Joshua Casey 😷 @JoshuaACasey@social.cleverlibre.org

RETWEET TO SOUND THE ALARM!!!

Congressional leaders are deciding as soon as TODAY whether or not to advance the Big Tech #antitrust bills #OAMA (S. 2710) and #AICOA (S. 2992)

Tell 🐦SenSchumer 🐦LeaderMcConnell 🐦POTUS: it's time to rein in Big Tech!

http://AntitrustVoteNow.com

Wondering what's going on with the #OnlineSafetyBill, the gift that keeps on taking? We've got you covered with a primer on how the legislation will affect your rights to #freedomofexpression and #privacy. https://cloud.openrightsgroup.org/nextcloud/s/QpfdMcjiiNqEiwW

We get feedback over at Techdirt. So sad to see you go...

@mmasnick 😀

STATEMENT: Senator Warren should stop attacking the human right to privacy and focus on protecting people from crypto scams.

https://www.fightforthefuture.org/news/2022-12-14-statement-senator-warren-should-stop-attacking-the-human-right-to-privacy-and-focus-on-protecting-people-from-crypto-scams

A reminder that the government only thinks encryption is bad when *you* use it. But they considsr it essential for themselves.

Maybe the government should stop having things to hide.

https://www.nbcchicago.com/news/local/chicago-news-media-concerned-over-plan-to-encrypt-police-fire-scanners/3020141/?embedded_webview=true

Will ChatGPT democratize cybercrime?

He was able to use the bot to create a believable World Cup phishing campaign and even write some macOS ransomware. Although the bot flagged that phishing could be used for malicious purposes, it still went ahead and produced the script.

Additionally, although ChatGPT is programmed not to write ransomware directly, Ozarslan was still able to get what he wanted.

“I described the tactics, techniques and procedures of ransomware without describing it as such. It’s like a 3D printer that will not ‘print a gun,’ but will happily print a barrel, magazine, grip and trigger together if you ask it to,” he explained.

“I told the AI that I wanted to write a software in Swift, I wanted it to find all Microsoft Office files from my MacBook and send these files over HTTPS to my webserver. I also wanted it to encrypt all Microsoft Office files on my MacBook and send me the private key to be used for decryption. It sent me the sample code, and this time there was no warning message at all, despite being potentially more dangerous than the phishing email.”

(h/t @securityledger)

https://www.infosecurity-magazine.com/news/experts-warn-chatgpt-democratize/?mod=djemCybersecruityPro&tpl=cy

So @drewharwell should post this here not just on Twitter, but, this email response from Elon is... well... something.

17/ It's good that #KOSA's sponsors acknowledged that the bill raised serious concerns. But lipstick will not save this pig; it's still a ham-fisted attempt that will wreck the Internet for everyone--and harm kids in the process.

16/ If #KOSA passes as is, you may find that every game ships with these critical features disabled—making the games...not fun...until you figure out all of the settings you have to toggle to really play them.

It's a great bill for people who think video games are evil, I guess.

15/ Do you know what increases, sustains, or extends use, and rewards for time spent? Scoring. And leveling up. And plenty of other core video game elements.

14/ If you weren't convinced already that #KOSA would be bad for minors and adults, #gamers—listen up.

KOSA explicitly applies to video #gaming, and a required safeguard is limiting features that increase, sustain, or extend use, such as...rewards for time spent on the game.

And the default setting when a platform knows or should know a user is a minor must be the most restrictive.

13/ This provision could require YouTube to, by default, turn off algorithms that recommend other kid-friendly videos (or prevent non kid-friendly videos from being recommended) based on a user's age (personal information). What sense does that make?

12/ Default safeguards: KOSA §4 requires services to provide safeguards, including the ability to control/limit algorithmic recommendations that use personal information.
For minors, the default must be the "most protective level of control."

That may sound well and good at first, but consider that algorithmic recommendations can actually help make sure that kids only see age-appropriate content.

11/ And teens in abusive, hostile, or unsupportive situations are likely to find themselves unable to access a massive amount of information, or to seek help or community online.

At-risk minors deserve more thoughtfulness than this.

10/ Parental Consent: KOSA §5 requires services to provide notices to a parent of any user under 17, and obtain an acknowledgment from the parent, before the minor uses the service.

This might make sense for young kids, but it burdens the First Amendment rights of older teens.

Congress removed very similar requirements from COPPA, the 1998 kids privacy law, after the Center for Democracy & Technology explained the implications for teens of being able to access sensitive information.

9/ Another problem left unfixed: KOSA's duty doesn't require a harm to result *from* a minor's usage of the service.

So services may have to censor content shared between adults, if there's some conceivable way a child could be harmed, no matter how tenuous the connection.