WEBVTT - Unsupervised Learning: No. 211 0:00:45.678 --> 0:00:50.878 All right couple weeks into January 2020 CES episode to 0:00:50.878 --> 0:00:55.188 eleven starting off security news California's new privacy law. This 0:00:55.238 --> 0:00:58.948 CPA went live on January 1st but similar to GDP 0:00:58.968 --> 0:01:03.288 our people aren't exactly sure what that means. The core 0:01:03.308 --> 0:01:05.098 the new law states that if your company has data 0:01:05.128 --> 0:01:08.488 for over fifty thousand California residents you need to explain 0:01:08.488 --> 0:01:12.238 to them exactly what you're doing with it and customers 0:01:12.238 --> 0:01:14.188 can also ask that you don't sell it or that 0:01:14.188 --> 0:01:16.458 you delete it and there's some other stuff there as well. 0:01:16.468 --> 0:01:20.028 But that seems to be the core of it. There's 0:01:20.038 --> 0:01:22.708 a new shopworn exploit that makes it even easier to 0:01:22.708 --> 0:01:24.868 attack hashes but which I won in a lot of 0:01:24.868 --> 0:01:27.268 people are talking about the possibility of using Blake too 0:01:27.688 --> 0:01:31.328 as a replacement for a shot to especially within systems 0:01:31.328 --> 0:01:33.667 like get because it's 10 times faster than try to. 0:01:35.868 --> 0:01:37.487 But yeah a lot of people are really worried about 0:01:37.488 --> 0:01:40.278 the integrity of systems like get because foundationally it's a 0:01:40.277 --> 0:01:46.188 bunch of SHA 1 hashes there appears to be a 0:01:46.188 --> 0:01:48.918 new trend with ransomware groups where they're not just encrypting 0:01:48.918 --> 0:01:51.498 the data and charging the victim to decrypt but they're 0:01:51.498 --> 0:01:54.528 actually taking a copy of the data first and then 0:01:54.588 --> 0:01:56.748 storing it. So they have more options to monetize it 0:01:56.748 --> 0:02:02.028 later which is smart and can scary. Ring fired for 0:02:02.028 --> 0:02:06.808 employees for looking at customers videos. And you might want 0:02:06.808 --> 0:02:09.828 to avoid writing 20 as an abbreviation for 20 20 0:02:09.838 --> 0:02:12.778 on official documents like checks if you still use cheques. 0:02:13.768 --> 0:02:16.348 Because someone can come behind you and add things to 0:02:16.348 --> 0:02:18.148 that 20 that you just wrote right. So they're going 0:02:18.148 --> 0:02:22.558 to at 2010 or 2018 or 2022 seems pretty low 0:02:22.558 --> 0:02:25.768 probability of an attack but worth knowing about and why 0:02:25.768 --> 0:02:30.708 not just write to 120. Meters released attack content for 0:02:30.768 --> 0:02:37.308 industrial control systems attackers are now targeting telecom companies directly 0:02:37.308 --> 0:02:40.008 so they can get access to customer mobile numbers which 0:02:40.007 --> 0:02:43.398 allows them to bypass S.A. authentication really what they're talking 0:02:43.398 --> 0:02:45.258 about is getting access to the ability to do a 0:02:45.438 --> 0:02:49.128 sim swap. I think this is this article is really 0:02:49.127 --> 0:02:53.448 saying we have evidence now there's more evidence that attackers 0:02:53.447 --> 0:02:55.878 are actually targeting these companies but I imagine this has 0:02:55.877 --> 0:02:59.288 been going on for some time yeah. This Sim swap 0:02:59.288 --> 0:03:04.208 issue is super serious. I mean basically someone's mobile number 0:03:04.268 --> 0:03:08.197 today is really a proxy for their identity and if 0:03:08.197 --> 0:03:11.858 you can break into these companies and. Switch that mobile 0:03:11.858 --> 0:03:16.718 number to another device that's really serious really really looking 0:03:16.718 --> 0:03:19.508 forward to telecom companies having a better solution to this. 0:03:19.507 --> 0:03:22.328 Right now it's basically can you trick the not very 0:03:22.327 --> 0:03:25.628 well paid customer service person who is dealing with bad 0:03:25.627 --> 0:03:29.228 documentation and you know poor process and that's what stands 0:03:29.228 --> 0:03:34.618 between you and having your number stolen. The UK is 0:03:34.618 --> 0:03:37.168 new offensive cyber security force run by the Ministry of 0:03:37.168 --> 0:03:40.048 Defence in the GC HQ is nearly ready to go 0:03:40.048 --> 0:03:47.008 live just in time for Iran shenanigans the US may 0:03:47.008 --> 0:03:50.638 cancel a civilian drone program based on DJI drones which 0:03:50.638 --> 0:03:53.758 is a Chinese company due to surveillance concerns. They're worried 0:03:53.758 --> 0:03:57.538 that it's basically like a giant land mapping project and 0:03:57.538 --> 0:03:59.488 they're worried that it's going to be used for surveillance 0:04:00.478 --> 0:04:03.958 and other similar projects actually involving DJI and the military 0:04:03.958 --> 0:04:08.698 have already been canceled as well for similar reasons. So 0:04:08.698 --> 0:04:11.668 related to the earlier story someone actually did an analysis 0:04:11.668 --> 0:04:14.038 of how easy it is to swap a SIM card 0:04:14.038 --> 0:04:17.778 to gain access to someone's mobile number on five different carriers. 0:04:17.888 --> 0:04:19.918 And really what they tried to do was you know 0:04:20.038 --> 0:04:22.738 see what the rules were and map out what that 0:04:22.738 --> 0:04:26.038 process looks like for the major carriers and their takeaway 0:04:26.098 --> 0:04:29.098 is that it actually is really easy and s a 0:04:29.098 --> 0:04:31.168 mess is not a good option which I think we 0:04:31.168 --> 0:04:34.428 already knew. But I like having data that backs it up. 0:04:34.438 --> 0:04:37.228 I don't think it's quite strong compared to not having 0:04:37.228 --> 0:04:41.718 it which a lot of people disagree on. But. Most 0:04:41.868 --> 0:04:44.388 security people that I know do still think it's better 0:04:44.628 --> 0:04:49.258 but it's nowhere near as good as having outpaced in 0:04:49.398 --> 0:04:53.327 someone found a database of 56 million Americans personal data 0:04:53.338 --> 0:04:56.118 sitting on a Chinese IP address. The data was evidently 0:04:56.118 --> 0:04:59.538 collected by people finder website called check people dot com. 0:05:00.938 --> 0:05:04.478 So that is unpleasant and a Texas school district got 0:05:04.478 --> 0:05:08.548 fish out of two point three million dollars fishing is 0:05:08.548 --> 0:05:11.708 absolutely stoking because even if all the technical controls work 0:05:11.708 --> 0:05:16.988 fishing will still work because. Until people are completely replaced 0:05:16.988 --> 0:05:19.238 by automation I mean they're still going to be making 0:05:19.238 --> 0:05:21.578 decisions and they're still going to have to have authority 0:05:21.578 --> 0:05:23.618 to do things and that's what we'll be attacked by 0:05:23.618 --> 0:05:30.228 the fishing. Advisories. There's a critical Citrix net scalar RC 0:05:30.228 --> 0:05:34.238 with an active exploit actually out there a trusted second 0:05:34.248 --> 0:05:36.288 a couple of other groups have put the exploit out 0:05:36.318 --> 0:05:39.288 already trusted SEC only released it because other people already 