EU Warns Elon Musk That “There Are Red Lines” After He Bans Journalists From Twitter

Posted in Commentary with tags on December 16, 2022 by itnerd

Last night, Elon Musk banned a number of journalists from Twitter. That of course set the Internet alight and sent people running to Mastodon. He did a whole lot more than that as well, but I will get to that in a separate story later today. But in that story, I said this:

Given the attention that this is getting, I believe that a number of things are likely to happen: 

  • The EU will see this and make moves to make his life miserable. 
  • Departures to Mastodon will accelerate. 
  • I would not at all be surprised if Capitol Hill gives him a call and asks him to explain himself in front of a Congressional Hearing.

Well, the EU has chimed in and fired a warning shot across Elon’s bow:

Elon Musk’s decision to suddenly ban prominent tech journalists from Twitter is fanning a fierce backlash in Europe.

Germany warned of the impact on press freedom, while a senior EU official said Twitter must comply with the bloc’s rules or face possible sanctions. 

“Freedom of the press cannot be switched on and off as you please,” Germany’s foreign ministry tweeted on Friday. “As of today these journalists are no longer able to follow us, to comment or criticize. We have a problem with that @Twitter.”

Věra Jourová, the European Commission’s vice president for values and transparency, said the “arbitrary suspension” of journalists was “worrying,” and she indicated that the company could face penalties as a result.

“The EU’s Digital Services Act requires respect of media freedom and fundamental rights. This is reinforced under our #MediaFreedomAct,” Jourová said in a post on Twitter, adding that Musk “should be aware of that.” 

“There are red lines,” she continued. “And sanctions, soon.”

The EU doesn’t fool around with this sort of stuff. If they say they’re going to do something, they will do it. And it will hurt Elon because EU sanctions tend to be really painful. The thing is, he had to have known that something like this would have happened if he went about banning journalists on Twitter. Though, he has proven to be a “ready, fire, aim” sort of person who doesn’t think through the consequences of his actions before he does something. And it looks like that’s about to come back to bite him. Which means it really sucks to be Elon as it looks like he’s going to get slapped pretty hard.

I hope it was worth it Elon.

BREAKING: Twitter Suspends The Accounts Of Journalists

Posted in Commentary with tags on December 15, 2022 by itnerd

In a move that I guarantee is going to end badly for Elon Musk, multiple news outlets are reporting that Twitter has suspended the accounts of a number of journalists. From CNN:

Elon Musk’s Twitter banned Thursday the accounts of multiple journalists covering the technology industry without explanation.

Accounts belonging to CNN’s Donie O’Sullivan, the New York Times’ Ryan Mac, and the Washington Post’s Drew Harwell and several other tech journalists were all abruptly suspended.

“Elon says he is a free speech champion and he is banning journalists for exercising free speech. I think that calls into question his commitment,” Harwell told CNN.

The account of progressive independent journalist Aaron Rupar was also banned. Rupar told CNN he has received no communication from Twitter about the ban. “Nothing,” he said in a phone call.

From NBC:

The accounts of Ryan Mac of The New York Times, Donie O’Sullivan of CNN, Drew Harwell of The Washington Post, Matt Binder of Mashable, Micah Lee of The Intercept, Steve Herman of Voice of America and independent journalists Aaron Rupar, Keith Olbermann and Tony Webster had all been suspended as of Thursday evening.

The Twitter account for Mastodon, a platform billed as an alternative, was also suspended early Thursday evening.

Musk indicated that the suspensions stemmed from the platform’s new rules banning private jet trackers, responding to a tweet from Mike Solana, vice president of venture capital firm Founders Fund, who noted that the suspended accounts had posted links to jet trackers on other websites.

“Criticizing me all day long is totally fine, but doxxing my real-time location and endangering my family is not,” he added in another tweet.

Finally from Reuters:

Twitter Inc on Thursday suspended the accounts of several journalists, including ones from the New York Times and the Washington Post, with the site showing “account suspended” notices for them.

Reuters could not immediately ascertain why those accounts were suspended. All the suspended reporters have in recent months written about Twitter’s owner, billionaire Elon Musk, and changes at the platform since he bought it.

