<ul> <li>Did Chinese researchers really break RSA encryption? What did they do?</li> <li>What next-level terror extortion is being powered by the NPD breach data?</li> <li>The EU to hold software companies liable for software security?</li> <li>Microsoft lost weeks of security logs. How hard did the try to fix the problem?</li> <li>The Chinese drone company DJI has sued the DoJ over its ban on DJI's drones.</li> <li>The DoJ wishes to acquire "DeepFake" technology to create fake people.</li> <li>Microsoft has bots pretending to fall for phishing campaigns, then leading the bad guys to their honeypots. It's diabolical and brilliant.</li> <li>A bit of BIMI logo follow-up, then...</li> <li>A look at the operation of the FIDO Alliance's forthcoming Credential Exchange Protocol which promises to create passkey collection portability</li></ul> <p>Show Notes - <a href="https://www.grc.com/sn/SN-997-Notes.pdf">https://www.grc.com/sn/SN-997-Notes.pdf</a></p> <p><strong>Hosts:</strong> <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a></p> <p>Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>.</p> <p>Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a></p> <p>You can submit a question to <em>Security Now</em> at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>.</p> <p>For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.</p> <p><strong>Sponsors:</strong><ul> <li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li> <li><a href="http://flashpoint.io" target="_blank" rel="sponsored">flashpoint.io</a></li> <li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li> <li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li> </ul></p>

Security Now (Audio)

TWiT

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

OCT 23, 2024138 MIN
Security Now (Audio)

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

OCT 23, 2024138 MIN

Description

  • Did Chinese researchers really break RSA encryption? What did they do?
  • What next-level terror extortion is being powered by the NPD breach data?
  • The EU to hold software companies liable for software security?
  • Microsoft lost weeks of security logs. How hard did the try to fix the problem?
  • The Chinese drone company DJI has sued the DoJ over its ban on DJI's drones.
  • The DoJ wishes to acquire "DeepFake" technology to create fake people.
  • Microsoft has bots pretending to fall for phishing campaigns, then leading the bad guys to their honeypots. It's diabolical and brilliant.
  • A bit of BIMI logo follow-up, then...
  • A look at the operation of the FIDO Alliance's forthcoming Credential Exchange Protocol which promises to create passkey collection portability

Show Notes - https://www.grc.com/sn/SN-997-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors: