[continued from previous message]

Used electric vehicle batteries could be the Achilles' heel of the transportation revolution—or the gold mine that makes it real.

When batteries can’t be fixed or reused, the company recycles some at its onsite facility. It also stores batteries. Lots of them. SNT’s main
warehouse in Oklahoma City holds hundreds of electric car batteries, stacked
on shelves that jut 30 feet into the air. With the Bolt recall, GM will send SNT many more.

Those batteries, and millions more like them that will eventually come off
the road, are a challenge for the world’s electrified future. Automakers
are pouring billions into electrification with the promise that this
generation of cars will be cleaner than their gas-powered predecessors. By
the end of the decade, the International Energy Agency estimates there will
be between 148 million and 230 million battery-powered vehicles on the road worldwide, accounting for up to 12 percent of the global automotive fleet.

The last thing anyone wants is for those batteries to become waste.
Lithium-ion batteries, like other electronics, are toxic, and can cause destructive fires that spread quickly—a danger that runs especially high
when they are stored together. A recent EPA report found that lithium-ion batteries caused at least 65 fires at municiple waste facilities last year, though most were ignited by smaller batteries, like those made for cell
phones and laptops. In SNT’s warehouse, bright red emergency water lines snake across the ceilings, a safeguard against calamity.

https://www.wired.com/story/cars-going-electric-what-happens-used-batteries/

A challenge for solid waste transfer stations; this is SOLID Waste.

------------------------------

Date: Sun, 7 Nov 2021 21:45:41 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Open Source Doesn't Mean More Software Is Better Software (WiReD)

Last month, Eugen Rochko learned that the software project he started
building during his university days, called Mastodon, is running Donald Trump’s new Truth Social network. This was an uncomfortable discovery,
since, as Rochko told Vice, “If you want my personal opinion on Trump, I cannot stand the guy.”

Rochko’s first instinct might have been to order Trump to leave immediately—but Rochko doesn’t control Mastodon in that sort of way. It was created as free, open source software with a “copy-left” license, which means anyone can download it, run it, and change it, on the condition that
they continue to work under the same license and freely share the altered version they are operating. Not only is Trump permitted to use the software
for his own peculiar purposes, but the free software saves a startup like
Truth Social millions of dollars in programming expenses. All Mastodon asks
in return is that Truth Social then pay it forward.

But it turns out Trump isn’t a pay-it-forward kind of guy. On the Truth Social site there is currently no acknowledgment of Mastodon, and no way
for someone to download the altered source code. Discovering this
noncompliance gave Rochko his opening, and last week he announced that
Mastodon had “sent a formal letter to Truth Social’s chief legal officer, requesting the source code to be made publicly available in compliance with
the license,” which is known as AGPLv3. If Truth Social doesn’t comply within 30 days, the letter reads, the license may be permanently revoked, presumably by getting a court to make such an order.

https://www.wired.com/story/more-software-isnt-better-software/

The risks? Believing in good-faith licenses and promises...

------------------------------

Date: Wed, 10 Nov 2021 17:17:07 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: The Era Of D.C.’s New (771) Area Code Has Begun (DCist)

The area code is what’s known as an overlay — it will co-exist with (202) throughout D.C., unlike old-school “splits,” in which area codes were assigned to specific geographic areas. What limited criticism or concern
there was around the introduction of the (771) area code was largely based
on sentimental attachments to the original (202), though the Anti-Digit
Dialing League — “the premiere sensible dialing association organization” —
argued against an overlay since splits allow people to still call each other using only the seven digits of their phone number, instead of having to also dial the area code.

“Overlays continue to remain a public nuisance,” said the niche organization.

https://dcist.com/story/21/11/10/the-era-of-dcs-new-771-area-code-has-begun/

ADDL -- Anti-Digit Dialing Luddites. As a kid, I tried to convince my
parents that our Brooklyn phone number -- TE6-0176 -- should be given out as all digits. I was decades ahead of NANPA.

------------------------------

Date: Thu, 11 Nov 2021 17:35:56 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Hackers Targeted Apple Devices in Hong Kong for Widespread Attack
(WiReD)

Visitors to pro-democracy and media sites in the region were infected with malware that could download files, steal data, and more.

Since at least late August, sophisticated hackers used flaws in macOS and
iOS to install malware on Apple devices that visited Hong Kong–based media and pro-democracy websites. The so-called watering hole attacks cast a wide net, indiscriminately placing a backdoor on any iPhone or Mac unfortunate enough to visit one of the affected pages.