Responding to a Tweet on the account suspensions, Musk tweeted: “Same doxxing rules apply to “journalists” as to everyone else,” a reference to Twitter rules banning sharing of personal information, called doxxing. 

He added: “Criticizing me all day long is totally fine, but doxxing my real-time location and endangering my family is not.”

The message here in my mind is clear. If you criticize Elon Musk, you will get suspended from Twitter. And he’s using the suspension of the account that tracks Elon’s jet as cover for what is basically an attempt to silence people. Which goes against his claims of being a free speech fanboy.

Given the attention that this is getting, I believe that a number of things are likely to happen:

  • The EU will see this and make moves to make his life miserable.
  • Departures to Mastodon will accelerate.
  • I would not at all be surprised if Capitol Hill gives him a call and asks him to explain himself in front of a Congressional Hearing.

In terms of that second point, departures to Mastodon have begun:

The circled area is a spike in Mastodon account creations in the last hour which is around the time that this news broke. That’s the law of unintended consequences working against Elon. Stay tuned to see what happens in regards to the other two points.

At this point, it’s becoming clear that staying on Twitter is a non-starter. But clearly, if you stay on Twitter, you’re enabling Elon. While I have been cross posting to Twitter and Mastodon, I believe that my days on Twitter are over. I’ll make a separate announcement about that in the next day or so. But if I were you, I would make your plans to depart Twitter for greener pastures.

Zoho Unifies Human-Driven & Bot-Powered Customer Service Capabilities

Posted in Commentary with tags on December 15, 2022 by itnerd

Zoho Corporation, a leading global technology company, today launched new tools for Zoho Desk, the anchor application in the company’s customer service platform, to help customer service teams evolve with the changing needs of customers and meet heightened business expectations. Zoho Desk, which has achieved 45% year-over-year revenue growth for the past five years, now serves more than 100K businesses globally. New capabilities include Blended Conversations, a seamless combination of human-driven and bot-powered conversational service experiences, as well as several refinements to the user interface. These developments enable customer service agents to improve engagement and deliver higher-value customer experiences, removing the guesswork for agents and drastically minimizing friction that often results in bad customer experiences. 

Blended Conversations for Zoho Desk allows customer service agents to deliver the best experience in the moment by delegating the majority of manual and transactional tasks to bots, while remaining in control of the overall service experience. With fast and easy deployment that does not require external help, Zoho Desk allows brands to scale their conversational service experiences through higher agent productivity without compromising on the quality of CX. This experience is a culmination of Zoho’s Instant Messaging (IM) Framework and Guided Conversations, a low-code builder for self-service experiences. The IM Framework allows organizations to integrate any messaging service they use with Zoho Desk, and comes pre-integrated with services like WhatsApp, Telegram, Line, WeChat, Messenger, and Instagram. Guided Conversations for Zoho Desk allows business users to build powerful self-service flows that are useful throughout the customer journey, and help customers quickly and securely manage their relationship with the organization. It offers service teams tighter collaboration and integration with other Zoho marketing apps at no extra cost, including Zoho’s CX Platform and Zoho CRM Plus, for example. 

In addition to Blended Conversations, Zoho also announced a technological overhaul of the user interface to make it simpler, faster, and more accessible to users with a wide spectrum of different needs — the company’s biggest steps towards improving digital accessibility to date. Updates include options to support: cognitive and dyslexia challenges; visual impairments including astigmatism; animation reduction for those with seizure disorders; customization capabilities for color-blindness.

Zoho continues to build a system of experiences that focuses on every aspect of the customer journey, giving every stakeholder greater ability to add value to CX, from planning and creating diverse customer experiences to delivering and evolving them for the future. Zoho’s CX offerings help organizations of all sizes enable employee productivity, improve stakeholder collaboration, and increase customer success. Specifically, Zoho Desk’s integrated omnichannel approach supports entire service teams to connect with customers and with one another. On the business side, it enables high-quality consistency and reliability. Customers, in turn, have better overall end-to-end experiences with the brand, which ultimately drives loyalty and trust.

