Post

Infosec Reading List - December 2023

Posted
Preview Image
By Dominik Birk
2 min read

On a monthly basis I will publish my reading recommendations which mainly focus on Information Security (InfoSec) and Outdoor Sports. All InfoSec Reading Lists can be found here. Text in italic represent quotes from the original article.

Quotes from the Twitterverse

Desktop View

Desktop View

Desktop View

Desktop View

InfoSec

  • SEC vs. SolarWinds is Cybersecurity’s ENRON Moment - In the minds of many people currently in security, this change will make the industry less hacking and more reporting. Less magic and more Excel. Less creativity and more audit trail. Less magic and more accounting. - [link]
  • Apple says it is not aware anyone using Lockdown Mode got hacked - A year later, Apple said it is not aware of any successful hack against someone using Lockdown Mode. - [link]
  • Ubiquiti users report having access to others’ UniFi routers, cameras - Since yesterday, users of Ubiquiti networking devices, ranging from routers to security cameras, have reported seeing other people’s devices and notifications through the company’s UniFi cloud services. - attack surface reduction: ask yourself whats the value-add of cloudifying your network admin access interfaces? - [link]
  • +1500 HuggingFace API Tokens were exposed, leaving millions of Meta-Llama, Bloom, and Pythia users vulnerable - At the beginning of the research to find API tokens we scanned GitHub and HuggingFace repositories using their search functionality. - [link]
  • The AI trust crisis - It’s toggled “on”—but I never turned it on myself. Does that mean I’m marked as “consenting” to having my data used to train AI models? - [link]
  • What the QWAC?! - concerns around the eIDAS Article 45 - [link]
  • Stuff we figured out about AI in 2023 - [link]
  • When You Roam, You’re Not Alone - [link]
  • From Data to Viz - From Data to Viz leads you to the most appropriate graph for your data. - pretty helpful website in case you are searching for the right visualization method for your data - [link]
  • How to Get Into a Focused State Quickly - whenever you find yourself tempted to procrastinate, initiate a distraction or switch to a more tractable task, just ask yourself one question: “What’s the next step?” - [link]
  • What I should have said about the term Artificial Intelligence - [link]

Outdoor

N/A

infosec readinglist
This post is licensed under CC BY 4.0 by the author.