Unsupervised Learning

Why AI Will Replace Knowledge Workers

Sat, 21 Mar 2026 18:23:57 +0000

A longer form discussion on exactly how and why AI will replace knowledge workers.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why I Believe in SOTA Models Over Custom Ones

Wed, 11 Mar 2026 20:50:30 +0000

I think the future is cheaper and Open Source SOTA models combined with context, not custom, narrow models.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

AI Quality Inversion

Fri, 06 Mar 2026 16:08:55 +0000

A troubling thought about what we will think about high-quality content in the future.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Great Transition

Sat, 28 Feb 2026 00:43:19 +0000

There are a bunch of different transitions happening right now—all at the same time, all (I think) heading in the same direction. Here is a long-form exploration of the various pieces.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Starting 2026

Fri, 30 Jan 2026 22:29:05 +0000

A welcome back and early entry into 2026.

Judge AI based on Output, Not Mechanism

Sat, 22 Nov 2025 21:45:26 +0000

How we can use an output-based system to judge whether or not different kinds of technology achieve understanding or intelligence.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Humans Need Entropy

Sun, 16 Nov 2025 16:15:00 +0000

How humans and AI models both share the weakness of deterioration without novel inputs.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why I Think Karpathy is Wrong on the AGI Timeline

Mon, 20 Oct 2025 14:29:08 +0000

Karpathy is confusing LLM limitations with AI system limitations, and that makes all the difference.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Novelty Exploration vs. Pattern Exploitation

Wed, 15 Oct 2025 21:37:08 +0000

How going from exploration to exploitation can help you as both a consumer and creator of everything.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Magnifying Time

Tue, 14 Oct 2025 20:39:43 +0000

Some thoughts on how novelty and attention magnify the time that we have.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Harry Wetherald CO-Founder & CEO At Maze

Mon, 22 Sep 2025 18:56:26 +0000

➡ Stay Ahead of Cyber Threats with AI-Driven Vulnerability Management with Maze:
https://mazehq.com/

In this conversation, I speak with Harry about how AI is transforming vulnerability management and application security. We explore how modern approaches can move beyond endless reports and generic fixes, toward real context-aware workflows that actually empower developers and security teams.

We talk about:

The Real Problem in Vulnerability Management
Why remediation—not just prioritization—remains the toughest challenge, and how AI can help bridge the gap between vulnerabilities and the developers who need to fix them.

Context, Ownership, and Velocity
How linking vulnerabilities to the right applications and teams inside their daily tools (like GitHub) reduces friction, speeds up patching, and improves security without slowing developers down.

AI Agents and the Future of Security
Why we should think of AI agents as “extra eyes and hands,” and how they’re reshaping everything from threat detection to system design, phishing campaigns, and organizational defense models.

Attackers Move First
How attackers are already building unified world models of their targets using AI, and why defenders need to match (or exceed) this intelligence to stay ahead.

From Days to Minutes
Why the tolerance for vulnerability windows is shrinking fast, and how automation and AI are pushing us toward a future where hours—or even minutes—make the difference.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 – Welcome and Harry’s Background
01:07 – The Real Problem: Remediation vs. Prioritization
04:31 – Breaking Down Vulnerability Context and Threat Intel
05:46 – Connecting Vulnerabilities to Developers and Workflows
08:01 – Why Traditional Vulnerability Management Fails
10:29 – Startup Lessons and The State of AI Agents
13:26 – DARPA’s AI Cybersecurity Competition
14:29 – System Design: Deterministic Code vs. AI
16:05 – How the Product Works and Data Sources
18:01 – AI as “Extra Eyes and Hands” in Security
20:20 – Breaking Barriers: Rethinking Scale with AI
23:22 – Building World Models for Defense (and Attack)
25:22 – Attackers Move Faster: Why Context Matters
27:04 – Phishing at Scale with AI Agents
31:24 – Shrinking Windows of Vulnerability: From Days to Minutes
32:47 – What’s Next for Harry’s Work
34:13 – Closing Thoughts

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Grant Lee CO-Founder & CEO At Gamma

Thu, 18 Sep 2025 22:59:09 +0000

➡ Upgrade your presentations with Gamma, the best AI presentation maker: https://gamma.app

In this conversation, I speak with Grant, co-founder of Gamma, about how their platform is transforming presentations and idea-sharing. Instead of starting with slides, Gamma helps you focus on the story first—then builds the visuals, structure, and delivery around it using AI.

We talk about:

From Slides to Stories
Why presentations should begin with narrative flow and core ideas, not pre-existing slide templates. Gamma enables creators to design around the message rather than being trapped by the format.

AI as Your Presentation Partner
How Gamma acts like a personal design expert—adjusting layouts, visuals, and style in real time—similar to having a world-class presentation coach and designer by your side.

Idea Propagation Beyond Slides
Why Gamma isn’t just about “slides,” but about propagating ideas in the right medium: presentations, video overlays, mobile-first content, or even context-based imagery and clips.

The Future of Gamma
Where the platform is headed in the next few years, and how AI-driven storytelling will redefine the way we share ideas across industries.

Subscribe to the newsletter:
https://danielmiessler.com/subscribe

Join the UL community:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 – Introduction to Unsupervised Learning
00:17 – Welcome Grant and Gamma’s Background
01:31 – AI Trends Driving Presentation Innovation
03:20 – Story First: Rethinking Workflow Beyond Slides
04:29 – Building Narrative Flow Before Design
07:42 – Gamma as an AI Presentation Partner
09:43 – What Gamma Does Differently from Other Tools
12:27 – Idea Propagation: Matching Message, Medium, and Audience
13:23 – Enhancing Presentations with Images, Clips, and Context
15:15 – Current Graphics and Animation Options
17:03 – Most Popular and Favorite Features in Gamma
18:05 – What’s Coming Soon in Gamma
19:08 – The Future of Idea Propagation with AI
20:46 – Where to Learn More About Gamma
21:21 – Closing Thoughts

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 497: STANDARD EDITION | More NPM Shenanigans, I Open Sourced Kai, Blood Work Results, Finding Vulns in a 10-line Prompt, and more...

Wed, 10 Sep 2025 16:55:52 +0000

UL NO. 497: STANDARD EDITION | More NPM Shenanigans, I Open Sourced Kai, Blood Work Results, Finding Vulns in a 10-line Prompt, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-497

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 496: STANDARD EDITION | New Video on Building my Personal AI System, Anthropic Reveals One-person Hacking Company using Claude, Pentagon Says China Keeps Penetrating, and more...

Fri, 05 Sep 2025 21:49:05 +0000

UL NO. 496: STANDARD EDITION | New Video on Building my Personal AI System, Anthropic Reveals One-person Hacking Company using Claude, Pentagon Says China Keeps Penetrating, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-496

Personal AI Video I'm so excited about

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Michael Brown About Designing AI Systems

Fri, 22 Aug 2025 19:28:18 +0000

In this episode of Unsupervised Learning, I sit down with Michael Brown, Principal Security Engineer at Trail of Bits, to dive deep into the design and lessons learned from the AI Cyber Challenge (AIxCC). Michael led the team behind Buttercup, an AI-driven system that secured 2nd place overall.

We discuss:

-The design philosophy behind Buttercup and how it blended deterministic systems with AI/ML
-Why modular architectures and “best of both worlds” approaches outperform pure LLM-heavy -designs
-How large language models performed in patch generation and fuzzing support
-The risks of compounding errors in AI pipelines — and how to avoid them
-Broader lessons for applying AI in cybersecurity and beyond

If you’re interested in AI, security engineering, or system design at scale, this conversation breaks down what worked, what didn’t, and where the field is heading.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 494: STANDARD EDITION | AI Finds a P1, I Missed Chartbeat So I Made My Own, XBow Open-Sources Their AI Bot, and more...

Thu, 21 Aug 2025 15:30:14 +0000

You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member to unlock the full version and many other exclusive benefits here: https://newsletter.danielmiessler.com/upgrade

Read this episode online: https://newsletter.danielmiessler.com/p/ul-494

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Sarit Tager from Prisma Cloud

Tue, 29 Jul 2025 15:00:00 +0000

➡ Prevent Risk At The Source with Cortex Cloud: https://www.paloaltonetworks.com/cortex/cloud/application-security

In this sponsored conversation, I speak with Sarit Tager, VP of Product Management at Palo Alto Networks, about how Prisma Cloud and their new ASPM solution are transforming cloud and application security by unifying data and deeply integrating business context into AppSec workflows.

We talk about:

Unifying AppSec, Cloud, and SOC into One Data Lake
How Palo Alto merged their products into a single system that consolidates runtime, code, identity, cloud, and SOC data, allowing for true context-aware risk prioritization and faster response times across the board.

From Detection to Dynamic Prevention
Why the future of application security isn’t just about discovering vulnerabilities, but enforcing smart, context-based guardrails during development, CI/CD, and build processes to prevent issues before they reach production.

AI-Powered Insight and the Future of Secure DevOps
How their system uses AI to analyze the full security posture, enrich findings, simulate attack paths, and recommend precise mitigations. The platform even helps guide security and engineering teams through better workflows, boosting velocity, and not blocking it.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 – Sarit’s Background and the Goal of Unifying Security Context
01:50 – Building a Single Data Lake for Cloud, SOC, and AppSec
04:28 – From Noise to Clarity: Fixing the Prioritization Problem in AppSec
06:47 – Using Business Context to Drive Risk-Based Decisions
10:18 – True App Ownership, Developer Velocity, and Aligning with Business Impact
13:12 – Continuous Discovery and Bringing External Signals Into One View
15:25 – Why App Grouping and Context-Rich Policies Increase Velocity
17:58 – How Attackers Are Already Building Their Own Unified Context (UEC)
20:45 – Prisma’s Control Points: IDE, PR, CI/CD, Image, Admission Control
21:56 – Bringing In Data From External Scanners and Enriching Coverage
24:23 – Ecosystem Signals, Query Language, and Intelligent Workflow Automation
25:05 – Closing Thoughts: Security and Developers Working Together

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 489: STANDARD EDITION | My personal toolchain updates, Google tracking through DuckDuckGo, Anthropic’s Pentagon Deal, Grok4 NSFW, Substack Crushes WSJ, and more...

Thu, 17 Jul 2025 07:18:29 +0000

UL NO. 489: STANDARD EDITION | My personal toolchain updates, Google tracking through DuckDuckGo, Anthropic’s Pentagon Deal, Grok4 NSFW, Substack Crushes WSJ, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-489

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 488: STANDARD EDITION | Google Granting Confusing Access to Gemini, A New Favorite Creator, Russia's new Autonomous Drones, Claude Code Madness and Neovim Config, and more...

Thu, 10 Jul 2025 20:14:57 +0000

UL NO. 488: STANDARD EDITION | Google Granting Confusing Access to Gemini, A New Favorite Creator, Russia's new Autonomous Drones, Claude Code Madness and Neovim Config, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-488

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 487: STANDARD EDITION: Iranian Critical Infra Attacks, Insane Recent Productivity, A Chinese Mosquito Drone, Marcus's Response to Our AI Debate, "Context Engineering" Ain't It, and more...

Wed, 02 Jul 2025 17:36:42 +0000

UL NO. 487: STANDARD EDITION: Iranian Critical Infra Attacks, Insane Recent Productivity, A Chinese Mosquito Drone, Marcus's Response to Our AI Debate, "Context Engineering" Ain't It, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-487

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

An AI Debate with Marcus Hutchins

Thu, 26 Jun 2025 16:33:46 +0000

Marcus and I debate AIs capabilities from nearly polar opposite ends. He thinks it's basically autocomplete, and I think it's the most important tech we've ever built as humans.

It was a fantastic, and very civil conversation, so thanks to Marcus for that, and we're already planning on Part 2.

This two-hour discussion covers:

🧠 The real risks of AI vs. the imagined ones
🔐 How security researchers view AI's capabilities
🤖 The blurry line between useful and dangerous automation
⚖️ Bias, alignment, and who gets to control intelligence
📉 Whether AI might ultimately collapse under its own complexity

Marcus Hutchins is best known for stopping the WannaCry ransomware attack and brings a sharp, skeptical perspective to AI.

Marcus' Website: https://marcushutchins.com

Watch the interview on YouTube: https://youtu.be/I9-iD_rLRjA

Subscribe to the UL newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Follow Marcus on LinkedIn:

https://www.linkedin.com/in/malwaretech/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 486 STANDARD EDITION: Fully Automated AI Malware (Binary and Web), My Debate with Marcus Hutchins on AI and more

Thu, 26 Jun 2025 16:23:21 +0000

UL NO. 486: STANDARD EDITION: Fully Automated AI Malware (Binary and Web), My Debate with Marcus Hutchins on AI, The 'Did You Notice?' Psyop, The METR AI Metric for Longterm Tasks, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-486

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 485: STANDARD EDITION: Netflix RCE, My Current AI Stack, All-in on Claude Code, and more...

Thu, 19 Jun 2025 00:29:25 +0000

STANDARD EDITION: Netflix RCE, My Current AI Stack, All-in on Claude Code, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-485

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 484: STANDARD EDITION: OpenAI's Malicious AI Report, Disappointed with WWDC, AI's First Actual Science Breakthrough, and more...

Thu, 12 Jun 2025 01:45:44 +0000

UL NO. 484: STANDARD EDITION: OpenAI's Malicious AI Report, Disappointed with WWDC, AI's First Actual Science Breakthrough, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-484

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 483 | STANDARD EDITION: A Chrome 0-Day, Meta Automates Security Assessments, New Essays, My New Video on Hacking with AI, Ukraine's Asymmetrical Attack, Thoughts on My AI Skeptical Friends, The Dangers of Winning the Wrong Game, and more...

Thu, 05 Jun 2025 14:04:40 +0000

A Chrome 0-Day, Meta Automates Security Assessments, New Essays, My New Video on Hacking with AI, Ukraine's Asymmetrical Attack, Thoughts on My AI Skeptical Friends, The Dangers of Winning the Wrong Game, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-483

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Future of Hacking is Context

Tue, 03 Jun 2025 22:24:52 +0000

Sponsored by Vanta. Vanta takes the busywork out of GRC so you can focus on what actually matters—improving your security, not chasing compliance. https://ul.live/vanta

This isn’t just another AI podcast. It’s about the deeper shift that’s happening in cybersecurity—away from individual tools and dashboards, and toward real-time, comprehensive world models of what we’re trying to protect or attack. I'll walk through how I came to this idea, what it means for security assessments, red teaming, vuln management, and beyond—and why context, not AI, is the actual revolution.

📽️Check out the full video here: https://youtu.be/UwTTcka1Wd8

Topics covered:
Why the core problem in security is organizational knowledge
Unified Entity Context (UEC) as the future architecture
Modular, AI-augmented security stacks
Why every attacker and defender will soon be running one
How this flips the AI conversation on its head

If you care about where hacking, automation, and AI are headed—this is the blueprint.

📬Subscribe for updates about trends and ideas in Cybersecurity, National Security, AI, Technology, and Society👇🏼
https://newsletter.danielmiessler.com/
👉🏻 X (Twitter): https://ul.live/x
👉🏻 Instagram: https://ul.live/ig
👉🏻 BlueSky: https://ul.live/bluesky
👉🏻 LinkedIn: https://ul.live/li

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 482 | STANDARD EDITION: AI Finds an 0-Day!, Postman Leaking Secrets, High Agency Mental Model, My Unified Entity Context Video, Github MCP Leaks Private Repos, Google vs. OpenAI vs. Apple on AI Vision, and more...

Fri, 30 May 2025 16:02:40 +0000

AI Finds an 0-Day!, Postman Leaking Secrets, High Agency Mental Model, My Unified Entity Context Video, Github MCP Leaks Private Repos, Google vs. OpenAI vs. Apple on AI Vision, and more...

Read this episode online: https://newsletter.danielmiessler.com/p/ul-482

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unified Entity Context

Thu, 15 May 2025 01:26:50 +0000

🔹 Thanks to ProjectDiscovery for sponsoring today’s video. I've been using their tools like Nuclei and Subfinder for years, and now they’ve brought that power to the cloud with a full vulnerability management platform.

➡ Try it yourself at https://ul.live/PD1

For over a decade, I've been exploring how AI and context intersect—and I believe Unified Entity Context (UEC) is the key to unlocking what comes next.

In this podcast, I walk through my journey—from security assessments and AI-powered tools to building real-world demos like Alma and Threshold. The core idea? That most hard decisions are only hard because we lack the necessary context. With rich, accurate, and fresh context, even complex decisions become simple.

If you're building in security, investing in AI, or just trying to understand where things are heading, this concept might reframe everything.

Check out the full video here: https://youtu.be/IHUqk90ch7I

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Reviewing RSA 2025 with Jason Haddix

Thu, 08 May 2025 14:30:00 +0000

What really happened at RSA 2024?

Daniel Miessler and Jason Haddix break it down.

Fresh off a whirlwind RSA week, Daniel sits down with Jason Haddix (Arcanum Information Security) to talk about what mattered—beyond the show floor noise. From off-site innovation summits to real-world AI implementation, this deep dive covers:

-Where the real innovation happened (hint: not on the show floor)
-Key takeaways from the OpenAI and Airbnb AI Security events
-Jason’s talk on AI pentesting methodology and the Prompt Injection Taxonomy
-The future of cybersecurity moats and the risk of AI-native disruption
-Why agents aren’t the main character—data is -DARPA's AIxCC competition and the rise of Cyber Reasoning Systems
-Challenges with evals, autonomous security workflows, and VDP backlash -Behind the scenes at RSA: puppies, parties, burnout, and brutal honesty

They also explore content creation, the future of platform-native context, and why being opinionated (with receipts) matters more than ever in security and tech.

Jason's Company https://arcanum-sec.com

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Bar-El Tayouri from Mend.io

Tue, 06 May 2025 06:00:00 +0000

➡ Get full visibility, risk insights, red teaming, and governance for your AI models, AI agents, RAGs, and more—so you can securely deploy AI powered applications with ul.live/mend

In this episode, I speak with Bar-El Tayouri, Head of AI Security at Mend.io, about the rapidly evolving landscape of application and AI security—especially as multi-agent systems and fuzzy interfaces redefine the attack surface.

We talk about:

• Modern AppSec Meets AI Agents
How traditional AppSec falls short when it comes to AI-era components like agents, MCP servers, system prompts, and model artifacts—and why security now depends on mapping, monitoring, and understanding this entire stack.

• Threat Discovery, Simulation, and Mitigation
How Mend’s AI security suite identifies unknown AI usage across an org, simulates dynamic attacks (like prompt injection via PDFs), and provides developers with precise, in-code guidance to reduce risk without slowing innovation.

• Why We’re Rethinking Identity, Risk, and Governance
Why securing AI systems isn’t just about new threats—it’s about re-implementing old lessons: identity access, separation of duties, and system modeling. And why every CISO needs to integrate security into the dev workflow instead of relying on blunt-force blocking.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 - From Game Hacking to AI Security: Barel’s Tech Journey
03:51 - Why Application Security Is Still the Most Exciting Challenge
04:39 - The Real AppSec Bottleneck: Prioritization, Not Detection
06:25 - Explosive Growth of AI Components Inside Applications
12:48 - Why MCP Servers Are a Massive Blind Spot in AI Security
15:02 - Guardrails Aren’t Keeping Up With Agent Power
16:15 - Why AI Security Is Maturing Faster Than Previous Tech Waves
20:59 - Traditional AppSec Tools Can’t Handle AI Risk Detection
26:01 - How Mend Maps, Discovers, and Simulates AI Threats
34:02 - What Ideal Customers Ask For When Securing AI
38:01 - Beyond Guardrails: Mend’s Guide Rails for In-Code Mitigation
41:49 - Multi-Agent Systems Are the Next Security Nightmare
45:47 - Final Advice for CISOs: Enable, Don’t Disable Developers

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The 4 AAAAs of the AI ECOSYSTEM: Assistants, APIs, Agents, and Augmented Reality

Tue, 22 Apr 2025 00:55:11 +0000

In this episode, I break down what I believe is the emerging structure of the AI-powered world we're all building—consciously or not. I call it the “Four A’s”: Assistants, APIs, Agents, and Augmented Reality. This framework helps make sense of recent developments and where it’s all headed.

I talk about:

1. Digital Assistants That Understand and Optimize Your Life
Your DA (like “Kai”) will know your goals, preferences, health, schedule, and context—and proactively optimize your day, from filtering messages to planning meals or surfacing relevant information in real time.

2. APIs and the Real Internet of Things
Everything becomes an API—from businesses to people to physical objects. Your assistant interacts with these APIs to act on your behalf, turning the world into a navigable ecosystem of services, tools, and resources.

3. Agents and AR Bringing It All Together
Agents act autonomously to complete multi-step goals, and AR glasses will display their outputs contextually as you move through the world.

These systems will collaborate, search, and act—quietly transforming how we live, work, and perceive reality.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Chapters:

00:00 - The AI Ecosystem We’re Building Without Realizing It
01:33 - Assistant: Your Most Powerful Digital Companion
03:08 - APIs: How DAs Interact with the World
07:54 - Agents: The Step Beyond Automation
11:00 - Augmented Reality: The Interface Layer of the AI Ecosystem
14:20 - Combining APIs, Agents, and UI for Real-Time Situational Awareness
17:17 - Summary: A Unified Ecosystem Driven by the Four A’s
23:36 - Industry Trends: How Companies Like OpenAI, Apple, and Meta Fit In
25:11 - Final Thoughts on Timelines, Winners, and Interpreting AI News

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Using the Smartest AI to Rate Other AI

Sat, 19 Apr 2025 06:00:00 +0000

In this episode, I walk through a Fabric Pattern that assesses how well a given model does on a task relative to humans. This system uses your smartest AI model to evaluate the performance of other AIs—by scoring them across a range of tasks and comparing them to human intelligence levels.

I talk about:

1. Using One AI to Evaluate Another
The core idea is simple: use your most capable model (like Claude 3 Opus or GPT-4) to judge the outputs of another model (like GPT-3.5 or Haiku) against a task and input. This gives you a way to benchmark quality without manual review.

2. A Human-Centric Grading System
Models are scored on a human scale—from “uneducated” and “high school” up to “PhD” and “world-class human.” Stronger models consistently rate higher, while weaker ones rank lower—just as expected.

3. Custom Prompts That Push for Deeper Evaluation
The rating prompt includes instructions to emulate a 16,000+ dimensional scoring system, using expert-level heuristics and attention to nuance. The system also asks the evaluator to describe what would have been required to score higher, making this a meta-feedback loop for improving future performance.

Note: This episode was recorded a few months ago, so the AI models mentioned may not be the latest—but the framework and methodology still work perfectly with current models.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Patrick Duffy from Material Security

Tue, 15 Apr 2025 06:00:00 +0000

➡ Secure what your business is made of with Martial Security:
https://material.security/

In this episode, I speak with Patrick Duffy from Material Security about modern approaches to email and cloud workspace security—especially how to prevent and contain attacks across platforms like Google Workspace and Microsoft 365.

We talk about:

• Proactive Security for Email and Cloud Platforms
How Material goes beyond traditional detection by locking down high-risk documents and inboxes preemptively—using signals like time, access patterns, content sensitivity, and anomalous user behavior.

• Real-World Threats and Lateral Movement
What the team is seeing in the wild—from phishing and brute-force attacks to internal data oversharing—and how attackers are increasingly moving laterally through cloud ecosystems using a single set of compromised credentials.

• Customizable, Context-Aware Response Workflows
How Material helps teams right-size their responses based on risk appetite, enabling fine-grained actions like MFA prompts, access revocation, or full session shutdowns—triggered by dynamic, multi-signal rule sets.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 - Welcome & High-Level Overview of Material Security
02:04 - Common Threats: Phishing and Lateral Movement in Cloud Office
05:30 - Access Control in Collaborative Workspaces (2FA, Just-in-Time, Aging Content)
08:43 - Connecting Signals: From Login to Exfiltration via Rule Automation
12:25 - Real-World Scenario: Suspicious Login and Automated Response
15:08 - Rules, Templates, and Customer Customization at Onboarding
18:46 - Accidental Risk: Sensitive Document Sharing and Exposure
21:04 - Security Misconfigurations and Internal Abuse Cases
23:43 - Full Control Points: IP, Behavior, Classification, Sharing Patterns
27:50 - Integrations, Notifications, and Real-Time Security Team Coordination
31:13 - Lateral Movement: How Attacks Spread Across the Workspace
34:25 - Use Cases Involving Google Gemini and AI Exposure Risks
36:36 - Upcoming Features: Deeper Remediation and Contextual Integration
39:30 - Closing Thoughts and Where to Learn More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

AICAD: Artificial Intelligence Capabilities For Attack & Defense

Sat, 12 Apr 2025 22:51:48 +0000

AI is changing cybersecurity at a fundamental level—but how do we decide what to build, and when? In this episode, I outline a structured way to think about AI for security: from foundational ideas to a future-proof system that can scale with emerging threats.

• Rethinking Human Workflows as Intelligence Pipelines
By mapping tasks into visual workflows, we can pinpoint exactly where human intelligence is still required—and where AI agents are most likely to replace or enhance us.

• Using AI to Understand and Manage Organizational State
I introduce the concept of AI state management: building systems that track your current and desired security posture in real time, and using AI to bridge the gap—automating insights, decisions, and even actions across your environment.

• Building a Cyber Defense Program Inspired by Attacker Playbooks
Instead of waiting for threats, I propose a new framework based on attacker capabilities—what they wish they could do now and in the near future—and how to proactively prepare by building a continuously adapting AI-powered defense system.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:
00:00 - Framing the Future: Two Key Questions on AI and Cybersecurity
01:28 - Intelligence Pipelines: Visualizing Human Work as Replaceable Workflow
06:10 - Theory of Constraints: How Attackers Are Bottlenecked by Human Labor
10:42 - Defining Agents: What Makes AI Different From Traditional Automation
12:08 - AI State Management: The Universal Use Case for Automated Intelligence
16:53 - Real-World Demo: Unified Context AI for Security Program Management
26:30 - Advanced Uses: Reassigning Projects, Updating KPIs, and Security Reports
34:58 - Automating Security Questionnaires With AI Context Awareness
38:43 - ACAD Framework: Predicting and Preparing for Future Attacker Capabilities
47:40 - Defender Response: Building AI-Driven Red Teams and Internal UCCs
52:25 - Final Answers: How Software and Security Change With AI Agents

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Possible Path to ASI

Tue, 08 Apr 2025 22:48:44 +0000

The conversation around AGI and ASI is louder than ever—but the definitions are often abstract, technical, and disconnected from what actually matters. In this episode, I break down a human-centered way of thinking about these terms, why they’re important, and a system that could help us get there.

I talk about:

• A Better Definition of AGI and ASI
Instead of technical abstractions, AGI is defined as the ability to perform most cognitive tasks as well as a 2022 U.S.-based knowledge worker. ASI is intelligence that surpasses that level. Framing it this way helps us immediately understand why it matters—and what it threatens.

• Invention as the Core Output of Intelligence
The real value of AGI and ASI is their ability to generate novel solutions. Drawing inspiration from the Enlightenment, we explore how humans innovate—and how we can replicate that process using AI, automation, and structured experimentation.

• Scaling the Scientific Method with AI
By building systems that automate idea generation, recombination, and real-world testing, we can massively scale the rate of innovation. This framework—automated scientific iteration—could be the bridge from human intelligence to AGI and beyond.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 - Why AGI and ASI Definitions Should Be Human-Centric
01:55 - Defining AGI as a 2022-Era US Knowledge Worker
03:04 - Defining ASI and Why It’s Harder to Conceptualize
04:04 - The Real Reason to Care: AGI and ASI Enable Invention
05:04 - How Human Innovation Happens: Idea Collisions and Enlightenment Lessons
06:56 - Building a System That Mimics Human Idea Generation at Scale
09:00 - The Challenge of Testing: From A/B Tests to Biotech Labs
10:52 - Creating an Automated, Scalable Scientific Method With AI
12:50 - A Timeline to AGI and ASI: Predictions for 2027–2030

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Matt Muller From Tines

Tue, 01 Apr 2025 06:00:00 +0000

➡ Build, run, and monitor workflows with Tines at: tines.com

In this episode, I speak with Matt Muller, Field CSCO at Tines, about how automation and AI are transforming security operations at scale.

We talk about:

• Tines' Mission to Eliminate Manual Security Work Through Automation
How Tines helps security teams streamline incident response and workflow automation without needing to write code, saving time and reducing burnout.

• Applying AI to Security Operations and Analyst Workflows
How AI is used in phishing analysis, threat intel reporting, and data transformation—integrated safely into workflows using tools like Workbench with private LLMs.

• Tines Workbench and the Future of Agentic AI
How Workbench combines chat with deterministic automation to help analysts take action securely, and how Tines is exploring agentic AI to take automation even further.

Chapters:

00:00 - How Tines Automates Security to Solve SOC Burnout
07:19 - The AI Arms Race: How Attackers and Defenders Are Evolving
09:08 - Why Security Still Comes Down to Workflow, Logging, and Action
13:41 - How CISOs Are Balancing AI Adoption and Enterprise Risk
17:36 - Using AI in Tines to Transform and Automate Security Workflows
20:40 - How AI Detects Business Email Compromise Better Than Rules
25:26 - From Security to Data Pipelines: Tines as Workflow Orchestration
28:59 - Inside Workbench: Secure AI-Powered Chat for Analysts
36:00 - Automating Phishing Investigations with Trusted Tool Integrations
39:19 - Where to Learn More and Try Tines for Free

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 474 | Signal OPSEC, White-box Red-teaming LLMs, Unified Company Context (UCC), New Book Recommendations, Single Apple Note Technique, and much more...

Mon, 31 Mar 2025 18:31:02 +0000

STANDARD EDITION: Signal OPSEC, White-box Red-teaming LLMs, Unified Company Context (UCC), New Book Recommendations, Single Apple Note Technique, and much more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Slava Konstantinov From ThreatLocker

Tue, 18 Mar 2025 17:28:53 +0000

➡ Allow what you need, block everything else with ThreatLocker:
threatlocker.com

In this episode, I speak with Slava Konstantinov, ThreatLocker's MacOS Lead Architect, about their zero-trust approach to endpoint security and their latest cybersecurity innovations.

We talk about:

• ThreatLocker’s Zero Trust Approach to Cybersecurity:
How ThreatLocker enforces a default deny security model, ensuring only explicitly allowed applications and actions can run, reducing attack surfaces and unauthorized access.

• Key ThreatLocker Products and Features:
How ThreatLocker’s solutions—Application Control, Storage Control, Ring Fencing, Network Control, and ThreatLocker Detect—help organizations enhance security through granular policy enforcement.

• New & Upcoming ThreatLocker Features:
How new solutions like Patch Management, Web Control, Insights, and Cloud Detect will provide even greater security, automation, and compliance for businesses managing complex IT environments.

Chapters:
00:00 - Intro to ThreatLocker and Zero Trust Security
01:24 - How ThreatLocker’s Application Control Blocks Unauthorized Software
06:52 - Storage Control: Preventing Unauthorized Data Access and USB Threats
08:19 - Ring Fencing: Controlling App Permissions and Network Access
12:37 - Elevation Control: Granting Admin Privileges Without Risk
16:23 - Network Control: Restricting Internet and Internal Network Access
19:26 - AI-Driven Security Policies: The Future of ThreatLocker Management
24:07 - Mac vs. Windows Security: Key Differences and Challenges
29:49 - ThreatLocker’s Expansion: New Products and Future Plans
32:32 - Where to Learn More About ThreatLocker’s Security Solutions

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 472 | STANDARD EDITION: 28 Open Cyber Jobs, Real-world AI Propaganda Poisoning, MCP Explained, Cline vs. Windsurf, and more...

Sat, 15 Mar 2025 01:23:12 +0000

STANDARD EDITION: 28 Open Cyber Jobs, Real-world AI Propaganda Poisoning, MCP Explained, Cline vs. Windsurf, and more...

You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member for the full version and many other exclusive benefits here: https://newsletter.danielmiessler.com/upgrade

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessle

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Raycast is a Must in 2025 - Action at the Speed of Thought

Sat, 15 Mar 2025 00:22:20 +0000

In this episode, Daniel Miessler explores how to supercharge your macOS workflow with Raycast, transforming everyday tasks into lightning-fast, AI-powered actions.

He talks about:

Raycast as a Universal Launcher:
Daniel explains how Raycast replaces traditional launchers like Spotlight and Alfred, offering an all-in-one shortcut to apps, files, and bookmarks for unparalleled efficiency.

Quick Links and Custom Searches:
He demonstrates how quick links streamline navigation by replacing outdated bookmarks and enabling custom search commands that let you bypass the browser for faster access.

Integrated Utilities and Window Management:
Discover how Raycast consolidates everyday tools—from color pickers and process killers to custom window arrangements—ensuring that all your essential utilities are just a keystroke away.

