Description

This is RSA Conference week, so while Rafal is out in San Francisco trying to make it through another one, James and Michael break down the news events that you may have missed.

300,000 Homes affected by security alarm bug

• http://www.forbes.com/sites/thomasbrewster/2016/02/17/simplisafe-alarm-attacks/#3202d4e679a3
• According to Spokesperson, Alarm still alerts users' smart device when the alarm is armed or disarmed.
• Device is an alerting mechanism, not a lock
  • Technically, we’d consider this… wait for it… a ‘detective’ control.
• Appears to only intercept when pin is entered into the device.. does this effect if user arms/disarms via their device?

82 Percent of company boards are concerned about security

• http://betanews.com/2016/02/29/82-percent-of-company-boards-are-concerned-about-cyber-security/
• Suggests that since CISOs don’t report to the CEO/Board, they companies aren’t serious. Ridiculous.
• This is myopic…
• Boards care. Executives care.
• In security - are you perceived as a leader? Or a technical resource?
• This is an opportunity.

See something suspicious online, Homeland Security wants to know about it

• http://m.nextgov.com/cybersecurity/2016/02/homeland-security-wants-see-something-say-something-campaign-internet/126008/
• We think this is rather unintelligent.
• That said, it’s the sign of the only part of an ‘awareness’ program that counts: people are comfortable reporting something that seems amiss
• What’s amiss? And that’s what’s missing.
• We pretend it works at airports and in big cities. Does it? And what, exactly, are people reporting. And why?
• What’s the experience?

Have something to say? Let's hear it.

Support the show

>>> Please consider clicking the link above to support the show!
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
YouTube home: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
LinkedIn Page: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
X/Twitter: https://twitter.com/dtsr_podcast