Eric Geller

Eric Geller @ericgeller

@WilliamTurton @kevincollier @pbump @KnowBe4 Kevin is GRU actually — PolitiTweet.org

Eric Geller @ericgeller

@HowellONeill I refuse to use the napkins that they give me with my drinks on the plane in case they have data decryption nanotechnology embedded in them — PolitiTweet.org

Eric Geller @ericgeller

The RNC is developing a plan to escalate claims of voting irregularities directly to district attorneys and election boards in order to nullify the results. It's 2000 plus 2020 multiplied by a hundred. Perilous days ahead for American democracy. https://t.co/RZpOb6EiXt https://t.co/YsMipIVk8E — PolitiTweet.org

Eric Geller @ericgeller

@heathdwilliams heath — PolitiTweet.org

Eric Geller @ericgeller

😱😱😱😱 — PolitiTweet.org

Eric Geller @ericgeller

@ThatHappenedCLE @GossiTheDog @KnowBe4 I've seen them. But security is about tradeoffs. How likely is it that I will encounter one of those? Now I have to weigh that likelihood against the costs of not having a usable phone. — PolitiTweet.org

Eric Geller @ericgeller

@ThatHappenedCLE @GossiTheDog @KnowBe4 What if it's not a charger but actually an alien mind control rod? — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 I learned that people on Twitter have a lot of strong opinions about cybersecurity, which I suppose is encouraging! — PolitiTweet.org

Eric Geller @ericgeller

Absolutely sickening. We need to do everything possible to reduce the number of cars on our roads. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 I'm not sure what that means, but man, you gotta believe me when I tell you that the most experienced security professionals strongly advise against unbalanced depictions of risk. Security is about enabling smart behavior, and that requires understanding tradeoffs. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @Monkeytail2002 @KnowBe4 Definitely non-zero. But what is the number above zero? If I avoided all non-zero risks, I would never be able to do my job. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 Security is all about tradeoffs. There are certain things that carry tremendous and potentially even vital benefits (like having a charged phone) and only introduce minimal risks. A good training course would teach you how to balance those things. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @Monkeytail2002 @KnowBe4 What is the likelihood that a foreign spy agency or whoever will steal my travel itinerary and send an agent to wait for me at my gate? — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 If the goal is to try to eliminate risk, never travel. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 Except where is the risk in borrowing the wall box that you referenced? These courses need to be precise about risk, otherwise they run their own risk of hyping the wrong threats and misdirecting our defensive focus. — PolitiTweet.org

Eric Geller @ericgeller

@msager @pbump @KnowBe4 Right, that's what I was trying to say. Maybe don't just borrow a USB cable, but you can borrow a cable and a wall adapter. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @OhWeeBeasties @KnowBe4 hey @boblord want to weigh in here — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 Sorry, I guess we were talking past each other. That's the device I was saying you can use! The training course implies that you should not borrow that kind of box along with a USB cable. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 From where, though, is my question. You're not plugged into a computer, you're plugged into the power system. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 If you're plugged into a power outlet on the wall, where is the data coming from or going to? — PolitiTweet.org

Eric Geller @ericgeller

Fortunately, I know what to do and what not to do, so I don't actually have to rely on this course for security advice. But some of my colleagues (and people at other clients of this vendor) may not be as well informed & may get a distorted impression of what the real risks are. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 How? — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 Borrowing a charger and plugging into a wall outlet is not risky for a reporter either. — PolitiTweet.org

Eric Geller @ericgeller

@pbump @KnowBe4 You should absolutely not spend $50 on a phone charger from an airport vending machine if you forget yours. There is no real risk to the average person in borrowing a charger, especially one with a wall adapter. This is bad advice that distorts real risk analysis. — PolitiTweet.org

Eric Geller @ericgeller

Had to take a cybersecurity training course for work, and I was stunned at how bad some of @KnowBe4's lessons were. I got this question wrong twice before I realized what I was supposed to say, despite this not being a real threat that people need to worry about. https://t.co/mVgKLIHp9R — PolitiTweet.org

Eric Geller @ericgeller

@kristenkbates @admiraljello I did it for years before the pandemic and ironically had to start buying groceries in person when the pandemic started because everyone started snapping up delivery windows before I could get to them. Was so glad when I could get back to it. — PolitiTweet.org

Eric Geller @ericgeller

@joetidy Probably when it involves sabotaging infrastructure that could be used for attacks, but again, I'm not sure that's how HF/DF have actually been described, although I could be forgetting some examples. — PolitiTweet.org

Eric Geller @ericgeller

Cyber Command chief Gen. Paul Nakasone told Sky News that "we've conducted a series of operations across the full spectrum" in Ukraine, incl. "offensive, defensive, [and] information operations." No details beyond ref to "hunt forward" collab defense work. https://t.co/GwLVl2pdo5 — PolitiTweet.org

Eric Geller @ericgeller

@joetidy Not sure HF/DF are euphemisms for offensive operations. I only see them described as joint defense operations involving malware analysis etc. — PolitiTweet.org

Eric Geller @ericgeller

I wrote about HHS's Cybersecurity Coordination Center, which is trying to help hospitals, medical device makers, and other healthcare companies combat a rising tide of ransomware. Healthcare cyber folks are grateful for the help but want to see the small center get more support. — PolitiTweet.org