84 Updates and Shenanigans

in

My Udemy courses, mentioned in the trailer: https://www.udemy.com/user/ben-malisow/

 

John Stossel sues Facebook: https://variety.com/2021/digital/news/john-stossel-sues-facebook-defamation-fact-check-1235072338/

 

Senator asks Facebook to commit to ending finsta(s): https://reason.com/2021/09/30/richard-blumenthal-finsta-facebook-hearing/

Video of the Senator asking the FB representative the question: https://www.youtube.com/watch?v=ktQ3p2rhqcY

NIST report on facial recognition solutions: https://nvlpubs.nist.gov/nistpubs/ir/2019/NIST.IR.8280.pdf

MIT study of gender/color in facial recognition software: http://gendershades.org/overview.html

Amazon’s marketing video for Astro: https://youtu.be/sj1t3msy8dc

The AV Club article: https://www.avclub.com/amazon-debuts-its-awful-creepy-robot-snitch-1847774948

Beeple Crap: https://en.wikipedia.org/wiki/Mike_Winkelmann

 

 

 

 

 

New ISC2 Cert, and Five Free CPEs

in

ISC2 is developing a new cert, something to “certify entry-level professionals.” Now, I thought the SSCP already existed for that purpose…and I’m also curious how someone “entry-level” can also be considered a “professional”…..but if you are an ISC2 member, and you help fill out a survey that will be used to construct the exam that will be used for this new cert, you can get five free CPEs.

So…go get your CPEs: ISC2 Link to Survey

Updated OWASP Top Ten (finally)

in

OWASP typically updates their Top Ten Web Application Security Risks about every two years, so many of us have been excited and anxious waiting for the new release (the last formal version was published in 2017). Of course, with the way things have been in 2020, a delay is certainly understandable, but it’s nice that the new edition is finally out.

Go check it out here: https://owasp.org/Top10/

For those of you studying for INFOSEC exams where questions specifically about the Top Ten might come up (for instance, the CCSK or CCSP), I don’t know if the test material has been updated to reflect the new OWASP list, or when that might happen. I imagine there will be some lag before the tests can be modified to include the 2021 content. My advice: if you plan to take the exam before January, 2022, study the OWASP 2017; anything later, use the 2021 OWASP version.

Book Signing / Meet-and-Greet

Totally impromptu: if you are in the Chicago area, and would like me to sign any of my books that you might have (the CCSP Study Guide, Practice Tests, Exposed, or whatever), we'll be hosting a short signing at the Courtyard Marriott Downtown River North on Sunday, 05 SEP 2021, from 5:00 - 6:00 pm in the lobby (or, if a small enough group shows up, the bar, when I will buy a round). Robin will be joining me, if you want to meet the full cast of “The Sensuous Sounds Of INFOSEC.” Hope to see you there!

79. Greatest Hits - Prepping

in

This week, we are on hiatus while we avoid Hurricane Ida and preserve our own most precious assets (our asses, and those of our pets). This is a perfect time to catch up on past episodes of “The Sensuous Sounds Of INFSOEC”…and what better time to revisit our show on prepping for disaster? We promise— as soon as we’ve stabilized, we’ll feature a show about our own experiences and lessons learned.

In this episode, we prepare for the endtimes through personal continuity and disaster recovery, and nerd out on some truly great media.

Just a few of the books, movies, and TV mentioned (or associated with this topic):

  • Dawn of the Dead (George A. Romero, 1978)

  • Chernobyl (HBO, 2019)

  • The War Game (Peter Watkins, 1966: not to be confused with the 1983 classic WarGames)

  • Night of the Comet (Thom Eberhardt, 1984)

  • Cast Away (Robert Zemeckis, 2000)

  • Empire of the Sun (Steven Spielberg, 1987)

  • Firefly (Joss Whedon, 2002-2003: should have been 6 seasons and a movie)

  • Serenity (Joss Whedon, 2005: at least we got the movie)

  • Deadwood (HBO, 2004-2006)

  • The Road, Cormac McCarthy

  • Z for Zachariah, Robert C. O’Brien (THE BOOK— not the terrible movie that threw in some horrible racial overtones and a love triangle for no reason)

  • Lucifer’s Hammer, Larry Niven and Jerry Pournelle

  • Lord of the Flies, William Golding

  • To Build a Fire, Jack London

  • Day of the Triffids, John Wyndham

  • On The Beach, Nevil Shute

75 Consulting with Evgeniy Kharam

in

 We discuss the good, the bad, and the ugly of the consulting world with guest Evgeniy Kharam of the Herjavec Group.

 

My Udemy courses, mentioned in the trailer: https://www.udemy.com/user/ben-malisow/

The Herjavec Group: https://www.linkedin.com/company/the-herjavec-group/

Evgeniy’s show, the Security Architecture podcast: https://www.linkedin.com/company/secarchpodcast/

 

 

Guests on Another Podcast

While this has nothing to do with INFOSEC, or with our own podcast, Robin and I had the amazing opportunity to be guests on another show, the Topic of Choice podcast, hosted by Joey Police. We discussed Harry Potter (well, Robin discussed Harry Potter, and I was kind of just along for the ride), and had great fun.

If you’re interested, check it out: https://topicofchoice.com/welcome-to-diagon-alley/