Opinions – Noise https://noise.getoto.net The collective thoughts of the interwebz Tue, 26 Aug 2025 07:39:05 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Position Regarding the “Chat Control” EU Regulation Proposal https://noise.getoto.net/2025/08/26/position-regarding-the-chat-control-eu-regulation-proposal/ Tue, 26 Aug 2025 07:39:05 +0000 https://techblog.bozho.net/?p=3574 Interest in a very sensitive digital topic has been gaining momentum in recent weeks – the so-called “chat control” – a draft EU regulation under which every message we send,Continue reading

The post Position Regarding the “Chat Control” EU Regulation Proposal appeared first on Bozho's tech blog.

]]> Assessment of DOGE and Musk’s Actions for Government Efficiency https://noise.getoto.net/2025/03/23/assessment-of-doge-and-musks-actions-for-government-efficiency/ Sun, 23 Mar 2025 05:49:13 +0000 https://techblog.bozho.net/?p=3571 The Trump administration began with a commitment to optimizing the efficiency of the government, introducing the so-called DOGE (Department of Government Efficiency) under Elon Musk. On the first day, IContinue reading

The post Assessment of DOGE and Musk’s Actions for Government Efficiency appeared first on Bozho's tech blog.

]]> Is Ransomware Protection Working? https://noise.getoto.net/2024/06/25/is-ransomware-protection-working/ Tue, 25 Jun 2024 11:03:32 +0000 https://techblog.bozho.net/?p=3555 Recently an organization I’m familiar with suffered a ransomware attack. A LockBit ransomware infected a workstation and spread to a few servers. The attack was contained thanks to a quickContinue reading

The post Is Ransomware Protection Working? appeared first on Bozho's tech blog.

]]> The xz Backdoor Should Not Happen Again https://noise.getoto.net/2024/04/01/the-xz-backdoor-should-not-happen-again/ Mon, 01 Apr 2024 11:00:31 +0000 https://techblog.bozho.net/?p=3550 A few days ago a significant supply chain attack attempt was accidentally revealed – the xz utiliy was compromised, likely by a nation state, in order to plant a backdoorContinue reading

The post The xz Backdoor Should Not Happen Again appeared first on Bozho's tech blog.

]]> Why Facebook’s Lack of Customer Support Is a Problem https://noise.getoto.net/2024/02/04/why-facebooks-lack-of-customer-support-is-a-problem/ Sun, 04 Feb 2024 16:41:44 +0000 https://techblog.bozho.net/?p=3546 Facebook is arguably the biggest social network. The network effect makes it hard for people to leave Facebook, and so many businesses, celebrities, institutions, politicians rely on it for reachingContinue reading

The post Why Facebook’s Lack of Customer Support Is a Problem appeared first on Bozho's tech blog.

]]> Another Attack Vector For SMS Interception https://noise.getoto.net/2024/01/18/another-attack-vector-for-sms-interception/ Thu, 18 Jan 2024 16:28:18 +0000 https://techblog.bozho.net/?p=3543 SMS codes for 2FAs have been discussed for a long time, and everyone knowledgeable in security knows they are not secure. What’s more – you should remove your phone numberContinue reading

The post Another Attack Vector For SMS Interception appeared first on Bozho's tech blog.

]]> eIDAS 2.0, QWACs And The Security Of The Web https://noise.getoto.net/2024/01/03/eidas-2-0-qwacs-and-the-security-of-the-web/ Wed, 03 Jan 2024 08:36:41 +0000 https://techblog.bozho.net/?p=3524 Tension has been high in the past months regarding a proposed change to the European eIDAS regulation which defines trust services, digital identity, and the so-called QWACs – qualified websiteContinue reading

The post eIDAS 2.0, QWACs And The Security Of The Web appeared first on Bozho's tech blog.

]]> MERDA – A Framework For Countering Disinformation https://noise.getoto.net/2023/11/29/merda-a-framework-for-countering-disinformation/ Wed, 29 Nov 2023 16:16:44 +0000 https://techblog.bozho.net/?p=3516 Yesterday, on an conference about disinformation, I jokingly coined the acronym MERDA (Monitor, Educate, React, Disrupt, Adapt) for countering disinformation. Now I’ll put the pretentious label “framework” and describe whatContinue reading

The post MERDA – A Framework For Countering Disinformation appeared first on Bozho's tech blog.

]]> Anticorruption Principles For Public Sector Information Systems https://noise.getoto.net/2023/09/03/anticorruption-principles-for-public-sector-information-systems/ Sat, 02 Sep 2023 22:24:30 +0000 https://techblog.bozho.net/?p=3508 As a public official, I’ve put a lot of though on how to make the current and upcoming public government information systems prone to corruption. And I can list severalContinue reading

The post Anticorruption Principles For Public Sector Information Systems appeared first on Bozho's tech blog.

]]> Methodology for Return on Security Investment https://noise.getoto.net/2023/08/19/methodology-for-return-on-security-investment/ Sat, 19 Aug 2023 03:56:16 +0000 https://techblog.bozho.net/?p=3505 Measuring return-on-investement for security (information security/cybersecurity) has always been hard. This is a problem for both cybersecurity vendors and service providers as well as for CISOs, as they find itContinue reading

The post Methodology for Return on Security Investment appeared first on Bozho's tech blog.