Pricing

Zoho Desk starts at $19 CAD/user/month (billed annually) for the Standard Edition and goes up to $50 CAD/user/month (billed annually) for the Enterprise Edition. 

Armorblox Announces Enhancements To Its NLU-Based Data Protection Platform 

Posted in Commentary with tags on December 15, 2022 by itnerd

Armorblox today announced the addition of Custom Role-Based Access Controls to its cloud-delivered email security platform to maintain data compliance and reduce data blindspots for individuals across the organization. 

Not all emails are created equal. On the inbound threat side, attackers tend to put a focus on the types of emails that involve exfiltrating sensitive credentials and financial fraud. According to the Armorblox 2022 Email Security Threat Report, 87% of all credential phishing attacks looked like common business workflows in order to trick victims, and 70% of all impersonation attacks slipped past native email security layers. On the data security side, end users and third-party contacts have access to sensitive and confidential information, either about the organization, other employees, or clients that can accidentally or maliciously fall into unlawful hands. Armorblox offers enhanced security from insider threats with enhancements to Armorblox Advanced Data Loss Prevention and the addition of Custom Role-Based Access Controls (RBAC).

Armorblox has always believed in a security-first focus, and this focus extends beyond providing a best-in-class email security solution. The expanded functionality of Armorblox Advanced Data Loss Prevention provides customers with precise protection across all confidential content types and sensitive data. Coupled with Armorblox Custom DLP Policies, organizations now have the ability to set automated encryption actions and exceptions for confidential content and sensitive data per user or per department.

Armorblox Custom Role-Based Access Controls provide security teams the fine grain controls necessary to set access and restriction levels for individuals, groups, and teams across the organization. Security Administrators are now able to thwart insider threat attacks through the creation of custom roles and permissions to ensure that access to the Armorblox platform by security team members is restricted to their job responsibilities.

Armorblox is supporting the security-first focus that organizations need through the addition of Custom Role-Based Access Controls and enhancements of the Advanced DLP product to the Armorblox platform, benefiting customers in a number of ways, including: 

  • Sensitive Data Encryption: Stop unauthorized disclosure of PII, PCI, PHI with automatic identification and encryption of sensitive data across emails, attachments, and documents.
  • Custom Access Controls: Easily create and set custom roles with granular permissions for individuals across security teams that align best with job responsibilities.
  • Reduce Data Blindspots: Ensure appropriate access levels and restrictions are set for organization, employee, and third-party data.

To learn more about the capabilities of Armorblox Custom Role-Based Access Controls, visit www.armorblox.com/blog/custom-role-based-access-controls.

Phishmas Extravaganza Report Highlights Increase In Scams As Holiday Season Approaches

Posted in Commentary with tags on December 15, 2022 by itnerd

It’s that most wonderful time of the year, Phishmas, when hackers get out their naughty and nice list and check it twice. Researchers at Avanan, A Check Point Company, have published its latest phishing report taking this theme to the next level.

They have a compilation of attacks observed during this holiday season that take advantage of shipping and package notifications from reputable brands such as UPS, DHL, USPS and FedEx, as well as impersonation attacks and paycheck fraud. 

You can read this report here.

Waze’s Snow Warning Feature Helps To Avoid Unplowed Streets

Posted in Commentary with tags on December 14, 2022 by itnerd

As we are about to experience our first big storm of the season, we’d like to share a quick reminder that drivers can take advantage of the Snow Warning feature in Waze, the crowd-sourced navigation app.

Waze lets drivers know when they’re approaching a road flagged as unplowed. It works in a similar way to other hazards reporting in Waze.

During Toronto’s last big storm in January 2022, weather hazards reported by Waze drivers went up 8.6 per cent (including unplowed roads, Fog, Hail, Flood and Ice).

Toronto traffic tracked by Waze also dropped 21.7 per cent compared to the preceding days (January 16-17 compared to January 9-10).

Traffic dropped in other Ontario cities during the same period as well:

Ottawa-Gatineau Metropolitan Area: -23.5%

Hamilton: -26.9%

Kitchener-Cambridge-Waterloo Metropolitan Area: -15.0%

London: -6.4%

While many Ontarians chose not to drive during the last snowstorm, drivers who venture out this week today can make their trips smarter and safer with Waze.

Drivers can report unplowed roads by tapping to update the map, then Hazards > Weather > Unplowed road

Other Waze features that can help drivers stay safe

  • Roadside Help: Waze also has a Roadside Help feature that allows you to call for road assistance. In addition, a button is available to get help from fellow Wazers: you can click on it to let fellow Wazers know of issues including the following: out of gas; flat tire; battery issue; and medical issue. Alternatively drivers can press on “others” to type in the issue directly.
  • Plan Your Drive: When planning a drive, Waze users can check for alternate routes. You’ll see how long each route takes and what the traffic situation looks like so you can choose the path that’s best for you. You can start planning your drive up to a week in advance. From finding the best time to leave based on traffic trends, to syncing up with your calendar, Waze offers many great tools to help you get to your destination.
  • Share Your Drive: Let your friends and family follow your drive in real time and know when you arrive at your destination. Shared drives appear as solid green lines on the Waze map.
  • Child/Pet Reminder: Set up a reminder to get an alert at the end of every drive to remind you to check on your fellow travellers before leaving your car in the cold.
  • Gas Station feature: Check and see the closest gas stations along your route to plan your refuel or a pit stop powered by community members sharing gas prices in communities across the country. Waze notifies drivers of nearby gas stations, prompting users to update the gas price at that specific location so that other Waze users can search for the cheapest prices in their area or route.
  • Railroad Crossing Alert: This feature alerts drivers when they approach a railroad crossing. A banner will appear on the Waze app highlighting the crossing and will encourage the driver to approach with caution. This feature puts drivers’ safety first, helping them return to the roads by highlighting the potential risks associated with driving over railroad crossings. The feature was advocated for by CN, Operation Lifesaver Canada, and the Railway Association of Canada, among many international railway network operators and other organizations.

New Phishing Scam: The Case of the Crafty Cryptocurrency Con

Posted in Commentary on December 14, 2022 by itnerd

INKY Technology has published a new phishing scam report. Coinbase was used for an elaborate multi-step phishing attack that leveraged a reputable web development platform to harvest credentials and gain control of victim’s cryptocurrency.   

The report outlines in detail the multi-step campaign put in place by the hackers to gain access to the unsuspecting customers credentials.

You can read the report here.

When It Comes To Twitter…. Elon Musk’s Desperation To Turn It Around Is Really Starting To Show

Posted in Commentary with tags on December 14, 2022 by itnerd

As the days go on, it’s clear that Elon Musk is desperate to somehow find some way to turn Twitter into a good news story as everything that is coming from the troubled social media platform is bad news. Or worse news. Elon’s latest signs of desperation come in a pair of areas. Let’s start with the privacy one:

Twitter is working on plans to force some users to agree to data sharing or lose access to the app in a bid to save its ad business, according to Platformer.

Elon Musk’s platform, like Google and Facebook, currently allows users to opt out of personalized ads, but this option could soon disappear.

Many users never turn this feature off in the first place, but the company is also considering forcing users to share more data, which can then be sold to advertisers, Platformer’s report said.

This includes sharing user locations and phone numbers for targeted ads, even though the latter is necessary for two-factor authentication.

And:

The plans could hit a snag in Europe, because EU rules say that users have the legal right to withdraw data-sharing permissions at any time.:

Under one plan being considered, users could only opt out if they subscribe to Twitter Blue — which costs at least $8 a month. But that would breach Apple’s rules which outlaw apps from forcing a choice between payment and advertiser tracking.

So Elon is so desperate to make a buck that he’s willing to pick a fight with both Apple and the EU. Plus I am pretty sure the FTC would be knocking on his door to have a word with him as this is the sort of thing that got Twitter into trouble before with them. Then there’s the fact that now this is out, it will send even more Twitter users to the exits who are sick of Elon and his haphazard leadership style. Which of course will give advertisers less incentive to advertise on the platform, taking money out of Elon’s pockets in the process.

