BrianKrebs's avatar
BrianKrebs
briankrebs@infosec-exchange.mostr.pub
npub1rfdv...t9xk
Independent investigative journalist. Covers cybercrime, security, privacy. Author of 'Spam Nation,' a NYT bestseller. Former Washington Post reporter, '95-'09. Signal: briankrebs.07 krebsonsecurity @ gmail .com Linkedin: https://www.linkedin.com/in/bkrebs
BrianKrebs's avatar
BrianKrebs 3 weeks ago
via Hackernews. It really is comical the lengths to which companies will go to avoid being contacted by their customers. What the fuck is a ‘fuck off contact page?’ "A “fuck off contact page” is what a company throws together when they actually don’t want anyone to contact them at all. They are usually found on the websites of million or billion dollar companies, likely Software-as-a-service (SaaS) companies that are trying to reduce the amount of money they spend on support by carefully hiding the real support channels behind login walls. These companies tend to offer multiple tiers of support, with enterprise customers having a customer success manager who they can call on this ancient device we call phones, whereas the lower-paying customers may have to wrangle various in-app ticket mechanisms. If you solve your own problem by reading the knowledge base, then this is a win for the company. They don’t want to hear from you, they want you to fuck off."
BrianKrebs's avatar
BrianKrebs 1 month ago
They had me at the headline: AI isn’t replacing jobs. AI spending is "From Amazon to General Motors to Booz Allen Hamilton, layoffs are being announced and blamed on AI. Amazon said it would cut 14,000 corporate jobs. United Parcel Service (UPS) said it had reduced its management workforce by about 14,000 positions over the past 22 months. And Target said it would cut 1,800 corporate roles. Some academic economists have also chimed in: The St. Louis Federal Reserve found a (weak) correlation between theoretical AI exposure and actual AI adoption in 12 occupational categories." "Yet we remain skeptical of the claim that AI is responsible for these layoffs. A recent MIT Media Lab study found that 95% of generative AI pilot business projects were failing. Another survey by Atlassian concluded that 96% of businesses “have not seen dramatic improvements in organizational efficiency, innovation, or work quality.” Still another study found that 40% of the business people surveyed have received “AI slop” at work in the last month and that it takes nearly two hours, on average, to fix each instance of slop. In addition, they “no longer trust their AI-enabled peers, find them less creative, and find them less intelligent or capable.” https://www.fastcompany.com/91435192/chatgpt-llm-openai-jobs-amazon
BrianKrebs's avatar
BrianKrebs 1 month ago
Meta, Meta, Meta. So Meta. This Reuters report is 🔥 "Meta is earning a fortune on a deluge of fraudulent ads, documents show" "Meta projected 10% of its 2024 revenue would come from ads for scams and banned goods, documents seen by Reuters show. And the social media giant internally estimates that its platforms show users 15 billion scam ads a day. Among its responses to suspected rogue marketers: charging them a premium for ads – and issuing reports on ’Scammiest Scammers.’ https://www.reuters.com/investigations/meta-is-earning-fortune-deluge-fraudulent-ads-documents-show-2025-11-06/?utm_source=substack&utm_medium=email
BrianKrebs's avatar
BrianKrebs 2 months ago
I've been trying to get the cybercrime journalist @npub1z08h...w6tq to abandon their seat at the Nazi Bar, or at least to also post here. So please join me in giving them a follow and a friendly hello.
BrianKrebs's avatar
BrianKrebs 3 months ago
Jimmy Kimmel has been must-watch over the past few days. Total 🔥 monologues. Also, Spinal Tap!
BrianKrebs's avatar
BrianKrebs 3 months ago
Democracy in the US is under serious threat by a deranged orange comestible, but you wouldn't see any signs of that from watching the absolutely delusional stock market, which seems to only care about AI stocks continuing to lift the entire market thanks to their outsized value in it and all the wealth tied up in some fairly shaky but critical assumptions. In other news, Financial Times reports just now that Oracle's market value jumped $200B thanks to a surge in AI investment, taking Larry Ellison's worth to that of Elon Musk.