Advanced AI Integration:
Learn how Raycast’s innovative AI commands integrate with platforms like ChatGPT and Fabric, allowing you to interact with, summarize, and analyze web content directly from your command line.

Custom Commands and Productivity Hacks:
Daniel reveals his secrets for creating personalized hotkeys, snippets, and aliases that reduce friction in your digital workflow, making your daily tasks smoother and more intuitive.

Subscribe to the newsletter at:
https://danielmiessler.com/newsletter

Watch the video on YouTube at:
https://www.youtube.com/c/UnsupervisedLearning

Follow on Twitter at:
https://twitter.com/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 471 | STANDARD EDITION: Cyber Standing Down, China's Innovation Burst, PC vs. NPC, Why AI Can't Understand, and more...

Sun, 09 Mar 2025 06:00:00 +0000

STANDARD EDITION: Cyber Standing Down, China's Innovation Burst, PC vs. NPC, Why AI Can't Understand, and more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 470 | Attacking Signal, Blogging Getting MORE Important, AI's Final Form, Claude 3.7 vs. World, Censorship as a Service, and more...

Tue, 04 Mar 2025 23:45:55 +0000

STANDARD EDITION: Attacking Signal, Blogging Getting MORE Important, AI's Final Form, Claude 3.7 vs. World, Censorship as a Service, and more...

➡ Protect Against Bots, Fraud, and Abuse. Check out WorkOS Radar at: workos.com/radar

You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member for the full version and many other exclusive benefits here: https://newsletter.danielmiessler.com/upgrade

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 468 | TELOS Patterns, Apple 0-Day, Gumroad Replaces Developers with AI

Wed, 19 Feb 2025 19:27:39 +0000

Also: A new threat modeling framework for AI, an API security report, and being paralyzed by crisis

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 467 | Why You Should Care About AGI (And a Definition)

Fri, 07 Feb 2025 21:29:51 +0000

Plus: DeepSeek's open database, Using o3 with Fabric, Chinese backdoors in health monitors, and much more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X: https://x.com/danielmiessler

Follow on LinkedIn: https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Writing Fiction With AI

Wed, 05 Feb 2025 12:32:19 +0000

I want to explore how AI can assist in fiction writing, especially using open-source models that allow for greater control, creativity, and long-form storytelling. With tools like LM Studio and Hugging Face, we can download powerful AI models capable of maintaining story coherence, helping authors generate complex narratives, and even unlocking new storytelling possibilities.

So, the idea is to create a structured approach to fiction writing with AI. By organizing story elements—characters, setting, mystery, and plot—into a detailed text file ("Telus file"), we can guide AI models to produce high-quality, structured narratives. The goal is not to replace authors but to empower them with AI-assisted storytelling.

Who wants to experiment with this approach? Or does anyone know of better AI tools for fiction writing? With larger context models and improving AI capabilities, we might be close to AI-assisted novels that rival human-written stories!

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X: https://x.com/danielmiessler

Follow on LinkedIn: https://www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Alastair Paterson from Harmonic Security

Tue, 04 Feb 2025 06:00:00 +0000

In this conversation, I speak with Alastair Paterson, CEO and co-founder of Harmonic Security.

We talk about:

Harmonic Security’s Unique Approach to AI Data Protection:

How Harmonic Security’s Zero-Touch Data Protection uses small language models to identify and prevent sensitive data leaks, differentiating it from traditional DLP solutions.

Challenges of AI Adoption & Enterprise Security Risks:

How enterprises are struggling to adopt Generative AI safely, as employees unknowingly expose sensitive data. The risks of shadow AI usage, and why visibility into AI applications is essential for organizations.

Harmonic’s Browser-Based Solution for Secure AI Adoption:

How Harmonic Security’s browser-based extension provides real-time monitoring and intervention, allowing enterprises to track AI adoption, prevent data leaks, and enforce security policies without disrupting productivity.

➡️ Get a DEMO and Take Advantage of Harmonic's GenAI Securely

ul.live/harmonic

➡️ Check out Harmonic's Data leakage report "From Payrolls to Patents"
ul.live/harmonic-data-leaked

00 Intro
00:12 Guest Introduction - Alistair and Harmonic Security
01:16 Background on Digital Shadows and Transition to Harmonic Security
02:50 The Impact of ChatGPT and Generative AI on Security
04:35 The Problem with AI Data Leakage and Enterprise Risks
06:20 The Evolution of Data Protection: From DLP to AI Readiness
08:45 The Challenge of Shadow AI in Enterprises
10:30 Understanding Harmonic Security's Zero-Touch Data Protection
12:15 How Harmonic Security Works - Browser Extension Overview
14:40 Detecting Sensitive Data in AI Prompts
16:50 Live Demo - Preventing Data Leaks in AI Chatbots
19:35 Visibility and Monitoring of AI Usage Across the Enterprise
22:10 Risk Classification and Training Data Considerations
24:05 Policy Enforcement and Customization Options
26:30 Future Developments - Expanding Coverage Beyond AI Apps
28:15 Final Thoughts and Where to Learn More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 466 | My Analysis and Prediction on the Deepseek Situation

Thu, 30 Jan 2025 04:45:57 +0000

Plus: The AI Vulnerability Glut, Remotely Hacking Subarus, Criticism of CVSS, the United Breach, and much more...

➡ Protect Against Bots, Fraud, and Abuse. Check out WorkOS Radar at workos.com/radar

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Faisal Khan from Vanta

Tue, 28 Jan 2025 06:00:00 +0000

In this episode, I speak with Faisal Khan, a GRC Solution Specialist at Vanta, about how their platform is transforming trust management for organizations.

We talk about:

Vanta as a Trust-Management Platform:
How Vanta helps organizations build, scale, and showcase their security and compliance programs through automation, efficiency, and tools like the Trust Center.

Key Features and Solutions Offered by Vanta:
How Vanta’s integrations automate compliance checks, streamline vendor risk management, and address industry standards like SOC 2, ISO 27001, and CMMC to save time and improve efficiency.

Future Directions and AI Integration:
How Vanta is expanding into new frameworks like the EU AI Act and leveraging AI to simplify compliance, optimize workflows, and address evolving trends in governance and security.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 465 | The SaaS Attack Vector, Project Stargate, and Undersea Cable Drones

Sun, 26 Jan 2025 00:50:35 +0000

also...Joseph goes independent, Perplexity's new search API, Stoicism's gift, and much more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 464 | AI Phishing Matches Humans, Under Sea Cable Cutter Patents, and Siri is About to Not Suck

Sat, 18 Jan 2025 02:49:51 +0000

also...Russia's actual playbook, CISA's new rating system, and everyone's doing robots now

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 463 | Launching 2025, US Soldier Data Leak, AI Agents Emerge, China's Global Spy Network, Robotaxis Now Safer Than Humans

Sat, 11 Jan 2025 03:33:55 +0000

Navigating AI's impact on work, the rise of transnational threats, a grim new reality in air travel, and how to harness the chaos of 2025 for personal and professional growth.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 462: Full-Face Mask Deceptions, VS Code Tunnel Hacks, Quiet AI Emergence at Apple, and Tokyo’s Three-Day Weekend Gamble

Sun, 22 Dec 2024 21:36:33 +0000

...plus building personal TELOS files, the ChatGPT Pro vs. Claude coding face-off, a human bird flu case in Louisiana, and ketones fighting Alzheimer’s.

➡ Make your app enterprise-ready and start selling to enterprise customers with WorkOS: workos.com

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

How Much AI Do We Need? - My AI Industry Prediction

Wed, 11 Dec 2024 00:01:39 +0000

In this episode, Daniel Miessler explores how AI can transform our understanding of the present and create actionable paths for a better future.

He talks about:

The Current State, Desired State, and Transition in AI Applications:
How AI frameworks can analyze the current state, define a desired state, and propose action plans to address challenges in education, climate, health, and beyond.

The Infrastructure and Scale of AI:
Why we’re only at the beginning of building the AI infrastructure required for future demands, from GPUs and data centers to startups pushing the boundaries of what’s possible.

The Role of AI in Human and Organizational Development:
How AI can revolutionize personal lives, enhance businesses, and solve societal issues by gathering and analyzing massive amounts of contextual data to provide actionable insights.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Chapters:

0:00 - Introduction to Unsupervised Learning Podcast
1:10 - Concept: Predicting AI Infrastructure Needs
3:45 - The Challenge of Predicting Technology vs Human Desires
6:20 - Exploring AI Infrastructure Metrics (GPUs, Data Centers, Startups)
8:55 - Philosophical Insight: Current State vs Desired State
12:15 - AI’s Role in Learning from the Past and Anticipating the Future
14:50 - Addressing Global Issues with AI (Education, Poverty, Climate)
18:30 - Transitioning from Current State to Desired State
22:05 - Context Gathering: Granularity and Technology Limitations
25:40 - AI's Impact on Individual and Family Contexts
29:10 - AI’s Potential in Business: Granularity and Cost
32:50 - Vision of Life OS and Personalized Assistance
36:15 - AI in Society: Predicting and Preventing Problems
40:00 - Infinite Context and the Scaling of AI Capabilities
44:30 - Predictions on AI Context Size and Infrastructure Demand
48:20 - The Importance of Understanding the Current State
52:10 - Conclusion

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 459: New Active 0-day Exploitation, AI That Sees Your Open Apps, The RebootAI Project

Thu, 21 Nov 2024 21:19:36 +0000

A conversation with Rob Allen from ThreatLocker, UL's Black Friday sale, Finland's internet disrupted, and more...

➡️ Get Your Free Cloud Security Scan with Wiz: wiz.io/ul

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Rob Allen from ThreatLocker

Mon, 18 Nov 2024 06:00:00 +0000

In this conversation, I speak with Rob Allen, Chief Product Officer at ThreatLocker.

We talk about:

ThreatLocker’s Unique Zero Trust Approach to Cybersecurity:
How ThreatLocker’s "deny by default, permit by exception" methodology, along with automated application learning and built-in definitions for over 4,000 applications, simplifies allowlisting and enhances endpoint security.

Innovations in ThreatLocker’s Control Features:
How ThreatLocker’s ringfencing prevents unauthorized application interactions and data access, and dynamic firewalls mitigate risks like lateral movement and ransomware attacks through endpoint-level network segmentation.

Recent Developments and Cloud Expansion:
How ThreatLocker Detect and Cloud Detect provide advanced detection capabilities for endpoint and cloud environments, including Office 365, enabling anomaly detection, centralized alerts, and proactive threat management.

And more.

Into (00:00:00)
ThreatLocker's Zero Trust Cybersecurity Approach (00:00:31)
Understanding Allow Listing in Cybersecurity (00:01:49)
Managing Software Updates with ThreatLocker (00:02:13)
Automated Application Updates for Over 4000 Programs (00:04:11)
Vendor Collaboration for Early Software Updates (00:05:40)
Challenges and Risks of Immediate Software Updates (00:06:53)
Assuming Breach: A Core Cybersecurity Principle (00:08:10)
Implementing Zero Trust Strategies with Ring Fencing (00:09:30)
Controlling Application Interactions to Prevent Threats (00:09:50)
Advanced Data Protection with Storage Control (00:13:17)
Dynamic ACLs for Smarter Network Control (00:15:48)
Ransomware Risks from Open Ports (00:16:50)
Using Shodan to Identify Open Port Vulnerabilities (00:17:19)
Building Application Allow Lists with Contextual Data (00:18:43)
Learning Mode for Application and Traffic Visibility (00:19:36)
Balancing User Behavior Control and Workflow (00:20:44)
Integrating Detection and Control with ThreatLocker Detect (00:21:44)
Why Detection is Critical in Cybersecurity Layers (00:22:41)
Response Mechanisms and Automated Remediation (00:24:02)
Lockdown Mode: Ultimate Isolation from Threats (00:25:38)
Streamlined Application Approvals with Cyber Hero (00:26:36)
Breaking Down Ransomware Attack Stages (00:27:46)
Introducing Cloud Detect for Cloud Security (00:29:39)
How to Learn More About ThreatLocker Solutions (00:30:47)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 458: Ollama Vulnerabilities, Rating AI Using AI, The Mantis Hack-back Framework

Sun, 17 Nov 2024 19:45:16 +0000

My conversation with Jason Haddix from Flare, Google finds a Zero-Day with AI, Robot Dogs Protecting Mar-a-Lago, and more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Jason Haddix from Flare

Mon, 11 Nov 2024 21:12:23 +0000

Streamline Your Cybersecurity with Flare Here:
https://try.flare.io/unsupervised-learning/

In this conversation, I speak with Jason Haddix, founder of Arcanum Security and CISO at Flare.

We talk about:

Flare's Unique Approach to Threat Intelligence:
How Flare's capability to uncover compromised credentials and cookies from the dark web and private forums has been crucial in red team engagements.

Challenges of Credential Theft and Advanced Malware Techniques:
How adversaries utilize tools like the RedLine Stealer malware to gather credentials, cookies, and other sensitive information, and this stolen data enables attackers to bypass authentication protocols, emphasizing the need for comprehensive exposure management.

Jason's Journey To Founding Arcanum & Arcanum's Security Training Programs:
How Jason now advises on product development and threat intelligence as Flare's CISO and his journey to fund Arcanum, a company focused on red teaming and cybersecurity, and Arcanum's specialized training programs focusing on offensive security and using AI in security roles.

And more

Introduction to the Podcast (00:00:00)
Guest Excitement on Podcast (00:00:20)
Jason's New Business and Flare Role (00:00:24)
Career Shift from Ubisoft to Red Teaming (00:01:02)
Evolution of Adversary Tactics (00:02:04)
Flare's Credential Exposure Management (00:02:58)
Synergy Between Arcanum and Flare(00:03:55)
Dark Web Credential Compromise (00:04:45)
Challenges with Two-Factor Authentication (00:06:25)
Cookie Theft and Unauthorized Access (00:07:39)
Redline Malware and Its Impact (00:08:12)
Flare's Research Capabilities (00:09:50)
Potential for Advanced Malware Detection (00:11:40)
Expansion of Threat Intelligence Services (00:12:15)
Vision for a Unified Security Dashboard (00:13:25)
Integrating Threat Intelligence with Identity Management (00:14:00)
Credential Update Notifications via API (00:15:54)
Automated Credential Management Potential (00:17:28)
AI Features in Security Platforms (00:17:32)
Exploration of Automated Security Responses (00:18:38)
Introduction to Arcanum Security (00:19:25)
Overview of Arcanum Training Courses (00:20:25)
Necessity for Up-to-Date Training (00:22:15)
Guest Experts in Training Sessions (00:23:08)
Upcoming Features for Flare (00:25:11)
Integrating Vulnerability Management (00:28:08)
Accessing Flare's Free Trial (00:28:25)
Learning More About Arcanum (00:29:09)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 454: The First AI Breaches

Fri, 18 Oct 2024 15:38:00 +0000

AI Avatar Breaches, Gullibility is Vulnerability: Conspiracy is Threat, Caldera's New Plugin, and more...

Try Out the ThreatLocker to take your security to the next level:

https://www.threatlocker.com/ul

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

How My Projects Fit Together (Substrate, Fabric, Telos, Daemon, and Human 3.0)

Tue, 15 Oct 2024 22:43:05 +0000

This episode, "How My Projects Fit Together," is a follow-up to a previous post called "What I Am Doing & How It's Going".

Here, Daniel Miessler addresses the most commonly asked questions: "I see all your projects, but what are they? How are they related?"

He takes an individual look at his various projects (Substrate, Fabric, Telos, Daemon, and Human 3.0) and then how they work together to tackle big issues such as the lack of purpose and meaning in people's lives, preparing people for the impact of AI in society, and the need for holistic human development.

For all the projects’ links,visit: https://danielmiessler.com/p/how-my-projects-fit-together

- Intro (00:00:00)
- Identifying Major Problems (00:00:47)
- Lack of Purpose and Meaning (00:01:50)
- Impact of AI on Society (00:01:50)
- Training for Full-Spectrum Individuals (00:03:02)
- Security as a Core Focus (00:03:02)
- Helios: Attack Surface Monitoring (00:04:11)
- Daemon: Security Program Management (00:05:16)
- Substrate: Enhancing Human Understanding (00:06:21)
- Argument Components in Substrate (00:07:35)
- AI and Argument Detection (00:10:59)
- Fabric: Augmenting Humans with AI (00:15:26)
- Fabric Patterns for Problem Solving (00:16:31)
- Fabric Overview (00:19:36)
- Telos Introduction (00:20:50)
- Articulating the Mission (00:21:50)
- Telos File Example (00:22:53)
- Managing Personal Life with Telos (00:23:57)
- AI and Purpose (00:26:10)
- Daemon Introduction (00:28:21)
- API Concept in Daily Life (00:29:28)
- Digital Assistants and APIs (00:31:40)
- Human Connection through Sharing (00:37:52)
- Daemon Personal API Broadcast (00:39:53)
- Human 30 Introduction (00:43:07)
- Human 30 Philosophy (00:45:22)
- Impact of AI on Work (00:48:47)
- Human 30 Platform Overview (00:51:00)
- Summary of Projects (00:54:03)
- Vision of Future AI Integration (00:56:21)
- Encouragement for Clarity and Purpose (00:57:39)
- Encouragement for Purpose (00:59:47)
- Articulating Your Work (01:00:46)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Human 3.0—The Skills & Mental Frames Required To Thrive In An AI World

Wed, 09 Oct 2024 06:00:00 +0000

Human 3.0 is here.

In this conference for the United Nations, Daniel Miessler introduces the topic of Human 3.0 philosophy and the skills and mental frameworks needed to thrive in an AI-driven world.

Learn about:

- The future of work and the human 3.0 economy.

- How AI will revolutionize startups and entrepreneurship.

- How one-person billion-dollar companies are becoming a reality.

- Creative expression and AI.

- The importance of personal visibility and authenticity.

- How to survive and thrive in today's rapidly evolving technological landscape.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 452: The New Hotness: NotebookLM

Mon, 07 Oct 2024 15:42:46 +0000

China prepping for kinetic using cyber?, Automatic podcast creation using NotebookLM, VM + AI, and more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NotebookLM Podcast: David Deutsch, Understanding, and AI

Wed, 02 Oct 2024 17:50:13 +0000

This is a NotebookLM podcast based on a long conversation I had with my AI, DARSA, on the topic of whether AIs truly understand things and/or are capable of creativity.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Venture Capitalists Favor Risk-Takers: The Rise of Self-Made Billionaires and Tech Innovators

Sat, 28 Sep 2024 06:00:00 +0000

Venture capitalists aren't looking for nice founders; they want risk-takers. Nate Silver highlights that 70% of the billionaires on the 2023 Forbes 400 list are self-made, often coming from modest backgrounds.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

AI Comedians by 2026? The Future of Comedy and the Turing Test for Laughter

Fri, 27 Sep 2024 06:00:00 +0000

Comedians are increasingly using AI to help write jokes and brainstorm ideas, with mixed results. I think this is similar to the Turing Test in terms of the importance of AI progress. If AI can write a full set of comedy and make humans laugh, that’s f*cking huge.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Alarming Power of Deepfakes

Thu, 26 Sep 2024 06:00:00 +0000

Trump shared a fake image of Harris speaking at a Communist event. This one looks fairly fake, but 1) lots of people will still believe it’s real, and 2) current tech can already make more believable ones.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 451: Altman Says ASI in "Thousands of Days"

Thu, 26 Sep 2024 00:25:12 +0000

A new Fabric web app called FabricUI!, Many AI Eyes, PagerAttack Analysis, a new Ripgrep, and more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Russia Is Paying Right Wing Influencers?

Wed, 25 Sep 2024 06:00:00 +0000

A whole bunch of right-wing influencers received millions from Russia in return for promoting pro-Russian talking points. Hilarious to me since their whole narrative is to be skeptical and discerning. Except when it comes to obvious Russian propaganda.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

This Is The Future Career For Creators - Virtual Realities, Economies, and Meaning

Tue, 24 Sep 2024 06:00:00 +0000

The more I think about it, the more I think a major career for creators going forward will be building entire realities for people to live inside of.

So think post-AG/SI and post UBI, and where games are extraordinarily immersive.

I think there will be a huge market for creative people building the story lines and stat systems and look and feel of entire worlds that people will live inside of for a period of years at a time.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

My First Thoughts on New OpenAI Strawberry Model ( OpenAI o1-preview)

Thu, 19 Sep 2024 20:57:54 +0000

Here are my first thoughts after using OpenAI's New Strawberry Model for a couple of hours

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 450: Thoughts on o1-preview and the Path to AGI

Tue, 17 Sep 2024 22:44:07 +0000

80% Chinese Cranes, Drones vs. Abrahams, a RAG kickstart, a Canary-based Security Maturity Model, and more...

Check out Wiz for a Free Could Security Scan:
https://www.wiz.io/ul

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Shiladitya Sircar from BlackBerry on DeepFake Threats

Tue, 17 Sep 2024 02:29:55 +0000

In this conversation, I speak with Shiladitya Sircar, Senior VP of Product Engineering and Data Science at BlackBerry.

We talk about:

The Rise of Deepfakes and Cyber Threats
Innovation Meets Malicious Intent: Deepfakes are not just a tech novelty; they’re a growing threat. From text-based phishing to hyper-realistic fake videos and audio, the landscape of cyber threats is evolving rapidly. Deepfake technology can clone voices, making it easier for cybercriminals to impersonate individuals and bypass security measures.

Understanding Identity Compromise
Voice Cloning Dangers: Our brains are wired to trust familiar voices, making voice cloning particularly insidious. We share a chilling story about a cybercriminal impersonating Ferrari’s CEO. The attacker’s deepfake was so convincing that it almost led to a major scam.

The Impact on Trust
Eroding Trust in Systems: Deepfakes can undermine trust in institutions and systems, much like traditional scams but with a high-tech twist. Beyond individual attacks, deepfakes can manipulate public opinion and even influence elections. Organizations need to train employees to spot deepfakes, and there’s a pressing need for laws that specifically address deepfakes and identity spoofing.

And more

Intro (00:00:00)
Main Cyber Threats from Deepfakes (00:00:56)
Identity Compromise Explained (00:02:47)
Impact of Deepfakes on Trust (00:06:23)
Deepfakes in Attack Chains (00:08:15)
Case Studies of Deepfake Attacks (00:09:41)
Emerging Threat Landscape (00:13:56)
Defending Against Deepfake Attacks (00:15:07)
Regulatory Frameworks Needed (00:16:28)
The Role of Education and Technology (00:18:57)
Future of Content Authenticity (00:20:53)
Legislation and Authenticity Mechanisms (00:22:04)
Real-Time Deepfake Validation (00:23:18)
Government and Industry Partnership (00:24:07)
Media Forensic Research (00:24:23)
Zero Knowledge Proofs (00:25:36)
Content Provenance and Authenticity (00:26:52)
Trust Network Expansion (00:28:00)
Puppeteering Technology (00:29:20)
Stream Authentication Challenges (00:30:21)
Hardware-Level Trust (00:32:00)
Fragmentation in Standards (00:32:29)
Trust in Communication Protocols (00:33:51)
Collaboration for Solutions (00:35:22)
Apple's Unique Position (00:36:47)
Erosion of Trust (00:37:31)
AI Agents for Detection (00:38:11)
Short-term and Long-term Solutions (00:38:45)
Awareness and Education (00:41:23)
Predictions for Deepfake Technology (00:41:48)
Community Action Against Deepfakes (00:43:09)
Learning More About BlackBerry's Work (00:43:29)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 449: China Hits US ISPs, NIST CSF 2.0, Russian Intel Attacks, Stagnant Companies...

Mon, 16 Sep 2024 14:52:32 +0000

Life changing books, defining your core problems, the Apple updates, and much more...

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

North Korea Strategy to “Infiltrate” Foreign Companies

Tue, 10 Sep 2024 06:00:00 +0000

KnowBe4 accidentally hired a North Korean state actor who tried to install info-stealing malware on their devices. They caught it in time, but it shows how good North Korean hackers are at pretending to be IT staff. | Bill Toulas | MORE

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

How To Find Great People to Work With - UBI & Talent Distribution

Sun, 08 Sep 2024 06:00:00 +0000

This reminds me of a very similar lesson I learned when hiring in cybersecurity over 20 years: exposing people to training and encouragement makes the stars stand out, but it doesn’t turn everyone into stars.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Ambition & UBI - Why People Are Working Less

Fri, 06 Sep 2024 06:00:00 +0000

The idea that Universal Basic Income (UBI) reduces the need to work isn't new, but recent studies show it doesn't lead to better jobs or more education. Instead, people just work less. | by Alex Howlett | MORE

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 448: TSA SQLi, NYT Github, NK RPM, NVIDIA Mystery...

Fri, 06 Sep 2024 02:58:06 +0000

Becoming Attention, Weighting on OpenAI, Ozempic and Aging?, and more...

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Google Current State A Waste of Money & Talent

Wed, 04 Sep 2024 06:00:00 +0000

Google is slowly getting rid of all the best things it has.

The main thing Google is growing is its graveyard.

Such a colossal waste of money and talent. Their failures should be studied for centuries as an example of what happens when you don’t lead with UX-focused product management, rather than “throw shit at wall”-focused engineering.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

How China is Winning The Energy War

Mon, 02 Sep 2024 06:00:00 +0000

China is installing record amounts of solar and wind energy, adding 10 gigawatts of wind and solar capacity every two weeks, which is like building five large nuclear power plants weekly.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

AI The Creative Workflow & The Dangers of Groupthink

Sat, 31 Aug 2024 06:00:00 +0000

A new study shows that while generative AI like ChatGPT makes individual stories more creative and engaging, it also makes them more similar to each other. | by Ben Dickson | MORE

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 447: Sam Curry on Bug Bounty Careers, Slack Data Exfil, The Work Lie

Sat, 31 Aug 2024 00:14:59 +0000

Stopping Chinese AI/Robot imports, Substrate for political platforms, sun vs. smoking, and more...

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Don’t Judge Yourself Based On What Companies Think of Your Skills

Thu, 29 Aug 2024 06:00:00 +0000

I watched a number of videos last night about people losing their jobs, starting a YouTube channel, and just generally struggling. People are hurting because they’re feeling the ground shifting under their feet and it’s not clear if it’s their fault, what’s going on, or what to do about it.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Microsoft Fires DEI Team & The Correct Approach To Diversity

Tue, 27 Aug 2024 22:00:00 +0000

Microsoft Lays Off DEI Team — Microsoft laid off its diversity, equity, and inclusion team, saying DEI is "no longer business critical." MORE

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 446: AI Ecosystem Components, MS 0-Days, Iranian Campaign Hacks…

Thu, 22 Aug 2024 04:12:19 +0000

Political deepfakes are here, Grok2 is insane, weakness vs. evil, and more…

Check out ThreatLocker to secure your data:

threatlocker.com/ul

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed in this episode:

Intro (00:00:00)
Migration to Go (00:01:45)
Aphorisms and AI Models (00:03:09)
Peter Thiel and Joe Rogan Discussion (00:04:12)
Thiel's Intellectual Approach (00:05:15)
Thiel's Complexity (00:07:25)
Community Libraries (00:11:13)
AI Model Ecosystems (00:12:12)
Microsoft Security Flaws (00:13:15)
Russian Cyber Campaign (00:13:45)
Taiwan Strait Drone Strategy (00:14:24)
Offensive AI Research (00:14:45)
Cyber Attacks on Iranian Banks (00:15:21)
Trump's Fake Image Controversy (00:15:21)
Deepfakes and Misinformation (00:16:16)
Potential for Crisis from Misinformation (00:18:24)
Iranian Hacking Campaigns (00:19:31)
China's Cyber Spies (00:20:22)
AI Image Generation Chaos (00:20:22)
AI in Comedy (00:21:28)
Deepfake Comedy Integration (00:22:40)
Future of Deepfake Comedy (00:23:28)
San Francisco's Software Ban (00:23:28)
China's Manufacturing Crisis (00:24:25)
Venture Capital Trends (00:25:30)
Gen Z Unemployment Trends (00:28:24)
Impact of Technology on Childhood (00:29:28)
Dopamine Levels and Boredom (00:32:22)
Privilege of Stable Households (00:34:23)
Market for Content Authenticity (00:35:24)
Weakness vs. Evil (00:35:24)
Fabric Integration with Raycast (00:36:25)
Eric Schmidt's Honest Interview (00:37:59)
AI as Augmentation Technology (00:38:63)
Live Coding Demonstration (00:39:57)
The Importance of AI Awareness (00:41:08)
Aphorism of the Week (00:41:29)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Introducing Substrate—An Open-source Framework for Human Understanding, Meaning, and Progress

Fri, 09 Aug 2024 06:00:00 +0000

This episode introduces Substrate—An Open-source Framework for Human Understanding, Meaning, and Progress.

Substrate is a crowdsourced project designed to enhance understanding, communication, and action in order to move humanity forward.

Read the Article:
📃 https://danielmiessler.com/p/introducing-substrate

TOPICS:
Introduction to Substrate (00:00:00)
Components of Substrate (00:01:18)
GitHub Repository Overview (00:02:33)
Purpose of Substrate (00:04:36)
Argument Visualization Example (00:05:32)
Graphical Representation of Arguments (00:07:55)
Trust in Sources (00:09:56)
Strengthening Discussions (00:10:57)
Real-World Use Cases (00:11:54)
Describing Yourself with Substrate (00:12:55)
Learning About Others (00:14:54)
Visualizing Arguments and Claims (00:15:51)
Transparency in Evaluating Claims (00:17:59)
The Tiny Teapot Claim (00:18:54)
Substrate Plus AI (00:20:04)
Automating Science Workflows (00:21:16)
Monitoring Crime and Corruption (00:24:21)
Leadership Accountability (00:29:49)
Companies as Graphs of Algorithms (00:31:56)
Future State Optimization (00:35:47)
Understanding Security Assessment (00:36:41)
Optimizing Processes with AI (00:37:46)
The Purpose of Substrate (00:38:49)
AI's Role in Substrate (00:39:56)
Want to Be Involved? (00:39:56)

REFERENCED RESOURCES:

My 9,000-word Illustrated Essay on Where I Think AI is Heading
🔥 https://danielmiessler.com/p/ai-predictable-path-7-components-2024

The Substrate Project:
⚙️ https://github.com/human-substrate

Follow on X:
🆇 https://x.com/danielmiessler

Subscribe to the newsletter at:
✉️ https://danielmiessler.com/subscribe

Join the UL community at:
🤝🏻https://danielmiessler.com/upgrade

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 444: Pizza Meter Intelligence, China Bypasses Bans, Securing AWS Secrets…

Fri, 09 Aug 2024 00:46:47 +0000

What to expect at Blackhat/DEFCON, Identifying Explosives, OpenAI's new models, Llama 4 Timeline, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed in this episode:

Intro (00:00:00)
OSINT and the Pizza Index (00:01:08)
Agent Framework Development (00:02:12)
State of Cybersecurity (00:04:08)
Critical Security Vulnerabilities (00:05:27)
Ransomware Trends (00:06:25)
Data Breach Costs (00:07:29)
AI Developments (00:08:40)
California AI Regulation (00:09:42)
OpenAI's GPT-4 Launch (00:11:01)
Tech Company Updates (00:12:03)
Shifts in Workforce Dynamics (00:13:07)
Prisoner Swap News (00:17:06)
Shark AI Model (00:18:03)
Dementia Prevention Insights (00:19:03)
Genetics of Self-Control (00:20:12)
Name and Appearance Study (00:20:12)
Alzheimer's Disease Research (00:20:12)
Dungeons and Dragons Rulebooks (00:20:12)
Novelists Writing Bug Reports (00:21:22)
Recent UBI Study Analysis (00:21:22)
Free-Range Kids Initiative (00:21:22)
Discovery Farm Bot (00:22:13)
Super Memory AI (00:22:13)
Avi Shipman's AI Pendant (00:22:13)
Installing Fabric (00:22:13)
Fleet Open Source Tool (00:22:13)
SOC2 Policy Templates (00:22:13)
Clutch Security Platform (00:22:13)
Black Hat Reminder (00:23:48)
Aphorism of the Week (00:23:48)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Scaling Misinformation With AI

Wed, 07 Aug 2024 06:00:00 +0000

Daniel Miessler discusses how AI can grow the number of elite propagandists and hackers employed by foreign intelligence agencies.

Discussed in this video:

AI-Enhanced Software and Disinformation (00:00:00)
Russia utilizes AI software, Millio Radar, to create sophisticated fake personas for disinformation.

Concerns About AI Sophistication (00:01:12)
The increasing capabilities of AI could enable enemies to manipulate information on a massive scale.

Shift from Block List to Allow List (00:02:30)
The internet may need to transition to an allow list system to combat overwhelming disinformation.

