Speaker 1: All right couple weeks into January 2020 CES episode to
Speaker 1: eleven starting off security news California's new privacy law. This
Speaker 1: CPA went live on January 1st but similar to GDP
Speaker 1: our people aren't exactly sure what that means. The core
Speaker 1: the new law states that if your company has data
Speaker 1: for over fifty thousand California residents you need to explain
Speaker 1: to them exactly what you're doing with it and customers
Speaker 1: can also ask that you don't sell it or that
Speaker 1: you delete it and there's some other stuff there as well.
Speaker 1: But that seems to be the core of it. There's
Speaker 1: a new shopworn exploit that makes it even easier to
Speaker 1: attack hashes but which I won in a lot of
Speaker 1: people are talking about the possibility of using Blake too
Speaker 1: as a replacement for a shot to especially within systems
Speaker 1: like get because it's 10 times faster than try to.
Speaker 1: But yeah a lot of people are really worried about
Speaker 1: the integrity of systems like get because foundationally it's a
Speaker 1: bunch of SHA 1 hashes there appears to be a
Speaker 1: new trend with ransomware groups where they're not just encrypting
Speaker 1: the data and charging the victim to decrypt but they're
Speaker 1: actually taking a copy of the data first and then
Speaker 1: storing it. So they have more options to monetize it
Speaker 1: later which is smart and can scary. Ring fired for
Speaker 1: employees for looking at customers videos. And you might want
Speaker 1: to avoid writing 20 as an abbreviation for 20 20
Speaker 1: on official documents like checks if you still use cheques.
Speaker 1: Because someone can come behind you and add things to
Speaker 1: that 20 that you just wrote right. So they're going
Speaker 1: to at 2010 or 2018 or 2022 seems pretty low
Speaker 1: probability of an attack but worth knowing about and why
Speaker 1: not just write to 120. Meters released attack content for
Speaker 1: industrial control systems attackers are now targeting telecom companies directly
Speaker 1: so they can get access to customer mobile numbers which
Speaker 1: allows them to bypass S.A. authentication really what they're talking
Speaker 1: about is getting access to the ability to do a
Speaker 1: sim swap. I think this is this article is really
Speaker 1: saying we have evidence now there's more evidence that attackers
Speaker 1: are actually targeting these companies but I imagine this has
Speaker 1: been going on for some time yeah. This Sim swap
Speaker 1: issue is super serious. I mean basically someone's mobile number
Speaker 1: today is really a proxy for their identity and if
Speaker 1: you can break into these companies and. Switch that mobile
Speaker 1: number to another device that's really serious really really looking
Speaker 1: forward to telecom companies having a better solution to this.
Speaker 1: Right now it's basically can you trick the not very
Speaker 1: well paid customer service person who is dealing with bad
Speaker 1: documentation and you know poor process and that's what stands
Speaker 1: between you and having your number stolen. The UK is
Speaker 1: new offensive cyber security force run by the Ministry of
Speaker 1: Defence in the GC HQ is nearly ready to go
Speaker 1: live just in time for Iran shenanigans the US may
Speaker 1: cancel a civilian drone program based on DJI drones which
Speaker 1: is a Chinese company due to surveillance concerns. They're worried
Speaker 1: that it's basically like a giant land mapping project and
Speaker 1: they're worried that it's going to be used for surveillance
Speaker 1: and other similar projects actually involving DJI and the military
Speaker 1: have already been canceled as well for similar reasons. So
Speaker 1: related to the earlier story someone actually did an analysis
Speaker 1: of how easy it is to swap a SIM card
Speaker 1: to gain access to someone's mobile number on five different carriers.
Speaker 1: And really what they tried to do was you know
Speaker 1: see what the rules were and map out what that
Speaker 1: process looks like for the major carriers and their takeaway
Speaker 1: is that it actually is really easy and s a
Speaker 1: mess is not a good option which I think we
Speaker 1: already knew. But I like having data that backs it up.
Speaker 1: I don't think it's quite strong compared to not having
Speaker 1: it which a lot of people disagree on. But. Most
Speaker 1: security people that I know do still think it's better
Speaker 1: but it's nowhere near as good as having outpaced in
Speaker 1: someone found a database of 56 million Americans personal data
Speaker 1: sitting on a Chinese IP address. The data was evidently
Speaker 1: collected by people finder website called check people dot com.
