Mistaken Identity

It’s hard enough to separate the malicious actors from the valid users in today’s environments without also having to separate humans from the malware itself. Mistaken Identity’s David Lee and Mike Kiser explore the coming reality in which exploits are hard-coded into the DNA of humans. Also discussed – the Chrome browser helps with password hygiene, FaceTime showing call previews without consent, and then we plumb the depths of the evil that lurks within Super Mario. Tip your waiters, try the veal, and stay for the sojourn into the dystopian future.

The phrase, “probably worth a google” takes on a whole new shade of meaning as Mistaken Identity explores the fourth fine levied under GDPR. Google was fined $57 million for inadequate user consent by a French data privacy agency. Is this the “big one” that people have been waiting for to show that privacy regulation has the power to change corporate behavior? Sit back while David Lee and Mike Kiser discuss the potential implications for Google and what is front of mind for organizations today. We celebrate Data Privacy Day as we also discuss whether collecting biometrics causes harm, a Dutch surgeon’s right to be forgotten, and a massive mortgage database breach. (And you thought that high property taxes and those pesky neighborhood kids were your biggest concerns as a homeowner.)

Describe the next year in identity in one word.” David Lee and Mike Kiser take up this challenge as they forecast the coming twelve months. (Spoiler alert: the episode is 34 minutes long, so apparently there was more to say than a single term.) Headlines include: newspaper printing presses stopped by ransomware, how to see your neighbors’ security camera footage, and the meltdown/spectre vulnerability one year later. The discussion closes with an opportunity to watch a Swedish film in a coffin. Start your aural 2019 journey with a new episode for a new year.

This episode is all about thankfulness. David Lee and Mike Kiser recount their blessings and what the security community as a whole has to be thankful for during this (United States-centric) holiday. (It’s a rather long list.) Headlines include: bots booking cross-country flights, a cybersecurity czar who’s never used a computer, and the creation of “master” fingerprints that can unlock biometric-based security. Round out this food-based holiday season with a long-winded story about how it is (or isn’t) possible for the human body to consume a gallon of milk in an hour.

David Lee and Mike Kiser are joined by a cast of thousands as Mistaken Identity broadcasts on-site from Navigate Europe in Barcelona, Spain in this week’s episode. Experience the excitement of Navigate, the passion for identity, the noise of the Navigate expo, the intricacies of rhythmic dancing, and the Mediterranean lifestyle. Spoiler alert: no boats were used in the production of this podcast.

With apologies to Friday Night Lights, David Lee and Mike Kiser welcome back Darran Rolls, CTO and CISO of SailPoint, to discuss the central role that identity plays in implementing zero trust security models: to fully embrace zero trust, a comprehensive concept of identity is essential.

Headlines include the well-orchestrated response by British Airways to a recent incident, the “view as” issue with Facebook, and the alleged story of motherboard espionage from Bloomberg. Pour yourself a lovely beverage, join us for a lively discussion, and, finally, discover the one celebrity you should never search for (unless you’re a fan of malware.)

Wendy Nather (twitter: @wendynather) joins David Lee and Mike Kiser as they explore the interplay of trust and security. We examine the implications of what John Kindervag termed the “zero-trust model” — and the subsequent security architectures they have spawned: Google’s BeyondTrust and Duo Beyond, for example. A lively discussion of the current state of representation (a reflection of trust) within the security industry follows. Headlines range from a new Apache Struts vulnerability, ATT being sued for $200 million for a cryptocurrency theft, and privacy regulation that is coming to you in five years (or fifty, depending on who you ask.)

Who’s at fault when a phishing attack succeeds twice in a row? Guest Lemuel Williams joins David Lee and Mike Kiser as they argue the ins and outs of cyber insurance in the real-world case of a bank breached twice in quick succession—and a cyber insurer that refuses to pay. The Broadcom acquisition of CA, why AI is doomed to fail in cybersecurity, and the saga of car technology stolen from Apple—only to be recovered just before the thief boarded a plane, and the looming death of Mike’s air condition-less car are also discussed.

Wrapping up their sojourn in the far Northeastern Territories known as Massachusetts, David Lee and Mike Kiser corner Ian Glazer in a dark corner of Identiverse and implore him to hold forth on all things IDPro (among an amalgamation of other topics). This, it turns out, is not a difficult thing to do. Also discussed: a large healthcare breach in Singapore that targeted the medicine cabinet of the Prime Minister, the London Protocol’s attempt to reduce phishing, and how to make your security startup idea profitable in one easy step. Bask in the final glow of the dying embers of Identiverse and relive David and Mike’s short stay on the Green Monster in Fenway Park.

David Lee and Mike Kiser continue their discussions in Boston at Identiverse 2018. They catch up with Madhu Mahadevan, Sr. Manager, Strategic Technical Alliances at Okta, and continue their dialogue with Richard Bird of Optiv. The discussion revolves around noteworthy sessions, with a particular emphasis on open banking and financial services—a facet of security unavoidable by any enterprise that uses currency (that would be all of them.) The impact of GDPR-like regulation on security practice (and its potential adoption by the United States), the potential of competition to dampen security efforts, and the potential for millennials to drive security adoption come up in the course of thirty minutes of lively banter from the expo floor. Also covered: Microsoft’s calls for regulating facial recognition technology, spearfishing as the not-so-surprising method for nation state attacks, and why your trip to the library might wind up at a bowling alley or another unintended destination. We wrap up with a brief discussion of the World Cup and David’s new-found love for fútbol.