Apple has patched the various bugs that allowed the campaign to unfold.
But a report Thursday from Google's Threat Analysis Group shows how
aggressive the hackers were and how broadly their reach extended. It's
yet another case of previously undisclosed vulnerabilities, or
zero-days, being exploited in the wild by attackers. Rather than a
targeted attack that focuses on high-value targets like journalists and dissidents, though, the suspected state-backed group went for scale.

https://www.wired.com/story/ios-macos-hacks-hong-kong-watering-hole/

...so always good advice, apply updates -- don't wait to long after release.

------------------------------

Date: Thu, 11 Nov 2021 17:45:42 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: This Company Tapped AI for Its Website—and Landed in Court (WiReD)

Under pressure to make their sites accessible to visually impaired
users, firms turn to software. But advocates say the tech isn't always
up to the task.

Last year, Anthony Murphy, a visually impaired man who lives in Erie, Pennsylvania, visited the website of eyewear retailer Eyebobs using screen reader software. Its synthesized voice attempted to read out the page’s content, as well as navigation buttons and menus. Eyebobs used artificial intelligence software from Israeli startup AccessiBe that promised to make
its site easier for people with disabilities to use. But Murphy found it
made it harder.

AccessiBe says it can simplify the work of making websites accessible to
people with impaired vision or other challenges by “replacing a costly, manual process with an automated, state-of-the-art AI technology.” In a lawsuit filed against Eyebobs in January, Murphy alleged that the
retailer failed to provide people using screen readers equal access to
its services and that the technology from AccessiBe—not party to the suit—doesn’t work as advertised. [...]

In his report on AccessiBe, Groves cited an image of a model wearing a white dress for sale on an ecommerce site. The alternative text provided,
apparently generated by AccessiBe’s technology, was “Grass nature and summer.” In other cases, he reported, AccessiBe failed to properly add
labels to forms and buttons.

On the homepage of its website, AccessiBe promises “automated web accessibility.” But support documents warn customers that its machine learning technology may not accurately interpret webpage features if it “hasn’t encountered these elements enough before.”

https://www.wired.com/story/company-tapped-ai-website-landed-court/

"Automated" doesn't necessarily mean AI. And AI isn't necessarily I.

------------------------------

Date: Fri, 12 Nov 2021 00:20:01 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Contract lawyers face a growing invasion of surveillance programs
that monitor their work (WashPost)

Attorneys say the constant workday face scans, mandated by their bosses, are fueling fears of over-surveillance: “I will not subject myself to this indignity and the invasion of my privacy in my own home."

The attorneys worry that if law firms, traditionally the defenders of workers’ rights, are turning to the programs, why wouldn’t every other business?

Camille Anidi, an attorney on Long Island, quickly understood the flaws
of the facial recognition software her employers demanded she use when
working from home. The system often failed to recognize her face or
mistook the Bantu knots in her hair as unauthorized recording devices,
forcing her to log back in sometimes more than 25 times a day.

When she complained, she said, her bosses brushed it off as a minor
technical issue, though some of her lighter-skinned colleagues told her they didn’t have the same problem — a common failing for some facial recognition systems, which have been shown to perform worse for people of color.

So after each logout, Anidi gritted her teeth and did what she had to do: Re-scan her face from three angles so she could get back to a job where she
was often expected to review 70 documents an hour.

“I want to be able to do the work and would love the money, but it’s
just that strain: I can’t look left for too long, I can’t look down, my
dog can’t walk by, or I get logged out,” she said. “Then the company is looking at me like I’m the one delaying!”

Facial recognition systems have become an increasingly common element of the rapid rise in work-from-home surveillance during the coronavirus
pandemic. Employers argue that they offer a simple and secure way to monitor
a scattered workforce.

But for Anidi and other lawyers, they serve as a dehumanizing reminder that every second of their workday is rigorously probed and analyzed: After verifying their identity, the software judges their level of attention or distraction and kicks them out of their work networks if the system thinks they’re not focused enough. [...]

Lawyers said they had been booted out of their work if they shifted slightly
in their chairs, looked away for a moment or adjusted their glasses or
hair. The systems, they said, also chastised them for harmless behaviors: holding a coffee mug mistaken for an unauthorized camera or listening to a podcast or the TV.

