Alternatives to digital technology and services #

I will attempt to compile and share web sites, podcasts, companies, and technolgies that provide an alternative to the dominant, and often centric, companies.

European Alternatives
European alternatives for digital products
We help you find European alternatives for digital service and products, like cloud services and SaaS products.

Canadian Tech This site indexes technology companies and services based in Canada, as an alternative to the big tech giants. The resources listed here are provided freely, with no specific criteria other than being made available by Canadian organizations or companies. This site is not affiliated with any company or government entity. While we strive to provide safe and accurate information, we can’t guarantee the safety of external links. Use your own discretion.

Fake Job Posts on LinkedIn. #

Always be alert, suspicious and verify before even clicking. #

There’s been several posts in the media, articles and blogs by people describing how LinkedIn is being used to recruit, deceive, or scam job seekers.

I am receiving emails with job offers with “High experience match”, “High skills match”, or “Be first to apply” LinkedIn [pretend] labels.

I checked “Fudan University” in Hafnarfjörður (On-site) under the Icelandic Yellow Pages, nothing found: “Engar niðurstöður fundust fyrir „fudan university“ Ástæðan gæti verið að leitarorðið er rangt skrifað eða ekki á skrá.” Google Translate: “No results found for “fudan university” The reason could be that the keyword is misspelled or not in the file.” https://ja.is/?q=fudan%20university

OWASP Wrong Secrets #

I came across this resource from OWASP. I’m yet to give it a try but it looks great.It’s a series of challenges which aim at teaching how to recognize common mistakes when it comes to handling secrets and the secret strategy. 
OWASP Github https://github.com/OWASP/wrongsecrets

There is a pilot European Digital Skills Certificate.

I hope this works and becomes a true alternative to those expensive security certificates out there. “…mutual recognition of digital skills certifications by governments, employers and other stakeholders across Europe. It should allow people to indicate their level of digital competence corresponding to the DigComp proficiency levels and encourage individuals to acquire new digital skills.”

https://education.ec.europa.eu/focus-topics/digital-education/action-plan/action-9 #eu #EuropeanYearOfSkills #EUDigitalEducation #security #cybersecurity #securite #certification

Organizations and institutions are shifting gears to address the use of AI in their respective fields. I’m happy to see that ACM is looking for feedback to update the authorship policy.

====

ACM is updating its authorship policy to address the use of Artificial Intelligence tools for authoring research papers and to provide clear guidelines to the community for the appropriate use of these tools in ACM Publications.

The ACM Publications Board which oversees ACM Publications Policy is seeking your feedback on this draft policy. Your valued feedback will be shared with and considered carefully by the ACM Publications Board prior to finalizing the updated policy.

Kali Purple.
#

This is a defensive security distro. It includes a new tools:

• Arkime full packet capture
• Cyberchef
• Elasticsearch SIEM
• GVM vulnerability scanner
• TheHive incident response platform
• Malcolm
• Suricata IDS
• Zeek ID
  From the DevOps perspective, this one caught my attention is Kubernetes-Helm - An open-source Kubernetes package management platform.
  https://gitlab.com/kalilinux/kali-purple/documentation/-/wikis/home #security #cybersecurity #kalilinux #devops #kubernetes

Github has now free secret scanning and alerts (on public repos). It’s always beneficial to have visibility. Intentionally, by mistake, temporarily, secrets often find their way into repos. #github #secrets #devops #devsecops #security #cybersecurity https://github.blog/2023-02-28-secret-scanning-alerts-are-now-available-and-free-for-all-public-repositories/

Very interesting and positive move toward more vulnerability disclosures. “A new Belgian law will allow ethical hackers to hack into the data of Belgian companies without any prior permission. Until now such practices could land you in jail.” #vulnerability #disclosure #security #cybersecurity https://www.vrt.be/vrtnws/en/2023/02/15/ethical-hackers-can-now-legally-hack-belgian-companies/

Source: LinkedIn Dr. Rey Leclerc Sveinsson

Wow! 50 to 70 million request per second DDoS attack hindered by Cloudflare. “Targeted websites included a popular gaming provider, cryptocurrency companies, hosting providers, and cloud computing platforms.” #security #cybersecurity #ddos #cloudflare #cyberattack

https://thehackernews.com/2023/02/massive-http-ddos-attack-hits-record.html

Fraud and Tragedies: a reminder #

Fraudsters often take advantage of tragedies, like the recent earthquakes in #turkey and #syria. This is a friendly reminder to be specially mindful of phishing emails and fraudulent communications. Always verify URL links!

If you want to donate do it via official and known establishments.

#phishing #fraud #donate #donations #turquie #turquia #cybersecurityawareness #security #securityawareness