Sitting pretty

"the ability to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by cyber resources” 

May 2026 NIST Special Publication 800-172r3
Not using AI could be deemed as professional negligence and invalid your insurance

s.21(1) Theft Act 1968

Today in the UK: There are no known, clearly identifiable UK criminal prosecutions, outside deepfake and images creation involving minors, where AI was the central offending mechanism. Does this mean there are no other threats?

Who is accountable for these blackmail-related risks today?

AI-assisted phishing;

AI-generated fake documents;

AI-assisted malware;

AI-generated false evidence in legal proceedings;

Point of Privacy

I came face to face with an obvious Ai driven face recognition terminal at the payment desk of a high street retailer.

So not only do they have my payment history and patterns, but my full bio iD (obtained without my permission). Should I submit a subject access request or just let it fly. Maybe I just shop somewhere else now or cover my face on every purchase.

I guess it’s the same approach that cash machines take when your image is taken on every withdrawal.

The most unnerving element was watching the small screen at the payment point with my face being tracked. There are no hiding spots in public spaces so just get used to it.

I did catch a glimpse of a social media campaign encouraging people to go totally offline for the day seemingly in protest of how connectivity dominates our personal lives.  The real challenge is we don’t really have the mental toughness to turn it all off.

Tempted to take everything off-line.

Double Boss level completed

I’ve been tinkering for a while now, tweaking my expertise but not really using it to full effect. Having defeat two major bosses, I am now moving onto a new chapter fully geared up with new independant mobility stepping into a unknown path.

Rambling ramble but basically I’m a happy boy with over.

With DUAA now in force, it’s time to tweak my approach to data permissions and change tactics.

Tweaking your victim profile

The Netflix movie – The Accused was so intensely accurate in terms of what has happened and could indeed happen again to someone being wrongfully accused via our glorious social media ecosystem.

I had to stop watching it halfway through just to analyse the touch points (spoiler alert) –

Reading classification – personal threat, injury detail, discrimination, suicide

The victim profile

Threat / eventPossible risk counter measures
High number of followers 200+Do you know all these people?
Open profile – public access to personal data, followers, posts etcLimited how unknowns can tag you
Connected family and friend’s profiles are open and contain meta data such as location details, home address etcLimited how unknowns can map your relationships
Phone location services openTurn off when no Apps not in use
Images taken by 3rd party in public revealing locationTough one to tackle as people are always snapping
CCTV data mapped with social mediaAlmost impossible to hide
Monitoring a hashtag in real timeNo real reason to do this unless you are actually going to react
Online rumour pushed as factResponse to accusations in real time by key social media channels, put out a pubic statement, engage a legal advisor.
Online threat to life reported by phoneReport online and get a crime number
Open-source intelligence (OSINT) data used to compile and share personal data on public forums anonymously.Check yourself to see what you are sharing publicly
Sometimes you just need to help yourself