Tag: infosec

Posted on

Weekly Wrap 229: Currawongs and climate change

Flustered currawongMy week of Monday 20 to Sunday 26 October 2014 was moderately productive. Not as productive as I’d hoped, but close enough.

Winter is definitely over. Despite the snowfall nearby last week, this week temperatures in the Blue Mountains rose to 28C or more, and the weekend brought a mix of bright blue skies and the occasional thundery rainstorm. We have broken the climate.

Podcasts

  • Corrupted Nerds: Conversations 12, being a discussion of mandatory telecommunications metadata and surveillance with Carly Nyst, legal director of Privacy International.
  • “The 9pm Vision for Australia”, being The 9pm Edict episode 31, 22 October 2014. It includes quite a bit about the passing of Gough Whitlam.

Articles

I’ve also written a second piece for ZDNet Australia, as well as a piece for Crikey, both of which will be published on Monday.

Media Appearances

Corporate Largesse

None.

The Week Ahead

It’ll be another busy one, structured around a trip to Sydney on Tuesday to go to a lunchtime briefing from NetSuite and then the OpenAustralia Foundation Pub Night. I’ll be staying in Sydney overnight.

Arranged around that will be the writing of a security-related feature plus my regular column for ZDNet Australia, and the production of an episode of The 9pm Edict, probably in that order. The exact details are still to be sorted out.

The weekend is unplanned.

[Photo: “Flustered currawong”, taken when a pied currawong (Strepera graculina) managed to find its way into Bunjaree Cottages on 26 October 2014.]

Posted on

Weekly Wrap 228: Snow, at least nearby, and privacy

A narrow-leafed drumstick (Isopogon anethifolius): click to embiggenMy week of Monday 13 to Sunday 19 October 2014 must have been influenced by the photo I posted last week, because it did end up snowing in the Blue Mountains — but no closer than 8km from me.

So, in the interests of triggering pleasant spring conditions for the week ahead, I’ve kicked off with another pleasant photo from my archives.

Articles

I’ve also written a second piece for ZDNet Australia, but it won’t appear until Monday.

Media Appearances

Corporate Largesse

None.

The Week Ahead

It’ll be a busy one. While I haven’t mapped out exactly what will happen each day — I can’t do so until a certain tardy clients pays me and I can lock in certain commitments — there’s plenty of media objects to make.

A new ZDNet Australia column and a new Corrupted Nerds podcast will appear on Monday, as I said. After that, I’ve got two ZDNet Australia pieces to write, and an episode of The 9pm Edict to produce. I also want to resurrect the 5at5 newsletter, but that has a lower priority.

The weekend is unplanned.

[Photo: Yellow, being a narrow-leafed drumstick (Isopogon anethifolius) photographed at Bunjaree Cottages on 1 November 2012.]

Posted on

Talking voiceprint biometrics on 1395 FIVEaa

FIVEaa logo“Two of America’s biggest retail banks — JPMorgan Chase & Co, and Wells Fargo & Co — are quietly recording the biometric details of some callers’ voices to weed out fraud,” reported Associated Press this week. The news caught the eye of Will Goodings at 1395 FIVEaa in Adelaide. I told him that the Americans are way behind Australia on this one.

All of the Big Four banks here are already using voiceprints. In the case of NAB and Westpac, since about 2009.

In fact, Australia is a world leader in voiceprint technology. In a Patch Monday podcast from March 2012, I spoke with Dr Clive Summerfield, chief executive of Auraya, who told me that Australia’s social services agency Centrelink has been using voiceprints to identify callers since 2005, and more than 95% of callers are identified this way. Voiceprints are also used by the Australian Taxation Office.

Here’s a recording of the conversation we had on air on Friday afternoon, complete with a talkback caller who followed me.

Podcast: Play in new window | Download (7.5MB)

The audio is ©2014 dmgRadio Australia.

Posted on

Talking the alleged Apple iCloud hack on 1395 FIVEaa

FIVEaa logoThe third and final of today’s radio spots about the alleged hack of Apple’s iCloud service was at lunchtime, so I’d had time to wake up and gather my thoughts — as well as see how the infosec community was reacting.

The afternoon presenter on 1395 FIVEaa in Adelaide, Will Goodings, gave it plenty of time too, some 14 minutes, so we covered quite a few issues — including the privacy implications of cloud technology generally.

I sound a bit tired or something, though. Possibly because I was tired.

Podcast: Play in new window | Download (6.6MB)

The audio is ©2014 dmgRadio Australia.

Today’s previous two radio spots were for Nova 100 Melbourne and ABC Radio’s AM.

Posted on

Talking the alleged Apple iCloud hack on ABC Radio AM

ABC logoA few minutes after doing the live spot on Nova 100, I recorded an interview on the alleged Apple iCloud hack for ABC Radio’s national current affairs program AM.

Reporter Emily Bourke would have gone away with a disjointed mess of soundbites, but the disjointedness isn’t so important when it’ll be edited into a multi-voice report.

I think this one quote best summarises my view of the compromise we enter into when using cloud services:

The big problem with creating massive online cloud storage systems — which is now the way we do things on the internet, whether it’s Apple or Microsoft or Google or Amazon or whoever — is that you create a vast honey pot of a target for the attackers.

Once you find one way to get in, you can potentially get access to hundreds of thousands, if not millions of people’s data.

The plus side is such concentrated services means they can hire some of the best security people they can find, putting brains onto the problem is obviously important. So at one level the cloud providers can, if they do it right, protect things far better than you or I could on computer systems under our own control.

The failures are therefore going to be far less frequent. It’s just that when the failures do happen they can be catastrophic.

Here’s the full story, served directly from the ABC website, where you can also read the transcript.

Podcast: Play in new window | Download (1.7MB)

The audio is of course ©2014 Australian Broadcasting Corporation.

A few sentences of my comments were also used in a later report on The World Today at lunchtime, which featured security researcher Troy Hunt.

Posted on

Talking the alleged Apple iCloud hack on Nova 100

Nova logoIt’s starting to look like an alleged hack of Apple’s iCloud service was the source of a series of nude photos of female celebrities that has appeared online. That news led to a series of radio appearances for me today. Starting with this one.

The story itself has already been widely reported, and I won’t go into any detail about the victims of this invasion of privacy. One good place to start is this summary at The Guardian, and there’s more technical details at TUAW. These blog posts will simply present the media spots that I did.

First up was Nova 100 in Melbourne. This was done live with breakfast presenters Meshel and Tommy at 0720, and my coffee hadn’t kicked in yet. That’s why I screwed up my first, embarrassingly-wrong go at the explanation — at least that’s my excuse and I’m sticking to it.

Podcast: Play in new window | Download (3.2MB)

It seems Meshel was quite taken with my name. That’s so sweet.

The audio is ©2014 dmgRadio Australia.