Risks for Ordinary Individuals (00:03:44)
Regular users, especially the less tech-savvy, are at high risk of falling victim to manipulation online.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 443: North Korean Co-workers, UBI Failure?, AI-Groupthink, GPS Spoofing…

Mon, 05 Aug 2024 16:45:58 +0000

Switzerland goes open source, Google keeps cookies, DJI not cancelled, Alzheimer's spray, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed in this episode:

Intro (00:00:00)
Job Loss and Career Change (00:01:42)
Self-Worth in the Job Market (00:02:55)
The Need for Kindness (00:03:54)
North Korean Cybersecurity Threat (00:04:57)
GPS Spoofing Risks (00:07:11)
Malicious Acts Disrupting Transportation (00:08:10)
Google's Cookie Policy Change (00:09:19)
AI's Impact on the Job Market (00:10:30)
Generative AI and Creativity (00:11:32)
Concerns Over AI Influence (00:12:50)
Switzerland's Open Source Law (00:15:08)
Waymo vs. Tesla in Self-Driving (00:16:07)
Hiring Practices in Tech Companies (00:17:07)
Declining U.S. Birthrate (00:18:11)
Universal Basic Income (00:18:11)
Building a Star Team (00:19:48)
Overcoming Disadvantages (00:23:06)
Distribution of Talent (00:24:07)
Southwest Airlines Policy Change (00:25:16)
Economic Stress in America (00:26:32)
Breakthroughs in Medicine (00:27:45)
Conspiracy Theories in Politics (00:28:32)
Humanizing Political Differences (00:30:00)
Lessons from "The Righteous Mind" (00:31:16)
The Importance of Empathy (00:32:17)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Christine Gadsby from BlackBerry

Mon, 05 Aug 2024 06:20:27 +0000

In this conversation, I speak with Christine Gadsby, Head of Product Security Operations Team at BlackBerry.

We talk about:

The Role of AI in Cybersecurity:

AI's real advancements, practical applications, and associated challenges, moving beyond the hype.

Enhancing Incident Response and Threat Hunting

Christine highlights AI's significant impact on enhancing incident response and threat hunting, how AI quickly analyzes vast data to identify Indicators of Compromise (IoCs), automates routine tasks, and improves decision-making with actionable insights.

The Evolution of Blackberry in Cybersecurity

Christine discusses Blackberry's shift from mobile devices to cybersecurity, emphasizing their focus on highly regulated environment and how the acquisition of Silence brought advanced AI capabilities, enhancing their security solutions.

Among other topics.

Intro (00:00:00)
AI in Cybersecurity: Hype or Reality? (00:00:06)
Incident Response and Threat Hunting (00:01:12)
Automation in Security Programs (00:02:08)
Industry-Specific AI Needs (00:03:20)
AI's Role in Regulated Environments (00:04:23)
Blackberry's AI Integration (00:04:50)
Perceptions of Blackberry's Evolution (00:06:51)
Trust in Vendor Relationships (00:09:11)
AI's Potential in Monitoring (00:11:12)
Challenges of Staffing in Cybersecurity (00:13:18)
Staff Turnover in Cybersecurity (00:13:54)
Burnout and Job Satisfaction (00:14:18)
Hiring Challenges in Security (00:15:17)
Confusion in Cyber Job Market (00:16:10)
Job Changes Among Cyber Leaders (00:17:10)
Outsourcing Security Functions (00:18:09)
Pressure from Boards (00:18:57)
Evolving Security Needs (00:19:40)
Human Element in Cybersecurity (00:20:46)
Talent Pipeline Issues (00:21:40)
Challenges of Smaller Companies (00:22:32)
Job Satisfaction and Workload (00:24:03)
Pressure Cooker Environment (00:24:43)
Crypto Attacks Resurgence (00:26:16)
Crypto Mining Discussion (00:26:33)
APT 32 Insights (00:27:22)
Employee Training Importance (00:28:41)
Indicators of Crypto Mining (00:29:45)
Detection Challenges (00:30:30)
Normal System Behavior (00:32:13)
Looking Ahead to 2025 (00:32:44)
*Supply Chain Pressures (00:35:08)
Arms Race in Security (00:35:27)
Liability Hot Potato (00:36:27)
Managed Services Growth (00:36:44)
Cyber Insurance Trends (00:37:52)
CISO Evolution (00:39:10)
The Importance of Trust in Supply Chain (00:39:56)
Predictions for Cybersecurity Roles (00:40:46)
Following Blackberry's Work (00:41:00)
Networking and Future Conversations (00:41:05)
Conclusion (00:41:37)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

Wed, 24 Jul 2024 22:26:31 +0000

Chinese Solar Builds, DOJ Domain Seizures, Scattered Spider Arrest, Kaiser AI, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed in this episode:
Intro (00:00:00)
CrowdStrike Incident Discussion (00:01:49)
Threat Actor and Social Engineering (00:03:49)
AI Weapons for Ukraine (00:04:56)
China's Energy Expansion (00:06:09)
Foreign Influence and Disinformation (00:07:30)
AI Race and China's Restrictions (00:08:33)
Healthcare Innovations with AI (00:10:20)
Nvidia's Potential Losses (00:11:19)
Google's URL Shortening Service Shutdown (00:14:36)
Tech Startup Challenges (00:14:36)
Meta Analysis on Toothbrushing (00:16:43)
Young Adulthood and Happiness Crisis (00:17:53)
AI's Impact on Employment (00:19:08)
The Impact of UBI on Ambition (00:20:11)
The Nature of Ambition (00:21:18)
Cultural Influence on Drive (00:23:14)
Addressing Societal Issues (00:24:16)
Mental Models for Success (00:24:16)
Cannabis and Mediocrity (00:25:25)
Conspiracy Culture Commentary (00:26:28)
AI in Security (00:27:39)
Silicon Valley Political Movements (00:27:39)
Discovery Dilemma Tool (00:28:52)
Emergency Preparedness (00:28:52)
Constructive Political Conversations (00:29:48)
Finding Common Ground (00:30:49)
Wisdom in Silence (00:31:43)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

Sun, 21 Jul 2024 04:41:53 +0000

HackerCamp Approaches, Introducing Substrate, Kaspersky--, Exim/Gitlab Vulns, Personal/Business Branding, and more…

➡ Check out the Autonomous IT Podcast:
https://community.automox.com/autonomous-it-podcasts-144

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed on this episode:

Intro (00:00:00)
AGI Definitions (00:01:29)
Pinnacle Human Employees (00:02:36)
Transition to ASI (00:03:18)
Dynamic Content Summaries (00:03:48)
Deepfakes in Education (00:04:43)
AI and Disinformation (00:09:04)
Manipulation and Inequality (00:11:01)
Internet Trust and Content Verification (00:11:01)
Concerns Over AI's Impact on Society (00:12:09)
OpenAI's AGI Levels (00:13:08)
AI Startups and Future Predictions (00:15:24)
Technological Innovations (00:16:24)
Literacy Crisis in the U.S. (00:17:29)
Public Reaction to Health Risks (00:18:35)
Search for Extraterrestrial Life (00:19:19)
Exoplanets and the Drake Equation (00:19:37)
VCs in Medical Practices (00:19:57)
Conspiracies and Failures (00:20:48)
Therapy and Rumination (00:20:57)
Discovery Fluff on Lambda (00:21:12)
Securing Workflows with GitHub Actions (00:21:22)
Employee Disposability (00:21:32)
Correlation of Smoking and Lung Cancer (00:21:48)
AI in Satellite Imagery (00:22:04)
Git Commits Insights (00:22:49)
Check on Friends (00:23:12)
Judgment as a Key Skill (00:23:22)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 440: RAID (Real World AI Definitions)

Thu, 11 Jul 2024 17:19:06 +0000

Twillio API Dump, North Korea Russia, Funny AI Memes, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed on this episode:

Intro (00:00:01)
Rebranding of Al Qaeda (00:01:06)
Reading Alex Ramos's Business Books (00:01:14)
Supporting a Struggling Army Veteran (00:01:54)
In-person Sessions with Entrepreneurs (00:02:36)
Real World AI Definitions Resource (00:03:00)
Defining AI (00:04:08)
Machine Learning Definition (00:06:15)
Prompt Engineering (00:08:18)
Retrieval Augmented Generation (00:09:22)
AI Agent Definition (00:10:20)
Chain of Thought (00:11:30)
Prompt Injection vs. Jailbreaking (00:12:23)
Artificial General Intelligence (00:13:24)
Sample Efficient AI (00:14:26)
Levels of AGI (00:15:25)
Artificial Super Intelligence (00:17:21)
The Levels of AI (00:19:40)
Real World AI Definitions (00:21:49)
Cloudflare's New Tool (00:23:51)
Emerging AI Capabilities (00:26:00)
Technology and Business Updates (00:27:54)
Impact of AI on Society (00:32:12)
Ground News Recommendation (00:34:29)
Aphorism of the Week (00:34:29)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 439: Humans vs. AI in Prediction Markets

Thu, 04 Jul 2024 23:07:21 +0000

Project Metaculus, SSH and Juniper 0-Day, China v. Taiwan, R1 Leaks, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed in this episode:

Updates on Courses and Fabric Introduction (00:00:43)
Cracking Trump's Popularity and Security Vulnerabilities (00:01:48)
Snowflake Data Breach and AI Security Concerns (00:02:42)
APT29 Breach and Consulting Firms' Embrace of AI (00:04:58)
AI Forecasting and Chinese Models' Performance (00:06:04)
Impact of AI on Vulnerability Research and Automation (00:11:25)
New Features in AI Frameworks and Podcast Recommendations (00:14:26)
Reflections on Waymo Experience and Epictetus' Aphorism (00:15:26)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 438: Confusion is a Muse

Thu, 27 Jun 2024 23:19:43 +0000

Sonnet 3.5 Support in Fabric, CISA AI Tabletop exercise, Kaspersky ban, China Invasion Scenario, Langchain disilussionment, more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Discussed on this episode:

Introduction (00:00:00)

Augmented V2 Registration (00:01:37)

Fabric Update and Sonnet 35 (00:01:56)

Personal Development and Authenticity (00:03:17)

Failures and Authentic Pursuits (00:04:32)

Chasing Personal Goals (00:05:30)

Articulating and Emoting (00:07:35)

Security Updates (00:08:33)

Tech Industry Developments (00:09:44)

Results as a Service (00:13:11)

Intelligence as a Service (00:14:21)

Structured Output from LMMS (00:16:38)

Innovative Projects (00:17:42)

Kludgy first generation AI frameworks (00:18:47)

Building a dependable AI stack (00:20:06)

Results as a service and trust in AI (00:21:34)

Solar energy vs. nuclear power (00:22:36)

Smartphone-free schools and societal impact (00:25:02)

Sun exposure and its health effects (00:26:04)

Intelligence collection and analysis (00:29:26)

Future of AI and automation (00:31:32)

Tech tools and discoveries (00:33:33)

Stoicism and gratitude (00:34:53)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 437: My List of Hard-won Life Lessons

Fri, 21 Jun 2024 01:33:57 +0000

New AUGMENTED Course Date, 3 New Essays, Disgruntled deletions, Scale and Merit, Russia moves to Yuan, and more…

➡ Check out the Autonomous IT Podcast:
https://community.automox.com/autonomous-it-podcasts-144

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 436: Thoughts on the Future of AI & Societal Stability

Fri, 14 Jun 2024 13:39:47 +0000

When SuperIntelligence? Apple's WWDC updates, new Fabric pattern, GPT-4 Hacking Paper, China/Russia Using OpenAI for Misinformation, and more…

➡ Check out Kolide:
kolide.com/unsupervisedlearning

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Abhishek Agrawal from Material Security

Fri, 07 Jun 2024 01:09:56 +0000

In this conversation, I speak with Abhishek Agrawal, co-founder and CEO of Material Security.

We talk about:

- Material's Security innovative approach to email security by not just preventing unauthorized access but also containing damage from potential breaches.

-Abhishek's background in data infrastructure at Dropbox and how product mangers can become successful CEOs due to their cross-functional expertise.

- The need for customized security measures for different organizations, the role of AI in detecting email threats, the importance of single-tenant environments for sensitive customers and the potential risk of default settings in productivity suites like Google Workspace.

Among other topics.

Abhishek's Background and Material Security (00:00:00)
Email Security and Productivity Suite (00:01:01)
Geographical Connection and Coffee Meetup (00:02:06)
Product Managers as CEOs and Co-founders (00:02:59)
Empowering Product Managers (00:05:01)
Product Management and Marketing Importance (00:08:04)
Email as a Content Repository (00:09:39)
Securing Email Content (00:11:03)
Data Protection for Email (00:12:10)
Redacting and Canaries (00:12:57)
Email Security vs. Data Security (00:14:53)
Abuse Cases and Control Layers (00:17:32)
Mailbox Compromise and Lateral Movement (00:17:39)
Threat Scenario Analysis (00:20:15)
Language Models for Detection (00:22:19)
Optimism in AI Tools for Defense (00:24:34)
Customized Detection Categories (00:25:52)
Security Controls Trend (00:26:20)
Security Concerns for Law Firms (00:27:07)
Email Copy Distribution (00:27:24)
API-Based Integration (00:29:08)
Monitoring LM Functionality (00:30:42)
Threat Intelligence and Detection (00:32:54)
Product Design Philosophy (00:35:56)
Data Protection (00:38:01)
Flexibility in Deployment (00:39:26)
Main Products (00:40:33)
Posture Management (00:44:01)
Broadening Product Coverage (00:48:49)
Google Workspace Threat Detection (00:50:05)
Challenges with CSP (00:51:13)
Contextual Intelligence (00:52:02)
Balancing Depth and Breadth (00:53:15)
Learning about Material (00:53:40)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 435: Making New Things is Post-AI Safety

Fri, 07 Jun 2024 01:06:36 +0000

Jason Haddix's AI Course, Microsoft Recall analysis, exercise erasing trauma, AI and the jobs problem…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 434: Can You Articulate Yourself in 50 Words?

Sat, 01 Jun 2024 20:13:04 +0000

NetworkChuck's Fabric Video, Algorithms Replace Degrees, AI Transparency, New Grad Difficulty, Windows Goes Full AI, and more…

➡ Check out the Autonomous IT Podcast:
https://community.automox.com/autonomous-it-podcasts-144

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 433: China's Flawed Strategy

Wed, 29 May 2024 23:41:33 +0000

A new book, A new Fabric pattern, Autonomous fighter jets, Friend trips, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Mike Privette from Return on Security

Fri, 24 May 2024 01:42:06 +0000

In this conversation, I speak with Mike Privette. Mike is the CISO and Cybersecurity Economist at Return on Security.

We discuss:
- The economic impact of COVID-19, the shift from prioritizing growth to operational efficiency, and the subsequent market crash and rebound in 2024.

- The rise of AI in application security, the importance of trust and safety, and the potential for AI to enhance personal digital sovereignty.

-The changing dynamics of startups, venture capital, and private equity in the cybersecurity space.

Among many other topics.

Introduction and Guest Welcome (00:00)
Return on Security's audience (01:53)
Economic trends in cybersecurity & COVID-19 (05:59)
Shift towards operational efficiency in cybersecurity companies (09:39)
Current cybersecurity trends and rebound effects (13:23)
Application Security and AI (15:05)
The Evolution of AI Security Companies (16:09)
Trust and Safety in Cybersecurity & Discussing Deepfake videos (17:03)
Validation of Ground Truth (19:18)
Personal and corporate security from AI (20:31)
Continuous Defender and AI Filtering (21:31)
Validation of True Content to combat misinformation (23:23)
AI for News Reports and Corporate Communications (26:16)
The Future of AI Security (27:11)
The trend of personal digital sovereignty (31:03)
Private equity vs. VC vs. startups (33:36)
Operational efficiency and the future of startups (36:29)
Cybersecurity industry trends and data science (43:36)
The Universal Dashboard concept (45:15)
Sharing knowledge and connections (45:42)
Check Out Return on Security (45:58)

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 432: Can You Summarize Your Work in a Sentence?

Fri, 24 May 2024 00:39:49 +0000

Thoughts on GPT-4o, Dell's API Hack, Russian Campus Campaigns, Google's Pretend Work, and more…

➡ Check out Vanta and get $1000 off:
vanta.com/unsupervised

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation on Maritime Security with BlackBerry Threat Intelligence

Thu, 16 May 2024 00:18:48 +0000

In this sponsored conversation, I speak with Corey Ranslem, CEO of Dryad—and the resident expert on Maritime Attacks—and Ismael Valenzuela, VP of Threat Intelligence and Research at Blackberry.

We talked about all things Maritime Security, and I learned a whole lot from the conversation.

Digital Hijacking at Sea: Unveiling a Cyber Attack Scenario in the Red Sea

BlackBerry Quarterly Global Threat Report — March 2024

Maritime Cyberthreats: A Growing Risk to Global Trade (blackberry.com)

00:00:00 Introduction and Guest Welcome
00:00:30 Maritime Security Overview
00:01:15 Baltimore Incident Discussion
00:02:00 Legacy Systems on Ships
00:03:20 Connectivity Challenges at Sea
00:04:10 Cyber Threats in Maritime Industry
00:05:00 Post-Accident Cyber Investigations
00:06:00 Potential Cyber Attacks on Ships
00:07:30 Threat Scenarios and Models
00:08:45 USB and External Media Threats
00:09:30 Evolution of Navigation System Connectivity
00:10:30 Crew Connectivity and Cyber Risks
00:11:30 Lessons from Other Industries
00:12:15 GPS Spoofing and Navigation Interference
00:13:30 Digital Hijacking of Ships
00:14:45 Economic Disruption via Cyber Attacks
00:16:00 Financial Motivation Behind Attacks
00:17:15 Ransomware in Maritime Context
00:18:30 Panama Canal and Economic Impact
00:19:30 Cyber Security Maturity in Maritime Industry
00:21:00 Legacy Systems and Geopolitical Interests
00:22:15 Challenges with Security Solutions at Sea
00:23:30 Historical Cyber Incidents in Maritime
00:24:30 GPS Spoofing Techniques
00:25:15 International Maritime Organization Standards
00:26:30 Criminal Trends and Cyber Attacks
00:27:45 Open Source Tools and Threat Actors
00:28:45 Information Sharing in Maritime Industry
00:29:30 Real-World Examples of Cyber Incidents
00:31:00 Cruise Ships and Large Yachts Security
00:32:15 Autonomous Vessels and Cyber Protection
00:33:30 Future of Autonomous Vessels
00:34:15 Learning and Improving Cyber Security in Maritime
00:35:30 Role of Threat Intelligence in Maritime Security
00:36:15 Optimism for the Future of Maritime Security
00:37:30 Industry Awareness and Education Efforts
00:38:30 AI Integration in Maritime Security Solutions
00:39:15 Conclusion and Final Thoughts

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 431: Companies are Graphs of Algorithms

Thu, 09 May 2024 16:38:34 +0000

The US goes skills-based, AI is mostly prompting, simulation -> reality, 30 useful concepts, and more……

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 430: The Courage to be Disliked

Fri, 03 May 2024 23:26:55 +0000

How I use local AI models, MI5 vetting research students, the first AI deepfake racism attack, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 429: Build Your Career Around Problems

Sat, 27 Apr 2024 02:22:42 +0000

Stanford's State of AI, Peter Thiel vs. Tyler Cowen, China Taiwan Hacking Prep, GenZ Outperforming, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 428: Reason to Fear; Reason to Build.

Tue, 23 Apr 2024 00:20:21 +0000

AI Propaganda, Speaking Events, analhttps://www.linkedin.com/in/danielmiessleryze_presentation Pattern, Guarding Your Energy Reserves, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 427: AI's Predictable Future

Wed, 10 Apr 2024 23:31:56 +0000

Israeli identity reveal, deepfaked content summaries, Altman/Ive device, wealthy kids, Cowen v. Haidt, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 425: The Efficient Security Principle

Wed, 27 Mar 2024 16:18:17 +0000

US drone combat, extract ideas from any book, Pinker writing analysis, Flipper reversal, GPT-5 updates, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 424: Raising Security's Floor

Thu, 21 Mar 2024 19:33:14 +0000

Insane Video Deepfakes, Devin Gets Slack Access, New Fabric Patterns, AI Application Interfaces, Let Grow, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Jason Meller of Kolide/1Password

Tue, 19 Mar 2024 16:30:12 +0000

In this sponsored conversation, I speak with Jason Meller. Jason is the founder of Kolide, which has just recently been acquired by 1Password.

We discuss:

- Kolide's acquisition by 1Password
- The synergy between Kolide and 1Password
- The challenge of password management
- The concept of device trust and zero trust
- The limitations of MDM solutions
- Engaging end-users in security remediation
- The philosophy behind Kolide's approach
- The importance of human-friendly security solutions
- Future plans for Kolide under 1Password
- The potential for broader application of Kolide's technology

Jason and I see a lot of things the same, and I really enjoyed this conversation and think you will too.

kolide.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 423: AI is Becoming Like Reading

Tue, 12 Mar 2024 16:33:37 +0000

Google AI Espionage, My macOS UI, Cloudflare AI Firewall, Midnight Blizzard, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 422: To Survive AI, We Must Become Creators

Wed, 06 Mar 2024 21:58:42 +0000

Fabric Threat Models, An AI Worm, GitHub Auto-blocks, Long Covid IQ, and more…

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://twitter.com/danielmiessler

Follow on LinkedN:
https://www.linkedin.com/in/danielmiessler

See you in the next one!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Ismael Valenzuela About AI and Threat Intelligence

Mon, 04 Mar 2024 21:40:30 +0000

In this sponsored standalone episode I speak with Ismael Valenzuela, VP of Threat Research and Intelligence at Blackberry Cylance.

We discuss:

Modern Threat Intelligence
The shifting attention of attackers
GenAI attacks
How defenders are adapting to AI attacks
And many other topics

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 420: APTs using ChatGPT, Bugs Putin, The good side of AI jobs loss?, AI Monitoring Culture, AI patents, and more…

Sun, 25 Feb 2024 07:14:35 +0000

APTs using ChatGPT, Bugs Putin, The good side of AI jobs loss?, AI Monitoring Culture, AI patents, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 419: Problem Quality, 0-Day Spyware, LOTL, Ollama + OpenAI

Mon, 12 Feb 2024 21:46:09 +0000

Two new agent types, Ollama's new API structure, $7 Trillion for chips, American satisfaction, and more…

Read the episode online here.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 418: DEFCON Moves, AnyCloudDesk, Ransomware Learnings, My Top AI Projects

Thu, 08 Feb 2024 17:42:57 +0000

My favorite 2 AI projects, US spending habits, and your security program is sh*t…

📢Sponsored by Kolide

Kolide ensures that if a device isn't secure, it can't access your apps. Zero Trust auth for Okta that drives your Devices to 100% compliance.

Watch a Demo

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 417: NSA's Broker Buys, AI-Assisted Attacks, Companies Only Want Killers

Thu, 08 Feb 2024 17:36:36 +0000

Companies Demand AI, Breach Overload, More Tech Layoffs, Chip Investment, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Shil Sircar from BlackBerry Data Science

Mon, 29 Jan 2024 20:55:43 +0000

In this episode of Unsupervised Learning, we talked to Shil Sircar. Shil is the Senior VP of Engineering and Data Science at BlackBerry, and we talked about:

- Machine Learning in Cybersecurity

- The Evolution from ML to Generative AI

- Predictive vs. Generative Models

- Preventive AI in Cybersecurity

- The Cylance AI Platform

- Attacker vs. Defender Dynamics

- Temporal Advantage in Threat Detection

- Synthetic Malware Generation

- Behavioral Analysis for Cybersecurity

- And the Future of AI in Cybersecurity

So with that, here's our conversation with Sil Sircar…

Dive deeper here:

Product Page: CylanceAI by BlackBerry
Blog: Riding the AI Waves: The Rise of Artificial Intelligence to Combat Cyber Threats
Blog: AI in Cybersecurity: Hype vs. Help
Video: As Cyberthreats Have Evolved, So Has the Need for AI
Video: Real-world performance is the ultimate test for predictive AI
Predictive AI in Cybersecurity: What Works and How to Understand It

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 416: Tracking AI Agent Activity, 400 SF Cameras, AI Sleeper Agents…

Wed, 24 Jan 2024 22:11:28 +0000

Benign AI's "Many Eyes", OpenAI's Pentagon partnership, AI voice scams, Zuckerberg all-in on AGI, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Jason Kikta from Automox

Mon, 22 Jan 2024 20:38:37 +0000

In this sponsored episode of Unsupervised Learning, we talked to Jason Kikta. Jason is the CISO and Senior VP of Product at Automox, and our conversation covered:

- Endpoint Management
- IT and Security Overlap
- Patching Strategies
- Cloud-Based Solutions
- Configuration Drift
- Policy Articulation
- Automation and AI
- IT Operations Challenges
- Future Product Features
- and other topics.

You can check out Automox at: https://automox.com.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 415: It's Raining 9+ CVEs, 40% Job Loss from AI, Invisible Prompt Injection…

Fri, 19 Jan 2024 02:04:54 +0000

[updated: apologies, we had the wrong audio file initially]

Taiwan chooses democracy, 10,000 hours debunked, Data/Display/AI/AR, and much more…

📢Sponsored by Automox: Brace yourself for any IT calamity with Automox! 🛡️ Tune into the Autonomous IT podcast and join experts discussing Patch Tuesday insights, mitigation strategies, and CVE remedies. Connect with IT pros and stay ahead of the game. 🎧 Listen now on Spotify, Apple, or your favorite podcast platform!

Read today's episode here

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 414: LastPass Settings Upgrade, Boosting ChatGPT Output, AI Adding Societal Transparency

Wed, 10 Jan 2024 15:23:05 +0000

ChatGPT prompting upgrades, CrewAI agent framework, people down on Democracy…

📢 Sponsored by Kolide: Concerned about data breaches and hacks? 🔒 Discover Kolide, the device trust solution that secures your company's devices and credentials, making phishing attempts useless to hackers. See it in action at www.kolide.com/unsupervisedlearning

View today's episode online here: https://danielmiessler.com/p/ul-414

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 413: 7 Things to Expect from AI in 2024+, Xi Going Stalin, SSH's Terrapin…

Sat, 06 Jan 2024 19:47:56 +0000

Xi purges detractors, my thoughts on chaos and 2024, my predictions for what we'll build with AI in 2024, macro D, and much more…

Read online here.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Gabe Bernadett-Shapiro on AI

Thu, 21 Dec 2023 00:17:50 +0000

👥 This conversation is between Daniel Miessler, founder of Unsupervised Learning, and Gabriel Bernadett-Shapiro, an expert on AI Safety and Threat Intelligence.

🧠 TOPICS

00:00:00 Intros

00:04:50 Acels vs. Decels/Boomers

00:08:10 Accelerationists' Optimism for AGI

00:11:02 AGI vs. ASI Discussion

00:14:22 AI Development Debate

00:18:45 Data Retrieval with LLMs

00:27:21 Bottom-Up Automation Strategy

00:34:56 Data Availability Problem Solving

00:42:07 Threat Intel Task Automation

00:49:32 Auto Analyst Tool Demo

01:02:14 Applying AI to Threat Intelligence

🔎 Gabe:

X: / gabeincognito

LinkedIn: / gabebs

🔎 Daniel:

Web: danielmiessler.com

X: / danielmiessler.com

LinkedIn: www.linkedin.com/in/danielmiessler

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 412: OpenAI's Prompt Guide, My Neovim Overhaul, The UL Character Sheet, And…

Wed, 20 Dec 2023 17:17:44 +0000

Also: Ubiquity Cross-Pollination, Passcode Laws, China's AI Influence Network, Bodycam Shenanigans, And One Year Independent!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 411: ChatGPT Repeat Vuln, A UL AI Course!, Revenge Code Deletion

Thu, 14 Dec 2023 21:21:36 +0000

Sneaky ChatGPT Data Leaks, A New Ground-Based Telescope, Companies Leaving Austin, More…

Read today's episode here

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 410: The Immigration/Identity Security Risk, Super Soldier Pentagon Talk, Okta&Me Updates, Teachable Agents

Wed, 06 Dec 2023 19:32:13 +0000

Meta bans AI-generated Political Ads, Google's new RETVec Anti-spam tool, a casual convo on Super Soldiers, and more…

📢Sponsored by Kolide🔒 Secure your world with device trust – manage all OS, empower employees to fix their own security issues. Say goodbye to vulnerable credentials.

📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 408: OpenAI Coup Theory, SEC vs. SolarWinds Analysis, Deepfake D&D Summaries

Mon, 27 Nov 2023 16:36:45 +0000

My Theory Of What Happened At OpenAI, A New Ransomware Tactic, Analysis Of What The SEC Case Will Do To Cybersecurity, Live David Attenborough Narration, And More…

Read the episode here.

📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 407: OpenAI Prompt Injection, Leaky GPTs, AGI by 2028, Huberman Routine AI

Tue, 14 Nov 2023 05:42:59 +0000

Extremist groups using AI for propaganda, NYC restaurant bots, Wegovy and Cannabis studies, my favorite collections of GPTs…

📢Sponsored by Moonlock — cybersecurity wing of MacPaw. Developers of Moonlock Engine, the antimalware tech in CleanMyMac X.

📢Sponsored by Automox - AI-powered modern IT automation is here. Learn more at automox.com.

Read the episode here.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

OpenAI's New Releases Are a Watershed Moment for Human Creativity—and Prompt Injection

Mon, 13 Nov 2023 22:25:02 +0000

Making it trivial to create and share AI Agents that connect to real-word APIs will have a drastic impact on Information Security.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why I'm Not Getting the New Humane AI Pin

Mon, 13 Nov 2023 22:16:27 +0000

Why I should be super excited by the Humane AI pin, but I'm not.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 406: OpenAI Launches Custom AIs, Okta's New Breach, EFF's Browser Privacy Checker

Fri, 10 Nov 2023 02:05:00 +0000

DOJ and Pentagon emails hacked by Russians, OpenAI's DevDay announcements, when DeepMind thinks we'll see AGI, and more…

📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 404: ServiceNow Widget Flaws, North Korean Infiltrators, and the New Top-performing Prompt String…

Thu, 26 Oct 2023 01:03:14 +0000

In this edition we dive into North Korean IT Infiltration, the top performing prompt technique, Google's traffic optimization, American sick day increases, ServiceNow's Widget problem, the US murder rates, and more

Read online here: https://danielmiessler.com/p/ul-no-404-servicenow-widget-flaws-north-korean-infiltrators-new-topperforming-prompt-string

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 403: Signal Investigates Rumored Zero-Day Bug, AI Predicts New COVID-19 Strains, Dwindling US-China Scientific Collaboration...

Mon, 16 Oct 2023 18:25:15 +0000

In This Edition We Look Into Signal's Investigation Into A Rumored Zero-Day Bug, How Harvard And Oxford Researchers Are Using AI To Predict New COVID-19 Strains, The Dwindling Collaboration Between American And Chinese Scientists, And The European Commission's CSAM Detection Bypass

View this week's podcast online at https://danielmiessler.com/p/403

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 402: Israeli Footage & Analysis, WSFTP + MOVEIT, AI Explainability, Andreessen vs. Perell on Writing, and more…

Wed, 11 Oct 2023 19:12:22 +0000

Israel analysis, a genetic data breach, active exploits against critical vulnerabilities, and a brilliant conversation between two writers about creativity

View today's episode online here: https://danielmiessler.com/p/402

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 401: Sony hit again?, Taiwan Disinformation, Corporations Demand Hardcore Workers, and GPTVision Examples…

Tue, 03 Oct 2023 22:51:55 +0000

We also look at Lex's first meaningful conversation in the metaverse, fixing Science, and TikTok's impact on reading

View today's episode online here: https://danielmiessler.com/p/ul-no-401-sony-hit-taiwan-disinformation-corporations-demand-hardcore-workers-gptvision-examples-9f9

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 400: What Hiring Managers Want, CVE Farming, Hunt Forward Operations, and AI vs. B2B Services

Thu, 28 Sep 2023 02:56:09 +0000

Discover how AI is set to revolutionize the B2B services economy and the implications for GDP. Plus, unravel the paradox of the cyber job market, explore the urgent need for a content source authentication system, and delve into the controversial practice of CVE farming

📢Sponsored by Vanta.com - scales with your business, helping you enter new markets, land bigger deals, and earn customer loyalty.

📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security

To view online, visit https://danielmiessler.com/p/400

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 399: Wisdom Extraction From Any Text, Vegas Gets Cyber Jesus, AI Creativity Performance, Pentagon Cyber Strategy…

Tue, 19 Sep 2023 05:54:28 +0000

This week we talk about how I extract manual-quality wisdom from any text/transcript, what I learn from biographies, 25 lessons in 17 years of infosec, and tons of new tools and projects.