0:05:39.288 --> 0:05:41.838 put it out. But this is CBS s nine point 0:05:41.838 --> 0:05:45.948 eight and if you have any net scalar slash Citrix 0:05:46.038 --> 0:05:48.948 you need to get this patched immediately. If it's not 0:05:48.948 --> 0:05:56.318 compromised already critical Android bug. Yeah really nasty. Firefox zero 0:05:56.318 --> 0:05:59.998 day under active attack. Millions of cable modems vulnerable to 0:05:59.998 --> 0:06:03.568 something called Cable hunt which is basically RC of your 0:06:03.568 --> 0:06:06.208 cable modem which includes the ability to change your DNS 0:06:06.238 --> 0:06:12.818 which is nasty and some updates for Chrome companies synopsis 0:06:12.828 --> 0:06:21.448 buys tin foil Technology News got the best of C 0:06:21.488 --> 0:06:24.658 yes winners from Engadget and the coolest thing I saw 0:06:24.658 --> 0:06:27.748 here was the wee things scan watch which is a 0:06:27.748 --> 0:06:31.048 round watched an EKG on it last for 30 days 0:06:31.318 --> 0:06:35.028 looks quite good. I might actually buy one Warner Brothers 0:06:35.058 --> 0:06:37.428 is about to start using A.I. to help them decide 0:06:37.428 --> 0:06:40.408 if they should make a movie or not. I've always 0:06:40.408 --> 0:06:42.298 wondered when they were actually going to do this. Like 0:06:42.568 --> 0:06:46.408 just point him unsupervised learning or whatever kind of algorithms 0:06:46.528 --> 0:06:49.767 you have that work for this. Point it at that 0:06:50.278 --> 0:06:54.628 repository of data about I am D.B. or actually feed 0:06:54.628 --> 0:06:58.678 data from the movie into the algorithms themselves so they 0:06:58.678 --> 0:07:03.538 can extract the features. And combine that with environment information 0:07:04.458 --> 0:07:06.957 like you know. How's the economy doing. What am I 0:07:06.958 --> 0:07:08.938 up against. What is the weekend what part of the 0:07:08.938 --> 0:07:10.918 year is it. What is the weather like all these 0:07:10.918 --> 0:07:14.018 are for things maybe not the weather because you don't 0:07:14.018 --> 0:07:16.988 know that before you make the movie. But as many 0:07:16.988 --> 0:07:20.978 factors as you can figure out right build that into 0:07:20.978 --> 0:07:23.828 the model and say Is this going to work anyway. 0:07:23.828 --> 0:07:25.748 I think it's pretty cool idea. I've always wanted to 0:07:25.748 --> 0:07:29.798 see what an algorithm would come up for rating various 0:07:29.798 --> 0:07:33.858 movies within I am to be. So we can get 0:07:33.858 --> 0:07:37.728 ready for us before and Thunderbolt for in 2020 but 0:07:37.728 --> 0:07:39.648 we don't have to worry about the connector actually because 0:07:39.648 --> 0:07:42.538 it's still you SBC really can't wait till everything is 0:07:42.538 --> 0:07:45.078 you SBC so I could take like forty nine cables 0:07:45.078 --> 0:07:48.698 out of my bag. Space X is looking to launch 0:07:48.698 --> 0:07:52.118 blacked out satellites to avoid Earth visible light pollution in 0:07:52.118 --> 0:07:54.368 space where you're basically looking up trying to look at 0:07:54.368 --> 0:07:56.468 the stars and just see a whole bunch of moving 0:07:56.528 --> 0:08:00.368 specs because there are so many satellites up there and 0:08:00.368 --> 0:08:05.588 actually Space X they believe. Has the most satellites that 0:08:05.898 --> 0:08:07.268 they think there was a story from last week. 0:08:10.508 --> 0:08:13.838 Tesla's might soon gain the ability to talk to pedestrians 0:08:13.868 --> 0:08:16.628 via extra mile