Speaker 1: So that is unpleasant and a Texas school district got
Speaker 1: fish out of two point three million dollars fishing is
Speaker 1: absolutely stoking because even if all the technical controls work
Speaker 1: fishing will still work because. Until people are completely replaced
Speaker 1: by automation I mean they're still going to be making
Speaker 1: decisions and they're still going to have to have authority
Speaker 1: to do things and that's what we'll be attacked by
Speaker 1: the fishing. Advisories. There's a critical Citrix net scalar RC
Speaker 1: with an active exploit actually out there a trusted second
Speaker 1: a couple of other groups have put the exploit out
Speaker 1: already trusted SEC only released it because other people already
Speaker 1: put it out. But this is CBS s nine point
Speaker 1: eight and if you have any net scalar slash Citrix
Speaker 1: you need to get this patched immediately. If it's not
Speaker 1: compromised already critical Android bug. Yeah really nasty. Firefox zero
Speaker 1: day under active attack. Millions of cable modems vulnerable to
Speaker 1: something called Cable hunt which is basically RC of your
Speaker 1: cable modem which includes the ability to change your DNS
Speaker 1: which is nasty and some updates for Chrome companies synopsis
Speaker 1: buys tin foil Technology News got the best of C
Speaker 1: yes winners from Engadget and the coolest thing I saw
Speaker 1: here was the wee things scan watch which is a
Speaker 1: round watched an EKG on it last for 30 days
Speaker 1: looks quite good. I might actually buy one Warner Brothers
Speaker 1: is about to start using A.I. to help them decide
Speaker 1: if they should make a movie or not. I've always
Speaker 1: wondered when they were actually going to do this. Like
Speaker 1: just point him unsupervised learning or whatever kind of algorithms
Speaker 1: you have that work for this. Point it at that
Speaker 1: repository of data about I am D.B. or actually feed
Speaker 1: data from the movie into the algorithms themselves so they
Speaker 1: can extract the features. And combine that with environment information
Speaker 1: like you know. How's the economy doing. What am I
Speaker 1: up against. What is the weekend what part of the
Speaker 1: year is it. What is the weather like all these
Speaker 1: are for things maybe not the weather because you don't
Speaker 1: know that before you make the movie. But as many
Speaker 1: factors as you can figure out right build that into
Speaker 1: the model and say Is this going to work anyway.
Speaker 1: I think it's pretty cool idea. I've always wanted to
Speaker 1: see what an algorithm would come up for rating various
Speaker 1: movies within I am to be. So we can get
Speaker 1: ready for us before and Thunderbolt for in 2020 but
Speaker 1: we don't have to worry about the connector actually because
Speaker 1: it's still you SBC really can't wait till everything is
Speaker 1: you SBC so I could take like forty nine cables
Speaker 1: out of my bag. Space X is looking to launch
Speaker 1: blacked out satellites to avoid Earth visible light pollution in
Speaker 1: space where you're basically looking up trying to look at
Speaker 1: the stars and just see a whole bunch of moving
Speaker 1: specs because there are so many satellites up there and
Speaker 1: actually Space X they believe. Has the most satellites that
Speaker 1: they think there was a story from last week.
Speaker 2: Tesla's might soon gain the ability to talk to pedestrians
Speaker 2: via extra mile speakers. The one thing I love about
Speaker 2: Tesla is there more of a software product than any
Speaker 2: other car. You never know what features might be in
Speaker 2: the next update. I've actually wanted to mount one of
Speaker 2: those bullhorn things like automated one and somehow be able
Speaker 2: to control it from inside the car so I could
Speaker 2: just like say it like a cop voice. Just be
Speaker 2: like next time use your blinker or that was a
Speaker 2: very nice. Just talk to people like not in a
Speaker 2: super aggressive way but just call them out so they
Speaker 2: feel that. Thought that would be cool. You know how
Speaker 2: to mount something like that to a car. But maybe
Speaker 2: this will give that functionality although it seems like it
Speaker 2: could fuel road rage. Like if people were being super
Speaker 2: rude with it but I doubt that will happen because
Speaker 2: no one who owns a Tesla would be rude and
Speaker 2: there's a new D face swap app called W cat
Speaker 2: that people are excited about. You basically go a selfie
Speaker 2: or put it on gifs that you provide. Human news
Speaker 2: another study has found a strong correlation between cardio respiratory
Speaker 2: fitness and grey matter volume. Alcohol related deaths have doubled
Speaker 2: between 1999 and 2017 and suicide is up 33 percent
Speaker 2: in a similar timeframe think we have a meaning crisis.
Speaker 2: That's what I think the world's largest radio telescope is
Speaker 2: just come online in China. It is 500 kilometers no
Speaker 2: 500 meters across which is huge and Star Trek The
Speaker 2: card has already been renewed for another season. I think
Speaker 2: a lot of BitTorrent clients are going to be really
Speaker 2: happy about this. Ideas trends and analysis. Here's an idea.
Speaker 2: Maybe slow speed information is critical to healthy discourse. Kind
Speaker 2: of like low glycemic index foods. And maybe the faster
Speaker 2: and more condensed you can get something like. You just
Speaker 2: lose something. This is something that I read about in
Speaker 2: Neil Postman's. Amusing Ourselves to Death. Really great book. I
Speaker 2: think it was written in the 50s actually it was
Speaker 2: complaining about TV. As an iteration away from in-person and
Speaker 2: then radio then it was saying TV was breaking everything.