The constant interruptions have become a major annoyance in a job requiring long-term concentration and attention to detail, some lawyers said. But the errors also undercut how much work they could do, leaving some fearful it
could affect their pay or their ability to secure work from the same firms later on. https://www.washingtonpost.com/technology/2021/11/11/lawyer-facial-recognition-monitoring/

------------------------------

Date: Sun, 14 Nov 2021 14:26:17 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: The next normal: Algorithms will take over college, from admissions
to advising (WashPost)

Imagine being rejected from a university or advised out of your major
because you’re Black, or a woman, or a first-generation college student. Imagine learning that these decisions were made by predictive analytics software that you can’t object to or opt out of. Just over a decade ago,
this seemed unlikely. Now it seems difficult to stop.

That may sound futuristic, but St. George’s Hospital Medical School in
London deployed this technology as early as the 1980s. Administrators
trained a predictive model using historical admissions data to determine
who was accepted to the medical program. It was supposed to eliminate
the biases of admissions officers; unsurprisingly, it reproduced a
pattern of discrimination. The demographics of incoming students skewed
heavily toward White men, forcing the school to stop the practice.

Today, this is the reality faced by millions of students. This year, the
Markup reported that more than 500 universities use a single company’s predictive analytics product, which assigns students an academic “risk score” based on variables that are supposedly associated with people’s ability to succeed in college — including, at many schools, race. Black
and Latino students were consistently rated as higher risk than their
White or Asian peers.

https://www.washingtonpost.com/outlook/next-normal-algorithms-college/2021/11/12/366fe8dc-4264-11ec-a3aa-0255edc02eb7_story.html

And of course, no "forensic audits" of results.

------------------------------

Date: Sun, 14 Nov 2021 14:30:14 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Google loses appeal against $2.7 billion antitrust fine over its
comparison-shopping practices in Europe (Fortune)

Google has lost its appeal against the $2.7 billion antitrust fine that was levied against it four years ago by the European Commission.

The fine was for Google’s promotion of its own comparison-shopping
service in prominent boxes at the top of its search results—a practice
that left competing comparison-shopping services at an unfair
disadvantage, given Google’s near-total domination of search in Europe.
(In Europe, unlike in the U.S., an antitrust violation can take place
even if consumers are not demonstrably harmed, if a company’s actions severely harm competition.) Google was subsequently fined billions of
euros twice more over other antitrust violations, and it launched an
appeal in each case.

On Wednesday, the European Union’s General Court—the court that hears appeals against decisions made by the European Commission—upheld the Google Shopping fine. It mostly dismissed the company’s appeal, though it did say the Commission had not backed up its claim that Google’s conduct had anticompetitive effects on the general-search market (a factor that had no bearing on the amount of the fine). Google has not yet said whether it will further appeal this decision to the Court of Justice of the EU, its last
hope.

The ruling is a huge boost to the reputation and likely future plans of Margrethe Vestager, the EU’s competition commissioner. Last year, the
General Court annulled her mammoth $14.8 billion back-tax bill for Apple
in Ireland, which was a serious blow. This time, she has prevailed,
which could encourage her to keep hitting Google over other alleged
violations.

“Today’s judgment delivers the clear message that Google’s conduct was unlawful, and it provides the necessary legal clarity for the market,” the Commission said in a statement. “Comparison shopping delivers an important service to consumers, at a time when e-commerce has become more and more important for retailers and consumers. As digital services have become omnipresent in our society nowadays, consumers should be able to rely on
them in order to make informed and unbiased choices.”

https://fortune.com/2021/11/10/google-loses-appeal-eu-general-court-billion-antitrust-fine-comparison-shopping-practices-europe/

Competition, what a concept.

------------------------------

Date: Tue, 16 Nov 2021 00:02:42 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Caller ID fun (Comcast)

Comcast Rolls Out Nation’s Largest Landline Voice Verified Caller ID
Solution to Combat Robocalls

These customers will now display a Verified [V] label in the caller ID
when a call is authenticated as not spoofed, meaning we have been able
to confirm the call is coming from the telephone number displayed.

https://corporate.comcast.com/press/releases/comcast-landline-voice-verified-caller-id-solution-to-combat-robocalls

...but:

Phone Call Mystery: A “V” Shows on my Caller ID -- The mysteries of the universe – from black holes to galaxies beyond – we’re just not sure what’s
really out there. And, when a call arrives on our phone with the caller ID starting with a V + a long string of digits, we wonder what it might be.

A V in your caller ID refers to a number from a telemarketing company. It
is likely this call is Spam.

https://www.numberbarn.com/blog/phone-call-mystery-a-v-shows-on-my-caller-id/

...so, to [V or not to V?

