President Biden Signs 'National Defense Authorization Act' Into Law for Cybersecurity

The National Defense Authorization Act of 2022 lays out voluntary cybersecurity practices for private companies that handle critical infrastructure in the U.S.

But provisions all rely on the voluntary participation by industry, which owns and operates the vast majority of the nation’s critical infrastructure. Despite bipartisan calls after massive breaches at SolarWinds, Microsoft Exchange, Colonial Pipeline and other hacks, the NDAA made it through the House without mandatory incident reporting requirements for the private sector.

I disagree on the “voluntary” part. Make it mandatory, otherwise we end up with T-Mobile’s half-dozen breaches in the span of four years.

T-Mobile Data Breach Leaves Customers Vulnerable to SIM Swapping

T-Mobile has had another data breach, although a report suggests this one is less severe than the one in August. Only a small set of customers have been affected, but they could be vulnerable to a SIM swapping attack.

This is where a malicious actor will change the physical SIM card associated with a phone number in order to obtain control of said number. This can, and often does, lead to the victim’s other online accounts being accessed via two-factor authentication codes sent to their phone number. The document says that customers affected by a SIM swap have now had that action reversed.

Streaming Music Today, Using iPads, NFT Comic Books, with Jeff Gamet - ACM 565

Bryan Chaffin and Jeff Gamet talk about the practical realities of listening to music int he age of streaming music services. They also talk about how they use their iPads, and the ways in which that has changed. They cap the show with a practical use case look at NFT graphic novels, which Bryan says is one way of bringing collectibility back to the comic book world.

Proposed Bill Would Make Social Media Companies Responsible for Disinformation

A bill sponsored by state Sen. Brad Hoylman (D-Manhattan) aims to hold social media companies accountable for disinformation.

The legislation adds a section to the state’s penal code, adding a new cause of action for public nuisance allowing the state Attorney General, city corporation counsels or private citizens to bring lawsuits after companies or individuals for “knowingly or recklessly” contributing to things like promoting self-harm or vaccine disinformation.