📢Sponsored by Vanta.com - scales with your business, helping you enter new markets, land bigger deals, and earn customer loyalty.

📢Sponsored by Moonlock — cybersecurity wing of MacPaw. Developers of
the antimalware tech in CleanMyMac X — Moonlock Engine.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 398: Storm Vuln Stacking, CloudRecon, The S-Tier Guide to AI Whispering, Full-body MRIs…

Tue, 12 Sep 2023 17:56:08 +0000

Explore the explosive separation of society into the Thriving 10% vs. the Suffering 90%, how AI is becoming an integral part of our brains, and how to defend your family's privacy

📢Sponsored by Vanta

Building a SaaS business? Get ready for the compliance questions! 📈 Achieving SOC 2, ISO 27001, or HIPAA compliance can be a game-changer, but it's often tough. Automate up to 90% of work, save time & money, and scale effortlessly. www.vanta.com/unsupervised

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

UL NO. 397: Propaganda in a Box, Glacier-like Security, AGI by 2028?, Ancient Wisdom via AI, and Newsletter Differentiation

Thu, 07 Sep 2023 18:27:21 +0000

🎥 Embracing Short-Form Video Creation
🔬 Piping into Portscanner: A Guide
📚 Long/Slow Content: The UL Book of the Month
🛡️ Defensive Security: A Glacier's Pace
🧠 Predicting AGI Attainment by 2025-2028
📜 Timeless Concepts from Ancient Myths
📰 Russian Impersonation Disinformation Exposed
🤖 AI Disinformation: Counteracting Propaganda
👗 Forever 21 Data Breach: Half a Million Impacted
🚗 Automotive Hacking Contest: Pwn2Own Automotive
🍏 Apple's Private Access Tokens: A Sneak Peek
📡 WiFi Vision Surveillance: Tracking Living Beings
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

📢Sponsored by Panoptica.app - Simplify container deployment, monitoring, and security

📢Sponsored by Vanta - Save up to 85% on compliance costs. Join 5,000+ clients cutting 300+ hours of work. 200+ integrations for easy tool security. Vanta.com/unsupervised

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

No. 396 - Elon's Doxxing FSD, ATHI AI Threat Modeling Framework, Cardboard Drones, and GPT Enterprise…

Tue, 29 Aug 2023 16:18:36 +0000

In this episode:

🤔 Thoughts on the Eliezer vs. Hotz AI Safety Debate
🎥 Musk's FSD and Privacy Demo
🔒 Duolingo Data Breach
💥 MOVEit Mass Hack
🔎 Putin Critics' Fate
🚨 Leaseweb Security Breach
🔬 Lazarus's New Malware
🚁 Cardboard Drones in Combat
🕵️ Taiwan Espionage Alert
🔐 CloudNordic Ransomware Attack
📱 Kroll's SIM Swap
👾 GPT-4's API Misuses
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security

📢Sponsored by Vanta.com - scales with your business, helping you enter new markets, land bigger deals, and earn customer loyalty.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

What I'm Doing and How It's Going

Mon, 21 Aug 2023 19:39:44 +0000

How I went from a $350K FTE to $700K+ doing my own thing. This is the first time I've ever shared anything about what I'm doing and how I make money. It covers:

Why I got out of the corporate game
What I'm doing for income streams
How much I make on each
Why I think YOU should consider jumping as well

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 395 — How I Make Money as an Independent, Tesla's Insider Data Breach, Bots Beating CAPTCHAs, and Escaping the Maze…

Mon, 21 Aug 2023 17:46:21 +0000

In this episode:

🎙️ "What I’m Doing And How It’s Going"
🔐 Tesla's Data Breach: An Inside Job
🔍 Example’s Matter: Canary's Domain Name Issue
🚨 NetScaler Instances Hacked: CVE-2023-3519 Exploited
🤖 Bots Outperform Humans at Solving CAPTCHAs
🔒 Infrastructure Security Boost: Israel-US Collaboration
🔎 Microsoft Breach Investigation by DHS's CSRB
🇨🇳 China's Cyber Threat to US Infrastructure
🇯🇵 China's Damaging Cyber Attack on Japan
🕵️‍♂️ Hacker Accounts Exposed: Cybercrime Forum Logins Stolen
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

📢Sponsored by Vanta.com - scales with your business, helping you enter new markets, land bigger deals, and earn customer loyalty.

📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 394 — Vegas Recap, CISA MS Alert, China/US AI Fight, Deceased Kid AI, Following vs. Leading…

Wed, 16 Aug 2023 14:28:50 +0000

In this episode:

🎰 Back from Vegas: Event Recap
🔬 Covid Testing: Importance of Correct Method
🔥 Burnout and Addiction: Shared Root Cause
🪳 Vulnerabilities
🎩 Black Hat Highlights: Tool Releases
👥 Lapsus$ Tactics: Simple Techniques, Big Breaches
🤖 AI Cyber Challenge: DARPA's Call to Arms
🔒 Cybersecurity Standings: US vs China
🌐 Render's Cloudflare Issue: Network Errors
🔍 PromQL Guardrails: Code Scanning with Semgrep
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

No. 393 - Hacker Week, Deleting Google Info, And Creating High-Entropy Content

Thu, 10 Aug 2023 15:13:35 +0000

In this episode:

🎉 HackerCon Week: BSides, Blackhat, DEFCON
🔒 Google's Privacy Update: Control Your Data
🤖 AI Vulnerability: Adversarial Attacks on Chatbots
🛡️ NIST CSF Changes: Are You Ready?
📊 Breach Disclosure Rules: SEC's New Mandate
🔧 Tech Giants' Security Fixes: Apple, Google, Microsoft
📚 Penetration Testing Guide: Understanding Cybersecurity Risks
🤖 Google's AI Pivot: Supercharged Assistant
📦 Musk's Grid Warning: Invest in Energy Transition
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security

📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 392 — Trail of Bits Testing Handbook, Startups Freefall, and Chinese Propaganda Escalation…

Mon, 31 Jul 2023 19:26:11 +0000

In this episode:

💡 Burnout and Addiction: A New Perspective
🚦 UL RSS Live: Stay Updated
🔍 Security News: Testing Handbook, IDOR Vulnerability, Lazarus Hacks
📈 Technology News: Startup Decline, iPhone Dominance, AI Girlfriends
🌍 Human News: Longevity Habits, Unemployment Rates, Math Crisis
💭 Ideas & Analysis: AI Tooling and Reading
🎨 Hacker Art by Rez0
🛠️ Discovery: New Tools and Insights
👥 Managerial Pitfalls: Transitioning Roles
👜 Birkin Bag Economics: The World's Most Expensive Handbag
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security

📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 391 — AI Manipulation Defenders, .MIL Leak, And The NPC Phenomenon

Mon, 24 Jul 2023 16:45:24 +0000

In this episode:

🤖 How AI Will Defenders Protect Us
📈 AI's Role in K-Shaped Recovery
📧 Military Email Leak
🔐 VirusTotal Data Leak
🇨🇳 Great Firewall Expansion
🍏 Apple vs UK Surveillance
🚗 TikTok Theft Tutorials
👁️ AI Surveillance Expansion
🔧 Tech Scam Evolution
🤖 OpenAI's Persistent Context
🍏 Apple's AI Chatbot
📰 AI Journalism
🔭 Tool & Article Discovery
➡️ The Recommendation of the Week
🗣️ The Aphorism of the Week

📢Sponsored by: Moonlock.com - understand how Mac users navigate the increasingly complex security landscape

📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 390 — Voice Scams, FrontView Mirrors, and Idea Molecules

Mon, 17 Jul 2023 15:49:15 +0000

In this episode:

🚨 VoiceFake Scams on the Rise
🔑 FrontView Mirror, 2024 Edition: Trends and Preparations
🎙️ AI and Content Creation: A Discussion on The Phillip Wylie Show
🔒 Chinese Email Hack: A Sophisticated Espionage Effort
🌐 Transatlantic Data Flow: A New EU-US Data Privacy Framework
🔍 Docker Security Flaws: Sensitive Data in Docker Images
🏥 HCA Healthcare Breach: Impacting 11 Million Patients
⚖️ Orca Suing Wiz: A Case of Patent Infringement
🤖 AI-Enabled Cybercrime: The Rise of WormGPT
🐦 Twitter Struggles: Ad Revenue Plummets by Nearly 50%
🎵 TikTok Music Launches: A New Competitor for Apple Music and Spotify

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 389 — The Creativity Friction Coefficient, Lockbit v TSMC, and Detecting Smart Errors

Mon, 10 Jul 2023 19:30:22 +0000

📚 The Real Internet of Things: A Look into the Future of Technology
🔒 Pentera's Unique Approach to Automated Security Validation
🌐 AI and the Reduction of the Creativity Friction Coefficient
🔐 LockBit vs. TSMC: A Tale of Ransomware and Supply Chain Dependencies
☁️ The US's Move to Block Chinese Cloud Usage: A National Security Matter
🔥 Fortinet Fallout: A Critical Bug in FortiGate Firewalls
🇨🇳 New Chinese APT Tradecraft: Volt Typhoon's Stealthy Approach
🔍 Google's Privacy Policy Update: Feeding the AI
🌞 Solar Hacking: The Exposure of Renewable Energy Units
📋 And more…

Sponsor: https://pentera.io

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 388 — Context Reflections, Critical Thinking, China's Decline, and NFC

Mon, 26 Jun 2023 17:14:57 +0000

In this episode:

📚 Using Reflections to Compress LLM Context Data
🎧 My Appearance on the Critical Thinking Podcast
🍏 Apple's Critical Security Updates
⌚ Suspicious Smartwatches Targeting Military Personnel
🔥 Databricks Acquires Generative AI Company
🌐 Cloudflare's Observatory Performance Monitoring Tool
📺 LG Integrates AirPlay 2 and HomeKit into Hotel TVs
💼 Remote Work as a Competitive Advantage for Small Tech Companies
🐝 Beehiiv Raises $12.5 Million 🔍 AI Zoom Magic by Midjourney
🇨🇳 China's Economic Countdown?
🧠 Illusion of Moral Decline
📸 Smartphone Domination in Photography
💡 The Worst Intellectual Trait: NFC
🌍 Climate Change vs. Familial Self-preservation Instincts
🚢 Titanic Belief and Ignoring Danger

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 387 — Modern Parenting and Narcissism?, New Russian Hacking Unit, McKinsey AI Predictions, and more…

Tue, 20 Jun 2023 16:14:57 +0000

In this episode:

🧠 Is modern parenting creating narcissists?
🔒 Top cybersecurity official warns of Chinese hackers
🇷🇺 New Russian hacking unit identified
🚀 NVIDIA's AI red team philosophy
📈 McKinsey says AI will massively boost productivity
💊 MDMA helps white supremacist move away from hate
🔎 Google further soils the bed

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 386 — DBIR 2023, Vision, Smol-Developer, and more…

Mon, 12 Jun 2023 17:21:25 +0000

In this episode:

🔥 Human Immortality Using LLMs
🤖 Generative AI Reshaping Enterprises
🔒 Verizon DBIR 2023 Analysis
🪳 Chrome Zero-Day Patched
💰 Lazarus Atomic Wallet Link
🚀 Tame Your Compliance Beast
🪳 MOVEit Vulnerability Exploitation
📰 North Korean Hackers Impersonate Journalists
📱 Apple ID-sharing
🌐 Apple Vision Announced
🔑 Password Crackdown Success
📈 AI-Driven Stock Surge
📱 iOS17 Features Summary
🔐 Apple Passkey Sharing

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 384 — World AI Coin, Russian Power Attacks, Guidance AI Workflow…

Sat, 03 Jun 2023 17:25:11 +0000

In this episode:

👁️ Worldcoin, OpenAI, and eye scanning: A global ID and currency?
⚡ Grid Threat: Russia-linked malware targets power grids
🧠 Neuralink gets FDA approval for clinical trials
🤖 Bing integrated into ChatGPT for enhanced AI chatbot experience
🚗 Tesla Model Y becomes world's best-selling car
🌈 LGBTQ searches soar 1,300% since 2004

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 382 — AI Attack Surface Map, Digital Assistants, Dragos Nope, Rogue AI Girlfriend…

Tue, 16 May 2023 18:34:22 +0000

In this episode:

🛡️ Support DEFCON's AI Village event
🧠 Dive into AI attack surfaces
🤖 Uncover digital assistants' future
🔒 Investigate Dragos Incident & Snake takedown
🎵 Experience Google's MusicLM magic
🚀 Secure the cloud with a free guide
👩‍💻 Witness an AI girlfriend gone rogue

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Right Amount of Trauma

Thu, 11 May 2023 14:37:38 +0000

In this standalone episode I read my essay titled "The Right Amount of Trauma".

https://danielmiessler.com/blog/the-right-amount-of-trauma/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO: 381 — Reviving Conference Strategies, Nurturing High-Performers, AI Business Takeover, Cyber Threats, and Diversifying Production 🧠🏢🦈📱🚗

Tue, 09 May 2023 15:56:53 +0000

🧠 The Right Amount of Trauma: Nurturing high-performers
🏢 Universal Business Components: AI's business takeover
🦈 North Korean ReconShark: New global cyber threat
📱 Apple's Brazil production: Diversifying from China
🚗 NYPD's AirTag advice: Protect your car
💵 US dollar losing reserve currency status
🤖 IBM's hiring pause: AI and automation's impact
🌐 World Economic Forum: Job disruption predictions
📺 YouTube views: Half on TV
📞 GenZ's dumbphone trend: Reducing distractions
🌿 A Post AI Future for Humans: Local community model
💡 The Self-checkout Tipping Anti-Pattern: Dark pattern or generosity?

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 380 — LLM-Mind-Reading, Automated War, Rusty Sudo, Eliezer Bitterness Theory...

Tue, 02 May 2023 18:01:58 +0000

📚 Pre and Post-LLM Software: Adapt or be replaced
🎙️ RSnake Show Appearance: AI-focused conversation
🔐 RSA Live Podcast: Industry insights and advice
🔮 Palantir AI: Automated war and terror
🍏 New Apple Update Mechanism: Rapid Security Response
🧠 LLM Mind-reading: Extracting text from brain activity
🚫 Chatbanning: Samsung's response to data leak
🔧 VMware & Zyxel Patches: Addressing vulnerabilities
🔒 Google Security AI: Cloud Security AI Workbench
🦀 Sudo Rust: Safer sudo and su in Rust
🎥 Palo Alto Cameras: License plate tracking
🏃‍♂️ Apple Coach: AI-powered health app
🏦 First Republic Falls: FDIC intervention
💡 Eliezer Bitterness Theory: AI doomsday predictions
🤖🔥 Prompting Superpower: Advanced AI prompting techniques
🛠️ ShadowClone & FigmaChain: Useful tools
🐍 Recommendation: Learn Python and Langchain
💬 Aphorism: Carl Jung on creativity

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 378 — AI Resilience Scale, Moloch The Demon, Ukraine Data Leak, and more...

Mon, 17 Apr 2023 09:11:00 +0000

NO. 378—AI Resilience Scale, Moloch The Demon, Ukraine Data Leak, and more...

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 376 | AI transforms security, existential risk, and how to stay in front…

Mon, 03 Apr 2023 21:25:35 +0000

NO. 376 | AI transforms security, existential risk, and how to stay in front…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 375 — 6 Post-GPT Phases, Github's Private Key, New Assistant Interfaces

Mon, 27 Mar 2023 15:57:14 +0000

6 Post-GPT Phases, Github's Private Key, New Assistant Interfaces

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 374 — AI Response Shaping, SpaceX Blueprints, GPT-4 Innovation Explosion…

Tue, 21 Mar 2023 16:53:09 +0000

NO. 374 — AI Response Shaping, SpaceX Blueprints, GPT-4 Innovation Explosion…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 373 — SPQA Architecture, LLaMA on M1 Mac, Loved Ones Voice Scams…

Mon, 13 Mar 2023 17:00:32 +0000

NO. 373 — SPQA Architecture, LLaMA on M1 Mac, Loved Ones Voice Scams…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 372 — LastPass Employee Hack, State AI Propaganda, Crowdstrike Report Analysis…

Tue, 07 Mar 2023 01:35:07 +0000

NO. 372 — LastPass Employee Hack, State AI Propaganda, Crowdstrike Report Analysis…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 371 | Covid Lab Leak, Military Server Exposed, OAI Foundry…

Mon, 27 Feb 2023 21:12:29 +0000

NO. 371 | Covid Lab Leak, Military Server Exposed, OAI Foundry…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 370 | GoDaddy Hack, EU Chinese APTs, Hacking with ChatGPT

Tue, 21 Feb 2023 23:06:30 +0000

NO. 370 | GoDaddy Hack, EU Chinese APTs, Hacking with ChatGPT

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 369 | Reddit Hack, Deepfake Scams, Embracing Change…

Mon, 13 Feb 2023 20:35:39 +0000

NO. 369 | Reddit Hack, Deepfake Scams, Embracing Change…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 368 | China Balloons, CustomGPT, 90s++…

Mon, 06 Feb 2023 22:59:18 +0000

NO. 368 | China Balloons, CustomGPT, 90s++…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 367 | Hive Ransom, Anti-Google, Software 2.0…

Mon, 30 Jan 2023 16:05:25 +0000

NO. 367 | Hive Ransom, Anti-Google, Software 2.0…

The FBI infiltrated the HIVE ransomware group, stopping over $130 million in ransomware attacks
Riot had the League of Legends source code stolen by a ransomware group, but they're refusing to pay the $10 million ransom
ODIN Intelligence got hacked, resulting in the loss of police raid plans, facial recognition data, and surveillance information
The FBI says North Korea was behind the $100 million Horizon Bridge crypto hack
And much more!

Sponsored by PlexTrac: Streamline your security testing reporting so you can get back to the work that matters! https://plextrac.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 366 | T-Breach, Siri++, Conception Ages…

Mon, 23 Jan 2023 16:01:15 +0000

NO. 366 | T-Breach, Siri++, Conception Ages…

TOPICS INCLUDE:

-T-Mobile has had another security breach, this one affecting at least 37 million accounts
-Canary Cards now available to use as credit cards
-Hook Malware allows attackers to fully control Android phones
-Attackers are now spreading malware through Microsoft OneNote attachments
-Many attackers are migrating from Cobalt Strike to the more defender-focused Silver C2 framework
-Git patched two critical RCEs

…and many more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 365 | China's Decline, MicrosoftAI, Creativity Ratio…

Tue, 17 Jan 2023 16:45:56 +0000

China's Decline, MicrosoftAI, Creativity Ratio…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 364 | Reality Headset, BingPT, AI+Cyber

Mon, 09 Jan 2023 16:00:11 +0000

NO. 364 | Reality Headset, BingPT, AI+Cyber

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 363 | NEWS, ANALYSIS, and DISCOVERY SERIES

Tue, 03 Jan 2023 15:13:29 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 362 | Dependency Scanner, Citrix Attacks, AI Analysis…

Mon, 19 Dec 2022 18:28:08 +0000

Dependency Scanner, Citrix Attacks, AI Analysis…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 361 | GPT++, Apple Security, CISA Cuba…

Mon, 12 Dec 2022 17:03:43 +0000

GPT++, Apple Security, CISA Cuba…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 360 | NEWS, ANALYSIS & DISCOVERY SERIES

Mon, 05 Dec 2022 16:46:46 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Erkang Zheng of JupiterOne | SPONSORED INTERVIEW SERIES

Sat, 03 Dec 2022 05:09:19 +0000

In this standalone episode we’re doing a sponsored interview with Erkang Zheng of Jupiter One.

So JupiterOne is a special company to me. I just built a vuln management program at Robinhood based around them, and I believe so much in their vision that I’m looking to actually become an advisor. I mention this because when I fanboy for something, like Apple, or whoever, I want you to know that I’m fanboying and/or have a relationship with them. Or that I want to.

The interview here talks mostly about concepts, however, and not so much specific features. But I just wanted to mention my orientation to the company prior to starting.

I’m speaking with Erkang Zheng who is the founder and CEO of the company, and as you can hear we have a similar take on many of the problems currently in security.

So with that, here’s Erkang Zheng.

—

Start a JupiterOne Account for Free

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 359 | THE NEWS, ANALYSIS & DISCOVERY SERIES

Mon, 28 Nov 2022 17:01:42 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Scott Kuffer of Nucleus Security | SPONSORED INTERVIEW SERIES

Mon, 28 Nov 2022 04:35:05 +0000

In this standalone episode we’re doing a sponsored interview with Scott Kuffer, co-founder and COO of Nucleus Security.

I was already excited by this vendor just based on the research I did to allow them to be a sponsor, but the conversation with them really made me think they’re approaching the vulnerability management problem the right way. Namely, by tackling a lot of the non-technical problems using technical solutions rather than obsessing over vuln prioritization.

If you are in the VM space or are about to be in it, you will love this conversation.

And with that, here’s Scott Kuffer with Nucleus Security.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 358 | NEWS, ANALYSIS, & DISCOVERY SERIES

Tue, 22 Nov 2022 08:47:53 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 357 | NEWS, ANALYSIS, & DISCOVERY SERIES

Mon, 14 Nov 2022 16:30:53 +0000

NSA Languages, GPT-4 Hype, Chinese AirDrop…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 356 | NEWS, ANALYSIS & DISCOVERY SERIES

Mon, 07 Nov 2022 18:34:15 +0000

Sponsored by JupiterOne: jupiterone.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 355 | NEWS & ANALYSIS SERIES

Mon, 31 Oct 2022 07:36:05 +0000

Critical TLS, Liz Russia, AI Sweater…

Sponsor: Keeper Security | Protect employee passwords in minutes with Keeper — the award-winning password manager that is secure, easy to set up, and easy to use. Keeper works out-of-the-box with identity, MFA, and SIEM solutions including Okta, Azure AD, Ping Identity, G Suite, YubiKey and many others…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why Everyone Needs a Blog | THE IDEA SERIES

Thu, 27 Oct 2022 04:04:30 +0000

People used to be defined by where they work, and now they’re defined by their knowledge, capabilities, and opinions.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Creativity Comes From Idleness | THE IDEA SERIES

Wed, 26 Oct 2022 21:09:24 +0000

A few years ago I figured out why we’re so creative in the shower…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

AI Art Will Push the Top 1% to Human Artists | THE IDEA SERIES

Tue, 25 Oct 2022 04:12:57 +0000

https://danielmiessler.com/blog/ai-art-push-1-percent-human-artists/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 354 | THE NEWS & ANALYSIS SERIES

Mon, 24 Oct 2022 14:09:31 +0000

China Controls, TikTok Tracking, Infra Sabotage…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Humiliation is Deadly | THE IDEA SERIES

Fri, 21 Oct 2022 22:36:49 +0000

Exploring a status game model for understanding negative behavior.

https://danielmiessler.com/blog/humiliation-is-deadly/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

NO. 353 | THE NEWS & ANALYSIS SERIES

Mon, 17 Oct 2022 15:41:00 +0000

🗞️ Caffeine Phishing, Cyber Labeling, Kamikaze Drones…

Sponsor: Panther Security https://panther.com/ul22

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 352

Wed, 12 Oct 2022 01:53:08 +0000

CISA Assets, Contractor Hack, China CVEs…

Sponsored by: Jupiter One @ jupiterone.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 351

Mon, 03 Oct 2022 15:22:55 +0000

Cloudflare vs. CAPTCHA, Exchange 0-Day, NSA Leaker

Sponsor: Zerofox: Download the External Cybersecurity Guide

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 350

Mon, 26 Sep 2022 16:59:13 +0000

Infowar Audit, Zoom Reflections, SF Cameras

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis: NO. 349

Tue, 20 Sep 2022 15:31:35 +0000

Uber Hacked, GTA Leak, Goodbyes

Listen to JJAgha's comments on Relentless Iterations and What He Expects from a Modern SIEM: https://panther.com/resources/podcasts/compass-ciso-jj-agha-on-relentless-iterations-and-what-he-expects-from-a-modern-siem/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 348 | Spearmishing, Patreon Security, and Triple-Threat Ransomware

Mon, 12 Sep 2022 15:42:49 +0000

Spearmishing, Patreon Security, and Triple-Threat Ransomware

Sponsored by JupiterOne: https://www.jupiterone.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Metagaming: An Interview with Andrew Ringlein

Wed, 07 Sep 2022 16:38:05 +0000

In today’s standalone episode I’m going to talk with Andrew Ringlein about some interesting new gaming ideas I’ve not seen anywhere else. He's releasing them in a new game called Rifters, and we chat through the concepts themselves and how they manifest in his new release.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 347

Tue, 06 Sep 2022 14:27:32 +0000

TikTok Hack, Cloudflare Kiwi, Google OSS Bounty

Sponsored by: Keeper Security http://keepersecurity.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 346

Mon, 29 Aug 2022 16:02:34 +0000

🗞️ Unsupervised Learning NO. 346 | Twitter Whistle, LastPass Plex, Satellite Phones

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 345

Mon, 22 Aug 2022 14:46:25 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 344

Wed, 17 Aug 2022 16:59:36 +0000

Blackhat/DEFCON, TikTok Lockdown, MailChimp Breach…

Sponsor: JupiterOne https://www.jupiterone.com/unsupervisedlearning

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 343

Mon, 08 Aug 2022 14:36:24 +0000

UL NO. 343 | Emergency Hack, Chinese Cobalt Strike, Solana Drainage

Sponsor: ZeroFox https://www.get.zerofox.com/ti-guide

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 342

Tue, 02 Aug 2022 13:55:00 +0000

NK Hackers, TikTok Influence, Amazon Police…

Sponsor: Hyperproof. Security, Compliance, and Risk Management leaders need to be able to articulately advocate for their programs to gain collaboration from their peers, support from their leadership, as well as budget and headcount.

In this Hyperproof guide, you'll see how to gain active and passive support for your various security initiatives, and you'll get tips and talking points you can use in executive conversations to gain support and drive urgency.

info.hyperproof.io/getting-to-yes-ebook

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 341

Mon, 25 Jul 2022 14:52:03 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 340 | SF Surveillance, APTs vs. Journalists, TikTok Changes…

Mon, 18 Jul 2022 09:30:53 +0000

SF Surveillance, APTs vs. Journalists, TikTok Changes…

News & Analysis | NO. 339

Mon, 11 Jul 2022 14:41:22 +0000

Lockdown Mode, Paid Pentagon Bounty, China's IP Threat…

Sponsors: Cerby.com, CrowdSec.net

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 338 | Deepfake Interviews, China Leak, Hacker Services…

Tue, 05 Jul 2022 16:13:37 +0000

This week's sponsor:

Storyblok: Upgrade the Security of Your CMS

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 337

Mon, 27 Jun 2022 15:56:30 +0000

In this episode we talk about China Surveillance, Cyber Bills, and Recon Tools…

The episode was sponsored by ZeroFox and CrowdSec.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 336

Mon, 20 Jun 2022 19:51:08 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 335

Mon, 13 Jun 2022 17:02:50 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 333

Tue, 31 May 2022 15:28:18 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 331

Mon, 16 May 2022 21:09:28 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 330

Mon, 09 May 2022 16:12:25 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why I'm Not Worried About Elon Musk Buying Twitter

Mon, 02 May 2022 15:08:18 +0000

A short essay on why I'm actually optimistic about Elon buying Twitter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis: NO. 329

Mon, 02 May 2022 14:59:59 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Paul Zimski from Automox

Mon, 02 May 2022 14:22:36 +0000

[ SPONSORED INTERVIEW ] In this standalone episode I'm speaking with Paul Zimski, VP of Product Strategy at Automox. In this series I have a short conversation with entrepreneurs and companies that are building interesting stuff. The conversation takes the form of a first-time business lunch, where I ask what the company does, what problems they're trying to solve, and how they're different from other players in the space.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 328

Mon, 25 Apr 2022 16:30:57 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 327

Mon, 18 Apr 2022 16:22:06 +0000

https://danielmiessler.com/podcast/news-analysis-no-327/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 326

Mon, 11 Apr 2022 15:09:02 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-326/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 325

Mon, 04 Apr 2022 15:05:53 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-325/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 324

Mon, 28 Mar 2022 15:54:20 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-324/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 323

Mon, 21 Mar 2022 15:46:54 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-323/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 322

Mon, 14 Mar 2022 16:32:36 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-322/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 321

Wed, 09 Mar 2022 09:34:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-321/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Andrew Ringlein's 5 Crypto Accelerators in Gaming and Business

Sun, 06 Mar 2022 20:00:46 +0000

This standalone episode is a conversation with my friend Andrew Ringlein on the topic of how crypto is best thought of as a set of accelerators for business, with gaming being the initial flagship.

We talk about Andrew's 5 principles that accelerate gaming companies adopting crypto first, and then look at how those same concepts will soon be adopted by all types of businesses.

We also discuss legitimate doubts around crypto in general, and discuss why we think the concepts are more durable (and inevitable) than the technology.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 320

Mon, 28 Feb 2022 16:03:20 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-320/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 319

Tue, 22 Feb 2022 15:57:37 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-319/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 318

Mon, 14 Feb 2022 15:45:14 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-318/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 317

Mon, 07 Feb 2022 20:16:53 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-317/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 316

Mon, 31 Jan 2022 15:50:53 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-316/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | NO. 315

Mon, 24 Jan 2022 15:59:07 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-315/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Your Value Comes from Your Output

Tue, 18 Jan 2022 17:24:29 +0000

A short essay on how there are no shortcuts to getting a seat at the table. The secret is no secret at all: It's hard work on a hard problem…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis: NO. 314

Tue, 18 Jan 2022 17:05:10 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-314/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis: No. 313

Mon, 10 Jan 2022 15:02:55 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-313/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 312

Mon, 03 Jan 2022 16:12:08 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-312/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Short Episode Before the Holidays

Mon, 20 Dec 2021 15:59:29 +0000

A quick update on log4j and an announcement on the next two weeks during the holidays.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Vigilant

Mon, 13 Dec 2021 16:40:00 +0000

A short essay on how we should pay and otherwise reward the thankless heroes who maintain our core internet code.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 311

Mon, 13 Dec 2021 15:34:10 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-311/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 310

Mon, 06 Dec 2021 16:04:01 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-310/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 309

Mon, 29 Nov 2021 16:13:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-309/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 308

Mon, 22 Nov 2021 16:17:39 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-308/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Degrees and Credentials in InfoSec

Mon, 15 Nov 2021 14:35:00 +0000

How the needs-college and don't-need-college types are both right about the importance of education for getting into InfoSec.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 307

Mon, 15 Nov 2021 14:24:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-307/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 306

Mon, 08 Nov 2021 05:46:14 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-306/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 305

Mon, 01 Nov 2021 15:50:27 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-305/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 304

Mon, 25 Oct 2021 06:05:50 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-304/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 303

Mon, 18 Oct 2021 06:33:46 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-303/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 302

Mon, 11 Oct 2021 08:58:09 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-302/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Weakness and Evil

Fri, 08 Oct 2021 03:55:14 +0000

An essay about the difference between weakness and evil, and how the distinction is often theoretical in harmful relationships.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Vendor Security 2.0

Tue, 05 Oct 2021 06:04:00 +0000

What we're doing in Vendor Security that isn't working, and what to do instead.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 301

Mon, 04 Oct 2021 06:33:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-301/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 300

Mon, 27 Sep 2021 15:47:56 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-284/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 299

Mon, 20 Sep 2021 08:15:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-299/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 298

Mon, 13 Sep 2021 06:02:30 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-298/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 297

Tue, 07 Sep 2021 06:35:03 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-297/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 296

Mon, 30 Aug 2021 05:55:07 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-296/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Sponsored Lunch Conversation with Philippe Humeau of CrowdSec

Wed, 25 Aug 2021 10:25:22 +0000

This is a series where we emulate a first-time business lunch with a vendor/entrepreneur, where you can hear the pitch and ask all your basic questions about the offering.

What you hear is exactly the type of conversation I would have with someone in real life during a 30 minute lunch chat where I’m hearing about the solution for the first time.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 295

Mon, 23 Aug 2021 15:27:43 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-295/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 294

Mon, 16 Aug 2021 16:47:53 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-294/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 293

Mon, 09 Aug 2021 08:15:54 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-293/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Strange World of "Good Enough" Fencing

Thu, 05 Aug 2021 09:31:00 +0000

How bad does a fence have to be before it stops being effective?