Couple calls today had [V] and were legitimate. Is the difference just [ ]? That'll sure confuse people.

------------------------------

Date: Tue, 16 Nov 2021 00:05:14 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Debris From Test of Russian Antisatellite Weapon Forces Astronauts
to Shelter (NYTimes)

The State Department said the cloud of debris from the missile strike added more than 1,500 pieces of sizable space junk to Earth’s orbit.

https://www.nytimes.com/2021/11/15/science/russia-anti-satellite-missile-test-debris.html

Target practice...

------------------------------

Date: Wed, 17 Nov 2021 12:34:30 -0500
From: "Gabe Goldberg" <gabe@gabegold.com>
Subject: Apple announces-Self Service Repair (Apple)

https://www.apple.com/newsroom/2021/11/apple-announces-self-service-repair/

Interesting -- I guess it's only a "risk" if some repairs are "Kids,
don't try this at home".

But old devices might be useful for practice, if parts/tools aren't too expensive.

------------------------------

Date: Sun, 07 Nov 2021 15:28:26 +0000
From: Henry Baker <hbaker1@pipeline.com>
Subject: Re: Trojan Source Bug Threatens the Security of All Code

What could possibly go wrong?
 
Let's see: putting snippets of trojan code on stackoverflow, whole trojan applications on github.
 
How many people use cut&paste of cli code from web pages to get stuff done ?
 
And where does 'AI' learn how to program ?
 
https://www.wired.com/story/ai-latest-trick-writing-computer-code/

------------------------------

Date: Sun, 7 Nov 2021 18:09:43 -0500 (EST)
From: Mark Brader <msb@Vex.Net>
Subject: Re: SpaceX Under Fire After Autonomous Rocket Hits Pedestrian
(The Onion)

One April 1 in the year is bad enough; why do we have to have two now?

------------------------------

Date: Tue, 16 Nov 2021 09:38:18 -0500 (EST)
From: kludge@panix.com (Scott Dorsey)
Subject: Re: SpaceX Under Fire After Autonomous Rocket Hits Pedestrian
(The Onion)

How could anyone predict or plan for that?

It turns out, and this may be a surprise to many, that some people have actually been launching spacecraft from Florida since 1950, and as a consequence there is a large body of published work on the subject. In addition, NASA maintains a corrosion technology laboratory at Kennedy which provides data and assistance on request.

"Natural Environment Corrosion Testing at the Kennedy Space Center Beachside Atmosphere Corrosion Testing Site," presented by Luz Calle at the 2017 DOD- Allied Nations Technical Corrosion Conference is a good introduction to the work being done in that environment.

------------------------------

Date: 7 Nov 2021 21:50:15 -0500
From: "John Levine" <johnl@iecc.com>
Subject: Re: spider bites, or Using Google search to deliver customers or
worse

It appears the website has found a way to recognize the Google spider and allow it to index their site but then lock out those using the search link from Google.

Every web request includes a user-agent string, and web spiders, at least
the ones for legitimate search engines, have easy to recognize names like googlebot, bingbot, and applebot, along with a bunch I never heard of or
didn't realize do web spidering like coccocbot, LinkedInBot, PetalBot, SeznamBot, and YandexBot.

Web sites have been returning different results to spiders about as long as there have been spiders. One reason is the one you saw, to index stuff that
is behind paywalls, or more often freemium pages where you get a few free
views and then it asks you to subscribe. On web sites that use lots of javascript and dynamic content, the spiders don't run the javascript so if
the site wants to be indexed, it needs to return a static version of its
pages.

Often this is annoying, but rarely malicious. If I come to a page that asks for money and it's not a service I already subscribe to, I don't pay.

Keep in mind that web sites can change at any time, so even if the spider
sees the same content as regular users, there is no promise that the version the spider saw is the same as what you will see if you visit later.

------------------------------

Date: Sun, 7 Nov 2021 00:38:58 +0000 (UTC)
From: "Paul Robinson" <paul@paul-robinson.us>
Subject: Facebook 3rd party single-sign-on failure

There was a website that one of the items covers a really contentious, extremely controversial, topical issue. It had a place to post a comment. At the bottom, below the text box, is a button labeled "Login to Post". Okay,
so after I entered my comment, I clicked on the button. A new window opens,
and it's Facebook Authentication, where a third party has them provide a
login credential. So, Firefox presents the dropdowns of all the usernames (e-mail addresses). I select paul@paul-robinson.us, and the password is autofilled. (This also means it is Facebook's authenticator and not
somewhere else, like a credential stealer.)

