Not So Critical Update

2FA protections aren't are not all equal. Prompted by a recent Gizmodo article, we look at the different types, weaknesses, and in particular how SMS authentication can be attacked.

https://gizmodo.com/hackers-are-getting-better-and-better-at-defeating-your-1848278177

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

We start with an article about Artificial Intelligence but end up just trashing Matrix Resurrections.

https://issues.org/artificial-intelligence-age-of-ai-review-rotenberg/

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

A recent article by Shoshana Wodinsky from Gizmodo talked about the persistent data tracked about you online. Bought some gym shoes once, while drunk? Welcome to a barrage of ads for your closest megagym.

Today we chat about this and other points - and don't miss Mike's moment of remorse.

https://gizmodo.com/you-might-abandon-your-new-years-resolutions-but-the-i-1845958518

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

Jon returns from suspension for a third Log4j update.

https://www.bleepingcomputer.com/news/security/log4j-2171-out-now-fixes-new-remote-code-execution-bug/

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

Is big data "anonymous" just because they don't know your name?

https://www.wired.com/story/big-data-may-not-know-your-name-but-it-knows-everything-else/

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

Two new EU regulations - Digital Markets Act and Digital Services Act - are introduced. And even Mike agrees they're good moves in the right direction.

https://www.europarl.europa.eu/news/en/headlines/society/20211209STO19124/eu-digital-markets-act-and-digital-services-act-explained

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

The crypto currency exchanges keep getting hacked. Why can't anyone do anything about it?

https://www.nbcnews.com/tech/security/bitcoin-crypto-exchange-hacks-little-anyone-can-do-rcna7870

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

Mike questions the impact of the Kronos ransomware attack. Peter brings receipts.

https://edition.cnn.com/2021/12/16/tech/kronos-ransomware-attack/index.html

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)

We're starting to understand the scope of the impact from the Log4j vulnerability. And the stories are starting to come out.

https://threatpost.com/java-supply-chain-log4j-bug/177211/

Hosts:

Peter Lowe (@pgl)

Jon Cohen (@jonnisec)

Mike Sutton (@zenmike)