Elon’s desperation is also starting to show in terms of him risking the wrath of the legal gods:

Musk appears to be gearing up for legal battles at Twitter, which he purchased in October for $44 billion, according to seven people familiar with internal conversations. He and his team have revamped Twitter’s legal department and pushed out one of his closest advisers in the process. They have also instructed employees to not pay vendors in anticipation of potential litigation, the people said.

To cut costs, Twitter has not paid rent for its San Francisco headquarters or any of its global offices for weeks, three people close to the company said. Twitter has also refused to pay a $197,725 bill for private charter flights made the week of Musk’s takeover, according to a copy of a lawsuit filed in New Hampshire District Court and obtained by The New York Times.

Twitter’s leaders have also discussed the consequences of denying severance payments to thousands of people who have been laid off since the takeover, two people familiar with the talks said. And Musk has threatened employees with lawsuits if they talk to the media and “act in a manner contrary to the company’s interest,” according to an internal email sent last Friday.

The aggressive moves signal that Musk is still slashing expenditures and is bending or breaking Twitter’s previous agreements to make his mark. His reign has been characterized by chaos, a series of resignations and layoffs, reversals of the platform’s previous suspensions and rules, and capricious decisions that have driven away advertisers.

If Elon wants to get sued out if existence, this is a great way to do it. Not paying your rent and not paying severance at the very least will be expensive. And I am pretty sure that in the worst case, some government or law enforcement agency would investigate this to see if it’s illegal. Also, if you read this story, he’s dumped significant parts of his legal team. Some of whom have bailed him out of trouble before. That’s a sign that Elon doesn’t like the counsel that they’re giving him as he strikes me as the type who only wants to hear answers that he likes.

Finally, banks are having trouble with Twitter’s debt. Big trouble:

Some of the banks that lent Elon Musk $13 billion to buy Twitter are preparing to book losses on the loans this quarter, but they are likely to do so in a way that it does not become a major drag on their earnings, according to three sources with direct knowledge of the situation.

Banks typically sell such loans to investors at the time of the deal. But Twitter’s lenders, led by Morgan Stanley, could face billions of dollars in losses if they tried to do so now, as investors shy away from buying risky debt during a period of economic uncertainty, market participants said. In addition, Twitter has seen advertisers flee amid worries about Musk’s approach to policing tweets, hitting revenues and its ability to pay the interest on the debt.

Banks still have to mark the loan to its market value on their books and set aside funds for losses that are reported in quarterly results. In the absence of a price determined by actual sales of the debt, however, each bank can decide how much to write it down based on its market checks and judgment, according to the three sources who are familiar with the process of determining the value of such loans.

Elon’s issues aren’t going to help this situation that his lenders find themselves in. I would watch this as banks do not like to lose money and that may add to Elon’s problems. Of which there are many.

Like I said yesterday, I think we are in the endgame when it comes to Twitter. I think it’s just a matter of time until the final nails in the coffin are hammered in.

LG Launches UltraGear OLED Gaming Monitors With 240Hz Panels

Posted in Commentary with tags on December 13, 2022 by itnerd

LG Electronics is exhibiting its latest lineup of premium UltraGear™ OLED gaming monitors (models 27GR95QE and 45GR95QE) at CES 2023. The new UltraGear monitors demonstrate LG’s leadership in the fast-growing OLED category and its continuing strength in the global gaming display market.

Equipped with the world’s first 240Hz OLED panel, which is exclusively manufactured by LG, the new 27- and 45-inch models deliver a record-breaking response time of less than 0.03 milliseconds Gray-to-Gray (GTG), not to mention superior self-lit picture quality complete with accurate, lifelike colours and infinite contrast. Courtesy of these cutting-edge display technologies, the latest models tick every box when it comes to what consumers want in a gaming monitor. 

27-inch OLED Gaming Monitor with Unprecedented Speed

LG UltraGear OLED Gaming Monitor (model 27GR95QE) offers the level of performance needed to get the most of the latest game titles; its QHD (2,560 x 1,440) resolution OLED display providing a 240Hz refresh rate and a staggering 0.03ms (GTG) response time for delightfully smooth, low-latency gaming. It also covers 98.5 per cent of the DCI-P3 colour gamut, ensuring vibrant graphics that fully capture the vision of the game designers and digital artists who created them. Additionally, the monitor’s Anti-glare & Low Reflection (AGLR) panel makes it easier to see what is on screen so that users can enjoy a distraction-free gaming experience regardless of ambient light conditions.