Facebook tells me I need to authenticate, and it has sent an e-mail to my account, I need to enter the six-digit number. Now, e-mail sent to that
address is auto-forwarded to my Yahoo Mail account. I open Yahoo Mail in a
new tab, and interestingly enough, I've gotten a message that contains the six-digit number right in the subject, so I don't even have to open the message. I tab back, put in the number, click on the submit button,
and... Firefox informs me redirection doesn't work. Try again won't. So, I decide to go direct to www.facebook.com, and login there.

I can't even go to Facebook's home page! I get the same redirect
error. Dammit, I don't even use Facebook! The only reason I even have a damn Facebook account is for just this reason, when 3rd-party websites use
Facebook for Single-Sign-On!

I decide maybe Firefox has a problem, so I decide to use Edge (Microsoft's replacement for Internet Exploiter). I try www.facebook.com Same error,
can't redirect.

Well, I've never had a problem with it before, but I think I know what it
is.

To defeat ad servers, in addition to using ad-block, I use the "Enhanced
HOSTS file." There is a text file which is located at C:\Windows\System32\Drivers\etc\hosts. (no extension). There is a guy who posted on his website a very comprehensive hosts file of 141K, consisting of every advertising domain (like googleadservices.com) and reroutes them to localhost (127.0.0.1), which, since I'm not running a web server, times out
and the advertisement isn't served. The default Windows HOSTS file is about
1K and has maybe a dozen items. The enhanced HOSTS file at 141K has
thousands of ad serving hosts that are blocked.

So I pull the HOSTS file (renaming it) and I still get the same problem.
Then I realize I read the message wrong, it says if I try clearing cookies
that may fix the problem. I look up how and try it. It works! I can get to Facebook, so I go back to the message and try a repost. I get the authentication page but now, after I had authenticated as requested, it says
I have to contact one of my "friends" on Facebook -- some of whom are
members of this board -- and have them give me the authentication token they would give me.

The hell with it, I'll just use create another Facebook Account under a different e-mail address. I'll use my Gmail account. So I do that, and I am logged on, so I figure I am actually logged on, the message post request
should authenticate. Nope, it keeps asking me for my old account and the
access code. I ask it to resend the e-mail, and I go back to Yahoo, and I notice this e-mail: [quote="Facebook"]

Subject: you log into Facebook from somewhere new?
From: Facebook <security@facebookmail.com>
To: Paul Robinson

  Hi Paul   It looks like someone tried to log into your account on November
6 at 5:51 PM using Firefox for Windows 10. We blocked the login and just
want to make sure it was you, logging in from somewhere new.   If you
don't think this was you, please log into Facebook so we can walk you
through a few steps to keep your account safe.
Thanks, The Facebook team.

So, let me get this straight: despite the fact I answered their damned challenge, I'm not allowed to log in, but if I want to correct the problem,
I should log in to the account that it won't allow me to log in to?

So I cleared cookies again, tried to post, and this time I get the Facebook Authentication and since I am logged in on the Gmail account, it succeeds
and goes back to the original website I was trying to post on. The posting
box is removed, which, I figure it was accepted, the way YouTube comments
are subsumed into the comment block.

It's not there. Usually the message shows up, or a notice that the message
has been held pending moderation (a typical practice for extremely controversial topics) but that isn't there either.

After everything I had to do and all the hoops I had to jump through, it's
all for naught.

------------------------------

Date: Thu, 18 Nov 2021 11:06:20 -0800
From: "Rob Slade, the doting GREATgrandpa" <rmslade@shaw.ca>
Subject: After a pandemic, fire season, and now floods, are you ready to get
trained for emergencies and disasters?

As I write this, I am huddled in social isolation, while armed bands are
roving the countryside, desperately searching for the last hoards of toilet paper. We are stacking the dead bodies of the victims in the forests,
waiting for wildfire season, which now starts earlier every year, to deal
with them, and then flood season to wash them away. This is what disaster recovery has become: an attempt to use one crisis to deal with the outcomes
of another. I am writing this in the hopes that future generations may
learn the folly of placing shredded or crumbled cheese into plastic bags for convenience, and Make Civilization Grate Again.

