Identity
·
Biometrics and Bugs
Getting users to accept new security controls is an uphill battle, any setback makes it harder for any solution to push out additional security measures.
Mornings With Mark
Live streamed to 1,250+ viewers each morning, each episode of this show took a deeper look into a security or privacy topic that's in the news or just on Mark's mind. Ran for almost 200 episodes in 2018 and 2019.
Latest
Archive
·
E-transfer Security
CBC's Go Public pointed out the rising rates of e-transfer fraud and consumers are shocking. The expectation was that e-transfers were safe and convenient...turns out, not so much.
Archive
·
Retargeting In Online Politics
CBC News posted an article about how Canadian federal MPs are using digital tracking technologies on their personal websites. So what is retargeting? How is it used? Why is its use in politics different?
Archive
·
Cybersecurity Patching in Context
Letting customers know about a security vulnerability is never an easy thing. From the logistics of it to the reputation management issues. But this is a critical aspect of delivery software and services. What's the best way to tackle this problem?
Archive
·
Business Email Compromise
Cybercriminals don't always use complicated technical attacks to get around your cybersecurity. Sometimes—probably more often than we care to admit—it's the really simple stuff that works and what's simpler than an email?
Archive
·
Privacy Expectations
Facebook was recently called out for listening to users audio messages on Facebook Messenger. They aren't alone. Apple, Amazon, Google, and Microsoft all have admitted to having contractors analyze audio from their voice assitants (and Microsoft's Skype service). What's the impact
Archive
·
NULL & Input Validation
NULL is one of many special characters that has a long history in computing. What are the consequences of using NULL as a value provided via user input. The easy answer should be "nothing" but reality is a lot messier. Joseph Tataro set out to get a nerdy license plate and found out jus
Archive
·
AppSec Is Dead
Is application security (AppSec) dead? Did it every really work? Let's discuss...
Archive
·
FaceApp: Relax You're Just Old (Now)
FaceApp (first released in 2017) is back in the news for the #AgeChallenge and a host of privacy concerns. There's a lot of knee-jerk reactions around the app but what's really going on? We dive in on this (as usual) no-BS episode...
Archive
·
10x Engineers
Recently on Twitter a nerd fight started around the idea of a 10x engineer. VC Shekhar Kirani kicked things off by advocating that startups do anything to grab these types of employees. Needless to say, a lot of differing opinions were shared on the matter. It's an interesting topic and one w
Archive
·
Zoom.us & The Real Cybersecurity Problem
Zoom.us had a pretty egregious security issue this week. Their response was poor despite the best efforts for responsible disclosure by the security research who discovered the issue. While this issue has dominated tech headlines, the real issue is much more significant and commonplace.
Archive
·
NBA Free Agency vs Security Policies
Cybercriminals don't always use complicated technical attacks to get around your cybersecurity. Sometimes—probably more often than we care to admit—it's the really simple stuff that works and what's simpler than an email?