Unsupervised Learning16 Mar 2015

Take 1 Security Podcast: Episode 10

Play Podcast

START CONTENT

* There was another SQL Injection bug found in SEO by Yoast

* It required admins to click a malicious link
* Was patched quickly
* It’s the plugins that make WordPress vulnerable

* Attackers are targeting gamers for ransomware

* Virlock is one version of ransomware that not only locks the screen, but infects files
* It’s also polymorphic, so it changes itself every time it runs
* TeslaCrypt goes after gamers, which seems super smart because they are often addicted

* The Hello Barbie doll is recording kids voices and sending the recordings over the Internet for voice recognition

* I get asked a lot about what to do about this kind of stuff
* Start by making a list of everything that can record voice or audio in your home, and determine what kind of controls you have on them
* Assume the worst, even though it’s probably not that bad

* US industrial systems attacked 245 times between October 2013 and September 2014

* Most attacks were against Critical Manufacturing and Energy
* Biggest vectors were spear phishing and port scanning

* CloudFlare aims to defeat DDoS with Virtual DNS

* They want to proxy DNS before it hits customer name server

* The CIA supposedly tried to hack Apple hardware

* The article has come under extreme scrutiny

* Going to be on the Security Weekly podcast with Pau
* Hillary Clinton’s email account dram
* OpenSSL is getting an audit

* Bout time

* Wikimedia is suing the NSA over surveillance
* Spoofing the boss is the best way to phish someone, evidently
* Had a great time at CactusCon in Phoenix

* Did a talk with Jason and saw Dave’s keynote
* Dave’s keynote was about struggling with the basics, not APT
* He asked when a major breach was NOT a dumb mistake

* Someone’s looking to make a Snowden Phone
* Looks like I’ll be on the Security Weekly podcast with Paul

* Going to talk about IoT security and my our OWASP project

END CONTENT

Play Podcast

Notes

* Comments welcome on content and format, as usual.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(548)

Evolution, Lit RPG and AI Harnesses

I went on a walk and ended up connecting three things I've been thinking about: evolution, LitRPG, and personal AI harnesses. Why listening to The Primal Hunter keeps getting me excited to work on my ...

17 Sep 23min

The Missing Piece Is Ideal State

📝 Theo put out a video saying you should turn off Claude Code's memory, and it triggered me enough to record a response. My argument: the real problem with all AI is the gap between what's in your he...

31 Aug 20min

The Different Games OpenAI and Anthropic Are Playing

Anthropic is going after the enterprise operations layer; OpenAI wants to be everyone's personal agent. Both are multi-trillion-dollar markets, and they barely overlap.Become a Member: https://danielm...

14 Aug 3min

Debating the Morality of Dario Amodei

A debate with Zack Korman on the morality of Dario Amodei specifically, and Anthropic in general. Zack's version of the video: https://youtu.be/mQ9-YoE9ykEBecome a Member: https://danielmiessler.com/u...

9 Jul 1h 14min

Rethinking AI Harnesses

Why we should think of the AI harness not as a coding tool, but as an Intent Engineering system that manages your entire life — a LifeOS. https://github.com/danielmiessler/LifeOSBecome a Member: https...

9 Jul 12min

Why We Need Some AI Model Controls

My argument for why we need some AI model controls.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

9 Jul 36min

AI Predicts the Text of Answers

A logical argument and demonstration of how AI has one type of understanding while lacking another. https://aiunderstands.ai Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/liste...

3 Jun 8min

Most Companies Aren't Anywhere Near Ready for AI

Most Companies Aren't Anywhere Near Ready for AI. It's not that companies aren't using AI—it's that they can't.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privac...

3 Mai 5min