OutsideCasey

@kodamachameleon @nixCraft it is social media vendor’s responsibility, that’s why they include in terms of service (to avoid liability). They are lobbying to shift it away from themselves. All this is just large groups trying to offload risk. No one wants to hold this bag. The risk is too high. Which is entirely why it shouldn’t be done. The fact that they are lobbying so hard to off load the responsibility is the giveaway that it’s a bad idea.

@PogoWasRight my experience is limited to my org, we didn’t pay. We went through DR, rebuilt some environments. Another team identified the source of the breach (malicious email link), and we’ve done our best to improve policy and culture. That was the nail that finally got multi-factor auth approved by mgmt. Years ago now. It was a bad couple weeks with lots of OT.

@runevision nicely done, interesting work.

@PogoWasRight deletion is impossible to verify. So the percentage you ask for would never be accurate. Anything an extortion group shows you is not trustworthy. Trusting them at *all* is a mistake. *ANY org* paying out for ransomeware extortion raises the threat for *EVERY* potential victim. Doing so gives the threat actor incentive to continue their behavior. Paying won’t protect you from next time. Defense in depth and tested offline backups or immutable storage snapshots.

@freevolt24 @nixCraft good analogy

@MartinGuay no, I don’t have to pick a side at all.

@MartinGuay You SAY I do, the reality is that the more things change, the more they stay the same. I’m not a troglodyte, I see the use in limited cases. But no, I do not have to take a side. I reject your premise. People have been fear mongering in Tech long enough. I won’t give up my agency or understanding, because someone is shouting “FOMO”. I’m certainly not going to trust the machine. The world doesn’t have to be 1 thing. There’s room for so much more variety.

@MartinGuay “good luck with the middle ground” that’s the attitude I’m rejecting friend. Be well.

@0x00string@infosec.exchange I feel like there’s a back story here.

@0x00string@infosec.exchange I’m disappointed by people like that too, sometimes people need punching. “Cowardice in the face of responsibility” is a great line, says a lot about the state of affairs in so many of our societies silos.

@erwinrossen@mas.to @TheStoneDonkey@beige.party @Mistonas@mastodon.social it’s fatigue as well, everyone is bombarded about how they can’t trust anymore. All of big tech is out to get them. Govt is out to get them. News from more angles won’t help. It just adds to the dinn. Also, Google is the “devil they know.”