BrianKrebs's avatar
BrianKrebs 3 months ago
I've never before seen this particular 550 error in response to an email that was sent to me by a reader. Proton seems to be dunking on their own user here. "550 5.6.0 Message rejected due to potential violation of our ToS by the recipient"
BrianKrebs's avatar
BrianKrebs 4 months ago
I'm not sure how I ended up there, but this morning I watched a YT video about the most valuable comic books from the 1980s, and it turns out I have a ton of these in near mint condition, including The Punisher #1 and all the Secret Wars series. It would probably take several days to go through the whole collection, which has incredibly survived in a stack of boxes under the stairs for eons. It's just wild b/c I sort of forgot I had all those.
BrianKrebs's avatar
BrianKrebs 5 months ago
Making it easier for Americans to access their own health records is a laudable goal. I am constantly amazed at how difficult it is sometimes to get our own records from healthcare providers -- even when it is a matter of urgency or a critical health issue. But creating a system where Big Tech gets to share your medical records so you can access them wherever is an extremely bad idea for health data security. For starters, it does nothing to address the reality that healthcare companies in general have absolutely atrocious security practices and some of leanest security budgets you've ever seen for large organizations trusted with such sensitive information. More importantly, we still don't have any data privacy laws that are relevant to life in the 21st century. How about we work on that before we just punt a broken system to the tech bros?
BrianKrebs's avatar
BrianKrebs 5 months ago
New, at KrebsOnSecurity.com: Marko Elez, a 25-year-old employee at Elon Musk's Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland Security. So it should fill all Americans with a deep sense of confidence to learn that Mr. Elez over the weekend inadvertently published a private key that allowed anyone to interact directly with more than four dozen large language models (LLMs) developed by Musk's artificial intelligence company xAI.
BrianKrebs's avatar
BrianKrebs 7 months ago
I've written so many stories about John Clifton Davies, the serial con man who continues to slick-talk tech companies into thinking he's a billionaire investor. In reality, his scam is simple: Find companies that are desperate for investment, dangle $20-$100M investments, and then insist the whole thing is managed by a third-party "due diligence" firm that is actually run by them and is a complete scam. They just go around bilking companies out of tens of thousands of dollars in due diligence fees, and then disappear and rebrand. Over the past month I've heard from a bunch of his new victims, some of which have already sent his firms money. Incredibly, these scammers are still re-using the same boilerplate text in their bullshit investment sites that they used in past scam sites. It's a reliable "watermark" for them that they never bother changing, no matter how many times I point it out in a story. Not sure I can be bothered to write about this guy yet again, but for the record his current scam due diligence firms are ROI Capital (roicap.co) and Apertura (apertura.uk).
BrianKrebs's avatar
BrianKrebs 8 months ago
The POTUS has issued a memo ordering a federal investigation into Chris Krebs, former head of DHS's Cybersecurity and Infrastructure Security Agency (CISA). The president fired Krebs after the CISA director declared the 2020 election that Trump lost was the most secure in U.S. history. "Trump's orders revoked the security clearances for Christopher Krebs, the former head of DHS's Cybersecurity and Infrastructure Security Agency, and Miles Taylor, a former senior DHS official who wrote a highly critical tell-all book about his time in Trump's first administration." When Trump first took aim at Chris Krebs back in 2020, I started getting tons of hate mail that was directed at him. People full of ignorant rage figuring we're the same person because we share a last name. We're not even related. Now it's happening again. Here's one I just got less than an hour ago: From: Eric <eticket@countermail.com> Subject: Accountability Message Body: Krebs: I used to be an admirer of yours but, ever since the 2020 election, I lost all respect for you. You either lied or were complicit in the 2020 election theft and DJT is coming after you. Krooks like Krebs need to be held accountable and I can't wait.
BrianKrebs's avatar
BrianKrebs 9 months ago
Imagine being so drunk on the Kool-Aide that you can't listen to someone trying to help your company. Reached out to an executive at a manufacturing company about a security issue, and their reply was: "I'd like to help you. However, in checking out your website it is clear you suffer from Trump Derangement Syndrome. I don't like the guy but he is our President and a refreshing change from a mentally incapacitated do nothing President." Oh well, I tried.
