Information Security & Occasional Forays Into Adjacent Realms
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
Authors/Presenters: Garrett Smith, Tarun Yadav, Jonathan Dutson, Scott Ruoti, Kent Seamons“
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel.
via the webcomic talent of the inimitable Daniel Stori and Michael Tharrington at Turnoff.US.
outstanding conference videos on their YouTube Channel
Lawrence Abrams - writing at Bleeping Computer - regales us with the (unfortunately true) tale of nearly two hundred and thirty thousand Danish passports possess invalid finger print data (the hands are 'swapped', as it were).
via Nikhil Pahwa, reporting for Wired UK, comes a glimpse into an Indian version of Big Brother, in this case, a database monikered Aadhaar, in which is contained the apparently problematically managed biometric identity data of over 1.2 Billion Indian Citizens. I fear for the freedom of the justly proud and wonderful people of India with the existence of this system. Nice logo though, eh?
"The Aadhaar number is a 12 digit identity code, based on a person's biometric and demographic information, that has been made mandatory for a large number of government welfare and private services in India: at present you need one to open a bank account, get a mobile phone, pay taxes, or even get an ambulance. It is the largest biometric identity project in the world and has enrolled more than 1.22 billion people. Russia, Algeria, Morocco and Tunisia are interested in adopting similar systems." - via Nikhil Pahwa, reporting for Wired UK
Image Credits: (CC BY-SA 2.0) by americanbulldogbully007
Soup To Nuts Identity Solutions From Two Of The Reasons Why Security Flaws Persist In Financial and Computational Systems?
Bad news: Microsoft Corporation (NASDAQ: MSFT) and Mastercard Inc. (NYSE: MA) have entered the Identity and Access Management space as dual-developers of a so-called 'universal identity scheme'.
I, for one, will utilize my barely visible thumb whorls as proof of identity, rather than use of these clowns-of-code-combinatorial-output. Code Complete at Microsoft or Mastercard? Puhleaze... The former can barely patch it's own desktop and server code successfully month-to-month, and the latter suffers from declining security capabilities since the failed-for-purpose-deployment-and-implementation of the so-called security chips in newly issued credit cards. Both companies suffer from proverbial lack-of-focused-leadership on their core businesses.
via The Outline's author, Paris Martineau, comes this tale of opt-in/opt-out, GlaxoSmithKline 23andMe. and of course, The Goods - , your DNA. Of which, results in a nagging question: Why would I (or you for that matter), agree to hand over my uniquely identifying DNA data to a commercial enterprise (that only answers to it's shareholders, and only has it's best interests in mind) to use as they see fit? Oh, and a couple of other questions: Do you trust a big-pharma corporation with your own personal Map of Life? What about the future use of that data, once it's in the slipstream of artificially intelligent genetic-testing-reliant health insurance companies? Food for Thought or just Paranoia? You be the judge; after all, it's your DNA, right?
"In short, most — if not all — of the information 23andMe has on its users has probably been shared with someone that isn’t 23andMe itself, and money might have even changed hands. Which is all perfectly within the company’s rights to do, since they agreed to it (probably blindly) when they signed up." - via The Outline author Paris Martineau in the well crafted post 'How To Sign Away The Rights To Your DNA'
via Peter Rudegeair and AnnaMaria Andriotis - writing at The Wall Street Journal - comes a good example of crime reportage, regaling us with an exposé of pernicious criminality within the Identity Theft arena: The utilization of Synthetic Identities leveraged to abscond with fungible assets... In this case, to the tune of billions of dollars. While not new - as the article erroneously claims in both it's title and body copy - the use of synthetic identities targeting our children's identities and unused Social Security Numbers has been an ever-increasing fraud modality for a number of years. Today's Must Read.
via JC Torres - writing at Slashgear - comes this anecdotal testament to the oversharing of FaceID data from Cupertino, CA software and hardware behemoth Apple Inc. (NasdaqGS: AAPL). Not the best of news, for Apple Fanboi(s).
Today's MustRead Information Security post and video is also deemed a MustWatch as well. Sam Cattle (National Security Practice Director, Technology Solutions) at Rolta AdvizeX details the particulars of Identity, and names such the New Perimeter. Very Nice.
Interesting IAM posting by Steve Mowll and Chris Williams, targeting IAM and AD integration with a Yin-Yang view... Read it and you may find some truth beyond vendor fiction.
'Point: Effective identity management strategies are business-based, and should rise above technical limitations. - Steve Mowll, Identity Architect, RSA'