speakers. The one thing I love about 0:08:16.628 --> 0:08:18.848 Tesla is there more of a software product than any 0:08:18.848 --> 0:08:21.518 other car. You never know what features might be in 0:08:21.518 --> 0:08:24.848 the next update. I've actually wanted to mount one of 0:08:24.848 --> 0:08:28.658 those bullhorn things like automated one and somehow be able 0:08:28.658 --> 0:08:30.908 to control it from inside the car so I could 0:08:30.908 --> 0:08:34.028 just like say it like a cop voice. Just be 0:08:34.028 --> 0:08:37.418 like next time use your blinker or that was a 0:08:37.418 --> 0:08:39.938 very nice. Just talk to people like not in a 0:08:39.938 --> 0:08:41.978 super aggressive way but just call them out so they 0:08:41.977 --> 0:08:44.708 feel that. Thought that would be cool. You know how 0:08:44.708 --> 0:08:47.798 to mount something like that to a car. But maybe 0:08:47.888 --> 0:08:49.987 this will give that functionality although it seems like it 0:08:49.987 --> 0:08:53.617 could fuel road rage. Like if people were being super 0:08:53.617 --> 0:08:57.068 rude with it but I doubt that will happen because 0:08:57.128 --> 0:09:00.318 no one who owns a Tesla would be rude and 0:09:00.318 --> 0:09:02.838 there's a new D face swap app called W cat 0:09:03.198 --> 0:09:06.377 that people are excited about. You basically go a selfie 0:09:06.578 --> 0:09:10.727 or put it on gifs that you provide. Human news 0:09:10.818 --> 0:09:14.238 another study has found a strong correlation between cardio respiratory 0:09:14.237 --> 0:09:18.378 fitness and grey matter volume. Alcohol related deaths have doubled 0:09:18.378 --> 0:09:22.757 between 1999 and 2017 and suicide is up 33 percent 0:09:23.358 --> 0:09:27.228 in a similar timeframe think we have a meaning crisis. 0:09:27.268 --> 0:09:31.288 That's what I think the world's largest radio telescope is 0:09:31.288 --> 0:09:36.208 just come online in China. It is 500 kilometers no 0:09:36.418 --> 0:09:41.098 500 meters across which is huge and Star Trek The 0:09:41.098 --> 0:09:44.018 card has already been renewed for another season. I think 0:09:44.108 --> 0:09:46.388 a lot of BitTorrent clients are going to be really 0:09:46.388 --> 0:09:51.468 happy about this. Ideas trends and analysis. Here's an idea. 0:09:51.528 --> 0:09:55.158 Maybe slow speed information is critical to healthy discourse. Kind 0:09:55.158 --> 0:09:58.968 of like low glycemic index foods. And maybe the faster 0:09:58.998 --> 0:10:01.968 and more condensed you can get something like. You just 0:10:01.968 --> 0:10:04.458 lose something. This is something that I read about in 0:10:04.458 --> 0:10:08.747 Neil Postman's. Amusing Ourselves to Death. Really great book. I 0:10:08.748 --> 0:10:11.748 think it was written in the 50s actually it was 0:10:11.748 --> 0:10:17.358 complaining about TV. As an iteration away from in-person and 0:10:17.358 --> 0:10:19.938 then radio then it was saying TV was breaking everything. 0:10:19.938 --> 0:10:23.118 Imagine if you had seen this but I thought that 0:10:23.118 --> 0:10:26.718 was interesting. Like maybe you just need slow difficult information 0:10:26.928 --> 0:10:30.438 to have a healthy society. And related to the previous 0:10:30.438 --> 0:10:34.518 story alcohol deaths doubling 20 years. Suicide up 33 percent 0:10:34.518 --> 0:10:36.768 in the same timeframe. This way of a serious problem 0:10:36.768 --> 0:10:39.828 with Pinker's optimism in his last two books. It's not 0:10:39.828 --> 0:10:42.278 that any of his data are