• 0 Posts
  • 4 Comments
Joined 11 months ago
cake
Cake day: October 18th, 2023

help-circle

  • I call BS - with notable exceptions for a particular omnipresent retail chain whose ToS was recently updated so they could do substantial tracking of your traffic.

    A company I work with is wholesale migrating both internal and external accounts to a third-party auth provider in whom I have very little faith. That is a concerning security risk.

    Using open wifi hotspots is hardly a best practice in any world, of course, but I’m hard-pressed to believe that it takes precedence over, say, ticking the boxes on NIST CSF or PCI compliance. Or just plain old “shoulder surfing” which has always been a risk in public, but becomes much more concerning given we all have a computer screen in our hand constantly and it’s often full of data useful to someone with ill intent.

    They might not get your pw or 2FA codes, but knowing your username is plenty for them to convincingly call you later, pretending to be from the bank. “Now that you’ve changed your pw, the system will send one extra 2FA code to your device as a test. Please read me the code when the text message comes in.”



  • It is when you then use the events you witnessed to testify and roll up the people who were directly and proximately responsible for that nightmare.

    I do not think that her participation was so critical to the events as to mean “but for” her actions the plot wouldn’t have existed. I do think that “but for” TFG and Guiliani’s participation, those events never would have happened.

    Seems fair to me that she gets a lighter sentence, and the plotters responsible for the entirety of the conspiracy get justice.

    Also, she’ll certainly never practice law again when all of this is over. Minor credit blemishes are enough to fail C&F in some places, can’t see a state bar overlooking this.