Search

Home > Down the Security Rabbithole > DtSR Episode 205 - NewsCast for August 2nd 2016


	Podcast:		Down the Security Rabbithole
	Episode:		DtSR Episode 205 - NewsCast for August 2nd 2016
	Category:		Technology
	Duration:		00:42:47
	Publish Date:		2016-08-05 22:59:44
	Description:		Quick note from Michael about the Straight Talk Framework -- > I’ve separated the framework from the programs; the framework is free and available for download from my website. More on the way! To support both the framework and the programs, I’ve just finished a video that introduces the 5 questions; I have an optional workbook available and make a special offer at the end of the video I’m about to launch an online offering… stay tuned for details $2.7 Million HIPAA Penalty For Two Smaller Breaches http://www.healthcareinfosecurity.com/27-million-hipaa-penalty-for-two-smaller-breaches-a-9270?rf=2016-07-18-eh&mkt_tok=eyJpIjoiWW1GaE5ERmtNR05oTldRMiIsInQiOiJ5YWd6dDg4cW84TXVCR0NCVkJ0KytQTnVwOHQ2UHBON0FMeWVZRDVleE82d3Zpdyt2S1RwNWFmZEs0aVRyQ3lMTlk3YWdaa0VmbnV4djVIOVVxczFUYkdsTHBKRGpld3h5bXU3aHRoNnhUaz0ifQ%3D%3D Interesting the info about the use of Google and lack of contract. How many other health companies are using Google or Microsoft to store some data? Do they have the contracts in place? Is the GOP seriously considering endorsing vigilante hacking?! The wording here is dangerous, and could encourage vigilante justice So much could go wrong here, so much collateral damage You’ll likely hear a re-start of the hack back debate http://www.inforisktoday.com/blogs/gop-platform-suggests-hack-back-suitable-cyber-defense-p-2186 What if we just called it “forward looking research in a kinetic state?” NIST declares the age of SMS based 2-factor authentication over https://techcrunch.com/2016/07/25/nist-declares-the-age-of-sms-based-2-factor-authentication-over/ Recommendation use app (like google authenticator), RSA token or something similar rather than SMS How will this effect all of the financial institutions that have sms based 2-factor? Even google supports SMS and App based. This is an interesting change. Apparently just being released as part of their call for comments. It’s not a ban; it’s a realization that through VoIP and the general approach to build our phone system, out of band isn’t as out of band as we’d think/like http://krebsonsecurity.com/2016/08/social-security-administration-now-requires-two-factor-authentication/ The ninth circuit holds that accessing a website after receiving a cease and desist order does violate CFAA http://www.lexology.com/library/detail.aspx?g=b042e35f-c9af-4bf4-a3bd-82204189be55 Curious if the reverse is true, then. And how bug bounties and other programs might create the invitation for people A “famed hacker” is Grading Thousands of programs https://theintercept.com/2016/07/29/a-famed-hacker-is-grading-thousands-of-programs-and-may-revolutionize-software-in-the-process/
	Total Play:		0