Featuring support for variable refresh rate (VRR), NVIDIA G-SYNC Compatible, FreeSync Premium and VESA Adaptive Sync, LG’s 27-inch UltraGear provides seamless visuals with minimal tearing or stuttering. It also supports HDMI 2.1 specifications and DisplayPort 1.4 connectivity, and incorporates a 4-pole headphone jack that allows users to relish the realistic, spatial sound of DTS Headphone:X. Meanwhile, the included remote control provides quick and easy display management plus the added convenience of programmable hotkeys. 

Next-level Immersion with 45-inch Curved OLED Display

A CES 2023 Innovation Award honouree, model 45GR95QE is LG’s first-ever 45-inch curved OLED gaming monitor with a 21:9 aspect ratio, WQHD (3,440 x 1,440) resolution screen. It is also the very first 45-inch display with an 800R curvature: an exciting, new form factor designed to deliver next-level gaming experiences. Certified as a low blue light product by leading global testing organizations TÜV Rheinland and UL Solutions, the matt Anti-glare & Low Reflection OLED panel of the curved UltraGear monitor is easier on the eyes than a conventional LED panel, meaning users can play for longer with less eye discomfort.

The 45GR95QE’s remarkable, curved OLED panel offers a 1,500,000:1 contrast ratio and 98.5 per cent coverage of DCI-P3, producing the bright colours, deep blacks and crisp images that not only make the onscreen action come alive, but also heighten the player’s focus. Like its 27-inch sibling, the 45-inch model has a response time of less than 0.03ms GTG and a 240Hz refresh rate. Harnessing the immense potential of OLED, the 45GR95QE provides total gaming immersion.

Visitors to CES 2023 from January 5-8 are encouraged to stop by booth #15501 in the Las Vegas Convention Centre to experience the latest UltraGear OLED gaming monitors. Available to pre-order in the U.S. and Canada starting December 12, LG’s latest OLED gaming monitors will be launching in key markets throughout North America and Asia in January, in Europe from February, and in the Middle East and Latin America in the following months.

Today Is “Patch Tuesday” And It’s Time To Patch All The Things

Posted in Commentary with tags on December 13, 2022 by itnerd

While I was busy covering the feature dump that Apple did with all its operating systems, I didn’t cover the fact that it was Microsoft’s “Patch Tuesday”. Bleeping Computer has a lot of info on December’s “Patch Tuesday” dump here. And there is truly a lot here for you to read. To help you make sense of it all, I have enlisted the help of Yoav Iellin, Senior Researcher at Silverfort:

Marked as critical, CVE 2022-41076 is one security teams should definitely be aware of as it allows for an attacker to escape the Powershell Constrained Session Configuration to run unapproved commands. Powershell Constrained Session is used across a wide variety of applications so admins need to be aware of where they are exposed and either update, or disable the affected feature. While Microsoft notes this vulnerability is complex to exploit, it can however be triggered by any authenticated user, removing the extra step of escalating privileges.

An interesting, actively exploited vulnerability from an initial access point of view is CVE-2022-44698. This is a flaw in Windows SmartScreen – a component in Microsoft applications designed to reduce the risk of socially engineered malware by checking the reputation of downloaded files prior to installation. Using this vulnerability, an attacker could convince the victim to run a crafted file or access an unsafe link and then bypass protections alerting them to potentially malicious downloads.

Included amongst the usual CVE numbers, Microsoft Security Advisory ADV220005 tells an interesting story. This advisory recounts the detection of malicious drivers submitted and signed by the Microsoft Windows Hardware Developer Program. Components such as this enjoy kernel level access, so would have been able to evade security controls had they not been detected.”

The guidance that Mr. Iellin spoke of can be found here and is very much worth reading. But perhaps that reading should take place after you patch all the things so that the bad guys don’t use today’s “Patch Tuesday” dump to create attacks from.