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 292

Mon, 02 Aug 2021 07:54:20 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-292/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Sustainable Content Creation

Tue, 27 Jul 2021 03:23:06 +0000

How to create consistently without burning out.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Presenting Vendor Paradox

Mon, 26 Jul 2021 19:12:00 +0000

Why conferences are full of speakers who represent companies.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 291

Mon, 26 Jul 2021 14:53:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-291/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 290

Mon, 19 Jul 2021 16:03:13 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-290/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 289

Mon, 12 Jul 2021 15:02:23 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-289/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 288

Tue, 06 Jul 2021 13:36:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-288/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 287

Thu, 01 Jul 2021 16:45:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-287/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 286

Mon, 21 Jun 2021 15:33:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-286/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 285

Mon, 14 Jun 2021 14:02:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-285/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 284

Mon, 07 Jun 2021 15:01:00 +0000

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Web Version: https://danielmiessler.com/podcast/news-analysis-no-284/

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 283

Tue, 01 Jun 2021 08:34:12 +0000

Conti Ransomware Attacks Against US Targets, GPT-3 Disinformation Sways Opinion, SolarWinds Group Has New NativeZone Tool, Open Source HIBP, CASM, Autonomous Drone Attack, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 282

Mon, 24 May 2021 06:12:00 +0000

Pentagon Civilians and Contractors, CISA SolarWinds, CNA, DarkSide Money, China RSA, Senate Science Bill, Google RSS, Technology News, Human News, Notes, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 281

Tue, 18 May 2021 05:48:15 +0000

Darkside Colonial, Cyber Executive Order, DBIR 2021, WiFi Vulns, Microsoft AI Security, OpenSSH Hardware Keys, Insurer AXA Ransomed, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 280

Mon, 10 May 2021 08:55:00 +0000

Oil Pipeline Ransomware, NSA OT Warning, Deepfake Uptick, Insurer Stops Ransomware Payouts, Google Automatic 2FA, AI-powered Cameras in Banks, Technology News, Content, Ideas & Analysis, Notes, Discovery, Recommendations, and the Aphorism of the Week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 279

Mon, 03 May 2021 08:15:00 +0000

FBI and CISA release SVR (Cozy Bear) TTPs, CISA releases an RTOS advisory around ICS, a task force has a plan for the Biden administration to counter ransomware, there's a vulnerability in the ipaddress library in Python, Krebs says Experian leaked credit scores, Censys found 1.93 million online databases, Technology News, Content, Ideas & Analysis, Notes, Discovery, Recommendations, and the Aphorism of the Week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 278

Mon, 26 Apr 2021 15:13:00 +0000

New Logo, CISA Pulse Secure VPN Orders, Ransomware Gangs + Stock Shorter Scams, Japanese NASA Hacked by China, Dan Kaminsky, LinkedIn Brittons and China/Russia, Codecov Fallout, Technology News, Content, Ideas & Analysis, Notes, Discovery, Recommendations, and the Aphorism of the Week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 277

Mon, 19 Apr 2021 13:39:00 +0000

CISA FBI and NSA Release Five APT29 Targeted Vulnerabilities, FBI Benign Hacking, The US Sanctioned Russia and Expelled Diplomats, Google's Cookie Replacement Not Going Well, NERC Says 1/4 Customers Downloaded Solarwinds, Technology News, Human News, Content Curation & Analysis, Discovery, Recommendation, and the Aphorism of the Week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 276

Mon, 12 Apr 2021 07:45:00 +0000

Social Media Scraping Outbreak, Microsoft AI Security Tool, FBI/CISA FortiOS Warning, Zoom Vuln at Pwn2Own, AWS Bombing, 485% Ransomware Increase, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 275

Mon, 05 Apr 2021 08:32:31 +0000

University Accellion Breaches, 533 million Facebook Users' Data, Solarwinds Hackers Got Top DHS Emails, Github Secrets Scanning, Ubiquiti's Breach, Seoul's IoT Towers, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Interview: Amir Majidimehr, Audiophile Industry Disruptor

Fri, 02 Apr 2021 04:48:48 +0000

In this standalone episode I’m speaking with Amir Majidimehr.

Amir is an audiophile, but he has a unique approach to the hobby that’s literally disrupting the industry.

He’s basically introduced measurement, and what he calls Objectivism, into this very sensitive audiophile world that prizes itself on everything being a matter of preference, or up to the listener. Amir calls these types the Subjectivists.

So what Amir does is use his decades of experience, and his professional training, to actual test this equipment—much of which costs tens of thousands of dollars—to find out if their outrageous claims have any merit.

It’s truly refreshing to see in the hobby, and I’m excited to talk to him.

Amir has a degree in electrical engineering, he used to run the digital media group at Microsoft in the 1980s, and he’s the founder of Audio Science Forums.

And here’s our conversation…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 274

Mon, 29 Mar 2021 09:25:00 +0000

Securing the Grid, PHP hacked, Russia/China Wargames, China v. Tesla, Top 10 American Threats, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Consumer Authentication Strength Maturity Model (CASMM)

Thu, 25 Mar 2021 08:38:35 +0000

A maturity model for seeing where a user's internet hygiene currently is, and how to improve it.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 273

Mon, 22 Mar 2021 07:00:41 +0000

US Intelligence Says Putin and Russia Tampered in 2020 Election, Finland Says APT31 Hacked Parliament, Google Releases Chrome Data Gathering Report, Ulysses Tracks Cars Worldwide, Twitter Steganography, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 272

Tue, 16 Mar 2021 08:30:00 +0000

Russian/Chinese Deepfakes, Hafnium Fallout, Chinese AI and Cyber, Microsoft Flack, Patch Tuesday Updates, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 271

Mon, 08 Mar 2021 11:58:36 +0000

Hafnium Fallout and Response, Software Supply Chain Naming Attacks, SITA Airline Attack, REvil, China vs. India in Cyberspace, Russian Cybercrime Forum Hacks, Russians Underming American Vaccines, US Not Ready For AI Competition, CPU Side-channel Attacks, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 270

Mon, 01 Mar 2021 07:36:00 +0000

SolarWinds Malware Tool, SolarWinds Blaming the Intern, Amazon Whistleblowers, Google Linux Devs, NYC Black Mirror Dog, Portswigger Top 10, API Security Top 10, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis: No. 269

Mon, 22 Feb 2021 10:31:11 +0000

US charges North Korean hackers, Egregor users arrested, Let’s Encrypt Upgraded, Very Few Vulnerabilities Are Dangerous, North Korea Pursued COVID Vaccine Data, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 268

Mon, 15 Feb 2021 08:48:00 +0000

Florida water hack, ESET Reports 768% More UDP Attacks, 223 Vulns Being Used in Ransomware, Microsoft Will Report State Hack Attempts, Cops Using Copyright Weapons, TikTok Russian Battles, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 267

Mon, 08 Feb 2021 09:05:27 +0000

Supercookies, Mobile App Tracking, 80% PII, Moody's Cyber Rates, Facial Recognition California, Chinese Men Feminine, Google Bounty Payouts, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 266

Mon, 01 Feb 2021 07:52:42 +0000

China has 80% of US Adult PII, Chris DeRusha now US CISO, New Version of NAT Slipstreaming, Exposing.AI Looks For Your Face, Birdwatch Misinformation, Pentagon Vaccination Program, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 265

Mon, 25 Jan 2021 05:17:41 +0000

FireEye Solar Details, Cyberinsurace Supporting Crime, FBI Tracking Cell Pings, RDP DDoS Amplification, Palantir Stock, Fake Job Offers, DDoS Ransomware, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

What They Don’t Tell You About Being a Bounty Hunter or Content Creator

Fri, 22 Jan 2021 07:10:00 +0000

How the dopamine hits of bugs and praise can become a trap.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 264

Tue, 19 Jan 2021 09:52:00 +0000

New Member Podcast Feed, NSA and DNS, GSA kills Drones, Parler in Russia, White House AI, SAP, Ubiquity, OpenWRT, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 263

Thu, 14 Jan 2021 06:19:19 +0000

Congressional System Integrity, FBI Egregor, Parler Dox, Clearview Spike, JetBrains Speculation, Chinese Finacial APTs, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 259

Thu, 14 Jan 2021 06:16:04 +0000

Recon/Attack Surface Management Analysis, The Pentester's BluePrint, Amazon's 10,000 Small Bets, Sunburst APT29 Hack, Data Dump on the CCP, Ransomware Makes Half of All Major Incidents, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 257

Thu, 14 Jan 2021 06:10:00 +0000

Amazon Curate (I Wish), Tesla Hack, IoT Security Bill, Iran Assassination, Robot Dogs, Drupal, TikTok Cartels, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 255

Thu, 14 Jan 2021 05:48:00 +0000

Tim Berners-Lee's Solid Idea, Police Looking Through Ring Cameras, Feinstein's Chinese Spy, Trump Banned 31 Chinese Companies, Microsoft on MFA, US Trolling Russian APT, Zoom Thanksgiving, Facbook Copying Snap, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis: No. 253

Tue, 03 Nov 2020 09:51:16 +0000

US Election Security, How to Write Well, The Future of Sensors and Algorithms, I Like Pre-recorded Conference Talks, Substack is Great For Newsletters BUT, Zoom End-to-End Encryption, Chinese Espionage Database, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 251

Mon, 19 Oct 2020 07:28:46 +0000

The Content Value Hierarchy, Chinese Suicide Drones, 900,000 Unemployment Claims, Law Enforcement Suspending Leave, Tricking Teslas, Sweden Increasing Military Spending, Atlanta Drone Arrest, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, the Weekly Aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Operation Fortify: A US Ransomware Plan

Thu, 15 Oct 2020 08:18:46 +0000

A simple yet comprehensive plan for how the United States could address its devastating ransomware problem.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Relationship Between Hardship, Struggle, and Meaning

Thu, 15 Oct 2020 07:57:45 +0000

My essay on how struggle could be necessary for meaning, and how this could be the underlying cause of much of America's mental health problem.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 250

Mon, 12 Oct 2020 07:08:00 +0000

CrowdSec, Nudge, Trickbot Trickery, CISA Ransomware Guide, Twitter and Facebook anti-Disinformation, QAnon Takedowns, Putin Turning on Trump, Azure Vulnerabilities, PC shipments up, Virtual Sales Call AI, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 249

Mon, 05 Oct 2020 08:22:45 +0000

Operation Fortify, Cyber Pearl Harbor, Github Code Scanning, E-6B Flights, Blackbaud++, Grinder Password Reset, Cloudflare API Security, QNAP Drama, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 248

Mon, 28 Sep 2020 08:52:32 +0000

Everyday Threat Modeling, Why I Like TikTok So Much, Windows XP Leak, SSH 8.4, Renée DiResta's Latest, Student Visas Changes, Cisco IOS Vulns, QAonon Gamification, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why Creators Should Move to Direct Support Monetization

Thu, 24 Sep 2020 05:35:12 +0000

My essay about why I think creators—especially in InfoSec—should be setting up their own domains and moving to a direct model for monetization.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

No, Changing Your SSH Port Isn't Security by Obscurity

Wed, 23 Sep 2020 07:55:42 +0000

My latest essay on the timeless debate on SSH ports and Security by Obscurity. I talk about why changing your port is not usually obscurity, and give what I believe to be an airtight method of how you can tell the difference between regular security and Security by Obscurity.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 247

Mon, 21 Sep 2020 08:48:00 +0000

SSH Port Obscurity, The TikTok Deal, Ransomware Death, Chinese Espionage CRM, Amazon Bribery, Instant Domain Admin, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Book Summary | Naked Statistics, by Charles Wheelen

Wed, 16 Sep 2020 08:28:00 +0000

In this episode, I review the book Naked Statistics, by Charles Wheelen. I cover:

My one-sentence summary of the text
The table of contents, which is super helpful to see the structure of the argument
My capture of the main points
My takeaways, questions, and ideas that came from reading it
My final summarization
And then my rating of the book and whether I recommend you read the full text

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 246

Mon, 14 Sep 2020 06:08:00 +0000

Gullibility vs. Disinformation, Russia, Iran, and China Attacking US Elections, Oracle TikTok, US Revokes Chinese Visas, China vs. US Cyber, Patch Tuesday, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Book Summary | Atomic Habits, by James Clear

Thu, 10 Sep 2020 05:34:00 +0000

In this episode, I review the book Atomic Habits, by James Clear. I cover:

My one-sentence summary of the text
The table of contents, which is super helpful to see the structure of the argument
My capture of the main points
My takeaways, questions, and ideas that came from reading it
My final summarization
And then my rating of the book and whether I recommend you read the full text

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 245

Tue, 08 Sep 2020 06:19:00 +0000

Anxiety and Freedom, Microsoft Deepfake Detection, Facebook Disinformation, Replacing Huawei, India China Apps, JEDI Microsoft, A Text Scam, Cisco Jabber Flaw, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 244

Mon, 31 Aug 2020 16:19:00 +0000

Russian attempted hack of Tesla, New Zealand SE DDoS, Drone Assassinations, China Unified Social Credit System, Cisco Sabotage, Stolen Gaming Accounts, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 243

Mon, 24 Aug 2020 08:25:00 +0000

InfoSec Creator Monetization, Initiating Contact with a Mentor, The Dark Side of Bounty/Creator Life, Facebook Election Threat Scenarios, Uber CISO Arrested, Spy HR Review Goes Bad, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 242

Mon, 17 Aug 2020 07:34:00 +0000

Clearview AI ICE, NSA/FBI Fancy Bear Malware, Indian Health Card, Trump TikTok 90 Days, Startups Dying, Uber/Lyft vs. Courts, Android Earthquakes, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 241

Mon, 10 Aug 2020 08:51:00 +0000

State Department Russian Media, Clean Network Plan, Cap One Fine, NSA Tracking Warning, YouTube Account Ban, Amazon Malls, No More Pixel 4, Audio RPGs, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

News & Analysis | No. 240

Tue, 04 Aug 2020 06:28:00 +0000

FBI Twitter Suspects, Recorded Future China Vatican, TikTok Microsoft Sep 15th, Amazon and Shopify Thriving, Forrester Ad Spending, Samsung Out of China, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 239

Mon, 27 Jul 2020 18:02:21 +0000

Pentagon Information Warfare, Fancy GRU Attacks, 2 Chinese COVID Hackers, Chief Software Officer, Space Force DEVOPS, FBI Chinese Tax Software, DJI Drone Vulns, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 238

Tue, 21 Jul 2020 04:38:51 +0000

Twitter's Breach, The US Attacked IRA, Bloomberg FBI Sabre, Iran Keeps Getting Hacked, Russia's Cozy Bear, Cloudflare Outage, UIPath Automation, Verizon Uses Google AI to Automate Customer Service, Gamers Are Spending More, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Our Lighted Path to Totalitarianism

Thu, 16 Jul 2020 08:13:29 +0000

An essay on how five trends seem to naturally guide civilizations towards Totalitarianism as they progress, and what we can do to avoid that outcome.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 237

Mon, 13 Jul 2020 17:32:00 +0000

Americans in China, TikTok Banning, Chinese Critics, BlueLeaks, Router Security, COVID Accelerating Trends, Twitter Subscriptions?, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Searching for the Ultimate Obstacle to Creativity

Tue, 07 Jul 2020 08:00:47 +0000

This essay looks at Training as Avoidance, The Toolbox Fallacy, and procrastination, and explores a potential root cause that underpins them all to inhibit creativity.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 236

Mon, 06 Jul 2020 08:02:35 +0000

Encrochat breach, F5 Big Problem, DHS Social Election Query, WastedLocker, India Bans Chinese Apps, Florida DNA Privacy, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 235

Mon, 29 Jun 2020 03:20:42 +0000

Chinese diplomats stealing secrets, COVID flying risk, RT interviewing US cops, Army Ignite future predictors, China launches its GPS network, Russians paid bounties to kill US troops, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 234

Sun, 21 Jun 2020 21:58:17 +0000

Ripple20 IoT Vulns, Homeland Security Surveillance, US Cyber Budget, Adobe EOL, AWS DDoS, Bellingcat Poison Investigation, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Dark Web Has Nothing on Data Brokers

Mon, 15 Jun 2020 17:08:33 +0000

How so-called legitimate Data Brokers are a far worse threat to peoples' privacy than cyber-criminals operating on the Dark Web.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 233

Mon, 15 Jun 2020 07:20:45 +0000

SMBleed, Republicans. vs. China, Hawkey Surveillance, COVID in August 2019, IBM Facial PR, Palantir NHS, Blockchain Misinformation, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Problem With Extracted Versions of Things

Fri, 12 Jun 2020 10:33:49 +0000

A short essay on how we might get more pleasure from things that take longer to process and attain, and what we can do with that information.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 232

Mon, 08 Jun 2020 08:12:34 +0000

COVID-19 Trends, New Zoom Trouble, Facebook Blocking, Chrome Incognito Suit, Retail Rents, Nuclear Contractor Hack, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 231

Mon, 01 Jun 2020 06:00:24 +0000

US Protests & Unrest, Trump Goes Into the Bunker, NSA Warns on Exim, Octopus Scanner, Stanford's SIO Virality Project, Windows 10 Update, SHA-1 Deprecated in SSH, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 230

Mon, 25 May 2020 21:50:07 +0000

Twitter Bots, Face Recognition Headsets, Chrome Bug Memories, Virtual Currency, White House OPSEC, Realtime Language Translation, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Analysis of the 2020 Verizon Data Breach Report

Wed, 20 May 2020 04:30:47 +0000

In this episode, Daniel takes a look at the 2020 Verizon Data Breach Investigations Report. He looks at the key findings and talks about what they might mean to us going forward.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 229

Mon, 18 May 2020 08:04:18 +0000

Feds Release Top Vulns, China Brainwave Tracking, Europe CISSP Masters, Army Electronic Warfare, Microsoft Third-largest Patch Tuesday, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 228

Tue, 12 May 2020 06:08:15 +0000

Thunderbolt Attack, Celebrity Ransomware, ClearView Government, Blackhat DEFCON Virtual, War Thunder, 5G Bio Attacks, PC Game Cheating, Zoom Keybase, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 227

Mon, 04 May 2020 04:44:37 +0000

VICE vs. Chinese Surveillance, Indian Contact Tracing, NHS + GCHQ, Banjo Racism, Singapore Requires Check-ins, Bruce on Contact Tracing, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 226

Tue, 28 Apr 2020 08:24:35 +0000

Bay Area Lockdown Til May, The Swedish Approach, California Autopsies, Zoom Security Updates, Palantir Contacts, NSA Web Vulns, GreyNoise Services, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation with Renée DiResta: Disinformation and Conspiracy Propagation

Wed, 22 Apr 2020 04:35:00 +0000

In this episode, Daniel speaks with Renée DiResta about her work tracking narratives online. They discuss:

The different strains of false information
Her work at the Stanford Internet Observatory
How the same narrative can be used by multiple sides
The origin of the Bill Gates conspiracies
Mapping campaigns to actor strategies
What she recommends others do who are interested in her field
Other topics around disinformation, conspiracy, and narrative tracking

Renée DiResta is the technical research manager at Stanford Internet Observatory, a cross-disciplinary program of research, teaching and policy engagement for the study of abuse in current information technologies. Renee investigates the spread of malicious narratives across social networks, and assists policymakers in devising responses to the problem.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 225

Tue, 21 Apr 2020 05:33:42 +0000

Flu Simulations, Amazon Thermal Cameras, Facebook Bad Info Tracing, 5G Gates Conspiracies, Google Slows Hiring, Amazon Hires More, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 224

Tue, 14 Apr 2020 14:27:01 +0000

Biogen Superspreaders, African Locusts, Game of Life, Meat Troubles, 5G Conspiracies, Japan Getting Out of China, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 223

Tue, 07 Apr 2020 05:50:30 +0000

Coronavirus unemployment rate, 2 million guns, UK 5G attacks, German Antibodies, Zoom Drama, New Cloudflare Servers, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With Leif Dreizler About Security Engineering at Segment

Thu, 02 Apr 2020 06:15:00 +0000

So today I’m talking to Leif Dreizler. Leif is a buddy of mine who also works in San Francisco. He’s a developer at a company called Segment, and over the last year or so he’s been telling me about all kinds of cool stuff he’s been working on, how his team is set up, and how they see security teams being built in the future. So we’re going to cover those topics and more in a conversation that ranges from security engineering strategy to solving specific problems through custom tooling.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 222

Mon, 30 Mar 2020 08:49:09 +0000

Who's hiring, freezing, and laying off, models predict 100-200K US deaths, April distancing, Adversarial Capital, Booz Russia, Google State Phishes, Worker Monitoring, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 221

Tue, 24 Mar 2020 06:20:34 +0000

Health-justified Video Surveillance, FDA Emergency Approval of a C19 Test, Israel Mobile Monitoring, Amazon Essentials, Pandemic Drone Monitoring, Retasking Factories, Rich People Ventilators, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 220

Tue, 17 Mar 2020 15:30:21 +0000

Virus updates, Github gets NPM, New Stimulus, Amazon Hiring 100K, Saltwater Nozzles, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 219

Mon, 09 Mar 2020 16:04:00 +0000

Coronavirus Update, Nation-state Exchange Hacking, FuzzBench, New Artillery, Germ Catapults, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 218

Mon, 02 Mar 2020 18:55:44 +0000

SARS-CoV-2 update, China's health tracking, Firefox DNS over HTTPS, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 217

Mon, 24 Feb 2020 17:43:40 +0000

MGM breach, DDoS and Ransomware on the Rise, Twitter v. Bloomberg, Tesla Tape, Russia Pro Trump & Pro Bernie, Tapping Cables, Insider Concern, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 216

Thu, 20 Feb 2020 18:29:00 +0000

Adsense Extortion, OT Ransomware Attack, Ring 2FA, Smart Speaker Jamming Bracelet, DARPA's Flying Gun, Lots of Advisories, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Conversation With General Earl Matthews on Election Security

Sat, 15 Feb 2020 19:05:41 +0000

In this episode I speak with retired Air Force Major General Earl Matthews on the topic of election security. We talk about digital elections, attacking trust in the US system, social media influence campaigns, and possible motives for foreign interference in US elections.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 215

Mon, 10 Feb 2020 15:53:01 +0000

Iran DDoS, Jigsaw Picture Validation, 1000 Chinese Espionage Cases, Twitter Deepfake Labeling, Android Bluetooth Vuln, Cisco Discovery Vuln, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 214

Tue, 04 Feb 2020 06:34:53 +0000

London Facial Recognition, Coalfire Freedom, NYT Reporter Spyware, Avast Sells Customer Data, Google's Bounty Program, Kali 2020, Harvard Chemist Espionage, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 213

Mon, 27 Jan 2020 16:58:14 +0000

Saudi Bezos Hack, MIT Davos AI, Moar Energy Attacks, NIST Privacy, Ohio CISO, Microsoft Data Breach, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 212

Tue, 21 Jan 2020 16:45:24 +0000

Clearview AI Surveillance De-anonymizing Faces, Face Obscuring Tech, Google Cookies, San Diego GE Surveillance, Oregon Selling DMV Data, Windows 7 Done, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 211

Mon, 13 Jan 2020 17:05:32 +0000

California's Privacy Law, SHA1 exploit, Ransomware Storage, Ring Voyeurs, 20 vs. 2020, ATT&CK ICS, Telecom SMS, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Visibility and Understanding Create Both Tools and Weapons

Sun, 12 Jan 2020 07:19:28 +0000

How increased understanding leads to the creation of better and better tools, and why tools are inexorable from weapons.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 210

Wed, 08 Jan 2020 07:19:00 +0000

War with Iran, TikTok, New GIAC cert, Mystery Drones, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 209

Mon, 30 Dec 2019 20:14:00 +0000

Ring Sued, Mean Time to Hardening, APT20 2FA, China Base Pictures, China Satellites, Angled Toilets, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 208

Mon, 23 Dec 2019 20:13:24 +0000

Mobile Tracking, Chinese Drone-Flu Terrorism, Message Spying, Bing Misinformation, 23andMe GlaxoSmithKline, Spam Laws, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 207

Tue, 17 Dec 2019 21:18:46 +0000

Pentagon vendor requirements, Ring camera freakout, Bluetooth Thieves, Palantir Pentagon, Amazon Rekognition, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 206

Mon, 09 Dec 2019 18:20:33 +0000

Vietnamese BMW APT, Defense Contractor Prep, China replacing a culture, HackerOne Cookie Snafu, Chinese Also Worried About Privacy, China Mobile Face, CDC Flu Warning, AWS Sagemaker, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 205

Mon, 02 Dec 2019 05:58:45 +0000

Spam trends, CWE's latest 25, Uber audio recordings, Uber unauthorized drivers, Chinese research theft, Google state-actor notifications, bluetooth burglars, Nixon deepface, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 203

Mon, 18 Nov 2019 17:15:47 +0000

Google health care, Google checking, Github open source, China policy hack, Hactivist bounties, healthcare attacks, facial protests, OSINT CTF, surveillance robots, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 202

Mon, 11 Nov 2019 16:40:34 +0000

Capital fired, DHS biodata, Twitter insiders, Baltimore Cyber Insurance, Airbnb Assessment, Google Play Malware, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 201

Mon, 04 Nov 2019 16:59:06 +0000

Unify drama, Fancy cheating, NSO lawsuits, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 200

Mon, 28 Oct 2019 15:41:58 +0000

200th episode!, White House cyber vacancies, AT&T SIM bribery, South Africa ultimatum, climate change power crash, Bahgdadi dead, RuNET, NYT insanity, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 199

Mon, 21 Oct 2019 15:48:04 +0000

Stolen Cards Stolen, Autoclerk Hacked, TeamViewer Hacked, Russia Pretending to be Iranian, JackSpotting, Pixel4 Faces, FrenchFacRec, Samsung Fingerprints, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 198

Mon, 14 Oct 2019 05:19:36 +0000

Eye reflection EXIF, WiFi gait, Russian Cyber Clusters, Russia African Americans, China Pressure, VPN drama, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 197

Mon, 07 Oct 2019 05:18:39 +0000

Yahoo creep, DarkNet, E2E encryption, Cyber talent, RandomDeath, Private Data Property, Eyeballer, plus Technology News, Human News, Ideas Trends and Analysis, Updates, Discovery, Recommendations, and the Aphorism for the week!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 196

Mon, 30 Sep 2019 06:27:23 +0000

New York is suing Dunkin (Donuts) for not revealing breaches in a timely manner (going all the way back to 2015), which is says jeopardized their customers. Good for New York. It's one thing to be breached: it's much worse to try to pretend it didn't happen. More

NPR wrote an extraordinary piece on how the US penetrated ISIS' communications infrastructure and basically tore it down from the inside. It includes significant details on the operation, which made me cringe as I read them because they were so descriptive. But what we lost in operational surprise we likely gained in deterrence. More

Uyghurs are playing cat and mouse with the Chinese government on the TikTok platform, with the former using videos to show solidarity while the latter searches for and deletes the content. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 195

Mon, 23 Sep 2019 07:57:26 +0000

Here's the new MITRE 2019 25 Most Dangerous Software Errors. Memory corruption bugs are huge right now. More

There's a ton of recent DDoS activity that's leveraging IoT devices for UDP amplification attacks. Specifically, the WS-Discovery service (WSD) is being used because the response to request ratio is so large (from 43% to 15,000%). More

There's a lot of chatter out there about Snowden due to his new book coming out, the NSA suing to keep him from making money off of it, him saying he'd like to come home, and him reiterating that he was just trying to do the right thing. Oh, and him saying he's never cooperated with the Russians. This whole situation makes me cautious of anyone with a singular and strong opinion about this, including myself. In 2016 I wrote a short piece about my opinion, and I am pretty much still in the same place with it. In short, if you think he's a hero you're probably wrong, and if you think he's a traitor you're probably wrong. He seems to be some combination of these two things, and from day to day, article to article, and book to book, I simply can't tell how much of which. Book

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 194

Sun, 15 Sep 2019 22:25:30 +0000

Not sure how this isn't bigger news, but Saudi Arabia shut down half its oil production after a number of drones attacked the largest oil processing plant in the world. Yemeni rebels claimed credit, but the US blames Iran. More

DNS over HTTPS is coming to Chrome as well, so it's not just Firefox. So this is basically where browsers have a preferred DNS server, which works over HTTPS, and ISPs therefore won't be able to see every DNS request that users make. This will be a good thing for reducing the risk of ISPs (and actors with access to their logs) seeing what people are requesting, but it raises questions around filtering, caching networks, and other major components of the status quo. More

A couple of Coalfire Pentester's got arrested and are still in custody for trying to break into a courthouse that they were actually paid to break into. Evidently, it's not clear whether the physical part was in scope or not. So, no, the get out of jail free card wouldn't have helped. Everyone already knows they were doing it thinking it was ok; the question is next steps. And meanwhile they sit in jail, probably spending all their time mentally working on DEFCON slides. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 193

Sun, 08 Sep 2019 11:32:13 +0000

AIG says BEC has overtaken ransomware as the primary claim type against their cyber insurance policies in EMEA, accounting for 23% of claims. More Paper

The NSA Cyber Chief wants to share digital threat information early and often. I like the fact that they're opening up a bit, and I think it's only good for everyone (except bad guys). The more they share the higher the bar is for attackers, and the less time they have to use certain TTPs. This is exactly the type of Government-Industry interaction that we need to be doing more of to stay ahead of China. More

NYU did a report on how social media is likely to be used for misinformation campaigns in 2020. They say Instagram will be a much bigger player this time around, which makes sense given that images are the dominant meme carrier. Article Study

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 192

Mon, 02 Sep 2019 21:31:38 +0000

Ring has already partnered with over 400 police departments. As you know, I'm torn on this kind of tech. Neighborhood watch can be a good thing, and it can also be a bad thing. Technology tends to magnify both weaknesses and strengths, so it can make neighborhood watch really great, or it can turn it into a nightmare. The problem is that you can easily start on the positive side, build it all the way up, and then in a few legal, policy, and tech changes have it turn into the oppressive form. Some say this is a reason not to do any of this stuff, but I disagree. We know someone is going to do it, so I think the best thing that can be done is to build a benign version and hope it wins in the market. More

People are drawing comparisons between China's social credit system (which is actually multiple systems) and the Silicon Valley's various apps that have internal rating systems. They're saying that these ratings will eventually be used to make decisions about things that matter. Sure, but this has existed throughout human history. Word of mouth, blacklists, etc.: these are all ways of extending the reach of good or bad reputation. I think whenever someone points out the downside of a technology, we should ask ourselves whether that dynamic exists already in the real world, and adjust our opinions accordingly. More

The Pentagon is worried that China will beat the US in AI if we don't create a stronger link between the government and both academia and industry, which China is good at. We basically need to move faster from edge concepts to practical implementations, but it's damn hard to do this when we have all sorts of legal and ethical constraints that China doesn't have. Our caution and morality are a definite weakness in this case. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 191

Mon, 26 Aug 2019 04:42:47 +0000

Protestors in Hong Kong are physically attacking and destroying facial recognition cameras. More

Palo Alto says 7 out of 10 new domain registrations (NDRs) are either malicious or not safe for work, and they encourage companies to block them. More

Lt. Gen. Fogarty is fighting to change the name of Army Cyber Command to Army Information Warfare Command, and to give the group a much larger scope in its mission. More

We continue to see attacks against open source supply chains, in packages like NPM, RubyGems, Webmin, and many others. It's about to become imperative for people to understand—and to be able to validate—the entire chain of trust that a given application sits upon before they use it. There have been many companies in this space in the past, but I expect to see them (and new players) get a lot more attention soon. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Difference Between Data, Information, and Intelligence

Mon, 19 Aug 2019 02:58:36 +0000

The terms intelligence, information, and data are thrown around pretty loosely in most tech circles, and this inevitably leads to people confusing and/or conflating them. What follows is a simple explanation of how the related terms are different from each other, and how they work together.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 190

Mon, 19 Aug 2019 02:18:47 +0000

There are some seriously nasty Windows RDP bugs out there. If you have RDP facing the internet, make sure you're patched. And try to get to VPN as soon as possible. More

A huge survey of firmware security has found virtually no improvement over the last 15 years. People seem surprised by this, but it is exactly what I would have predicted based on my analysis here. Basically, for most people not in the industry, our current state is actually fine. More

NYPD has over 82K peoples' DNA in a database, and the program has little visibility and oversight. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 189

Tue, 13 Aug 2019 05:03:49 +0000

Ring is developing two-way relationships with hundreds of police departments in the US. This allows Ring users to be alerted to crime in their area via 911 data, and police departments to pull video from participating Ring devices. This is the type of functionality that most people will see and think, “Wow, I'd love to have that!”, which is why it's going to be very successful. But it's also one tiny step away from something terrifying. More

A number of critical bugs in VxWorks are going to cause issues with infrastructure for years to come. More

DARPA is building a $10 million dollar, open source voting system with a focus on security. More

It looks like China's social credit system might not be a giant monolithic system, but rather a series of siloed experiments. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 188

Mon, 29 Jul 2019 04:54:27 +0000

Marcus Hutchins got off with time-served, and people have feelings. The range basically goes from 'he did nothing wrong', to, 'he should rot in prison'. In my mind this outcome was close to perfect. Remember, he went through two years of hell since being brought up charges, he's still a convicted felon, and he also is largely banned from the US. I think it's good that he admitted guilt, faced consequences, and is being offered a chance to continue giving back to the community. More

Attorney General Barr said recently that companies should put backdoors in their products that bypass encryption, or else the government will pass laws that require it. This is unspeakably stupid. Without even getting into the philosophy of whether the internet can host a private conversation (which requires a warrant to tap), we can just start with the fact that backdoors present a clear and present danger to security, right now, due to the weaknesses of those who create them. If the NSA can be hacked or somehow lose its sensitive tools and materials, there's no company this cannot happen to. Purposefully installing backdoors therefore equates (effectively) to giving such access to attackers. Unacceptable. More

Equifax is offering people $125 dollars in reparations for them losing all your data. But to get it, you have to log in and give a bunch of data about yourself. It's hilarious. They made money offering credit protection after the breach, and now they're going to collect updated information on anyone who wants to collect $125. On Twitter I called this a sadder and more permanent form of giving plasma. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Humans Are Genebots

Fri, 26 Jul 2019 07:34:36 +0000

Unpacking the evolution-granted bliss of prep schools and elite institutions, and why they resonate so much with us.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Machine Learning Doesn’t Introduce Unfairness—It Reveals It

Thu, 25 Jul 2019 05:11:20 +0000

The difference between unfairness and bias in machine learning.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 187

Mon, 22 Jul 2019 03:32:48 +0000

Lots of people in the security community went silly over the FaceApp application last week, basically saying that you shouldn't be using the application because they'll steal your face and then be able to impersonate you. Oh, and then it turned out to be a Russian company who put out the application, and that made it 100x worse. The problem here is the lack of Threat Model Thinking. When it comes to election security, propaganda discussions, etc., I am quite concerned about Putin's willingness and ability to harm our country's cohesion through memes and social media. But that does not extend to some random company stealing faces. Why? Because before you can get legitimately concerned about something, you have to be able to describe a threat scenario in which that thing becomes dangerous. As I talked about in this piece, pictures of your face are not the same as your face when it comes to biometric authentication. There's a reason companies need a specific device, combined with their custom algorithm, in order to enroll you in a facial identification system. They scan you in a very specific way and then store your data (which is just a representation, not your actual face) in a very specific way. Then they need to use that same exact system to scan you again, so they can compare the two representations to each other. That isn't happening with random apps that have pictures of you. And even if that were the case, they could just get your face off your social media, where those same people who are worried are more than happy to take selfies, put their pictures on profile pictures, and make sure as many people see them as possible. There are actual negative things that can be done with images (like making Deepfakes of you), and that will get easier over time, but the defense for that is to have zero pictures of you…anywhere. And once again you have to ask who would be doing that to you, and why. Bottom line: authentication systems take special effort to try to ensure that the input given is the same as the enrollment item, e.g., (face, fingerprint, etc.), so it will not be easy any time soon to go from a random picture to something that can full a face scanner or fingerprint reader at the airport. People reading this probably already know this, but spread the word: threat modeling is one of our best tools for removing emotion from risk management.