BrianKrebs's avatar
BrianKrebs 9 months ago
This seems like an ominous development: "A new executive order from President Donald Trump aims to expand information-sharing across federal agencies as well as between federal and state governments, but civil libertarians and other experts are warning that the main purpose is to help normalize how the Department of Government Efficiency is handling government data." "The order, issued Thursday, directs all federal agency heads to modify or rescind any regulations preventing the sharing of unclassified data and records between federal agencies." "Agency heads also must ensure that the U.S. government has “unfettered access” to comprehensive data from all state programs that receive federal funding. The order extends to all such data even when stored in third-party databases." "The stated goal is “eliminating bureaucratic duplication and inefficiency while enhancing the Government’s ability to detect overpayments and fraud” — the supposed core of DOGE’s mission. The order does not mention DOGE by name." "Civil libertarians and other experts, however, call the new EO an alarming development, and say it is meant to give cover to DOGE, which has been the subject of numerous lawsuits as its workers continue to root through government records and disrupt federal agencies. Trump also has previously sought to consolidate data for reasons that would infringe on civil liberties, the experts say." "While the new EO asserts that the removal of data “silos” is designed to eliminate fraud, waste and abuse, disturbing mission creep is very possible, said Elizabeth Laird, director of equity and civic technology at the nonprofit Center for Democracy and Technology." "There are no assurances that the data won’t be used for “targeting people who the administration has separately said are a priority for them,” Laird said. “That can include immigrants, it can include people who are transgender, it can include people that speak up” against the administration. " More here:
BrianKrebs's avatar
BrianKrebs 9 months ago
Wow. The US Treasury Dept. today announced it is lifting sanctions on Tornado Cash, a cryptocurrency mixing service that state-sponsored hackers from North Korea have been massively using to launder their stolen billions. "Based on the Administration’s review of the novel legal and policy issues raised by use of financial sanctions against financial and commercial activity occurring within evolving technology and legal environments, we have exercised our discretion to remove the economic sanctions against Tornado Cash as reflected in Treasury’s Monday filing in Van Loon v. Department of the Treasury." https://home.treasury.gov/news/press-releases/sb0057 h/t to @npub1s0j6...t5hz for the heads up. Weaver said: "The US government has just said "money laundering is legal as long as the process is automated." "Every wei that flows through Tornado Cash, even if 'legitimate,' is helping the North Korean nuclear regime by hiding illegitimate flows," Weaver told me. Here's Treasury sanctioning Tornado Cash in 2022: https://home.treasury.gov/news/press-releases/jy0916
BrianKrebs's avatar
BrianKrebs 9 months ago
At some point, this administration and its mouthpieces like Musk and Stephen Miller are going get a federal judge killed with their rhetoric that judges should be impeached for ruling against the president. Every time they do this they are effectively painting a target on judges for their more extreme MAGA base. From WaPo: "Stephen Miller, one of Donald Trump’s closest advisers at the White House, is escalating the administration’s attacks on federal judges who have ruled against the president’s recent orders, labeling them as rogue Marxists thwarting the will of American voters."
BrianKrebs's avatar
BrianKrebs 1 year ago
Watched the phenomenal movie The Big Short for the second time today, and couldn't help feeling confident that if this whole journalism thing stops working out, I could have a satisfying career researching scam companies and shorting them till the cows come home.
BrianKrebs's avatar
BrianKrebs 1 year ago
Yesterday's story on the widespread tracking enabled through mobile ads and apps cited figures about the market shares of iPhone and Android: ~72 percent Android worldwide. But the situation is quite different in the US, where iPhones claim ~57 percent of the market. This tracks incredibly closely to a poll I did here last year, which asked people in security dayjobs to share their main phone type. 54 percent said iPhone. 4,823 participants. It's really nice when these polls end up being useful and relevant in reporting.
BrianKrebs's avatar
BrianKrebs 1 year ago
It's about f'in time the big publications pressed Mr. Trump on his statements this past week that supporters just needed to vote for him one more time, and then "you don't have to vote again." Trump's response -- which is that if he's elected "the country will be fixed" and their votes won't be needed -- seems pretty unambiguous. It is absolutely unreal that this is the GOP candidate for president, and that this blatantly antidemocratic statement alone does not somehow disqualify him from running.