Speaker 2: Imagine if you had seen this but I thought that
Speaker 2: was interesting. Like maybe you just need slow difficult information
Speaker 2: to have a healthy society. And related to the previous
Speaker 2: story alcohol deaths doubling 20 years. Suicide up 33 percent
Speaker 2: in the same timeframe. This way of a serious problem
Speaker 2: with Pinker's optimism in his last two books. It's not
Speaker 2: that any of his data are actually wrong that I
Speaker 2: that I know of anyway. The book is extremely well
Speaker 2: researched right. The problem is that people don't judge their
Speaker 2: happiness using the relative experiences of previous decades or centuries
Speaker 2: like we do. Our brains don't care about how happy
Speaker 2: our ancestors were. We focus on the present. We how
Speaker 2: we compare with our peers. And other images that we
Speaker 2: think we should be aspiring to write or we should
Speaker 2: be at the level of so I don't think his
Speaker 2: books were wrong they just totally missed the point. In
Speaker 2: these suicide statistics and these deaths by alcohol. In my
Speaker 2: mind they're likely to be related to that they could
Speaker 2: not be. I mean this is it is conjecture but
Speaker 2: it seems logical to me. College kids are starting to
Speaker 2: see big tech a lot like Wall Street where Big
Speaker 2: Oil basically lucrative but with a moral tradeoff due to
Speaker 2: their unscrupulous business practices. Evidently becoming a big theme on
Speaker 2: college campuses. And Equifax is stock rose 50 percent in
Speaker 2: 2019 and Facebook stock is at an all time high
Speaker 2: right now. Looks like the relationship between bad behavior and
Speaker 2: bad outcomes isn't always as solid as we might like.
Speaker 2: And around one in five Americans uses a smartwatch or
Speaker 2: a fitness tracker 10 percent. Updates wrote an essay called
Speaker 2: visibility and understanding create both tools and weapons. Think you
Speaker 2: will like it. Check it out. Row one called why
Speaker 2: high end podcasts reduce the base in their audio which
Speaker 2: you should be hearing in this right now actually should
Speaker 2: be like a cleaner brighter sound as opposed to like
Speaker 2: a deep rumbling sound which I used to be into.
Speaker 2: Yeah I was super into that he sound but it
Speaker 2: turns out it mixes really poorly with surrounding noise especially
Speaker 2: road noise. So NPR basically said look we need to
Speaker 2: cut this out. So they used their mike which say
Speaker 2: Mike that I have to pull sound out of the
Speaker 2: bottom range and the high pitch is supposed to basically
Speaker 2: cut through road noise subway noise surrounding conversation and stuff
Speaker 2: like that and cut right through and get your ears
Speaker 2: so I'm trying it out.
Speaker 3: Let me know what you think.
Speaker 2: And third one here San Francisco is a microcosm of
Speaker 2: America's future sounds political. It's not really political. It's more
Speaker 2: like society analysis type stuff. And I reckon solid hated
Speaker 2: my reading infrastructure on audible Kindle and good reads and
Speaker 2: then catching up on my previously read stuff. More work
Speaker 2: to do on that. Making good progress if you're on
Speaker 2: good reads connect with me is just annual music and
Speaker 2: currently reading a fiction series called Cradle which is part
Speaker 2: of a genre called lit RPG which is literary RPG.
Speaker 2: It's basically like you're watching a videogame or an RPG.
Speaker 2: But as a story instead of a game there's tons
Speaker 2: of focus on leveling skills abilities and items like if
Speaker 2: you like Diablo and you like collecting things and getting
Speaker 2: more powerful. This is it's a whole genre of books
Speaker 2: designed around just that so you should definitely check it out.
Speaker 2: I'm loving the series. It's called Cradle. I think it's
Speaker 2: probably a pretty good introduction to it. And I post
Speaker 2: a couple of new book summaries one on atomic habits
Speaker 2: which is like one of my. It's just a fantastic book.
Speaker 2: It's also a great book to read in January. So
Speaker 2: really suggest you get that or at least read the
Speaker 2: summary that I wrote and another one called the infinite
Speaker 2: game which is super cool. And let me know what
Speaker 2: you think about bullets for the advisories and other sections
Speaker 2: in security above. So for the first time I took
Speaker 2: it out of a paragraph with just commerce operation and
Speaker 2: actually added some bullets because you're listening to this you're
Speaker 2: not seeing the newsletter. But yeah just let me know
Speaker 2: what you think of that. If you see it. In
Speaker 2: discovery I look at Google's health care efforts like Project
Speaker 2: Nightingale and Guardian how Israel trains its elite drone Warriors
Speaker 2: a visual suddenly calculator how to read long complex books.
Speaker 2: Got my new favorite hacking video. There's a thing called
Speaker 2: Silent book club where people get together in public places
Speaker 2: and silently read together which I to be doing one
Speaker 2: in S.F. the end of this month. Why quit using Google.
Speaker 2: That's not me. It's someone else's article. This clips bar
Speaker 2: 50 for sound bar looks super awesome. Don't know where
Speaker 2: I'm going to put it. I have like eleven square
Speaker 2: feet in my house and an interactive vim tutorial recommendation
Speaker 2: for the week. It's the beginning of January and a
Speaker 2: new year so make sure you have your most sensitive
Speaker 2: data backed up somewhere securely off site that you either
Speaker 2: rotated your key passwords or using a password manager with
Speaker 2: a strong scheme. And that your most vulnerable loved ones
Speaker 2: are doing these same things. And the aphorism for the
Speaker 2: week all happiness depends on courage and work all happiness
Speaker 2: depends on courage and work. A Nora day Balzac.