Text in italic represent quotes from the original article.

Quotes from the Twitterverse

---

InfoSec

• Secret terrorist watchlist with 2 million records exposed online - [link]
• Is Apple’s NeuralMatch searching for abuse, or for people? - [link]
• We Got the Phone the FBI Secretly Sold to Criminals - [link]
• Embrace ephemerality with default disappearing messages - not a big change but I think this default setting is something nice to have - [link]
• One Bad Apple - a longer and more detailed article on the “Apple scans our pictures” discussion - [link]
• Wanted: Disgruntled Employees to Deploy Ransomware - insider threats have been always an underestimated topic – now they don’t need to steal the data themselves, they can just install the ransomware and afterwards claim that they weren’t aware & did it unintentionally - [link]
• Thinking about “traceability” - “What is “traceability” in an end-to-end encrypted system?” - [link]
• Automated Qubes AppVMs based on Whonix Anonymity Modes - nice idea using .sls files which are part of the SALT framework - [link]
• Learning as Investing: 7 Skills That Pay Off in Any Job - good start for a list - [link]
• The All-Seeing “i”: Apple Just Declared War on Your Privacy - How long do we have left before the iPhone in your pocket begins quietly filing reports about encountering “extremist” political material, or about your presence at a “civil disturbance”?” – “I can’t think of any other company that has so proudly, and so publicly, distributed spyware to its own devices—and I can’t think of a threat more dangerous to a product’s security than the mischief of its own maker.” - [link]
• Disgruntled ransomware affiliate leaks the Conti gang’s technical manuals - [link]
• Threat Landscape for Supply Chain Attacks - very informative PDF by the ENISA around supply chain attacks - [link]
• From open Guest Wi-Fi to pwning a lift - [link]
• The Stealthy iPhone Hacks That Apple Still Can’t Stop - [link]