The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 9 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 0 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Holland: Offensive hacking only exists because humans write bad software
“The first bit only exists because humans
Are generally horrible at writing software. So that wouldn't exist if people were actually good at security models and implementing software.”
Holland: Android fragmentation prevents mass attacks better than Apple iOS
“The nature of Android also creates a scenario where there's so many different flavors of Android, it makes it much more difficult to create a mass attack. Whereas on iOS, because it's the same version of the operating system across the board on every device, i…”
Holland: Network monitoring solutions cannot stop ransomware
“A network monitoring solution will not stop ransomware. There's nothing you can do about that. Yeah, you have to be on host, and you have to have a measure of sophistication and tradecraft to identify and block it.”
Holland: Ransomware attacks are inevitable, making prevention far cheaper than response
“Much easier and cheaper to be preventative and to harden your system and be ready for attacks. I mean, that is the reality of today, and anybody who thinks otherwise is, you know, they've got their head in their sand. You're going to get ransomwared. Bad thing…”
Holland: Assuming average businesses care about cybersecurity is a false premise
“And then that, I mean, I think the assumption that the average business is going to care about cybersecurity is, is a false starting point. Because businesses, you know, you buy your computer hardware, you get your IT set up. If I'm a business and I, you know,…”
Holland: Operating system zero-day vulnerabilities are an unavoidable permanent problem
“The zero-day problem is something that's always going to be there. I think this is something that a lot of vendors don't actually realize, that no matter how much you lock down your operating system, there's always going to be a creative group out there that d…”
Holland: Law enforcement lacks bandwidth to investigate small business ransomware attacks
“The challenge would not necessarily be the difficulty. It would be the average Any person or business getting any agency to care, to track it down. Because that, intel agencies, law enforcement agencies aren't sitting around waiting for things to do. You know,…”
Holland: No company is too small to be targeted by cyber attackers
“Everybody is a target at this point. Your company is not small enough to be off
An attacker's radar. I have seen five person companies.
Actually, I've seen two person companies attacked and hit.”
Holland: Invoice redirection fraud via compromised email is surprisingly effective
“The other approach that we see quite a bit is people don't use multi-factor authentication with just a basic email setup. So brute force, brute forcing passwords works. Somebody gets in, We'll scope out your inbox and see what's there. Who are your customers? …”