A contractor named SyTech that does work with Russian FSB has been breached, resulting in the release of 7.5TB of data on the FSB's various projects. This is obviously embarrassing for SyTech and the FSB, but the leaked projects focused on de-anonymization, spying on Russian businesses, and the project to break Russia away from the Internet, which are all known and expected efforts. So there don't seem to be any big reveals as a result of the leak. More

Someone discovered that a bunch of browser extensions were reading things they shouldn't be, and sending them out to places they shouldn't be. This is not surprising to me. Chrome extensions are like Android apps, which should tell you all you need to know about installing random ones that seem interesting. My policy on browser extensions is extremely strict for this reason. People need to understand how insane the entire idea of the modern web is. We're visiting URLs that are executing code on our machines. And not just code from that website, but code from thousands of other websites in an average browsing session. It's a garbage fire. And the only defense really is to question how much you trust your browser, your operating system, and the original site you're visiting. But even then you're still exposing yourself to significant and continuously-evolving risk when you run around clicking things online. And the worst possible thing you can do in this situation is install more functionality, which gives more parties, more access, to that giant stack of assumptions you're making just by using a web browser. The best possible stance is to have as few people possible with access to your particular dumpster. And that means installing as few highly-vetted add-ons as possible. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Time Speeds Up When You’re Wasting It

Sat, 20 Jul 2019 07:05:34 +0000

An essay on why time can feel like it's speeding up when you get older, and how to slow it back down.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 186

Mon, 15 Jul 2019 02:14:42 +0000

Parts of Manhattan had a power outage Saturday night, which happened to be the anniversary of another power outage in 1977. The power company apologized but didn't explain what happened. The hacker in me thinks this could easily be a probing shot by a sophisticated attacker, or a fun prank by amateurs. But the overwhelming odds are on simple failure. Either way, this country needs to get a whole lot more resilient to small attacks, because enough small ones can quickly become a big one. More

Zoom has had a bad week or two. Not only did it have a major vuln, but it turned out to be part of the design, and they moved relatively slowly in addressing it, and then companies started auto-uninstalling it from their OS. They had a lot of momentum going in the space, too. This will sting for sure. More

Facebook will be fined $5 billion over its various privacy catastrophes. More

Marriott is being fined $124 million over the Starwood breach. Real question: how does that compare to their coffee budget? More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 185

Mon, 08 Jul 2019 16:15:43 +0000

The Telegraph has found strong links between Huawei employees and Chinese intelligence agencies. The Huawei counter was that this was extremely common among telecom companies, and that it wasn't a big deal. The counter to that counter was, basically, "Well, then why did you try to hide it?" /gg More

The NPM security team caught a malicious package designed to steal cryptocurrency. A lot of these packages work by uploading something useful, waiting until it's used by lots of people, and then updating it to have the malicious payload. My buddy Andre Eleuterio did the IR on the situation there at NPM, and said they're constantly improving their ability to detect these kinds of attacks. Luckily NPM's security team had the talent and tooling to detect such a thing, but think of how many similar companies aren't so equipped. I think any team that's part of a supply chain should be thinking about this type of attack very seriously. More

Federal agents are mining state DMV photos to feed their facial recognition systems, and they're doing it without proper authorizations or consent. To me this has always been inevitable because—as Benedict Evans pointed out—it's a natural extension of what humans already do. You already have wanted posters. You already have known suspects lists. And it's already ok for any citizen or any cop to see any person on that list and report them. In fact it's not just possible, it's encouraged. So the only thing happening here is that process is becoming a whole lot more aware (through more sensors), and therefore more effective. Of course, any broken algorithms that identify the wrong people, or automatically single out groups of people without actual matches, those issues need to be snuffed out for sure. But we can't expect society to not use superior machine alternatives to existing human processes, such as identifying suspects in public. That just isn't realistic. Our role as security people should be making sure these systems are as accurate as possible, with as little bias as possible, by the best possible people. In other words, we should spend our cycles improving reality, not trying to stop it from happening. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The World is Collapsing Into Two Countries—Green and Red

Wed, 03 Jul 2019 08:29:14 +0000

The world being sorted into two different countries—a Green country of the top 10% of income/wealk, and a Red country that's everyone else. These countries are separated not by geography, but by class.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 184

Mon, 01 Jul 2019 08:38:36 +0000

I created a new tutorial on OWASP Amass, and just joined the team as a contributor as well. Tutorial

Chinese hacking groups have been embedded deep inside multiple major US tech firms for many years, including Fujitsu, Tata, NTT, Dimension Data, and HPE. The first thing you should be thinking is where else they are today. More

Amazon is getting heavier into the SIEM space (and perhaps others) with their new Amazon Security Hub offering. It takes in lots of event types from various AWS services, and surfaces what it thinks is most important. Of course, it doesn't do this for other product types, i.e., non-AWS stuff, but that could come eventually. More

Amazon also launched a new service that lets you monitor your AWS VPC traffic. And lots of vendors are announcing their support for it. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 183

Mon, 24 Jun 2019 15:04:44 +0000

There's a Linux vulnerability called SACK Panic (among other names) that takes advantage of a kernel feature called Selective ACK. The feature lets systems tell the other side of the conversation how much data it's received, and it turns out it can be overflowed or fuzzed. The former creates a crash, and the latter creates a slowdown. You should patch. And if you have any services facing the internet running Linux, you should definitely patch. More

A Florida city paid $600,000 in bitcoin to get access to their data back from a ransomware gang. More

Magic Leap is suing former engineer Chi Xu for allegedly using his knowledge of the headset to make a version for China. More

The average security group is running over 50 security tools. As my friend Jeremiah once said when looking at a Momentum Partners slide, "Are we secure yet?" More

Amazon just got a patent for using delivery drones for surveillance. I don't necessarily think that means they'll use delivery drones for surveillance though. That's what a lot of the conspiracy theorists will say, though—just based on them getting a patent for using delivery drones for surveillance. Actually, the patent is a bit more benign than my joke implies. It's designed to monitor opted-in people's property, a lot like a house camera or a Ring device. Makes sense. But still. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 182

Tue, 18 Jun 2019 07:59:40 +0000

The US is supposedly ramping up attacks against Russian power grid through the use of new cyberattack powers granted by Trump. I am happy to hear of this, but it's an example of where we as outsiders can only know a tiny fragment of the story. But any signs that this administration sees Russia as a foe, and are treating it as such, are positive in my view. More

Adobe is entering the deepfakes arena by showing off research tools designed to detect manipulated photos. More

Target stores have been hit by major outages. More

Many places are using very granular bluetooth beacon tracking to watch you move throughout their businesses, including airports, malls, subways, buses, gyms, hotels, festivals, museums, etc. More

The US is going after ethnic Chinese researchers in the medical field, and specifically at cancer centers. I'm all for becoming more aggressive towards the Chinese government pilfering the world's intellectual property, but, um, cancer research is one thing that I think it's ok to spread widely. It's not like they're stealing the only copy of the research; they're just sharing it. Maybe I'm missing something, but if that something is just about who makes the profit, then I'm calling Meh. More

Firewalling outbound DNS could save companies billions. Yes! I've been on about this for years. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 181

Tue, 11 Jun 2019 13:37:01 +0000

Some absolutely fascinating research has just come out on what percentages and types of vulnerabilities are actually exploited in the wild. It found that only 5.5% of vulnerabilities discovered between 2009 and 2018 were actually exploited, with most of those being issues with a CVSS score of 9 or 10. The best part of the paper, however, was a discussion of optimal patching strategies, where they looked at different methodologies for what to patch and measured them against each other based on coverage (no misses) and efficiency (not patching what you don't have to). Options included patching by CVSS, whether or not there are public exploits, by vulnerability tags, etc. The ML model performed best, but it seemed that patching the CVSS 7 and above was decent as well, and for more efficiency but less coverage—CVSS 9 and above. Super interesting paper. More

The US is going to start requiring 5 years of social media account history from Visa applicants, as part of the filtering process. I'm genuinely curious as to how effective this is going to be. On the one hand, there will now be a market for creating and maintaining fake social media accounts that people can use for this purpose. But on the other hand, there will be many who don't want to go to that effort and either won't try to come, or will get caught in the filter. As with most things, the efficacy will come down to execution. More

A team at Stanford has made it possible to edit video using a text editor. So, editing the things that were said by the actual subject, to say something else entirely, but having it seamlessly injected into the video so it looks completely natural. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Grit is the Ultimate Privilege

Sat, 08 Jun 2019 21:06:43 +0000

An argument that we should acknowledge grit as one of the most powerful causal factors in success, and figure out ways to bring its benefits to everyone.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Why Software Remains Insecure

Thu, 06 Jun 2019 07:45:33 +0000

A concise explanation of why software continues to have security and quality problems after decades of supposedly trying to address the problem.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 179

Tue, 28 May 2019 07:41:06 +0000

The Deepfakes thing is already starting to have an impact, and it didn't even involve actual Deepfake (GAN ML) technology. A video was spread of Nancy Pelosi speaking very slowly and seeming to stumble over her words, which made her look quite bad. The video was virally shared throughout social media on the right. Problem is, it was intentionally slowed down to make her look old/stupid/crazy. What this shows us is that it's not the machine learning that makes Deepfakes dangerous; it's the willingness of a massive percentage of the US population to believe total garbage without an ounce of scrutiny. It doesn't matter if Deepfakes can be shown to be fake because people are matching evidence to their emotions, not the other way around. The vulnerability is our ignorance and cynicism, not a spoofing technology. And as I wrote about a couple of years ago, this will be used as a weapon against us. More Essay

A real estate insurance website for First American Financial Corp was vulnerable to a simple IDOR (where you change the account number in the URL to get another account), and it evidently resulted in the exposure of hundreds of millions of insurance records that included extremely sensitive information. IDOR is still one of the most common and dangerous vulns a web app can have, and for companies like this they can be devastating. More

The US Military is trying to learn how popular movements form and evolve, and to do so they're studying 350 billion social media messages. But it's a Bloomberg article, so maybe they're actually studying bullfrogs for clues about hypertension. More

Moody's has downgraded Equifax's rating in some significant part due to its 2017 cyber breach. This is noteworthy because until now, breaches have largely been spackled over in terms of the major financial perspective and at the 6-24 month timescale. This is a positive indication that companies could actually start taking cybersecurity more seriously, and not just at the CISO and IT level, but from the boardroom down. More

Advisories: TP-Link Routers

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 178

Fri, 24 May 2019 16:03:42 +0000

Trump has semi-banned the use of foreign telecom gear, which is really a direct shot at Huawei and China. more

Baltimore’s IT systems are still being held hostage after 2 weeks. Of all the cities in the world that I could imagine this happening to, Baltimore is towards the top of the list. If you don’t have good schools or a good police force, I don’t expect you’d have good IT security hygiene either. more

Crime is so bad in Mexico that people buy fake mobile phones so they can give them to muggers instead of their real one. I have to assume this is also happening in Brazil. more

This is a stunning audio Deepfake of Joe Rogan doing a few different routines. It sounds exactly like him. Not a little bit. Exactly. Now imagine that for politicians and celebrities, where there is plenty of source material to train from. We’re about to move to a world where you can only trust authenticated voices and personalities, using sources and clients that are trusted to serve you their actual content. Expect a massive industry around serving authentic content and detecting fakes. more

Salesforce had to disable access to millions while the fixed an access control issue that allowed open reading of tons of customer data. more

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 177

Tue, 14 May 2019 17:51:30 +0000

My Takeaways from the 2019 DBIR Report M y S ummary The Report

The DOJ has unsealed the indictment against those who they believe hacked Anthem in 2015, and they are Chinese Nationals. They didn't reveal the suspected motive, however. But as I wrote about last year, I don't think we need an explanation. I think it's obvious. More

An Airbnb host in China has been arrested for watching guests using a hidden camera. More

The Mossad has released an interesting challenge in something of a spy CTF style. More

Chinese scientists have created a small, portable camera system that uses LIDAR to resolve human features from up to 28 miles away. Good news—it also penetrates smog. More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Finding Clarity on the Exodus of the New Left

Sat, 04 May 2019 01:11:26 +0000

A short essay that attempts to wrap a simple narrative around what's happening with the exodus of the New Left, and what it's doing to the moderate left, center, and right that they left behind.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 175

Wed, 01 May 2019 03:21:33 +0000

Deepfakes are about to seriously erode our collective ability to tell truth from fiction, and this is already a big enough problem without them. Think of every problem you care about, and realize this represents an exponent on each one. This video captures it extremely well. Link

Slack has warned the world that it's being targeted by Nation State actors. I'm glad they said it, but we already knew that. Think of what an attacker could get if they could access any company's internal Slack communication without being detected. Link

Scientists have captured the brain waves of someone hearing speech, run that through an algorithm that created it's own speech from the recordings, and got a 75% recognition rate from humans on that speech. So the algorithm knew what the person heard, and turned that into spoken language that people actually understood. The next step is for the algorithm to know what people thought, instead of heard. In other words, machine learning is taking very close to mind-reading—but we still have potholes and cancer. Link

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

A Political Discussion with Jeremiah Grossman

Sun, 14 Apr 2019 21:31:16 +0000

Today's standalone episode of Unsupervised Learning is a political conversation with Jeremiah Grossman, who many of you will know as the founder of Whitehat Security, current CEO of BitDiscovery, Jujitsu Blackbelt, and all-around great individual.

In this episode, however, we’re not going to be talking about Information Security, but Politics. We have remarkably different and similar views on politics, which we’ve been discussing in private for years, and we thought now was the perfect time to show that it’s possible to disagree with someone, respect them, and have a conversation about those disagreements in a positive and useful way.

This is the first experiment of this kind on Unsupervised Learning, and I’m quite pleased with how it turned out. So with that, Here’s Jeremiah Grossman.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 173

Sun, 14 Apr 2019 04:33:23 +0000

Amazon has many thousands of people doing quality control on Alexa, meaning that they're listening to incoming audio captured on Echo devices. This shouldn't be surprising. The question is how they're doing it, and what policies they have around privacy when doing so. I don't personally see a major problem here. But at the same time I'd never put a Facebook device in my home. To me it's more about the company and its incentives than anything else. Link

A number of FBI-affiliated websites were hacked, and information on thousands of federal agents and law enforcement officers are now being sold online. Link

Chinese schools are using facial recognition on students, and using ML to determine whether or not they're currently paying attention, distracted, etc. Link

Sift is a service that builds a risk profile on you so merchants can determine whether you're a benign actor or someone about to commit fraud. I think people need to accept that continuous risk scoring for people and situations is both inevitable and actually already happening. The moment you try to block bad actors by looking at their behavior, you quickly end up with a score that determines action based on various thresholds. And the moment you do it for bad actors, you're kind of implicitly doing it for good actors as well. There are better and worse ways to approach this, but profile scoring is not something we're going to be able to avoid going forward. Let's accept this reality and start having the conversations about how to make (and keep) this functionality as benign as possible. Link

A Dutch F-16 was damaged by rounds from its own 20MM cannon. So it fired bullets, and then flew into them. Life is awesome. Link

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 171

Mon, 01 Apr 2019 14:39:26 +0000

Mastercard is looking to create a Digital ID service that can bind your digital presence to your mobile device, which will be able to verify you to various services.

Palantir has won an $800 million contract to build the next combat intelligence system (to replace DCGS-A) for the Army.

Putin appears to be causing brain drain in Russia.

Dropbox has an interesting proposal for improving vendor security assessments. TL;DR: They turned their requirements into contractual points. LOVE IT.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 169

Mon, 18 Mar 2019 16:40:52 +0000

Multiple governments have now blacklisted Huawei, which Huawei seems very confused by. The best explanation I've heard so far about why this move makes sense for western countries came from Rob Joyce of NSA. He basically said that just like Kaspersky in Russia, the reason you can't trust Huawei is that it's a Chinese company, and even if they're not already infiltrated by the Chinese government, they can be at any moment without anyone knowing that it happened. And there's nothing Huawei or anyone else could do to stop it. Strong argument. Link

2/3 of Android antivirus apps are hot garbage. Gasp. Link

DARPA is building an open-source, secure voting system. That's their goal, anyway. I'm skeptical of being able to build truly secure systems, but I have lots of confidence in DARPA, and I also know the bar for improvement over the current state is quite low. So, yeah, go forth and prosper. Link

The RAND Think Tank conducts wargames between the U.S. and its potential enemies, such as Russia and China, and one analyst said that we keep losing. The issue seems to be that our key advantages can be neutralized rather easily, and it'd take a lot of money to fix the biggest issues. Link

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 167

Sun, 03 Mar 2019 17:50:53 +0000

This is a description of cyberwar that sounds quite realistic to me, and it's based around the thousand-cuts idea. Ring Doorbells have a vulnerability that allows one to capture clear-text videos and other data from the cameras if you can get on the wireless network that the camera is using. An independent security researcher found the Dow Jones Watchlist database sitting open on the internet. Schneier talks here about how easy it is to influence people in sensitive positions, similar to my post o n China building a database on us.…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 165

Thu, 21 Feb 2019 12:27:37 +0000

OpenAI text spoofing, Twitter DMs, Chinese tracking database, Ponemon Cyber Risk Score, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 163

Mon, 04 Feb 2019 22:20:09 +0000

My takeaways from ENIGMA 2019—one of my two favorite conferences in the world.
The US has charged Huawei with stealing trade secrets, money laundering, and fraud. This escalates the already tense situation with China on a number of fronts.
An engineer does a Twitter thread on AI-created videos on YouTube. He describes how they are created, promoted, and selected for display in recommendations. Fascinating read. This is a video of thieves scanning a BMW key fob through the wall of the owner's house, and driving away in their car. It could be that proximity-based security devices might need a trigger event (from the owner) before becoming active, like for mobile payments.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

An Overview of the OWASP IoT Top 10 for 2018

Mon, 07 Jan 2019 06:36:50 +0000

We just released the 2018 version of the OWASP Internet of Things Top 10, and in this episode I talk you through the list and give the philosophy, methodology, and next steps for the project.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 159

Mon, 07 Jan 2019 06:02:25 +0000

German politicians hacked, NSA's new RE tool, Weather Channel tracking, sick TSA agents, Facebook dust tracking, Technology News, Human News, Ideas, Discovery, Recommendations, and the weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 155

Tue, 11 Dec 2018 09:26:44 +0000

Google+ breach, Android flaws, China's long game against the US, Australia's encryption blunder, NYPD drones, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 153

Mon, 26 Nov 2018 18:24:37 +0000

Ukraine malware, China's Black Mirror, DARPA's Mosaic, FBI trolling, Silicon Valley jobs, Technology News, Human News, Ideas, Trends, & Analysis, Discovery, Notes, Recommendations, and the weekly Aphorism!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 147

Thu, 25 Oct 2018 08:41:26 +0000

OWASP IoT Top 10 Draft, Facebook compromise, Fornite cheating, Pentagon weapons, spam calls, technology news, human news, ideas, discovery, recommendation, and the weekly aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 141

Tue, 04 Sep 2018 22:06:30 +0000

AMA Summer 2018, Security News, Technology News, Human News, Ideas, Discovery, and the weekly Recommendation and Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 139

Mon, 20 Aug 2018 17:37:23 +0000

TLS 1.3, BurpSuite Improvements, Google Ad Database, Russian Attack Sattelites, Amazon Theaters, Google AI Cooling, Wheat Genome, Giant Magellan Telescope, Carb Ratios, Leg Exercise and Cognitive Health, Ideas, Discovery, Notes, Recommendations, and the weekly Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 135

Sun, 22 Jul 2018 21:15:22 +0000

GRU ATT&CK analysis, Assange to the UK, Cisco backdoors, DARPA electronics, faces from genomes, viz.ai, open plans are bad, Best Buy consulting, ultrasound vs. dementia, 4 day work weeks, ideas, recommendations, and the aphorism of the week!

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 133

Wed, 11 Jul 2018 23:04:46 +0000

Twitter deleting accounts, deepfakes, location leaks, Rekognition, bio databases, juggalo makeup, iOS 12 security, Siri upgrades, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 131

Tue, 26 Jun 2018 20:34:55 +0000

Predicting your credit rating based on the tech you use, Russians attack Germans, WPA3, China bird drones, AT&T and Verison to stop selling our location data, Facebook red team, Twitter Smyte, plus tech, humans, discovery, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 129

Tue, 12 Jun 2018 13:50:51 +0000

Reboot your router, China hacked a U.S. Navy contractor and stole around 600GB of top secret data. Newark, NJ is monitoring much of the city with surveillance cameras, and they're making the camera footage available to the public. Facebook also shared data with a number of Chinese companies. Tech, Humans, Ideas, Discovery, Reconmendations, Aphorism…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 128

Mon, 04 Jun 2018 06:41:18 +0000

Pentagon background checks, China using machine learning in schools, Rusian ethnicity detecting AI, US Military presence in Africa, Atlanta lost dashcam footage, Kidnapping insurance, Technology News, Ideas, Recommendation, Aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 127

Tue, 29 May 2018 09:55:27 +0000

VPNFilter botnet, Echo private convo, Ghostery GDPR fail, PornHub VPN, Technology News, Human News, Ideas, Trends, & Analysis, Discovery, Recommendations, the weekly Aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 126

Fri, 25 May 2018 08:54:56 +0000

VPNFilter botnet, LA + Palantir, Amazon Surveillance, Momentum report, Clapper says Russia turned the election, Chinese supply chain attacks, Tech News, Human News, Ideas, Discovery, Recommendation, the Aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 125

Fri, 18 May 2018 00:17:51 +0000

Regulators aren't staffed to audit you on GDPR, inaudible Siri and Alexa commands, iOS 4 is bringing lots of privacy updates, California DNA storage, technology news, human news, Ideas, recommendation, the weekly aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

If You’re Not Doing Continuous Asset Management You’re Not Doing Security

Wed, 16 May 2018 16:44:21 +0000

How enterprises are completely ignoring the security activity that could help the most.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 120

Mon, 09 Apr 2018 17:19:38 +0000

It's 2 billion users now, Liinux beep, Digital Shadows finds fail files, cloud misconfiguration, AlterEgo, AI applications, Alexa sending payments, Tech, Ideas, Recommendation, Aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 119

Mon, 02 Apr 2018 08:15:09 +0000

Atlanta disabled, MyFitnessPal hacked, Cambridge Analytica election tampering, Drupal, Saks, DARPA drones, Cloudflare 1.1.1.1, Slack bosses, Democratic Chinese AIs, Georgia facepalm, tech, humans, ideas, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 116

Tue, 13 Mar 2018 22:41:02 +0000

Chinese at CanSecWest, Applebees POS, Palantir, Poisoning, TensorFlow DoD, Amazon laughing, Google 72-qbits, Amazon FinTech, Android P, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 115

Tue, 06 Mar 2018 16:48:40 +0000

GitHub DDoS, Celebrite Attacks, AI warnings, Palantir in New Orleans, Grub Backspace, 4G attacks, Space Corps, Amazon wins Defense Department deal, tech news, human news, discovery, notes, recommendation, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 113

Tue, 20 Feb 2018 07:05:56 +0000

Parkland tampering, Avoid Huawei, Bongo S3, Facebook 2FA Spam, Android Cryptojacking, Spyware Hacking, Password Dating, Technology News, Human News, Trends, Ideas & Analysis, Data & Statistics, Discovery, Recommendations, Aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 112

Mon, 12 Feb 2018 18:10:22 +0000

Chinese AR glasses, Cisco ASA flaws, Russian Nuclear Cryptomining, Marine quadcopters, POS Skimmers, Chrome HTTP, technology news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 111

Mon, 05 Feb 2018 21:36:58 +0000

Olympic security drones, Alexa trickery, Chinese quantum satellite, Audio Adversary Examples, BeeToken Ethereum theft, App Store Security, Cryptomining, technology news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 109

Mon, 22 Jan 2018 18:53:29 +0000

Social engineering, breach impact, Chinese turncoat, Android spy kit, Hawaiian OPSEC, Russian cables, bypassing CloudFlare, technology news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 107

Mon, 08 Jan 2018 10:34:32 +0000

Meltdown & Spectre, India's Database, Criminals and Monero, Equifax Non-action, technology news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Biggest Advantage in Machine Learning Will Come From Superior Coverage, Not Superior Analysis

Wed, 03 Jan 2018 21:57:10 +0000

Many people, in many fields, think Machine Learning won't replace their analysts because their humans are better than an algorithm. But it's not just about side-by-side comparisons. The bigger question is, "what percentage of the data can humans actually look at?", and the answer to that question (a tiny fraction) is the reason ML will be so helpful.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

It's Wrong to Fear-monger on IoT Security

Wed, 03 Jan 2018 16:58:02 +0000

How it's shortsighted and irresponsible for InfoSec professionals to fear-monger on IoT Security, and what we should be saying instead.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 106

Wed, 03 Jan 2018 08:08:14 +0000

Swatting death, Ethereum kidnap, Chinese dystopia, Alteryx S3 bucket, Starbucks Monero, Forever21, Microphone ads, technology news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 105

Mon, 18 Dec 2017 21:15:23 +0000

TRITON, 1.4 billion credentials, HP keyloggers, iTunes Bitcoin laundering, removing credit card signatures, technologgy news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 104

Tue, 12 Dec 2017 10:48:14 +0000

NiceHash hacked, Apple bugs, Stealing Cars via Relay, Crypto Collusion, technologgy news, human news, discovery, notes, recommendations, and the aphorism of the week…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 103

Mon, 27 Nov 2017 08:32:21 +0000

Uber's mess, Google tracking users, AI finding missiles, drone disclosure, net neutrality, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 102

Mon, 20 Nov 2017 17:09:49 +0000

Github security, China IW, Brexit IW, S3 again, Quad9 DNS security, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 101

Mon, 13 Nov 2017 08:18:08 +0000

Verizon’s DBIR Report, sleeping fingerprints, IoT legislation, S3 security tools, AI tricks scammers, SEALs kill Green Beret, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 100

Mon, 06 Nov 2017 19:04:47 +0000

Russian IW memes, POTUS Twitter, Texas Attack, Silence Trojan, NotPetya Damages, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 99

Tue, 31 Oct 2017 16:30:45 +0000

Information Warfare, AI vs. CAPTCHA, Google Bug Bug, DARPA Drone Swarms, USB Fail, Medical Extortion, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

InfoSec Needs to Embrace New Tech Instead of Ridiculing It

Thu, 26 Oct 2017 06:02:33 +0000

The InfoSec community needs to learn how to shepherd the public through new technology instead of joining them in fleeing from it.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Difference Between Violence and Terrorism

Thu, 26 Oct 2017 03:53:16 +0000

The ways that terrorism and violence are different, and why it's important that we don't confuse them.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 98

Mon, 23 Oct 2017 02:59:10 +0000

The Reaper botnet, Google Advanced Email Protection, Bitcoin Over $6,000, Duo's $70 million, Dubai going to facial recognition, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 97

Mon, 16 Oct 2017 20:02:14 +0000

Major WPA2 Flaw, Suburu hack, Vulnerable Container Ships, F-35 Data Stolen, Accenture S3 Buckets, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 96

Wed, 11 Oct 2017 04:12:48 +0000

Russians vs. NSA, ArcSight vs. Russia, DISQUS breach, TrendMicro vulnerability, Stamos, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 95

Mon, 02 Oct 2017 23:00:04 +0000

IE leak, Whole Foods, Sonic, Apple Open-sources Kernels, Equifax $15 million retirement, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 94

Mon, 25 Sep 2017 19:04:27 +0000

Deloitte hacked, Equifax fumbles, SEC hacked, iCloud ransom, Adobe PGP facepalm, Verizon S3 buckets, CCleaner, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 93

Mon, 18 Sep 2017 08:28:05 +0000

Equifax fallout, BlueBorne, Microsoft RCE, iPhone X, Dumping AWS, Cassini, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 92

Mon, 11 Sep 2017 03:26:42 +0000

Equifax, Hutchins got Krebs'd, Russia used Facebook, Energy hacking, Anti-protester AI, High-pitched Assistant hacking, tech news, human news, ideas, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 91

Mon, 04 Sep 2017 21:00:51 +0000

465K pacemaker patches, instagram leak, DJI bounty, Marketing departments messing up security news, false dichotomy in complex issues, IRS social media mining, death of the Sun, more fake Wells Fargo accounts, human echolocation, facial gestures as interface, discovery, recommendations, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 90

Mon, 28 Aug 2017 11:09:56 +0000

Swedish gov leak, OPM hacking arrest, cybersecurity spending $1T, Oreo, Whole Amazon Foods, intelligence genes, false dichotomy of conflicting ideas, OPSEC obscurity, discovery, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 89

Sun, 20 Aug 2017 23:47:20 +0000

Serious CANBUS issue, Cyber as a branch of the service?, iOS 11 Cop Mode, biometric wearables, Bill Joy battery, bitcoin forking again, ideas, discovery, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 88

Tue, 15 Aug 2017 05:48:33 +0000

Amazon Macie, APT28, Cuba sonic attacks, Palantir and police, DNA malware, confusing self-driving cars, ideas, discovery, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 85

Mon, 10 Jul 2017 16:57:42 +0000

The future of security testing, nuclear plant hacks, Android malware, satellite decryption, wildcard certs, military encryption, gsuite protections, WWE S3, tesla 3, jawbone, drone hacking, mental aging, millionare GPAs, discovery, recommendations, the weekly aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 83

Tue, 27 Jun 2017 22:59:01 +0000

Petya ransomware worm, RNC breach, Anthem settlement, Russians want source code, risk ratings, patching, ICOs, ideas, discovery, recommendation, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 82

Mon, 12 Jun 2017 06:15:20 +0000

Live from London, Gamestop hacked, PowerPoint malware, Chinese Apple Hack, XSS, WWDC summary, FDA approves cancer drug, heroin $51B, ideas, discovery, recommendation, aphorism, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 81

Sun, 04 Jun 2017 18:40:14 +0000

OneLogin, Extortion, Coinbase, Pandemic, Booz, Mobile Apps, Electricity, AI voices, Sheets, Walmart, Karoshi, APIs, discovery, aphorisms, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No 79

