Paul Brears

This is fun:
editor.p5js.org/isohedral/fu...

We Still Don’t Know if Robotaxis Are Safer Than Human Drivers And even if self-driving technology proves to be less dangerous, there are many better ways to improve traffic safety and prevent fatal crashes.

Much has been written about potential safety benefits of AVs. Given the lack of AV data transparency, I cannot speak to whether, or to what degree, AVs are safer than an average human driver. What I can say:

This is the wrong question.
🧵
www.bloomberg.com/news/feature...

Here’s How the AI Crash Happens The U.S. is becoming an Nvidia-state.

so @matteowong.bsky.social & I wrote on data centers: arguably the most important buildings in the world & are, in a way, holding the economy hostage. Byzantine financial instruments, private equity, depreciating tech, hype, $trillion valuations. it’s all there. an ai crash prob starts here.

So my daughter is back from Cambridge just for Sunday lunch. She wants a proper roast dinner with roast spuds and Yorkshires. Takes a bit of work on the timing but no problem, we will have a lovely chill time.

I thought. /1

An unlikely couple, a doomed affair and their €64mn ransomware scam How a mysterious tip-off led investigators to uncover the inner workings of a highly unusual hacking operation

In Sirotin’s case, the fatal mistake came in the form of two online purchases — a knife, bought with the same email address used to rent the suspicious servers discovered by investigators, and a pair of plane tickets he had bought for his parents

on.ft.com/4hhtmGd

Intune now has dedicated security recommendations docs just like Entra 🔥

The Entra security docs are extremely popular, and I love seeing other teams publishing this kind of guidance

Thanks to my collegaue (Josh Gatewood) for pointing this out!

learn.microsoft.com/en-us/intune...

The real (economic) AI apocalypse is nigh

"So, you're saying a third of the stock market is tied up in seven AI companies that have no way to become profitable and that this is a bubble that's going to burst and take the whole economy with it?"
"Yes"
pluralistic.net/2025/09/27/e...
By Cory Doctorow

Here's what you need to know about the RCE flaw in the Cisco appliance software

Cisco: sec.cloudapps.cisco.com/security/cen...

NCSC: www.ncsc.gov.uk/news/persist...

CISA: www.cisa.gov/news-events/...

One CVE is up at www.cve.org/CVERecord?id...

One is reserved. www.cve.org/CVERecord?id...

This Microsoft Entra ID Vulnerability Could Have Caused a Digital Catastrophe A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access to virtually all Azure customer accounts.

NEW: A pair of vulnerabilities in Microsoft's Entra ID system could have allowed an attacker to gain access to virtually EVERY Azure account. Fortunately, they were patched before a malicious actor found them. @mattburgess1.bsky.social + @lhn.bsky.social report: www.wired.com/story/micros...

Terms and Conditions for Walks with My Dog This agreement is between me (“me”) and you (“the dog”) and is designed to govern the rules, policies, and expected behavior on our walks together....

"You acknowledge that planting your feet and pulling in the opposite direction is not a valid negotiating strategy for extending the length of the walk, though admittedly it is often quite effective."

Storm-0501 debuts a brutal hybrid ransomware attack chain Storm-0501 is hijacking privileged accounts, deleting backups, and encrypting cloud data in a new hybrid ransomware campaign. Microsoft urges CISOs to enforce least privilege, drill ransomware playboo...

Microsoft issued a blog post today on a new hellacious ransomware attack by Storm-0501 that hops from on-prem assets to the cloud and then deletes everything it can, including backups, encrypting everything else. 1/2

www.csoonline.com/article/4046...

Giant increases in capex from Big four tech

Staggering chart from the FT. Each of Alphabet, Amazon, Microsoft and Meta (MAMA!) are set to spend over $100bn annually on capex by 2030, more than all four combined in 2020. All because of the LLM-triggered AI boom...

on.ft.com/3HwH8Y8

User-Defined Permissions Sensitivity labels Support in SPO Finally, Microsoft solved the technical issues that blocked SharePoint Online support for sensitivity labels with user-defined permissions. The feature is GA.

After much delay, #SharePoint Online finally supports sensitivity labels with user-defined permissions. Might not sound important, but it opens up support for DLP, eDiscovery, and more.
office365itpros.com/2025/08/14/u...
#Microsoft365

Don’t Judge My Book by Its Cover Don’t judge my book by its cover. For the cover art of my debut novel, I envisioned a mysterious, foggy background with two shadowy figures graspi...

"For the cover art of my debut novel, I envisioned a foggy background with two shadowy figures grasping for each other but remaining barely out of reach. Instead, the publisher insisted on a pink background with an illustration of a baby giraffe next to a Ferris wheel."

The August 2025 update for the Automating #Microsoft365 with #PowerShell eBook is available for subscribers to download. 350+ pages of fun-filled practical examples of how to automate Exchange, SharePoint, Teams, OneDrive, Entra ID, etc.
office365itpros.com/2025/07/28/m...

Are these sessions going to be recorded and put online?

Worth a watch:

Head of Signal, Meredith Whittaker, on so-called "agentic AI" and the difference between how it's described in the marketing and what access and control it would actually require to work as advertised.

I have not paid a ton of attention to the uproar over RTO policies, bc we are all in on distributed teams and not going back.

My impression (via social media) has been that these were shadow layoffs.

Last month I asked an investor why they are doing RTO. He said: "Retention, mostly. And morale."

Also applies to off-shore teams. Works much better if you’ve met face to face and gone out socialising even if it’s a one off trip. It’s particularly important for getting more junior team members to speak up early when they don’t think something is going to work.

Scottish council admits ransomware crooks stole school data : Parents and teachers have personal info, ID documents leaked online, but exam season mostly unaffected

www.theregister.com/2025/05/22/w... looks like they had got in

Because some damn fool asked, here's a thread about Baxter.

This was taken on the day I brought home Baxter and threw away all hope of an easy life.

Look at him. Absolutely irresistible.

And that's how they get you, the utter bastards

If you don’t know if people put creds in the phishing site then it’s not a bad response, they might also have wanted to reset credentials and this gave them an excuse (maybe they’d increased min strength since some of the passwords were set)

“unusual e-mail activity” I’d assume they think people got in and are sending spam /phishing from those accounts but don’t know howmany accounts got popped. Most schools can’t use MFA (no phones allowed) and need to allow BYOD (view home work at home ) so it’s hard to lockdown.

Touchscreen backlash? Euro NCAP says physical buttons will be “incentivised” in car safety tests | Auto Express Car makers have been advised not to have important car functions on touchscreens

www.autoexpress.co.uk/consumer-new...

Trump Officials Blame Mistake for Setting Off Confrontation With Harvard (Gift Article) An official on the administration’s antisemitism task force told the university that a letter of demands had been sent without authorization.

I read this as: Harvard was planning to capitulate, then the Trump Administration accidentally sent the letter they meant to save until after Harvard capitulated on the first round of demands. www.nytimes.com/2025/04/18/b...

So much of cybersecurity is "We must secure the Orphan Crushing Machine so that unauthorized people do not crush the orphans," and not "Why the fuck are you building an Orphan Crushing Machine in the first place?"

Biggest commitment to a 3 second joke I've ever seen