A Guy in Security
banner
aguyinsecurity.bsky.social
A Guy in Security
@aguyinsecurity.bsky.social
Just some protective security, threats intelligence, cyber security and risk management specialist, working in the UK aviation industry.
We seriously shouldn’t be entertaining these clowns in trade negotiations… These tariffs need (and hopefully will) to backfire and that can only be the result of backbone from UK govt! Sir Kier needs to channel his Hugh Grant…
April 15, 2025 at 9:52 AM
I mean, this is good security practice for international travel anyway… But good to see them taking action!
April 15, 2025 at 9:50 AM
/9

4. Finally, & I guess more generally
in life, TAKE ACCOUNTABILITY FOR YOUR ACTIONS!

Waltz and Hegseth made a major mistake which luckily wasn’t costly from a military or human perspective, yet they won’t admit it.

End of message. End of broadcast.

#signal #hegseth #signalgate #trump #waltz
March 26, 2025 at 4:56 PM
/8

3. Regularly audit your group chat attendees to make sure you know exactly who you’re talking to, even if you didn’t set up the group chat.

4. Assume you’re being monitored, whether it be your organisation’s SOC or a hostile actor. With an accredited system, it’s less likely to be the latter…
March 26, 2025 at 4:23 PM
/7
So, what do I want anyone reading this to take away:

1. Don’t vilify the use of @signal.org. It’s one of the best apps for the job, so long as it’s used correctly within the confines of classified information handling protocols.

2. Know what classified information is and how to handle it.
March 26, 2025 at 4:19 PM
/6
Just as important as knowing your classifications is knowing who you’re talking to.

I can’t believe nobody, at any point, thought to audit who was included in the group chat - Especially those who didn’t participate in the conversations.
March 26, 2025 at 4:16 PM
/5
There isn’t anything wrong with the use of Signal per se, it’s one of the best platforms out there and govts. all over the world incl. the UK govt use it… But users MUST be strict with limiting its usage to appropriate classifications, and only on official devices.
March 26, 2025 at 4:14 PM
/4
Note an earlier message from Waltz, they were using their high side inboxes - accredited for security sensitive information - so it seems they were being lax (or taking the path of least resistance) in discussing more than they should on Signal…
March 26, 2025 at 4:11 PM
/3
If US cyber and infosec guidance is aligned to UK policy, then that sort of information absolutely CANNOT be shared on Signal, no matter whether it was an official device or not.
March 26, 2025 at 4:08 PM
/2
I don’t have experience in US military operational planning, but in the UK the information contained in the screenshot above would absolutely be classified secret, per the UK GCS guidance.
March 26, 2025 at 4:06 PM
So, in my search of a place full of less overt right-wing extremism, I guess I now find myself in the fediverse proper.

Hi Bluesky 👋🏻
August 23, 2024 at 3:12 PM