Tue, 23 May 2017 19:37:14 +0000

WannaCry, Intel leaks, DocuSign phishing, cockpit codes, Delta facial recognition, China vs. CIA, WordPress bug bounty, Marines and drones, HPE R&D, Watts, graduates only making 40K, China's DNA project, honeymoons vs. rings, Sherrif Eli, retirees hoarding money, boo restaurant kiosks, investing in employees, discovery, aphorisms, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 78

Sun, 14 May 2017 19:27:09 +0000

The WannaCry ransomware worm, the president's EO, Macron hacking, HP backdoors, laptop bans, Amazon releases, Chinese online commerce, CRISPR, Germany and renewable energy, beetles, dental health as social indicator, Reading superpowers, Net Neutrality, serverless, deep learning black box, The Three Body Problem, you can now support the site, The Mechanical Universe, TrueCaller, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No.76

Tue, 02 May 2017 19:22:58 +0000

Verizon's DBIR report, Chipotle (again), USAF bounty, NSA surveillance hampered, Android hacks, Taser and computer vision, Google fights fake news, Exercise types & mental skills, Perfect pitch recording, Lifecasting, RF X-Ray, discovered links, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 75

Sun, 23 Apr 2017 18:34:25 +0000

DoublePulsar in the wild, vigilante IoT worms, Bose listening headphones, PoS hacking sentence, Google ad blocking, best anti-aging exercises, unqualified Indian engineers, , discovered links, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No 74

Mon, 17 Apr 2017 08:22:58 +0000

Shadow Brokers, fingerprinting Netflix traffic, Magneto vuln, Juniper advisories, Amazon speaker tech, Facebook's 100Gbit optical switches, Google Hire, Minecraft currency, a solar-powered water harvester, OWASP Top 10 draft comments, remote SSH, EC2 and NAT firewalls, deep learning is a black box, discovered links, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No 73

Mon, 10 Apr 2017 08:35:52 +0000

Word 0-day, BrickerBot, iOS GIF, Russian arrested, Tizen, OilRig, APT10 MSPs, Dallas sirens, ATM drilling, Watson golf, Uber Italy, AI memory, links, projects, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 72

Mon, 03 Apr 2017 10:08:55 +0000

Apple fixed tons of bugs, hacking smart TVs over DVB-T, gift card bots, handgun AIs, Uber manipulations, AI vs. jobs, how to read more, cloud secret management, OPSEC and phishing, links, projects, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 71

Sun, 26 Mar 2017 20:05:40 +0000

Half of Android devices haven't been patched in over a year, Tavisclosure, NEST camera flaws, senate vs. privacy, electronics ban, bad Let's Encrypt certs, Moodle SQLi, infosec venture capital drying up, IBM employees heading into the office, Twitter going paid model, Google killing Talk, Quiet spaces, Age of the influencer, AI vs. jobs, tools, aphorisms, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 70

Mon, 20 Mar 2017 01:15:55 +0000

Russians at it again, Microsoft and Adobe updates, PoS breaches, US-CERT throws TLS shade, epilepsy tweet stalking, Tesla's billion, lip-reading AI, autonomous BMWs, Fiber Lasers, taxing robots, Green Zones and Red Zones, AI disruption of healthcare, discovery, recommendations, and aphorisms, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 69

Mon, 13 Mar 2017 15:59:33 +0000

The Vault7 CIA dump, Russian shenanigans, Dahua, Verifone, mandatory genetic testing, Wordpress, atomic storage, Google Kaggles, presenting at HouSecCon, fasting research, data wars, chaos, voice interfaces, tools, projects, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 68

Mon, 06 Mar 2017 18:06:32 +0000

Amazon's S3 outage, Uber greyballing, fooling AI, DNS RATs, automating human jobs, suicide and ML, post-work IQ and creativity, greatness vs. imperfection, media choice, tools, projects, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 67

Mon, 27 Feb 2017 08:50:39 +0000

CloudBleed, SHA1-1, White House Leaks, Planets, Satellites, Drones vs. Eagles, InfoSec Jobs, ExFil, IQ and Creativity in a Post-work World, Weaponized Narrative, Security Tools, Tons of Great Links, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 66

Tue, 21 Feb 2017 18:58:07 +0000

My recap of RSA 2017, Google's zero-trust implementation, Trump domain hacked, robots doing your taxes, the IoT Security train analogy, the future of authentication, toolswatch best tools of 2016, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 64

Tue, 07 Feb 2017 09:08:24 +0000

Tax phishing, Microsoft SMB vulnerability, Cellebrite tools released, Computer interfaces, Centrism, Mobile 2.0, new projects, more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Experience of Free Will is Not Free Will

Wed, 01 Feb 2017 09:10:52 +0000

A short essay on how it's possible to experience free will without it being real.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 63

Mon, 30 Jan 2017 13:08:12 +0000

Peak Prevention at AppSec Cali, Austrian Hotel Ransomware, Russian FSB Drama, WordPress Issues, AV Conflicts, Uber Pays Another Company's Bounty, Data Science, Rules for Rulers…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 62

Sun, 22 Jan 2017 22:39:52 +0000

An OWASP Gaming Security Framework, infosec news, OPSEC is obscurity, AMP is a horrible idea, the End of Twitter, the Sound of Silence, chaning your Echo wake word, RAWGraphs, Ask Lesley, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 61

Mon, 16 Jan 2017 11:17:55 +0000

Nasty new GMail phishing bug, Microsoft kills security bulletins, ShadowBrokers go dark, Cellebrite hacked, Combining sensor data with machine learning, the tradeoff between privacy and IoT functionality, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Gratitude is the Epicenter of Happiness

Sat, 14 Jan 2017 11:52:00 +0000

The elusive center of happiness is gratitude, and the reason seems to be evolution.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

If You Believe Nothing You Can Be Convinced of Anything

Fri, 13 Jan 2017 09:00:01 +0000

An essay about the Russian hacking attribution issue, and how people who cannot differentiate the credibility of information sources are ultimately set to believe anything rather than nothing.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 60

Wed, 11 Jan 2017 08:06:37 +0000

How we know Russia did it, the FBI using Best Buy, an IBM study on ransomware, MongoDB hacks, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

4 Things To Do in the First Week of Every January

Tue, 27 Dec 2016 20:04:33 +0000

A short piece on why I don't like New Years resolutions, and the four things I prefer to do instead.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 58

Mon, 19 Dec 2016 08:37:38 +0000

This week's topics: Yahoo!, Shadowbrokers, Building Your Own Honeytrapping Infrastructure, The Power of Newsletters, Project Aristotle, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 57

Mon, 12 Dec 2016 19:06:13 +0000

This week’s topics: Russia gave us attribution for Christmas, the NSA is shedding talent, the evilest ransomware, how to raise someone's IQ in 2 minutes, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 56

Mon, 05 Dec 2016 01:32:03 +0000

Gooligan, Korean Game Hacking Law, DoubleFlag Experian Hack, Georgia Tech Attribution Research, Amazon's re:Invent Conference Highlights, recommended links, and more…

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 55

Mon, 28 Nov 2016 02:38:14 +0000

Biowarfare defenses, AI advances, mergers and acquisitions, Facebook and censorship, IoT definitions, the philosophy of Westworld, and more...

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Difference Between Threats, Threat Actors, Vulnerabilities, and Risks

Sun, 27 Nov 2016 02:42:37 +0000

My essay that clearly separates the differences between the core infosec terms of threat, threat actor, vulnerabilty, and risk.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

The Difference Between Existentialism, Nihilism, and Absurdism

Tue, 22 Nov 2016 23:42:58 +0000

For centuries there have been people who believe there is no intrinsic meaning in the universe. Here I’ll summarize the three major branches of this belief, and how each proposes we deal with the situation.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Stop Being Proud of Complexity

Tue, 22 Nov 2016 07:36:31 +0000

An essay on how complexity often communicates the exact opposite of its desired effect.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 54

Mon, 21 Nov 2016 02:46:49 +0000

Britain's new surveillance law, CRISPR biotech, the Army's new Phaser, NIST's new IoT Security guidelines, ML-based facial recognition, and more...

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 52

Mon, 07 Nov 2016 06:12:04 +0000

Subscribe to Unsupervised Learning via: iTunes | Android | RSS | Newsletter

This is Episode No. 52 of Unsupervised Learning—a weekly show where I collect my favorite stories in infosec, technology, and humans, and talk about why they matter.

The show is released in two forms:

* the Podcast, which you can subscribe to via iTunes, Android, Blog, or RSS
* the Newsletter, which is the podcast’s companion and conveniently serves as its show notes as well. You can get the newsletter by clicking here or on the image/text below.

Thank you for listening!

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 51

Mon, 31 Oct 2016 17:24:04 +0000

Subscribe to Unsupervised Learning via: iTunes | Android | RSS | Newsletter

This is Episode No. 51 of Unsupervised Learning—a weekly show where I collect my favorite stories in infosec, technology, and humans, and talk about why they matter.

The show is released in two forms:

* the Podcast, which you can subscribe to via iTunes, Android, Blog, or RSS
* the Newsletter, which is the podcast’s companion and conveniently serves as its show notes as well. You can get the newsletter by clicking here or on the image/text below.

Thank you for listening!

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 50

Mon, 24 Oct 2016 15:49:14 +0000

Subscribe to Unsupervised Learning via: iTunes | Android | RSS | Newsletter

This is Episode No. 50 of Unsupervised Learning—a weekly show where I collect my favorite stories in infosec, technology, and humans, and talk about why they matter.

The show is released in two forms:

* the Podcast, which you can subscribe to via iTunes, Android, Blog, or RSS
* the Newsletter, which is the podcast’s companion and conveniently serves as its show notes as well. You can get the newsletter by clicking here or on the image/text below.

Thank you for listening!

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: No. 49

Tue, 18 Oct 2016 10:58:09 +0000

Subscribe to Unsupervised Learning via: iTunes | Android | RSS | Newsletter

This is Episode No. 49 of Unsupervised Learning—a weekly show where I collect my favorite stories in infosec, technology, and humans, and talk about why they matter.

The show is released in two forms:

* the Podcast, which you can subscribe to via iTunes, Android, Blog, or RSS
* the Newsletter, which is the podcast’s companion and conveniently serves as its show notes as well. You can get the newsletter by clicking here or on the image/text below.

Thank you for listening!

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 46

Tue, 27 Sep 2016 06:28:09 +0000

Subscribe to the Podcast via: iTunes | Android | RSS | Newsletter

[ Click here to get the full companion newsletter with complete show notes from this episode. ]

[ Click here to get the full companion newsletter with complete show notes from this episode. ]

Subscribe to the Podcast via: iTunes | Android | RSS | Newsletter

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 45

Mon, 19 Sep 2016 06:03:23 +0000

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 44

Sun, 11 Sep 2016 08:22:07 +0000

Subscribe to the Podcast via: iTunes | Android | RSS | Newsletter

[ Click here to view the full companion newsletter with complete show notes from this episode. ]

[ Click here to view the full companion newsletter with complete show notes from this episode. ]

Subscribe to the Podcast via: iTunes | Android | RSS | Newsletter

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 43

Wed, 07 Sep 2016 09:03:17 +0000

Subscribe to the Podcast via: iTunes | Android | RSS | Newsletter News Internet disinformation service for hire [ Link ] Rob Fuller (@mubix) has found a way to pull credentials from a locked machine using a USB dongle and Responder [ Link ] Yelp starts new bug bounty with HackerOne, offers up to 15K […]

:: Unsupervised Learning: Episode 43 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 42

Thu, 01 Sep 2016 05:59:25 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] InfoSec news and articles Dropbox hacked 68 million accounts Back in 2012 Malware infected all Eddie Bauer stores in U.S. and Canada All 350 stores in North America Wicked iPhone vulnerability called Trident (3 0days) All you need to do is follow a link, […]

:: Unsupervised Learning: Episode 42 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 41

Thu, 18 Aug 2016 23:25:20 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] InfoSec news and articles NSA hacking tools supposedly leaked back in 2013 Could have just been a jump box, which rival groups commonly attack from each other Snowden thinks Russia hacked the NSA and is announcing this as part of the DNC debate Flip […]

:: Unsupervised Learning: Episode 41 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 40

Tue, 31 May 2016 06:31:17 +0000

- LinkedIn breach from 2013 | 65.5 million emails and salted and hashed passwords
- XSS in Wordpress plugin (JetPack)
- DerbyCon is going to stream live this year | you can’t stream the networking, so it probably won’t hurt next year’s sales too much
- Websites using audio fingerprinting to track web users

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 39

Sat, 14 May 2016 17:31:01 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] InfoSec news and articles BAE systems saying that SWIFT hack is linked to the Sony breach [ Link ] Kaspersky is saying ransomware is the #1 threat now [ Link ] Identity thieves grab W-2 data from Equinox [ Link ] Germany claims it was […]

:: Unsupervised Learning: Episode 39 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 38

Mon, 02 May 2016 03:53:28 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] InfoSec news and articles Michigan lawmakers want life sentence for hacking cars | will that apply to changing the speed of your turn signal? SWIFT to get update after Bangladesh hack NSA is so overwhelmed with data that it’s no longer effective FBI now […]

:: Unsupervised Learning: Episode 38 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 37

Mon, 25 Apr 2016 19:46:56 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] InfoSec news Feds paid over 1M to get into San Bernardino iPhone Continued fallout from Panama papers 3.2 million servers vulnerable to JBoss attack which is being used in SamSam ransomware attacks MIT launches internal bug bounty platform | https://threatpost.com/mit-launches-experimental-bug-bounty-program/117618/ NSA recommends out-of-band taps […]

:: Unsupervised Learning: Episode 37 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 36

Mon, 18 Apr 2016 16:21:35 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] News [ ] Nothing useful found on Farook’s phone | http://www.theregister.co.uk/2016/04/14/nothing_useful_on_farook_iphone/?utm_source=dlvr.it&utm_medium=facebook | I think they knew this and used it as a lever for something they’ve wanted for a long time [ ] Apple engineers say security threat is hackers, not government | http://www.macrumors.com/2016/04/15/apple-engineers-hackers-security-threat/ […]

:: Unsupervised Learning: Episode 36 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 35

Mon, 11 Apr 2016 06:26:41 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] News [ ] The hack of Mossak Fonseca has been tied to a breach of their wordpress install through a plugin called Revolution Slider, leading to the Panama Papers breach. So just to be clear, we might have just seen the biggest data leak […]

:: Unsupervised Learning: Episode 35 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

5 Increasingly Effective Ways to Achieve Immortality

Thu, 07 Apr 2016 06:56:01 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

—

I think a lot about how to become immortal. More than I should, probably.

Many think it’s a waste of time. Everyone dies, and it’s foolish to think we can avoid it. This piece takes a different view, and describes a number of ways, with varying levels of requirement and effectiveness, one can either avoid dying or live on after death.

They’ll go from most practical to most effective.

1. Live On Through Your Children

This one is cheating a bit, mostly because you’re not actually becoming immortal.

But the fact remains that this does give many people (probably billions) a genuine feeling of lastingness, and that’s significant.

Again, I don’t really count it because it’s an extremely tenuous way of living on, but it deserves mention.

2. Live On Through Your Works

This one is kind of like the first, in that you’re not actually getting to continue living. So it’s a bit of a misnomer too.

What it deals with, however, can also provide a significant sense of contentment at the end of one’s life. Basically, if you leave behind works and ideas that will be used by significant numbers of people, for a significant period of time, you can think of this as living on.

It’ll take some sting off of dying, perhaps. But not much. You’re still dead.

3. Reconstruction Through Reproduction of Variables

Ok, now we’re getting into actual survivability.

This one works like this: either before you die, or after you are dead, an organization collects a series of inputs about you and uses them to create a working model of you.

Here are some of the input types:

* Your DNA (this is really important)
* Everything there is to know about where you grew up (what was happening in the world then, where you went to high school, what the major news events were, the major themes in culture and art, etc.)
* Everything there is to know about the people you grew up with
* All your personal, transformational experiences. This can be gathered from a myriad of sources, but your own description of the incidents will be key. It’ll also come from interviews with people who know those experiences and how they affected you
* Every piece of output you left behind, e.g. blog posts, Facebook posts, books, essays, schoolwork, letters, videos, whatever. They’re all harvested for evidence of who you are

Then, the system takes the environment data and models it against your DNA, which it got from a piece of hair or something. It runs your entire genome and determines how you would respond mentally to these various stimuli.

The output is a digital life form that is, as much as it can be, you. You now live in cyberspace somewhere, and you’re introduced to the fact that you were reconstructed using this method, and that you have this rich history, etc. You are you.

4. Preserving Your Brain to Be Put in Another Body in the Future

Another method for achieving comfort that you’ll continue to live after death is to have a reliable way to preserve your brain once you pass, with the belief that it’ll be either 1) put into another body later (not my favorite idea), or 2) it’ll be downloaded into a digital form to live permanently in cyberspace.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Unsupervised Learning: Episode 33

Thu, 07 Apr 2016 04:59:31 +0000

News

[ ] Panama Papers leak
[ ] Hackers targeting major US law firms
[ ] Ubuntu has some kernel vuln patches out
[ ] 50 million turkish citizens have their information dumped online
[ ] Microsoft makes cloud-app security services now available (Adallom)
[ ] OSVDB shutting down because nobody would pay them
[ ] WhatsApp is now end-to-end encrypted
[ ] Critical new Flash bug, expect Ransomware to leverage it
[ ] Security salaries skyrocketing due to talent shortage | http://www.csoonline.com/article/3049374/security/survey-with-all-eyes-on-security-talent-shortage-sends-salaries-sky-high.html
[ ] Data exfiltration using Smart Lightbulbs | http://www.scribd.com/doc/306620189/Eyal-Ronen-and-Adi-Shamir-Hack-Lightbulbs
[ ] Significant Firefox extensions bug, look for a patch soon
[ ] $40 attack that steals police drones from 2 kilometers away | http://www.theregister.co.uk/2016/04/01/hacker_reveals_40_attack_to_steal_28000_drones_from_2km_away/ | break wep, disconnect their controller, connect yours, must be within 100 meters
[ ] IoT is expected to push the US ahead of China in manufacturing by 2020 | http://www.zdnet.com/article/internet-of-things-analytics-expected-to-push-u-s-ahead-of-china-for-manufacturing/
[ ] 1,400 vulnerabilities found in automated medical supply system | https://www.helpnetsecurity.com/2016/03/30/1400-flaws-automated-medical-supply-system/ | automated cabinets that dispense medical supplies , if you’re locked out it could be bad

:: Unsupervised Learning: Episode 33 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 32

Mon, 28 Mar 2016 05:07:20 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

News

* [ ] Verizon Enterprise Solutions had a major data breach of their customer data. This is the group that handles breaches for their customers. “Virtually every attack in this data set (98 percent) was opportunistic in nature, all aimed at easy marks…”
* [ ] Iranians charged with attacks against US banks and a New York dam
* [ ] Hackers steal 81 billion from the Federal reserve bank of New York
* [ ] Uber launches bug bounty program, describes the surface area. Someone said it was really bad, though. Not sure what that’s about
* [ ] New ultra-fast SSD technology coming from Intel soon
* [ ] FBI backs off request for Apple backdoor. Says they have it handled. We find out it’s an Israeli company
* [ ] Water treatment plant hacked, chemical mix changed for tap supplies | http://www.theregister.co.uk/2016/03/24/water_utility_hacked/
* [ ] German steel mill compromised and wrecked a blast furnace
* [ ] This is after a string of attacks against power companies using spear phishing and office malware
* [ ] Microsoft’s AI Chatbot was a teenage girl, but it learned from the people who talked to it, so before long it was talking about loving incest, sex, and hitler
* [ ] Millions of Android devices vulnerable to root exploit due to Snapdragon chip flaw
* [ ] Kentucky-based Methodist Hospital declares state of emergency after it’s wrecked by Locky ransomware
* [ ] Credit Card Breaches Linked To Security Cameras
* [ ] Chinese national pleads guilty to stealing plans for Air Force aircraft
* [ ] Hackers offer Apple’s Ireland staff $23,000 for their login credentials
* [ ] Ransomware hitting major vulns: The Angler, Neutrino, Magnitude, RIG, and Nuclear exploit kits spread the Flash CVE 2015-7645 exploit; Angler spreads Flash 2015-8446; Angler and Neutrino spread Flash CVE 2015-8651; and Angler spreads Silverlight CVE-2016-0034, an exploit exposed in the Hacking Team breach.
* [ ] Microsoft Deploys Macro Blocking Feature in Office to Curb Malware

Ideas, updates, and discussion

* [ ] Innovation Sandbox | Innovative Security Products (2016 Edition)
* [ ] AI and messaging apps are the new mobile apps
* [ ] Human Attention as Attack Surface | https://danielmiessler.com/blog/human-attention-as-influence-attack-surface/
* [ ] Most can’t respond to breach: http://blogs.csc.com/2016/03/15/while-majority-of-orgs-fear-big-breach-theyre-not-prepared-to-respond/?utm_content=bufferc043c&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer
* [ ] How your data is collected and commoditized online by free online services | http://www.troyhunt.com/2016/03/how-your-data-is-collected-and.html

Tools, talks, and projects

* [ ] Innovation Sandbox | Innovative Security Products (2016 Edition)
* [ ] 2016 Data Breach Digest | https://danielmiessler.com/blog/analysis-verizons-2016-data-breach-digest/
* [ ] AI and messaging apps are the new mobile apps | https://danielmiessler.com/blog/ai-assistants-are-the-new-applications/
* [ ] Idea Expansion Format | https://danielmiessler.com/blog/idea-expansion-format-ief/
* [ ] BinDiff is a comparison tool for binary files that helps to quickly find differences and similarities in disassembled code.
* [ ] IntelMQ is a solution for CERTs for collecting and processing security feeds, pastebins, tweets and log files using a message queuing protocol.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 31

Mon, 14 Mar 2016 05:33:16 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] News [ ] FBI saying it will force Apple to hand over source code and signing ability if they don’t comply | http://thehackernews.com/2016/03/fbi-apple-iphone.html [ ] Locky ransomware campaign, JS downloader [ ] X11 forwarding issue in OpenSSH, update now [ ] Seagate Phish Exposes All […]

:: T1SP: Episode 31 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

My Response to Sam Harris on the Apple Encryption Debate

Sun, 28 Feb 2016 01:03:22 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

[ UPDATE: Much credit to Sam for engaging in the conversation. I’m not sure how people claim he’s closed on this topic when he is clearly open to exploring it. ]

I don't agree with all of it. But this is a very good response to my remarks about encryption. https://t.co/rMl8zgtuWN @danielmiessler— Sam Harris (@SamHarrisOrg) February 28, 2016

—

I’ve been planning on doing a podcast episode on the Apple encryption debate for some time, but I was unsure of the format I should use.

This problem was just solved for me when I listened to Sam Harris—who is someone I respect greatly—miss the mark significantly in a recent podcast.

The thing that compelled me to respond was the fact that I don’t often disagree with Sam. His logic is usually impeccable, and we often end up with nearly identical opinions.

So it was somewhat surreal to hear him be wrong about something. Or at least disagree with me (which, of course, may not be the same thing).

Anyway, being in information security myself I felt like a response was important.

This essay takes the form of a retort to his comments, followed by my own points and then a summary.

Sam’s points

[ The points are summarized, by the way, not necessarily exact quotes. ]

* Apple built the lock, but didn’t build the key, and now they’re telling us that building the key would put us all at risk. Self-serving abdication of responsibility.
* Community in tech swayed by Snowden. Even when the government gets a court order, they think they shouldn’t give access
* Gives cases where text messages could have helped solve a murder, but the texts are unread because the iPhone is unbreakable. Imagine being a family member!
* Could someone build an impregnable room inside their own house?
* What if you could take a drug that could make your DNA unanalyzable? So you could never be linked to any crime. The only people who would benefit would be criminals!
* Apple could maintain the backdoor and it’d be fine, just like banks have your banking information. They’re trading on paranoia.

My responses

[ NOTE: This will come in the form of a podcast, which I may still record. I wrote it largely in the voice of a spoken conversation. ]

First, let’s start with where we agree.

You speak of a “Cult of Privacy”, where people are blindly saying that Snowden did nothing wrong whatsoever, that he didn’t set a dangerous precedent, that any violation of privacy in any case is always bad, etc., etc.

I absolutely agree with you that this is not an intelligent way to understand and discuss current events.

But there’s another cult on the other side, and it’s one that you’re coming dangerous close to membership in. And that’s “The Cult of Safety”. This one works like this: If there is any situation in which some amount of data could be used to help learn where a kidnapped girl is, or where a terrorist’s bomb will detonate, then it’s within the rights of a government to legally seize ...

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 29

Tue, 23 Feb 2016 07:52:29 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

News

* [ ] Apple calls out FBI on iPhone decryption case
* [ ] Trump calls for a boycott of Apple, from an iPhone
* [ ] Judge Rules FBI Must Reveal Malware It Used to Hack Over 1,000 Computers
* [ ] Wow. Someone hacked @linuxmint’s website and replaced ISOs with backdoored version today http://blog.linuxmint.com/?p=2994
* [ ] This affects a universally used library (glibc) at a universally used protocol (DNS). Generic tools that we didn’t even know had network surface (sudo) are thus exposed, as is software written in programming languages designed explicitly to be safe. ~ Dan Kaminsky
* [ ] Mint Forum Hacked, website compromised, fake downloads posted
* [ ] TeslaCrypt now targeting Joomla sites as well as WordPress
* [ ] Hollywood Hospital pays 17K to decrypt files; hope they cleaned up afterwards otherwise they’ll be paying rent
* [ ] Patch your vServer; RCE flaw
* [ ] Power grid honeypot by MalCrawler

Ideas, updates, and discussion

* [ ] The San Bernadino health department changed the iCloud password (at the FBI’s request) after having the device for just a few hours
* [ ] The FBI didn’t have the other two phones, which were destroyed
* [ ] The implications for data security if US companies are told the government must be able to get in is that US citizens will soon be told that they cannot create, purchase, or use tech that is locked down in this way
* [ ] There’s another way to the iPhone data: https://threatpost.com/delicate-hardware-hacks-could-unlock-shooters-iphone/116388/ via @IOActive

Tools, talks, and projects

* [ ] Bitquark is releasing some subdomain research; will be added to SecLists
* [ ] Log.io web interface for looking at log files | http://www.tecmint.com/linux-server-log-monitoring-with-log-io/
* [ ] Lobotomy: Automate Android assessment and reversing | https://n0where.net/android-security-toolkit-lobotomy/
* [ ] SSLyze: https://n0where.net/fast-and-full-featured-ssl-scanner-sslyze/
* [ ] SELKS: Full NSM with Suricate and rule manager | https://www.stamus-networks.com/downloads/

Announcements

* [ ] I’ll be at the IOAsis at RSA next week; come by and say hello

Miscellaneous

* [ ] War-games movie prompted Reagan to take cybersecurity action | http://www.nytimes.com/2016/02/21/movies/wargames-and-cybersecuritys-debt-to-a-hollywood-hack.html

[ Subscribe to the Podcast: iTunes | Android | RSS ]

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 28

Mon, 15 Feb 2016 06:40:34 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] News [ ] Major Cisco ASA buffer overflow; patch now [ ] Critical patches for Windows and Flash [ ] The FBI is officially investigating Hillary Clinton regarding her private email server [ ] NSA doing a complete reorg (basically combining defense and offense) […]

:: T1SP: Episode 28 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 27

Tue, 02 Feb 2016 00:25:52 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] News [ ] Heavy surveillance around the Super Bowl [ ] A new BlackEnergy spear phishing campaign is targeting more Ukrainian companies [ ] Magneto, the popular e-commerce CMS, releases fixes to critical XSS issues [ ] Someone has posted private files of America’s […]

:: T1SP: Episode 27 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 26

Mon, 25 Jan 2016 07:56:02 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ] News [ ] Backdoor found in AMX devices that run corporate and government conference rooms [ ] Autopwn every Android device on your network using BetterCap and addJavascritInterface [ ] Cyber insurance challenged: a lawsuit for failing to cover a 500K loss in Houston […]

:: T1SP: Episode 26 appeared originally on danielmiessler.com.

:: Subscribe to Unsupervised Learning---my weekly show where I handpick the best stories from infosec and technology, and talk about why they matter.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 25

Tue, 19 Jan 2016 10:49:07 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

News

* [ ] TrendMicro node.js server listening on localhost can execute commands; exposed to the internet
* [ ] SSH backdoor found in Fortinet firewalls
* [ ] SSH client vulnerability
* [ ] Australia’s Cybercrime Online Reporting Network (ACORN) received over 39K reports of criminal activity in 2015
* [ ] Hyatt names 250 hotels hit by malware, includes the one for DerbyCon
* [ ] Web sense rebranding as Forepoint, acquires Intel’s firewall business
* [ ] Twitter might be ending its 140 character limit
* [ ] Major vulns still being found in Health and Fitness mobile apps
* [ ] Angler exploit kit continues to evade detection
* [ ] LostPass attack is a phishing email attack that works against LastPass (showed at Shmoocon this weekend)
* [ ] Virus just took down the Melbourne Health computer system
* [ ] Lastpass has found a workaround for the LostPass attack
* [ ] A bit match fixing problem has been found in Tennis
* [ ] Trustwave is being sued by Affinity for supposedly missing an second hack that was going on while they were there to fix an initial hack

Ideas, updates, and discussion

* [ ] IR is messy and dangerous; assume compromise; assume continued compromise; be extremely careful saying that things were contained; if you’re not Mandiant you’re probably not doing a great job
* [ ] Smartphone encryption and the gun debate: same coin? ISIS supposedly has its own encryption app. What next, make murder illegal?

Tools, talks, and projects

* [ ] FIR – Fast Incident Response Management Platform
* [ ] DIVA damn insecure and vulnerable Android app
* [ ] Kill Chain for Kali Linux 2.0 : recon, weaponization, delivery, exploit, installation, c2, actions
* [ ] EZ-Wave: exploiting Z-Wave networks using SDR
* [ ] GoPhish: open source phishing framework
* [ ] V3n0m SQLi scanner
* [ ] VScan : uses NSE scripts to find vulns
* [ ] SleepyPuppy Burp Extension
* [ ] DBDAT — Database Assessment Tool — https://github.com/foospidy/DbDat

Announcements

* [ ] Speaking at AppSec Cali next week (Tuesday) on ATM
* [ ] Shmoocon hiring list: http://www.room362.com/2016/01/2016-shmoocon-hiring-list.html

Miscellaneous

* [ ] Great security news source: https://security.didici.cc/news
* [ ] Thanks to Tripwire for giving a shoutout to the podcast on Twitter

[ Subscribe to the Podcast: iTunes | Android | RSS ]

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 24

Mon, 11 Jan 2016 04:46:54 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

News

* [ ] Norse lays of 20 people; not clear what percentage that is; threat intel not going so well?
* [ ] OPM declines to release details on its big breach
* [ ] Juniper says it’s going to remove the code that it thinks was developed by the NSA to eavesdrop on traffic
* [ ] CVE details lists (OS X, iOS, Flash, Air, IE, Chrome, Firefox) as the software with the most issues
* [ ] GM is going to do a bug bounty
* [ ] The Hacker Manifesto turned 30 (My crime is that of curiosity)
* [ ] Sophos Home free for Windows and Mac users
* [ ] SF Yellowcab filling for bankruptcy
* [ ] Hackers shut down Ukraine power grid; evidently a malicious word doc sent via email; supposedly the Sandworm Team
* [ ] Bicycle Attack on TLS: https://guidovranken.files.wordpress.com/2015/12/https-bicycle-attack.pdf
* [ ] North Korea evidently detonated a hydrogen bomb
* [ ] Time warner customers lose email passwords (320K)
* [ ] Microsoft killing off IE 8, 9, and 10 on January 12th
* [ ] VTech launching new product line after it got hacked and leaked data on 6 million kids
* [ ] Big Flash player update, 0-day and 18 other issues

Ideas, updates, and discussion

* [ ] Back to Ubuntu from CentOS
* [ ] Sick for five weeks
* [ ] Ikigai (what you love, what the world needs, what you can be paid for, what you are good at)
* [ ] Giving books as gifts

Tools, talks, and projects

* [ ] TOWER-SEC protecting ECUs and Telematics on cars
* [ ] AppSensor project; Detection points: https://www.owasp.org/index.php/AppSensor_DetectionPoints
* [ ] Where the Science is Taking Us in Cybersecurity, Dan Geer
* [ ] Rapid7 Hackazon app (modern)
* [ ] DVNA (Damn vulnerable Node Application)
* [ ] Argon2 password hashing algorithm
* [ ] Dradis
* [ ] Kippo SSH honeypot

[ Subscribe to the Podcast: iTunes | Android | RSS ]

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.
* It’s better to listen via iTunes or with the player embedded above, but you can also download the sound file directly.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 23

Mon, 04 Jan 2016 10:30:30 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

News

* [ ] Juniper backdoor; could have been found with diff; signs point to NSA
* [ ] RCE on FireEye appliances
* [ ] Hyatt got hacked; malware on POS
* [ ] 45K drones registered with FAA within 2 days
* [ ] Industry moving towards password-free logins; still single factor, now the factor is your device; although access to device could require factors
* [ ] Microsoft will now tell you if your account has been targeted by government authorities
* [ ] Tor announced it’s doing a bug bounty, looks like it’ll be internal
* [ ] Steam had a DoS that revealed 34K user details
* [ ] Linode has been suffering a massive DDoS on its datacenters, DNS infrastructure
* [ ] Spy files found in North Korea’s Operating System

Ideas, updates, and discussion

* [ ] 3 things you should do every January
* [ ] Web Scanner Series: Burp vs. Netsparker
* [ ] When you’re interviewing, make sure you make it clear that you’re the asset too, not just them
* [ ] Failing at the basics in intelligence and infosec
* [ ] Why Trump is Winning
* [ ] Sensitive data sent in URL over HTTPS
* [ ] Difference between correlation and causation
* [ ] Paul Graham’s REFRAGMENTATION post
* [ ] The relationship between Relaxation, Fun, and Performance
* [ ] Michael Coates makes the argument that false negatives are way better than false positives because false positives create unnecessary work for his team
* [ ] Brainstorm questions, not solutions

Tools and projects

* [ ] BLUTO
* [ ] Serpico
* [ ] Firmware Extraction from Craig Smith
* [ ] Vulnerability Database Resources
* [ ] IoT Attack Surfaces Project
* [ ] RobotsDisallowed Project
* [ ] Nowhere.net (CyberPunk)
* [ ] EyeWitness
* [ ] REST Security Cheat Sheet
* [ ] Censys.io
* [ ] GithubDorks
* [ ] InstaRecon (DNS lookups, whois, shodan, google dorks, etc)
* [ ] twfactorauth.org

Announcements

* [ ] Speaking at OWASP Cali end of January
* [ ] Currently working on an ICS / SCADA primer

Miscellaneous

* [ ] Need to check out the Benedict Evans blog
* [ ] Serial Podcast / Making a Murderer on Netflix
* [ ] If you know any Army veterans who are getting out and want to get into InfoSec, let me know
* [ ] Twitter account: CISSP Googling
* [ ] Sam Altman (Startup Playbook)

[ Subscribe to the Podcast: iTunes | Android | RSS ]

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Security and Obscurity

Sun, 13 Dec 2015 23:50:08 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

In this episode I explore the topic of Security and Obscurity by reading my popular essay on the topic.

