281: Debug ransomware and win $1,000,000, period-tracking apps, and AI gets emotional
A new version of the LockBit ransomware offers a bug bounty, women uninstall period-tracking apps in fear of how their data might be used against them, and Microsoft's facial recognition tech no longer wants to know how you're feeling.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford from The Host Unknown podcast.
Plus don't miss our featured interview with Bitwarden founder and CTO Kyle Spearrin.
Visit https://www.smashingsecurity.com/281 to check out this episode’s show notes and episode links.
Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.
Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.
Special Guests: Kyle Spearrin and Thom Langford.
Sponsored By:
- Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app. Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated. Try Kolide Free for 14 Days; no credit card required.
- Snyk: Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer's toolkit. Get started right now, with a free forever account, at snyk.co/smashing
- Bitwarden: A password manager is an important tool for generating and saving secure credentials for every online account. Bitwarden makes it easy to stay secure and for businesses to share logins with team members and departments. Open source with published 3rd party security audits, Bitwarden is transparent and secure, utilizing end-to-end and zero knowledge encryption with source code that can be scrutinized by all. Learn how Bitwarden can help you do business faster and more securely at bitwarden.com/smashing and start a free business plan trial today.
Links:
- LockBit 3.0 introduces the first ransomware bug bounty program — Bleeping Computer.
- Fake copyright infringement emails install LockBit ransomware — Bleeping Computer.
- Why US women are deleting their period tracking apps — The Guardian.
- Privacy not included — Mozilla Foundation.
- The #1 Period Tracker on the App Store Will Hand Over Data Without a Warrant — Vice.
- Microsoft is removing emotion recognition features from its facial recognition tech — NBC News.
- Top 10 Emotional AI Examples in 2022 & Reasons for Success — AI Multiple.
- Analysis of Speech Features for Emotion Detection: A Review — IEEE Xplore.
- Microsoft's framework for building AI systems responsibly — Microsoft.
- The Swedish chemist shop sketch — As performed by Mel Smith and Rowan Atkinson on Not the Nine O'Clock News.
- Alley Cat — Wikipedia.
- Play Alley Cat — Internet Archive.
- Alley Cat Remeow Edition — Game Jolt.
- reMarkable.
- SOLAR podcast.
- Smashing Security merchandise (t-shirts, mugs, stickers and stuff)