Wednesday, May 05, 2021

We trust too much?

https://venturebeat.com/2021/05/04/securelink-51-of-organizations-experienced-a-third-party-data-breach/

SecureLink: 51% of organizations experienced a third-party data breach

A new Ponemon Institute report found that 51% of organizations have experienced a data breach caused by a third-party.

Findings revealed that organizations are not taking the necessary steps to reduce third-party remote access risk, and are exposing their networks to security and non-compliance risks. As a result, 44% of organizations have experienced a breach within the last 12 months, with 74% saying it was the result of giving too much privileged access to third-parties.

Read SecureLink’s full report, A Crisis in Third Party Remote Access Security.





The first thing to do in any European war is to overrun Belgium.

https://news.softpedia.com/news/belgium-was-hit-by-a-massive-cyberattack-532812.shtml

Belgium Hit by Massive Cyberattack

Belgium was hit by a major cyberattack on Tuesday, according to Belgian media, affecting many of the country's most important institutions. Its source is still unknown.

The attack was a major distributed denial of service (DDoS) attack that took down both internal and public-facing networks.

Hackers targeted Belnet, Belgium's government-founded Internet Service Provider that connects national government organizations such as the Parliament, ministries, educational institutions, and research centers. In addition, all the websites hosted on the .be top-level domain were affected.

It is estimated that more than 200 Belgian government agencies have been affected by the attack. Although Belnet claims the situation is currently stabilized, they remain vigilant.





Every law enforcement entity will want at least one.

https://www.bespacific.com/report-how-law-enforcement-can-extract-sensitive-data-from-your-car/

Report – how law enforcement can extract sensitive data from your car

The Verge: “A new report from The Intercept has shed light on a worrying new technology that lets law enforcement agencies extract personal data from people’s cars. It reports that US Customs and Border Protection (CBP) recently made an order worth hundreds of thousands of dollars from Swedish data extraction firm MSAB which included iVe “vehicle forensics kits” made by US firm Berla. Here’s what MSAB advertises the kits can do, according to The Intercept:

MSAB marketing materials promise cops access to a vast array of sensitive personal information quietly stored in the infotainment consoles and various other computers used by modern vehicles — a tapestry of personal details akin to what CBP might get when cracking into one’s personal phone. MSAB claims that this data can include “Recent destinations, favorite locations, call logs, contact lists, SMS messages, emails, pictures, videos, social media feeds, and the navigation history of everywhere the vehicle has been.” MSAB even touts the ability to retrieve deleted data, divine “future plan[s],” and “Identify known associates and establish communication patterns between them.”…





What could possibly go wrong?

https://www.cnn.com/2021/05/04/tech/pimeyes-facial-recognition/index.html

Anyone can use this powerful facial-recognition tool — and that's a problem

You probably haven't seen PimEyes, a mysterious facial-recognition search engine, but it may have spotted you.

If you upload a picture of your face to PimEyes' website, it will immediately show you any pictures of yourself that the company has found around the internet. You might recognize all of them, or be surprised (or, perhaps, even horrified) by some; these images may include anything from wedding or vacation snapshots to pornographic images.

PimEyes is open to anyone with internet access.

PimEyes' decision to make facial-recognition software available to the general public crosses a line that technology companies are typically unwilling to traverse, and opens up endless possibilities for how it can be used and abused.

Imagine a potential employer digging into your past, an abusive ex tracking you, or a random stranger snapping a photo of you in public and then finding you online. This is all possible through PimEyes: Though the website instructs users to search for themselves, it doesn't stop them from uploading photos of anyone. At the same time, it doesn't explicitly identify anyone by name, but as CNN Business discovered by using the site, that information may be just clicks away from images PimEyes pulls up.

PimEyes lets users see a limited number of small, somewhat pixelated search results at no cost, or you can pay a monthly fee, which starts at $29.99, for more extensive search results and features (such as to click through to see full-size images on the websites where PimEyes found them and to set up alerts for when PimEyes finds new pictures of faces online that its software believes match an uploaded face).



(Related) Non-facial recognition.

https://www.makeuseof.com/tag/use-smartphone-identify-anything-camfind/

The 8 Best Apps to Identify Anything Using Your Phone's Camera

These image recognition apps let you identify coins, plants, products, and more with your Android or iPhone camera.





Another tool for the disinformation toolkit?

https://www.unite.ai/godiva-microsoft-research-asia-text-to-video-generation-image-synthesis/

Microsoft Proposes GODIVA, A Text-To-Video Machine Learning Framework

A collaboration between Microsoft Research Asia and Duke University has produced a machine learning system capable of generating video solely from a text prompt, without the use of Generative Adversarial Networks (GANs).

The project is titled GODIVA (Generating Open-DomaIn Videos from nAtural Descriptions), and builds on some of the approaches used by OpenAI’s DALL-E image synthesis system, revealed earlier this year.



(Related)

https://www.indiewire.com/2021/05/robert-de-niro-ai-dubs-movies-any-language-1234635001/

A Robert De Niro Box Office Flop Inspired an AI That Dubs Films into Any Language

British filmmaker Scott Mann directed Robert De Niro in the 2015 action thriller “Heist.” The film was a critical and box office fop ($4 million at the box office on a $15 million budget), so no one could’ve predicted at the time the film’s greatest legacy would be an artificial intelligence that automatically dubs movies into any language. Mann and his business partner Nick Lynes unveiled their new dubbing company Flawless this week in a feature published by Input Magazine. The company uses AI to digitally recreate and edit an actor’s face so that his or her mouth movements match the dub, thus maintaining the authenticity of the performance.





Not at all impressive.

https://www.bespacific.com/ai-gov-home-of-the-national-ai-initiative/

AI.gov, home of the National AI Initiative

Welcome to AI.gov, home of the National AI Initiative and connection point to ongoing activities to advance U.S. leadership in AI. The National AI Initiative Act of 2020 became law on January 1, 2021, providing for a coordinated program across the entire Federal government to accelerate AI research and application for the Nation’s economic prosperity and national security. The mission of the National AI Initiative is to ensure continued U.S. leadership in AI research and development, lead the world in the development and use of trustworthy AI in the public and private sectors, and prepare the present and future U.S. workforce for the integration of AI systems across all sectors of the economy and society…”





Anti-social media?

https://thenextweb.com/news/trumps-been-posturbating-on-private-social-media-for-months?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheNextWeb+%28The+Next+Web+All+Stories%29

Trump’s been posturbating on private social media for months

Donald Trump today launched a private social media site. Its membership is so exclusive that only former US presidents who’ve been impeached twice are allowed to post there.

The site’s called “From The Desk of Donald J Trump.” That doesn’t quite roll off the tongue like Twitter or Facebook. But I’m holding out hope that we’ll soon find out Trump’s posts are called “Deskies.” That would be cute and this story needs something to lighten the mood because it’s all very sad.





Book selections for shut-ins.

https://www.bespacific.com/8-alternative-sites-better-than-goodreads-for-book-lovers/

8 Alternative Sites Better Than Goodreads for Book Lovers

Make Use Of: Goodreads is no longer the top dog when it comes to online book communities. Here are the best alternatives. “Goodreads boasts millions of users and a database full of even more books. People flock to the site to discover new titles to consume or catalog what they’ve already read. The platform offers countless useful features; for a time, users were content with it. That’s no longer the case, with many beginning to look elsewhere to fill their cataloging needs. There are countless Goodreads alternatives that cater to book lovers’ different needs. Let’s look at some of them…”



No comments: