Notices by Alex Stamos (alex@cybervillains.com)

Microsoft just announced that they were breached by the SVR, the same Russian intelligence agency that broke into Solarwinds.

This is a big deal, and Microsoft owes all of us a much more detailed description of what happened.

https://msrc.microsoft.com/blog/2024/01/microsoft-actions-following-attack-by-nation-state-actor-midnight-blizzard/

Some more thoughts on the challenge of #Meta #Threads integrating ActivityPub support while living up to their normal obligations.

1) Enforcing actor and behavior-based content moderation will be hard.

All content moderation is either against the actor, behavior, or content (ABC model). With Federation, the metadata that big platforms use to tie accounts to a single actor or detect abusive behavior at scale aren't available (IPs, cookies, JS proof-of-life, TLS signatures, etc).