actually wrong that I 0:10:42.458 --> 0:10:45.078 that I know of anyway. The book is extremely well 0:10:45.078 --> 0:10:50.188 researched right. The problem is that people don't judge their 0:10:50.188 --> 0:10:54.388 happiness using the relative experiences of previous decades or centuries 0:10:54.728 --> 0:10:57.478 like we do. Our brains don't care about how happy 0:10:58.228 --> 0:11:01.768 our ancestors were. We focus on the present. We how 0:11:01.768 --> 0:11:06.448 we compare with our peers. And other images that we 0:11:06.448 --> 0:11:09.267 think we should be aspiring to write or we should 0:11:09.268 --> 0:11:11.878 be at the level of so I don't think his 0:11:11.878 --> 0:11:14.368 books were wrong they just totally missed the point. In 0:11:14.518 --> 0:11:18.958 these suicide statistics and these deaths by alcohol. In my 0:11:18.958 --> 0:11:22.977 mind they're likely to be related to that they could 0:11:22.978 --> 0:11:25.648 not be. I mean this is it is conjecture but 0:11:25.708 --> 0:11:31.228 it seems logical to me. College kids are starting to 0:11:31.228 --> 0:11:33.898 see big tech a lot like Wall Street where Big 0:11:33.898 --> 0:11:37.948 Oil basically lucrative but with a moral tradeoff due to 0:11:37.948 --> 0:11:43.048 their unscrupulous business practices. Evidently becoming a big theme on 0:11:43.048 --> 0:11:48.458 college campuses. And Equifax is stock rose 50 percent in 0:11:48.518 --> 0:11:51.608 2019 and Facebook stock is at an all time high 0:11:51.608 --> 0:11:55.058 right now. Looks like the relationship between bad behavior and 0:11:55.058 --> 0:11:58.188 bad outcomes isn't always as solid as we might like. 0:11:59.558 --> 0:12:02.208 And around one in five Americans uses a smartwatch or 0:12:02.208 --> 0:12:08.808 a fitness tracker 10 percent. Updates wrote an essay called 0:12:08.808 --> 0:12:12.658 visibility and understanding create both tools and weapons. Think you 0:12:12.658 --> 0:12:15.708 will like it. Check it out. Row one called why 0:12:15.708 --> 0:12:18.708 high end podcasts reduce the base in their audio which 0:12:18.708 --> 0:12:21.468 you should be hearing in this right now actually should 0:12:21.468 --> 0:12:26.218 be like a cleaner brighter sound as opposed to like 0:12:26.218 --> 0:12:29.068 a deep rumbling sound which I used to be into. 0:12:29.068 --> 0:12:31.078 Yeah I was super into that he sound but it 0:12:31.078 --> 0:12:35.638 turns out it mixes really poorly with surrounding noise especially 0:12:35.638 --> 0:12:39.117 road noise. So NPR basically said look we need to 0:12:39.118 --> 0:12:41.367 cut this out. So they used their mike which say 0:12:41.368 --> 0:12:45.238 Mike that I have to pull sound out of the 0:12:45.238 --> 0:12:49.168 bottom range and the high pitch is supposed to basically 0:12:49.168 --> 0:12:54.747 cut through road noise subway noise surrounding conversation and stuff 0:12:54.748 --> 0:12:56.788 like that and cut right through and get your ears 0:12:58.338 --> 0:12:59.058 so I'm trying it out. 0:12:59.098 --> 0:12:59.727 Let me know what you think. 