The IT Privacy and Security Weekly Update.

EP 228.5 Deep Dive The IT Privacy and Security Weekly Update for The Week Ending February 4th 2025 From DeepSeek to Dispair


Listen Later

What is the primary concern regarding the use of WhatsApp and other encrypted messaging apps recently?

Recent reports indicate that spyware, specifically "Graphite," has been used to target journalists and civil society members through zero-click attacks on encrypted apps like WhatsApp, Telegram, and Signal. This means that these apps are not as secure as previously thought, even though they employ end-to-end encryption. The spyware can infect devices without any user interaction and potentially compromise communication data.


What are the security vulnerabilities identified in certain healthcare patient monitors?

The FDA has highlighted cybersecurity issues in Contec's CMS8000 and Epsimed's MN-120 patient monitors. These devices, when connected to the internet, are susceptible to unauthorized remote control, software backdoors, and data breaches containing personal health information. One backdoor was linked to a Chinese IP address, raising additional concerns about foreign access to sensitive health data.


Why has the Chinese AI chatbot, DeepSeek, been banned in Italy and Taiwan?

Italy's data protection agency blocked DeepSeek because its developers did not adequately explain how user data is collected or confirm whether it's stored on Chinese servers. Taiwan's digital ministry also banned the use of DeepSeek by government departments, citing security concerns related to its Chinese origin.


What led to DeepSeek's data being exposed online and what kind of information was affected?

Cybersecurity firm Wiz discovered a significant amount of sensitive data from DeepSeek was left unsecured on the open internet due to an apparent misconfiguration. This data included over a million lines of data such as digital software keys and user chat logs.


What is Senator Hawley's proposed bill regarding Chinese AI models, and what could be the consequences for individuals?

Senator Josh Hawley has introduced the "Decoupling America's Artificial Intelligence Capabilities from China Act," which aims to criminalize the import, export, and collaboration on AI technology with China. Under the proposed law, knowingly downloading a Chinese AI model, such as DeepSeek, could lead to severe penalties, including up to 20 years in prison, a million-dollar fine, or both. The bill reflects growing concerns about national security and the potential for China to leverage AI for hostile purposes.


How is Amazon being accused of tracking consumers, and what type of data are they allegedly collecting?

Amazon is facing a class-action lawsuit accusing the company of secretly tracking consumers' movements through their cellphones via its Amazon Ads SDK, embedded within third-party apps. It's alleged that the SDK collects sensitive geolocation data without users' explicit consent, such as IP addresses, location, ISP, device info, and network performance metrics. This data is used to build a detailed picture of consumers' habits and preferences, raising privacy concerns about corporate surveillance.


What restrictions are being placed on open-source contributions, and who is being affected?

The US Office of Foreign Assets Control (OFAC) sanctions are imposing restrictions on open-source contributions from sanctioned individuals and countries. Developers from nations such as Russia, Iran, and North Korea are facing challenges when contributing to open-source projects due to these sanctions.

How is Cloudflare addressing image authenticity concerns, and what are the potential benefits?

Cloudflare has implemented Content Credentials, a system based on C2PA standards, that embeds metadata into images to track their origin and modifications. This system helps distinguish between genuine and manipulated content. The benefits are significant, as Cloudflare's network handles approximately 20% of global internet traffic, greatly increasing the potential reach of the system. This helps create trust in digital images, and preserves the work of digital creators.

...more
View all episodesView all episodes
Download on the App Store

The IT Privacy and Security Weekly Update.By R. Prescott Stearns Jr.

  • 4.5
  • 4.5
  • 4.5
  • 4.5
  • 4.5

4.5

4 ratings