Infosec Reading List - November 2023

On a monthly basis I will publish my reading recommendations which mainly focus on Information Security (InfoSec) and Outdoor Sports. All InfoSec Reading Lists can be found here. Text in italic represent quotes from the original article.

Quotes from the Twitterverse

---

---

---

---

---

InfoSec

• EU urged to drop new law that could allow member states to intercept and decrypt global web traffic - The letter from industry states: “[We] believe that eIDAS Article 45 and 45a represent a dangerous intervention in a system that is essential to securing the Internet. We request that the EU Parliament and Members reconsider this action.” - the amount and ways certs are trusted today is already sub-optimal - let‘s not make it more complicated - [link]
• What the !#@% is a Passkey? - [link]
• Passkeys and Privacy - [link]
• Mikrotik Cheat Sheet - [link]
• Hackers, Scrapers & Fakers: What’s Really Inside the Latest LinkedIn Dataset - [link]
• Setting the Record Straight on the SEC and SUNBURST - Solarwinds answer to the recent SEC announcement - [link]
• Every car is a smart car, and it’s a privacy nightmare - * the owners of its vehicles “must inform others who drive the vehicle, and passengers who connect their mobile devices to the vehicle, about the information in this Notice.” That’s about 60 pages of information to relay, if you’re printing it directly from Ford’s website — just for the company and not even the specific car.* - [link]
• Lessons from the SEC’s Lawsuit against SolarWinds and Tim Brown - [link]
• Demystifying Generative AI — A Security Researcher’s Notes - [link]
• Hikers Need Rescue After Following Non-Existent Trail On Google Maps - After several hikers got lost while following a trail on Google Maps, a search-and-rescue group in British Columbia has released some sage advice: Don’t use Google Maps for hiking. - [link]
• ChatGPT Is Apparently a Great Surveillance Tool - not a surprise - [link]

Outdoor

N/A