One of the tools that we security mavens, surprisingly, in my view, don't
put into the toolbox is that of emergency management. We don't think about emergencies in advance, which is when we should think of them. Two years
ago we were watching the continent of Australia burn. Then we got a global pandemic. Then we, in BC, had a heat dome and a huge fire season and a town burned down. Now we've got floods and mudslides and a whole town evacuated. Are you ready to think about disasters now?

Those of us in the security communities are always interested in disasters.
We are forever dealing with crises, both large and small, assessing risks, planning and comparing mitigation strategies, and looking at the management
of it all. When we hear of the latest disaster on the news, someone always challenges us to make contributions to charity. I up the stakes. I
challenge everyone to get trained for disasters.

Unfortunately for the point I'm trying to make, I am speaking from a
position of privilege. Canada has the best emergency structure in the
world. British Columbia has the best emergency response management system
in Canada. And the North Shore, where I live, has the best disaster
training regime in BC.

Emergency response, in a major disaster, is not simply a matter of having water, generators, blankets, and rescue dogs. It has to do with
organization, co-ordination, management, and, particularly, trained people. Most of them volunteers, since nobody can afford to pay for a full-time
staff of all those you need to have ready in an emergency.

That's where you come in.

Get trained.

There is some emergency-measures organization that covers your area,
regardless of where you live. Your local municipality probably has an
office. They need volunteers. And they provide training. If you're not
lucky enough to live in BC, you probably have to seek out the Red Cross or Salvation Army. If you *are* lucky enough to live in BC, you just need to
go to your municipla offices and ask for the emergency management office.
One stop volunteering.

If you volunteer, you will probably get trained. For free. (You may also
get additional perks. I get my flu shots paid for every year, since I'm an emergency worker.) (OK, this year that's not such a big deal ...)

First of all, you'll probably get trained on what you need for you and your family. What do you need to survive the first 72 hours (or seven days, or
two weeks) following a disaster? Do you know how much water, what type of food, etc, you need, in the event of a total failure of utilities and other factors we rely on?

Then there are the skills you need to help other people. Sometimes this
might relate to first aid, or structural assessment of buildings after an earthquake, etc. However, there are many necessary skills that are not
quite so dramatic. Most emergency response, believe it or not, has to do
with paperwork. Who is safe? Who needs care? Do families need to be reunited? Documentation of all of this is a huge effort, which goes on long after the bottles of water and hot meals have been distributed.

Then there are management skills, to co-ordinate all of the other skills.
An awful lot of *charity* gets wasted because some people get too much help, and others don't get enough. Someone needs to oversee the efforts.

Some of the training might seem to be a bit of a waste. You will be trained
in registration and referral, which is just admin. But it also teaches you
that, in a major emergency, long-line rope rescues are not the major worry.
It's the huge amounts of admin that *must* be done.

Training in all of this is available. And, in an emergency, having trained people is probably more important than having stockpiles of tents. Trained people can make or improvise shelter.

(For those who have security related certifications, like the CISSP, ongoing professional education is a requirement. A constant complaint is that
training is expensive, and getting the credits costs too much. I get all
kinds of training related to business continuity and disaster recovery. I
get almost all of it free.)

Get trained. Volunteer. You'll get a wealth of experience that will help
you plan for all kinds of events, not just for major disasters, but for the minor incidents that plague us and our companies every day. You'll be ready for the big stuff, too. You'll be able to keep yourself and those near to
you safe. You'll be able to make a difference to others, certainly reducing suffering, and possibly saving lives. If and when something major happens,
you will be a part of the infrastructure necessary for the response to be effective. You'll be part of the solution, rather than part of the problem.

Now [...] call your local emergency management agency and volunteer.

------------------------------

Date: Mon, 1 Aug 2020 11:11:11 -0800
From: RISKS-request@csl.sri.com
Subject: Abridged info on RISKS (comp.risks)

The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is
comp.risks, the feed for which is donated by panix.com as of June 2011.

SUBSCRIPTIONS: The mailman Web interface can be used directly to

subscribe and unsubscribe:
http://mls.csl.sri.com/mailman/listinfo/risks

SUBMISSIONS: to risks@CSL.sri.com with meaningful SUBJECT: line that

includes the string `notsp'. Otherwise your message may not be read.
*** This attention-string has never changed, but might if spammers use it.

SPAM challenge-responses will not be honored. Instead, use an alternative

address from which you never send mail where the address becomes public!

The complete INFO file (submissions, default disclaimers, archive sites,

copyright policy, etc.) is online.
<http://www.CSL.sri.com/risksinfo.html>

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)