]]> Why I’m Not So Alarmed About AI And Jobs https://noise.getoto.net/2023/05/05/why-im-not-so-alarmed-about-ai-and-jobs/ Fri, 05 May 2023 13:24:58 +0000 https://techblog.bozho.net/?p=3501 With the advances in large language models (e.g. ChatGPT), referred to as AI, concerns are rising about a sweeping loss of jobs because of the new tools. Some claim jobsContinue reading

The post Why I’m Not So Alarmed About AI And Jobs appeared first on Bozho's tech blog.

]]> Nothing Is Secure [slides] https://noise.getoto.net/2023/03/20/nothing-is-secure-slides/ Mon, 20 Mar 2023 13:33:03 +0000 https://techblog.bozho.net/?p=3497 Yesterday I gave a talk on a local BSides conference in Bulgaria titled “Nothing is secure”. The point is simple: security is very hard, there are many details, many tools,Continue reading

The post Nothing Is Secure [slides] appeared first on Bozho's tech blog.

]]> Internally And Externally Facing Honeypots https://noise.getoto.net/2023/03/16/internally-and-externally-facing-honeypots/ Thu, 16 Mar 2023 14:25:19 +0000 https://techblog.bozho.net/?p=3495 Honeypots are great security tools – you install a “decoy”, which attracts malicious traffic. They have certain ports open and they work with certain protocols, mimicking regular interactions, e.g. SSH,Continue reading

The post Internally And Externally Facing Honeypots appeared first on Bozho's tech blog.

]]> A Security Issue in Android That Remains Unfixed – Pull-down Menu On Lock Screen https://noise.getoto.net/2023/01/03/a-security-issue-in-android-that-remains-unfixed-pull-down-menu-on-lock-screen/ Tue, 03 Jan 2023 10:36:42 +0000 https://techblog.bozho.net/?p=3491 Having your phone lying around when your kids are playing with everything they find is a great security test. They immediately discover new features and ways to go beyond theContinue reading

The post A Security Issue in Android That Remains Unfixed – Pull-down Menu On Lock Screen appeared first on Bozho's tech blog.

]]> The Lack Of Native MFA For Active Directory Is A Big Sin For Microsoft https://noise.getoto.net/2022/08/24/the-lack-of-native-mfa-for-active-directory-is-a-big-sin-for-microsoft/ Wed, 24 Aug 2022 12:02:10 +0000 https://techblog.bozho.net/?p=3486 Active Directory is dominant in the enterprise world (as well as the public sector). From my observation, the majority of organization rely on Active Directory for their user accounts. WhileContinue reading

The post The Lack Of Native MFA For Active Directory Is A Big Sin For Microsoft appeared first on Bozho's tech blog.

]]> Open APIs – Public Infrastructure in the Digital Age https://noise.getoto.net/2022/08/03/open-apis-public-infrastructure-in-the-digital-age/ Wed, 03 Aug 2022 17:37:17 +0000 https://techblog.bozho.net/?p=3483 When “public infrastructure” is mentioned, typically people think of roads, bridges, rails, dams, power plants, city lights. These are all enablers, publicly funded/owned/managed (not necessarily all of these), which allowContinue reading

The post Open APIs – Public Infrastructure in the Digital Age appeared first on Bozho's tech blog.

]]> On Disinformation and Large Online Platforms https://noise.getoto.net/2022/05/25/on-disinformation-and-large-online-platforms/ Wed, 25 May 2022 11:01:27 +0000 https://techblog.bozho.net/?p=3479 This week I was invited to be a panelist, together with other digital ministers, on a side-event organized by Ukraine in Davos, during the World Economic Forum. The topic wasContinue reading

The post On Disinformation and Large Online Platforms appeared first on Bozho's tech blog.

]]> Don’t Reinvent Date Formats https://noise.getoto.net/2022/01/04/dont-reinvent-date-formats/ Tue, 04 Jan 2022 05:58:34 +0000 https://techblog.bozho.net/?p=3476 Microsoft Exchange has a bug that practically stops email. (The public sector is primarily using Exchange, so many of the institutions I’m responsible for as a minister, have their emailContinue reading

The post Don’t Reinvent Date Formats appeared first on Bozho's tech blog.

]]> I Have Been Appointed As E-Governance Minister of Bulgaria https://noise.getoto.net/2021/12/18/i-have-been-appointed-as-e-governance-minister-of-bulgaria/ Sat, 18 Dec 2021 16:50:30 +0000 https://techblog.bozho.net/?p=3473 Last week the Bulgarian National assembly appointed the new government. I am one of the appointed ministers – a minister for electronic governance. The portfolio includes digitizing registers and processesContinue reading

The post I Have Been Appointed As E-Governance Minister of Bulgaria appeared first on Bozho's tech blog.

]]> Simple Things That Are Actually Hard: User Authentication https://noise.getoto.net/2021/11/30/simple-things-that-are-actually-hard-user-authentication/ Tue, 30 Nov 2021 10:37:32 +0000 https://techblog.bozho.net/?p=3465 You build a system. User authentication is the component that is always there, regardless of the functionality of the system. And by now it should be simple to implement itContinue reading

The post Simple Things That Are Actually Hard: User Authentication appeared first on Bozho's tech blog.

]]>