DOC Submits Final Rule on ICT Supply Chain Security to OMB – Would add ‘connected software’ coverage to existing information and communications technology supply-chain security interim final rule - https://tinyurl.com/7r4y6nh7 #Regulations
Just making a post for all former #tweeps, especially those that were in senior positions at Twitter. 1Password is #hiring. We have a close, friendly culture, and I’m sure you’d love it. Please boost if you’re able. I want to be sure this gets over to macaw.social. If you have questions, send me a message and I’ll see what I can find out for you.
(And this post applies to everyone, but I know Twitter employees are hurting right now)
Bills Introduced – 11-22-22 – 7 bills – HR 9356, SLTT vulnerability assessment training - https://tinyurl.com/yc66jmfk #Legislation
Short Takes – 11-22-22 – McConnel vs GOP – McCarthy vs GOP – CSB hearing – China vs COVID – AV security risk – CFATS reauthorization – Marine ammonia fuel vs environment - https://tinyurl.com/5dz3w2ev
Review - 5 Advisories and 3 Updates Published – 11-22-22 – NCCIC control system security advisories for products from Moxa, GE, Phoenix Contact, Digital Alert Systems, and AVEVA – Updates for Mitsubishi (2) and Hillrom – Short version – https://tinyurl.com/4u7j8prc #icsSecurity
If you were unfortunate enough to e-file your US #tax using HR Block, Taxact or Taxslayer, your most sensitive financial information was nonconsenually shared with Facebook, where it was added to the involuntary dossier the company maintains billions of people, including people who don't have Facebook accounts.
1/
5 Advisories and 3 Updates Published – 11-22-22 – NCCIC control system security advisories for products from Moxa, GE, Phoenix Contact, Digital Alert Systems, and AVEVA – Updates for Mitsubishi (2) and Hillrom - https://tinyurl.com/3fddf3z6 Subscription required #icsSecurity
DHS Announces HSAC Meeting – 12-6-22 – Will include initial progress reports from new subcommittees - https://tinyurl.com/2s4k5d29 #HSAC
CFSN Detailed Analysis - Substack Daily Update – 11-21-22 – Free Content - https://tinyurl.com/2tpycnkh
Reader Comment – CSB Performance Report – Rosearray points to CSB’s annual performance report with pertinent comments – I take additional look at CSB incident reporting and outreach – https://tinyurl.com/y2svbd5p #CSB #ReaderComment
Reader Comment – CSB Performance Report – Rosearray points to CSB’s annual performance report with pertinent comments – I take additional look at CSB incident reporting and outreach – https://tinyurl.com/y2svbd5p #CSB #ReaderComment
CFSN Detailed Analysis - Substack Daily Update – 11-19-22 – Free Content - https://tinyurl.com/3xr9ktbe
@tchambers a few other thoughts.
Organizations (corporations but also schools, governments, unions, nonprofits, associations) all should consider hosting their own instance initially restricted to staff/employees (but look at opening it to members where that’s appropriate or to alumni for schools for example). Likely along with supporting the core project(s) (if the ActivityPub instances aren’t just mastodon - some orgs might look at hosting other apps as wel)
I spent a lot of time on Twitter in my nearly 16 years there. I really hate what's happening. A huge loss if it truly goes away; I search Twitter daily to find stuff I & others posted. Like a reserve memory bank for someone with a poor memory like me.
(I'm sure I'll like mastodon; it seems neat! But it's a different thing. I may wind up liking it better, but I've a lot of history with the bird app.)
Short Takes – 11-19-22 – New Dem House Leadership – ICR for SLTPS security clearance requests – New measurement prefixes for ultra large and small - https://tinyurl.com/2p822wh3
OMB Approves MARAD Tanker Security Program IFR – Rule for DOT efforts to support a new Tanker Security Fleet - https://tinyurl.com/y6m88xfp #Regulations
GAO Reports – Cybersecurity Oversight - Week of 11-12-22 – Two reports on DOD oversight of contractors and DOI oversight of offshore oil facilities - https://tinyurl.com/3v3fwycp #GAO
CRS Reports – Electric Power Transformers – A look at potential shortages and legislative responses - https://tinyurl.com/bdf8w2wf #CRS
Review – FDA Publishes Medical Device Cybersecurity Response Playbook – Mitre updated the 2018 playbook and provided a quick start guide – Short version – https://tinyurl.com/yaruv46c #MedicalDeviceCybersecurity
This sounds like something I talk about a lot, actually. Scientists, generally speaking, will have a method on how to do things. We're used to SOPs and process is often our thing.
The majority of the world doesn't think like that. If your instant and immediate reaction isn't what they want, then you're automatically against them.
I'm not going to write a novel, but look at how the non-scientists in the world handle information on things like COVID or climate change. If it changes, it's inherently bad in their opinion. Only the first opinion they heard matters, to a large number of people, and they'll go to the grave believing it.
TLDR; scientists and non-scientists often struggle with communication. Thank you for coming to my TED talk :)