Sunday Musings Tale
Happy Sunday Friend!
Welcome back to another musing! I’m glad you’re here. Here are your Sunday Musings, a quick dose of what I’m exploring and thinking about. If you find it useful, please feel free to forward this along to friends!
In the News
Spain’s Push to Ban End-to-End Encryption Raises Concerns and Debate.
A leaked document obtained by WIRED highlights EU member state discussion on scanning private messages for illegal content. This is an interesting and necessary discussion with decent points on both sides of the discussion.
The document provides insights into the views of EU countries regarding encryption regulations, and which (15 of the 20) are supportive of the endeavor while navigating the balance between privacy rights and law enforcement.
It also highlights the depth of understanding those policymakers do or do not have on the subject and a desire to both have privacy and indiscriminate encrypted communication scanning. Notably, the Spanish representatives’ quote:
“Ideally, in our view, it would be desirable to legislatively prevent EU-based service providers from implementing end-to-end encryption,”
This isn’t a new debate (Apple, Eternal Blue) but it is a recent one with new traction. It is true, E2EE may provide a haven for criminals to communicate out of reach of law enforcement. It is also true that once a backdoor for decryption is available to governments (and parents), it becomes a vector to undermine the encryption by criminal organizations; or agents working for those same governments.
Regardless of the outcome, it sets a precedent for the rest of the world.
New ZIP domains spark debate among cybersecurity experts
Bleeping computer has a great write up on some discussions I’ve had recently regarding Google’s new top-level domains and the security risk they create for phishing and malware, specifically the .zip and .mov.
The issue here is that these are also extensions and that means we are going to see applications begin to correlate filenames with these extensions to URLs. Do I think this is something to put out an all-points bulletin? I do not. The confusion between filenames and domain names isn’t new. Safe user and business practices such as never clicking on links or download files from unverified sources, and research before you click will largely suffice. Google has active mechanisms in place to suspend or remove malicious domains and monitor emergent threats.
But it only takes one member of the team to be fooled by legitimate looking phishing attempt like the one below.
https://github.com/kubernetes/kubernetes/archive/refs/tags/@v1.27.1.zipThis looks like a legitimate file download from GitHub, but actually takes you to the v1.27.1.zip website.
Recommended action? Build awareness, be mindful.
| More
Supreme Court Leaves Internet and Social Media Shielded with Section 230
The Supreme Court reversed a lower court’s ruling against twitter and also left Section 230 unchanged to give social media companies the continued protection from lawsuits stemming from terrorist and other hate or violent crime related content posted on their platforms by users.
In Twitter v. Taamneh, the Supreme Court ruled Twitter will not face accusations that it aided and abetted terrorism by hosting tweets created by ISIS. The court also dismissed Gonzalez v. Google, avoiding a narrowing of Section 230 of the Communication's Decency Act, a key federal liability shield for websites.
| More | Overview of Section 230
Quote I’m Musing
““Be tolerant with others and strict with yourself.”
-Marcus Aurelius, Meditations
Self-admonishment this week, I’m nearing the completion of both a rigorous training session and the completion of the Clipt app for stylists and clients. I had some time to reflect towards the end of the week and I’ve strayed from this, I think.
I have high standards for myself and what I do. I don’t make excuses for my shortcomings, and I don’t ask for special treatment. But it’s SELF discipline. It’s meant for me. No one signed up for my standards. Heck, people most likely don’t agree with my standards, and it’s not my charge to hold anyone but myself to them.
I recall Cato quoted for saying “I can forgive anyone’s errors but my own.”
As leaders, as humans, we should be tolerant, forgiving, understanding, and empathetic to those we engage with. Take in the context of the situation and circumstances surrounding the events so that we can make the best decisions possible, help as best possible.
People can suck, the only thing that’s not worthless is to do what’s right, be good, and be patient with those who aren’t. Fairness in the face of unfairness.
Focus on what we say, what we do, what we think. The rest is not up to us.
My challenge to myself this month is to refocus on this and to not “be heard any longer griping about public life”, not even with my own ears (also pulled from Marcus Aurelius).
I would love your feedback!
Which musing is your favorite? What else do you want to see or what should I eliminate? Any other suggestions? Just send a tweet to @erichaupt on Twitter and put #SundayMusings at the end so I can find it. Or, eric@erichaupt.com for long form email.
Have a wonderful week, I’ll see you Sunday.
-e
End of transmission.