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

T1SP: Episode 21

Sun, 13 Dec 2015 23:29:27 +0000

[ Subscribe to the Podcast: iTunes | Android | RSS ]

Topics for this episode:

News

* [ ] Stringing Shodan to exploitation
* [ ] Why you need to check HaveIBeenPwned
* [ ] Another DELL root cert hacked
* [ ] ISIS OPSEC advice (data privacy, tor, crytocat, telegram, proton mail, gps features on mobile devices, etc.) They also mention not to use instagram because Facebook has a poor privacy record.
* [ ] Obama wants to make it harder for terrorists to use technology to escape from justice
* [ ] DHS giving companies free penetration tests
* [ ] Issues in Honeywell gas detectors (path traversal and clear-text passwords)
* [ ] UAE Bank declines to pay ransom, data released
* [ ] Swift is open source
* [ ] Amazon two-factor now available
* [ ] Credit freeze vs. monitoring
* [ ] Thousands of IoT devices sharing the same SSH keys
* [ ] Many people predicting that 2016 is the year that Apple gets targeted by more attackers
* [ ] Engine Immobilizers hackable over the internet

Announcements

* [ ] Speaking at OWASP Cali end of January
* [ ] Currently working on an ICS / SCADA primer

Productivity

* [ ] Algorithmic learning

[ Subscribe to the Podcast: iTunes | Android | RSS ]

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.
* It’s better to listen via iTunes or with the player embedded above, but you can also download the sound file directly.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 20

Mon, 07 Dec 2015 06:29:14 +0000

Topics for this episode:

News and analysis

* [ ] Ads using high frequency sound to communicate across devices. The ultrasonic pitches are embedded into TV commercials or are played when a user encounters an ad displayed in a computer browser. While the sound can’t be heard by the human ear, nearby tablets and smartphones can detect it. When they do, browser cookies can now pair a single user to multiple devices and keep track of what TV commercials the person sees, how long the person watches the ads, and whether the person acts on the ads by doing a Web search or buying a product.
* [ ] Conficker in police body cameras (windows brute force tool)
* [ ] Siri iOS data extraction. Tv reporter
* [ ] The eye of Siri
* [ ] Read top stories from the security news site
* [ ] Expect to see concealed carry increase in the united states
* [ ] Starwood hotels hit with POS malware
* [ ] How to Deploy Splunk AD Monitoring in 437 Easy Steps
* [ ] PCs being shipped with MiTM certs in them (supply chain security)
* [ ] Java Deserialization flaws evidently affect more libraries
* [ ] France looking at banning Tor, blocking public WiFi
* [ ] Blackberry leaves Pakistan rather than provide backdoor
* [ ] EFF launches bug disclosure program for Let’s Encrypt and HTTPS Everywhere
* [ ] Flash is really on the way out

Ideas and commentary

* Personal Github

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.
* It’s better to listen via iTunes or with the player embedded above, but you can also download the sound file directly.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Corporations Don't Want Employees

Tue, 17 Nov 2015 05:00:00 +0000

Companies don't want employees, and they're doing their best to get rid of them. We should be getting ready for this.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 19

Mon, 16 Nov 2015 20:47:14 +0000

Topics for this episode:

News and analysis

* [ ] A couple of months into my job with IOActive
* [ ] Paris Attacks: resilience vs. prevention
* [ ] Updating the OWASP IoT Project (no longer the Top 10) It’s an umbrella project.
* [ ] Adding to the IoT project the SCADA Top 10 List (read the list), and Nabil Ouchn is going to be project leader on that project
* [ ] Pentagon farms coding to Russia
* [ ] Crypto email service pays ransom, gets taken out anyway
* [ ] Blackout Europe shows vulnerabilities in LTE. Forced leak of location within 2-KM radius. Were also able to block LTE and force 3G or 2G.
* [ ] Onapsis talks SAP HANA vulnerabilities. They’re config issues, and aren’t patchable, and include: remote file writes, remote directory deletions, moving files to where they can be access remotely, remote command execution, and remote python execution. To fix, you have to upgrade to the latest version and reconfigure your system. Also two issues with the database that allow HTTP RCE and SQL RCE.
* [ ] TPP : how did we even get an agreement that was secret in the first place. Forget the details. This should never be allowed to happen again
* [ ] Linux ransomware now hitting websites (broken by Brian Krebs)
* [ ] Linux.Encoder.1 has a predictable key for its ransomware, and a tool was released to decrypt victims’ systems. Good to know that even attackers make dumb encryption implementation mistakes.
* [ ] Visio smart tracking turned on for 10 million users. Here was the pitch “revolutionary shift across all screens that brings measurability, relevancy and personalization to the consumer like never before!”
* [ ] Ring-0 theory of devops: history of the o-ring. Small thing that everything else depends on. for serial tasks you need A players to have an A process. As you lower the whole thing tumbles down
* [ ] The Chinese Great Cannon: so we know about the Great Firewall, now learn about the Great Cannon
* [ ] Must read article: What ISIS Really Wants, by the Atlantic
* [ ] Two must follows: Gunnar Peterson, and Benedict Evans. Gunnar is brilliant in security, and Benedict works for Adresesen Horowitz

Updates and announcements

* Hit me up at IOActive if you have any security consulting needs.

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.
* It’s better to listen via iTunes or with the player embedded above, but you can also download the sound file directly.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 18

Tue, 25 Aug 2015 03:19:04 +0000

Topics for this episode:

News and analysis

* Sonar framework
* Schneider Electric SCADA issues revealed at DEFCON
* Ashley Madison hack, extortion will become more common, passwords added to SecLists
* Hackers attack PR firm and manipulate stocks
* Uber is quadrupling their security staff in 2015
* Android vulnerabilities lately

Ideas and commentary

* Business-based hacking: extortion-based hacking, ransomware, prediction-based hacking, PR releases, etc. Find the leverage, then execute the hack
* My problem with threat intelligence
* Optimal playlists for getting work done: baroque, no words, medium volume, 60 beats per minute
* Ambient sound as two-factor, which goes to my idea of continuous authentication
* How standardization and insurance will change security
* Miller (mlr) is like sed, awk, join, cut, and sort, but for name:index data such as CSV
* Participation in the OWASP IoT Project, Sasa Zdjelar is going to work on an IOT disposition project, Digicert is possibly working on a secure updates project, and we welcome others to add to the mix

Updates and announcements

* Vegas conferences: two talks, Blackhat Arsenal, DEFCON talk on IoT Attack Surface Areas, Caparser release
* If you’re into IoT, be sure to check out Craig Smith’s podcast at IoT Weekly, and Bruce Sinclair’s IoT podcast as well
* SecLists has been reorganized, go check it out
* Kali Linux 2.0 is out: new kernel, based on debian, rolling release, go get it

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Mr. Robot Episode 3 Review

Sun, 19 Jul 2015 18:45:58 +0000

[ NOTE: There are spoilers below, not just for this episode but for the show in general. ]

Enough people have asked me to start doing reviews of Mr. Robot episodes that I’m going to have a go at it. The deciding factor was the fact that I had such a strong desire to write during the third episode.

I’m going to start here with thoughts on the show in general, not just on episode 3.

Mr. Robot in general

The character

The main protagonist is an interesting character. He is what the writer evidently wants to capture, or actually believes to be, the template for a true hacker, which is highly damaged.

I am quite struck with the focus that is placed on how truly messed up he is. He has major drama with the way his father was killed. He largely hates society. He has deep personal depression. And he’s a user of narcotics.

I’m left thinking along the lines of a Hemingway type of artist, where the best creativity (in this case hacking) comes from those wo are the most tortured internally. Painters, musicians, etc. We’re familiar with the template.

This redeeming qualities, which the writers take equal efforts to highlight, are the desire to protect people, his love for the blonde girl, and a general but understated willingness to fight back against the soul-crushing force of our modern, consumerist society.

I really enjoy how he is only actually going to see his psychiatrist because he’s trying to help her, and if she’s actually going to help him it’ll kind of be on accident.

He deeply analyzes people and sees if they’re good, or weak, or in need of help, and then if they are he kind of hates them less because of this. And he is willing to use his superpowers to help them as a result, like when he pushed that guy out of his psychiatrist’s life.

The tech

Before going into the various problems, it must be said that the information security writing has been exemplary. I’d say definitely the best we’ve seen in either movies or “television” (whatever that is).

That said, there are a number of missing links in the armor.

On one of the first episodes, possibly the first, I noticed an IP address with a final octet in the 300’s. That’s just an editing miss, but it did take me out of the fantasy.

In Episode 2, which I generally didn’t like, I was quite bothered by the destruction scene. Here’s what I think happened there. They wanted to do a destruction scene, they had it all rigged up, and they wrote the story so that he’d do a quick hack and then get spooked enough to do it.

Then they show the infosec writer(s) the story component and they’re like,

Um, no. There’s no way anyone of this skill level would be hacking from his actual IP address.

And they’re like,

Well, we need to do this scene. Most people will miss that, and the scene will be cool enough to make up for it.

So the writer stomps out of the room mumbling about how they shouldn’t have hired him for authenticity if they were going to make such obvious mistakes, and they go with it.

Who knows if that really happened, but that’s how I imagine it.

Comments on modern society

I also find the comments on modern society to be quite interesting. I think it’s a big part of the whole hacker feel.

Hackers have always had this component to their mystique. Being counter-culture. Being underground. Fighting against the man. So the idea that everything is a conspiracy with the rich exploiting the poor, the strong exploiting the weak, and everything being about selling advertising and the dominance o...

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 17

Sun, 12 Jul 2015 10:17:47 +0000

Topics for this episode:

Announcements

* [ ] New desk, new mic setup

News

* [ ] SSL vuln spoofing issue, requires mitm
* [ ] Sleepy puppy XSS Payload Management Framework
* [ ] Troy Hunt on tech presentations
* [ ] Stock market attacked and taken down. Anonymous warned about it beforehand
* [ ] OPM goes to 21.5 million cards; director steps down
* [ ] People need to get fired for this stuff; it’s the only way anyone will care enough to do anything
* [ ] National Guard announces data breach

Commentary

* [ ] Mr. Robot
* [ ] Splunk buys Caspida
* [ ] Securing web session ids, by Eran Hammer

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 16

Tue, 07 Jul 2015 20:53:33 +0000

Topics for this episode:

* [ ] Hacking Team Hacked, show which oppressive governments bought their software
* [ ] No exploits for non-jailbroken iPhone
* [ ] The FBI spent 775K on Hacking Team software
* [ ] Citi creating a digital currency, called Citicoin
* [ ] Clinton attacking China on hacking, “Said they’re trying to hack into everything that doesn’t move.”
* [ ] Eric Holder suggests that Snowden had a positive impact, and that an agreement could be reached
* [ ] Critical bug in node.js patched that could lead to DoS
* [ ] MasterCard looking to do facial scanning to authenticate purchases
* [ ] FBI is offering 4.3 million for help finding top hackers
* [ ] A petition for Ellen Pao to leave Reddit has topped 150K signatures

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 15

Mon, 29 Jun 2015 04:09:52 +0000

Topics for this episode:

* iOS flaw
* The Chinese hacking campaign against the US
* Breach at Recorded future
* Hacking cars through key fobs
* NSA/GCHQ hacking of people through security software
* Snowden’s documents in the hands of the Chinese and Russians
* Samsung re-enabling Windows Update
* Mr. Robot
* Blackhat/DEFCON

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 14

Mon, 15 Jun 2015 05:39:36 +0000

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 13

Fri, 12 Jun 2015 08:44:03 +0000

Notes

* The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 12

Wed, 08 Apr 2015 04:31:07 +0000

Play Podcast

START CONTENT

* Singtel buys Trustwave
* Snowden does interview with John Oliver
* CheckPoint buys Lacoon

* Everyone’s trying to do everything, which gives the big people a major advantage

* China melted GitHub

* MiTM’d Baidu traffic and modified its analytics JavaScript to make constant requests to GitHub
* They did it because GitHub was hosting two mirror repos for content that is banned in China
* Also highlights the need for encryption, so that the JS couldn’t have been injected

* Obama just came out and said that if you attack us, we’ll sanction you

* How does that work exactly, when China makes everything we use?

* Then we just found out Russia hacked us through the State Department issue
* A major vulnerability was revealed in Inngate routers used in the US and Europe.

* It allows attackers to browse and write to the root file system of the devices, changing configuration, distributing malware, etc.
* Mostly used in US and European hotels

* Attackers are compromising IRS accounts in large numbers. Claim yours to avoid it happening to you
* Featuring Brooks Garrett

* He’s a friend and co-worker going back 8 years
* He’s the smartest IT guy I’ve ever known: sick programmer, Linux ninja, database, networking, everything. Full stack, real deal.
* He’s a volunteer firefighter
* He blogs at http://brooksgarrett.com: latest posts are Remote Streaming with Pi and MPD, Nagios SMS alerts with Amazon SNS, Cleaning Passwords from Logs, Fixing OhMyZSH prompts in PuTTY
* His Twitter is @brooksgarrett
* If you’re not following his stuff, you should be

END CONTENT

Notes

* Intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 11

Mon, 30 Mar 2015 09:51:57 +0000

Play Podcast

START CONTENT

* Twitch, a game streaming service owned by Amazon, was hacked last week

* Passwords, emails, usernames, addresses, phone numbers, dates of birth
* Amazon bought them last year for almost 1 billion dollars

* Bar Mitzvah attack on TLS

* Requires that you can sniff traffic
* Basically an RC4 problem
* Solution is to remove it from your supported algorithms

* GitHub Has been hit by a massive DDoS attack

* Apparently from China

* CSRF vulnerability found in a wind turbine

* Allowed you to pull usernames and passwords
* Also allowed the password to be changed for the default user, which had admin access

* CSRF vulnerability exposes Hilton customer accounts

* There was an account rotation issue where you could gain access to their account as long as you could guess their 9-digit username

* Snowden says IT workers now the targets of spies

* They’re not going after their information, but to use them for access to networks

* Premera hacked on same day as Blue Cross (January 29th)

* Same story: encryption, know your network, etc.
* Also same story: health data is harder to clean up from because it involves PII that cannot easily be changed
* More speculation around these attacks is that they’re data gathering for larger attacks on government networks

* Apple Acquires FoundationDB

* Fast NoSQL database probably to be used for its increasing entry into the services market

* Researchers use heat to breach air-gapped systems

* Everyone knows that an airgap is the best defense
* Ben-Gurion University came out with BitWhisper
* Now bidirectional using malware on both systems that controlled heat creation and detection
* Only 8-bits per hour

* BioCatch, Zumigo, Alibaba release tools to identify users

* I used to work with a technology called BioPass
* Uses what you do with your mouse, scrolling, how you smile via selfie, compares habits, your current location, etc. Similar to existing fraud detection just with more data points
* Really cool tech, needs to be used with the right authentication level

* Korea investing 5B in IoT and Smart Cars
* Bring Your Own IoT

* Recording audio and video are getting increasingly easy
* Sensitive meetings might become dead zones soon, and perhaps even sensitive work areas
* Some people will say that we already have this risk, but they key is the ease with which it can be done

END CONTENT

Play Podcast

Notes

* I skipped a week due to travel in Asia.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 10

Mon, 16 Mar 2015 03:41:40 +0000

Play Podcast

START CONTENT

* There was another SQL Injection bug found in SEO by Yoast

* It required admins to click a malicious link
* Was patched quickly
* It’s the plugins that make WordPress vulnerable

* Attackers are targeting gamers for ransomware

* Virlock is one version of ransomware that not only locks the screen, but infects files
* It’s also polymorphic, so it changes itself every time it runs
* TeslaCrypt goes after gamers, which seems super smart because they are often addicted

* The Hello Barbie doll is recording kids voices and sending the recordings over the Internet for voice recognition

* I get asked a lot about what to do about this kind of stuff
* Start by making a list of everything that can record voice or audio in your home, and determine what kind of controls you have on them
* Assume the worst, even though it’s probably not that bad

* US industrial systems attacked 245 times between October 2013 and September 2014

* Most attacks were against Critical Manufacturing and Energy
* Biggest vectors were spear phishing and port scanning

* CloudFlare aims to defeat DDoS with Virtual DNS

* They want to proxy DNS before it hits customer name server

* The CIA supposedly tried to hack Apple hardware

* The article has come under extreme scrutiny

* Going to be on the Security Weekly podcast with Pau
* Hillary Clinton’s email account dram
* OpenSSL is getting an audit

* Bout time

* Wikimedia is suing the NSA over surveillance
* Spoofing the boss is the best way to phish someone, evidently
* Had a great time at CactusCon in Phoenix

* Did a talk with Jason and saw Dave’s keynote
* Dave’s keynote was about struggling with the basics, not APT
* He asked when a major breach was NOT a dumb mistake

* Someone’s looking to make a Snowden Phone
* Looks like I’ll be on the Security Weekly podcast with Paul

* Going to talk about IoT security and my our OWASP project

END CONTENT

Play Podcast

Notes

* Comments welcome on content and format, as usual.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 9

Mon, 09 Mar 2015 14:48:58 +0000

START CONTENT

* Sorry about the audio last week; wireless headsets don’t compare to the Yeti
* The CIA is focusing on cyberespionage in its new management
* Anthem is refusing an audit by the OIG office–an org that audits health care groups that provide services to federal employees

* Nothing says I’m guilty like refusing an audit
* Reminds me of the Russians refusing the crash investigation in Game of Cards

* There’s been a possible credit card breach at the Mandarin Oriental hotel chain

* The incident was reported by Brian Krebs

* Three people were indicted in the Epsilon hack

* Resulted in around 1 billion email addresses being stolen

* Dave Aitel thinks junk hacking is a waste

* Basically hacking your blender or whatever
* In my opinion he’s missing the point that most conferences are like this
* I think there’s a hierarchy of talks

* Create new defense tool based on new defense idea
* Create new defense idea
* Create new attack tool based on new attack idea
* Create new attack idea
* Create new tool for existing attack or defense idea
* Describe existing attack or defense idea

* Microsoft has reported it’s vulnerable to FREAK as well, making it even more serious

* FREAK has proved to be less alarming than previous SSL vulns simply because of the difficulty of attack

END CONTENT

Play Podcast

Notes

* I think I’m going to standardize the intro and outro so that I only end up recording the actual story content each week.
* Any recommendations on what else you’d like to see would be appreciated.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 8

Tue, 03 Mar 2015 23:09:30 +0000

START CONTENT

* New SSL attack called FREAK

* Has to do with falling RSA back to a deprecated and weak level
* Requires the client and server are both vulnerable
* The solution is to patch
* Many orgs will also want to note which servers were vulnerable
* The lesson is that you don’t reduce security to increase it
* Backdoors x time = regret

* Using Ruby’s Open-URI could be dangerous

* open-uri monkeypatches kernel.open
* open(params[:url]) can execute |ls

* Hilary Clinton used a personal email address and did not store correspondence on government servers for her entire 4 years as Secretary of Defense

* This seems highly suspect
* First you’re putting that data at risk in a personal system
* Second you’re obviously trying to hide your conversations

* Facebook can access your account without your password
* Google no longer encrypting Lollipop by default

* Was one of the main selling points for 5, and now it’s gone
* They said it was simply a driver issue

* DLink routers have a remote command injection bug

* Could allow DNS hijacking and other attacks

* ISIS has threatened some members of the Twitter team for disabling their accounts

* This really puts a point on public presence for me
* I’m a strong proponent of the belief that the way to avoid attack is to avoid being a target, not to be hard to attack once people want to
* This works for personal attacks, not for countries obviously

* There has been some major fraud happening with people connecting stolen cards to ApplePay

* The issue isn’t a security problem with ApplePay, but rather with standard bank / card security issue

* Up to 18.8 non-Anthem customers exposed in the Anthem breach

* This is in addition to the 80 million actual anthem customers

* GoPro vulnerability on its website exposes customer Wi-fi passwords

* Expect more of this

* Uber took over 5 months to issue a breach notification

* There was a breach of driver names and license numbers that they just now disclosed

* Seagate NAS vulnerability allows unauthorized root access

* This raises the cloud storage issue I blogged about last week

END CONTENT

Play Podcast

Notes

* Sorry about my voice on this one. I’m a bit sick. :(

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 7

Tue, 24 Feb 2015 00:02:51 +0000

START CONTENT

* New stuxnet like piece of malware was discovered

* Was found by Kaspersky
* Has infected thousands of computers, mostly in Iran
* The malware is the most advanced ever found
* Can hide on the computer even after reinstall
* Many of the names used in the application are known NSA codenames, such as GROK
* Wired said those targeted groups were Islamic scholars
* The group is called equation group due to the encryption used to hide itself

* Car washes hacked by Billie Rios

* Bad web software
* Default passwords
* Submit POST requests

* Battery power can be used to track Android phones

* Based on the power you use from cell phone tower usage

* Obama sides with encryption against government groups
* Lenovo laptops spying on you

* Can we just say it’s dumb to use things produced in China?

END CONTENT

Play Podcast

### Notes

* Sorry about the pops in the audio. My desk randomly makes loud noises. I’m working on it.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 6

Tue, 17 Feb 2015 16:19:40 +0000

START CONTENT

* Ukrainian banks hacked for up to 1 Billion dollars

* Evidently installed malware on bank admin machines using phishing
* Not sure they have an FDIC
* As if the Ukraine didn’t have enough problems

* 10 million password project

* Mark Burnett posted 10 Million password combinations
* Went through a long explanation of why he was doing it
* I’ve broken them up and put them in the SecLists project

* Jeb Bush leaks personal data
* Anthem may have been Heartbleed

* Could have been China, but who knows
* Reminder about talking about things without information
* It’s best to just leave it alone

* HP released Home Security Systems report

* We found 10/10 systems vulnerable to account harvesting

* DARPA Dark Web Search Engine

* Stuff not indexed by Google
* Tor services, etc.

* Obama creating new threat intelligence agency

* Unified organization for tracking threats
* Looking to partner with private industry as well

* Anthem and Cyberinsurance

* Up to 200M in cyberinsurance
* Probably won’t cover it, but it’ll be a good test of usefulness

* Facebook lets you pick who manages your account when you die
* Facebook threat sharing program
* Uber lost and found database was online with personal data in it

* Basically, if you lose something in a car, they know who you are, and they keep your stuff for you
* But they had the database exposed online

END CONTENT

Play Podcast

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 5

Sun, 08 Feb 2015 18:58:53 +0000

START CONTENT

* Anthem, the second largest healthcare company, had a major breach

* They lost around 80 million socials, addresses, emails, etc., which is roughly double the Target breach
* There’s speculation that it was China, trying to penetrate government, but it’s early
* Watch for phishing scams related to it
* The megabreaches continue…weee!

* A WordPress plugin called FancyBox had a serious compromise in it last week, which affected thousands of websites

* If you’re going to run WordPress, understand that Plugins are the best way to get yourself hacked
* Specifically, the type of plugins that handle user input and do something with it that affects the site’s output
* Image manipulation plugins have been particularly vulnerable, usually to XSS

* There was another critical Flash vulnerability this week

* Like I said last week, and the week before, there’s a first time for everything

* Three bug hunters at HP received the 125,000 prize for finding a major vulnerability in Internet Explorer

* Because they work for HP they couldn’t take the cash, and instead donated it to charity

* Microsoft released Outlook for iOS last week, which looks pretty slick

* Unfortunately it is riddled with security flaws
* Recommendation: wait for a few updates, and for them to get a security assessment

END CONTENT

Play Podcast

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 4

Mon, 02 Feb 2015 04:15:58 +0000

START CONTENT

* Ghost bug in PHP could affect millions of servers

* Flaw is in glibc, which is extensively by all Linux distributions
* Patch and reboot using yum or aptitude

* The US Army Released DShell, a malware forensics tool

* This is an interesting trend where we see tons of formerly secret groups flock to Github. Great to see

* Reddit released its first transparency report last week

* Says it received 55 requests for user information
* Says it complied with 64% of state and federal requests
* Says it received 218 requests for content removal, and complied with 31 percent of those
* I am pleased to see them releasing these numbers, and I hope more organizations do the same

* The GHCQ was using a program called BADASS to collect data leaked by games such as Angry Birds

* Luckily it only affected the 11 people still playing that game

* Russian dating site, Topface, got hacked for 20 million usernames
* The FBI busted up a Tom Clancy book plot in New York City

* The plan was to get information about wall street trading algorithms and hopefully destabilize the markets
* All they managed to do was embarrass themselves by commenting on how they couldn’t recruit young women

* China is demanding to be able to build backdoors into any code sold to its banking sector

* Some people call this news, but with China we just call this Wednesday

* Apple released a Yosemite update that fixed Thunderstrike, among other things
* Anonymous and Lizard Squad are going after each other

* Anonymous is the famous hacking group known for all sorts of things
* Lizard Squad is known for taking down the XBox and Playstation networks around Christmas time
* Anonymous DDoS’d the Lizard Squad website, and then Twitter suspended a couple of their handles
* Interesting to see these groups going after each other

* BMW and the internet of things is in the news, with BMW owners receiving an automatic push to around 2 million cars

* A vulnerability was present that could allow attacks to spoof cell towers and possibly control onboard systems
* BMW pushed a patch that ensures all such communications go over HTTPS
* It’s interesting that, like printers, cars are likely to become a primary IoT platform just because there are so many of them
* The key is to figure out what normal things exist in the world today en mass, and then imagine those things being connected
* Printers, cars, furniture, clothing, etc. It’s the regular stuff that makes it interesting because of how much attack surface they represent, and how prevalent the perspective they’ll offer into our daily lives

END CONTENT

Play Podcast

Notes

* Intro is from Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 3

Sun, 25 Jan 2015 19:16:29 +0000

START CONTENT

* There was an issue with the Marriott website that exposed reservations and payment information. It’s now been fixed
* Police are now using a new radar to see into peoples’ homes without a warrant
* Security budgets are reportedly going up due to the mega-breaches in 2014

* Also leading to higher pay for CIOs
* Anecdotally, I’d say it’s a pretty good time to be in infosec

* A new security startup, PFP Cybersecurity, uses power consumption to detect malware

* Meant initially to be used for SCADA type systems

* The US hacked North Korean computers back in 2010

* This is reportedly the reasons we were so sure they hacked Sony
* Recently leaked documents from Snowden show heavy offense

* Snowden recently talked to Schneier at Harvard about a number of things

* The NSA is becoming increasingly offensively oriented vs. defensive
* The NSA supposedly uses compromised systems as jump points
* Snowden said most NSA hackers are junior enlisted with limited skills

* Russia reportedly hacking for geopolitical gain, not just money
* Millions of gas stations could be at risk of shutdown

* The Automated Tank Gauges can be remotely accessed by attackers
* Could be manipulated to cause alerts
* Potentially could be used to stop the flow of fuel

* Microsoft gave Charlie Hebdo data to FBI in 45 minutes
* Starwood hack based on bad passwords

* Bad passwords, password re-use, and a brute forcing tool
* Account harvesting is rough: user enumeration, weak passwords, and lack of account lockout

* Flash has another major exploit. Update your stuff.
* People continue to be worried that the President’s crackdown on hackers could hurt security professionals

* Congress is meeting on the 27th of January to discuss breach notification

* The wireless in around 2 million cars is highly vulnerable to attack
* A polish company has created Mouse-Box, which is an entire computer inside of a mouse enclosure

END CONTENT

Play Podcast

Notes

* Sorry about the noise part way through. My girl walked in and started unpacking groceries. But when I say one take, I mean one take.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 2

Mon, 19 Jan 2015 19:21:25 +0000

START CONTENT

* UK police arrest 18-year-old in connection to Playstation and XBox attack
* Major ASUS router bug

* Local users can take full control without a password
* Biggest issue there seems to be DNS hijacking

* Legislative attacks on infosec profession and encryption

* Anti-hacking law language ambiguous “according to owner”
* Obama is said to agree with Cameron, but it’s complicated
* Evidence of a plot is different than outlawing encryption
* There’s other talk about it being illegal to see hack data

* French reporting 19,000 DoS attacks since the shootings
* Anonymous is going after ISIS and others

* An attack on free speech is an attack on Anonymous

* Google releases another Windows flaw that they didn’t fix
* Verizon API vulnerability exposes customer email addresses

* Issue was with a mobile API used by Android devices
* Allowed him to retrieve peoples’ emails and send emails as them

* On whether we should trust the FBI regarding the Sony attack

* We now find out the attribution came from a previous NSA hack
* It’s hard to criticize without data
* This doesn’t mean they did it, or that the FBI is always right, or that they should always be trusted
* It means be cautious when you don’t have any information, and the person you’re criticizing has all of it

* Free speech and the Paris attacks

* Where is the line for free speech?
* I think it comes down to safety and taste
* You can’t yell fire, and art matters

* Quote of the week

* No one is as happy as they seem on Facebook, as depressed as they seem on Twitter, or as employed as they seem on LinkedIn.

END CONTENT

Play Podcast

Notes

* I have a consolidated InfoSec news feed (here) that I use as a source for headlines.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Take 1 Security Podcast: Episode 1

Wed, 14 Jan 2015 14:55:22 +0000

Subscribe to the Podcast: iTunes | Android | RSS

START HEADLINES

* Google drops security updates for Android 4.3 and below

* This is a problem since that’s most of the install-base
* Only .1% of users are on Android 5

* Microsoft and Adobe Push Critical Security Fixes

* Seems like Google’s been messing up recently, with their attack on Whitehat for the Aviator stuff, their dropping security updates for Android, and now this early release of a bug before there was a fix.

* Obama is asking for the removal of a number of state laws that make it harder to get good broadband in the US.
* Obama is asking for quicker laws around the disclosure of hacks

* One potential law is the Personal Data Notification and Protection Act, which would require companies to notify within 30 days if they get hacked.
* The CENTCOM Twitter account got hacked a couple of days ago by some pro-ISIS folks
* Obama is looking to improve the sharing of cybersecurity information as a response to the hack

* Sammy Kamkar has released a keylogger for Microsoft wireless keyboards, called Keysweeper
* David Cameron wants to make encrypted messaging apps illegal

* 1) I’m not sure how he thinks this is possible

Subscribe to the Podcast: iTunes | Android | RSS

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.