0:13:02.988 --> 0:13:06.258 And third one here San Francisco is a microcosm of 0:13:06.258 --> 0:13:10.368 America's future sounds political. It's not really political. It's more 0:13:10.368 --> 0:13:16.538 like society analysis type stuff. And I reckon solid hated 0:13:16.538 --> 0:13:19.748 my reading infrastructure on audible Kindle and good reads and 0:13:19.748 --> 0:13:22.627 then catching up on my previously read stuff. More work 0:13:22.628 --> 0:13:24.848 to do on that. Making good progress if you're on 0:13:24.848 --> 0:13:28.658 good reads connect with me is just annual music and 0:13:28.658 --> 0:13:31.387 currently reading a fiction series called Cradle which is part 0:13:31.388 --> 0:13:35.678 of a genre called lit RPG which is literary RPG. 0:13:35.708 --> 0:13:38.477 It's basically like you're watching a videogame or an RPG. 0:13:38.618 --> 0:13:41.678 But as a story instead of a game there's tons 0:13:41.678 --> 0:13:44.648 of focus on leveling skills abilities and items like if 0:13:44.648 --> 0:13:46.688 you like Diablo and you like collecting things and getting 0:13:46.688 --> 0:13:50.768 more powerful. This is it's a whole genre of books 0:13:51.458 --> 0:13:54.698 designed around just that so you should definitely check it out. 0:13:54.698 --> 0:13:57.188 I'm loving the series. It's called Cradle. I think it's 0:13:57.188 --> 0:14:00.497 probably a pretty good introduction to it. And I post 0:14:00.498 --> 0:14:03.098 a couple of new book summaries one on atomic habits 0:14:03.098 --> 0:14:05.857 which is like one of my. It's just a fantastic book. 0:14:05.888 --> 0:14:08.227 It's also a great book to read in January. So 0:14:08.288 --> 0:14:11.198 really suggest you get that or at least read the 0:14:11.198 --> 0:14:14.198 summary that I wrote and another one called the infinite 0:14:14.198 --> 0:14:17.388 game which is super cool. And let me know what 0:14:17.388 --> 0:14:20.148 you think about bullets for the advisories and other sections 0:14:20.148 --> 0:14:23.088 in security above. So for the first time I took 0:14:23.088 --> 0:14:25.398 it out of a paragraph with just commerce operation and 0:14:25.398 --> 0:14:28.038 actually added some bullets because you're listening to this you're 0:14:28.038 --> 0:14:31.038 not seeing the newsletter. But yeah just let me know 0:14:31.038 --> 0:14:33.918 what you think of that. If you see it. In 0:14:33.928 --> 0:14:36.898 discovery I look at Google's health care efforts like Project 0:14:36.898 --> 0:14:40.378 Nightingale and Guardian how Israel trains its elite drone Warriors 0:14:41.518 --> 0:14:46.568 a visual suddenly calculator how to read long complex books. 0:14:47.158 --> 0:14:50.298 Got my new favorite hacking video. There's a thing called 0:14:50.298 --> 0:14:53.538 Silent book club where people get together in public places 0:14:53.598 --> 0:14:55.938 and silently read together which I to be doing one 0:14:55.938 --> 0:15:00.408 in S.F. the end of this month. Why quit using Google. 0:15:00.408 --> 0:15:04.008 That's not me. It's someone else's article. This clips bar 0:15:04.028 --> 0:15:07.008 50 for sound bar looks super awesome. Don't know where 0:15:07.008 --> 0:15:08.568 I'm going to put it. I have like eleven square 0:15:08.568 --> 0:15:13.758 feet in my house and an interactive vim tutorial recommendation 0:15:13.758 --> 0:15:15.918 for the week. It's the beginning of January and a 0:15:15.918 --> 0:15:17.838 new year so make sure you have your most sensitive 0:15:17.838 --> 0:15:21.258 data backed up somewhere securely off site that you either 0:15:21.318 --> 0:15:24.138 rotated your key passwords or using a password manager with 0:15:24.378 --> 0:15:27.708 a strong scheme. And that your most vulnerable loved ones 0:15:27.798 --> 0:15:32.278 are doing these same things. And the aphorism for the 0:15:32.278 --> 0:15:37.508 week all happiness depends on courage and work all happiness 0:15:37.688 --> 0:15:40.958 depends on courage and work. A Nora day Balzac.