A big, big week with a heap of different things on the boil. Cyber stuff, audio stuff, IoT stuff - it's all there! Sorry about the camera being a little blue at the start, if anyone knows why it's prone to do this I'd love to hear from you. But hey, at least the audio is spot on, hope you enjoy this week's video.
References
- Complying with NIST Password Guidelines in 2021 (a piece from this week's sponsor, intro'd by yours truly)
- We're rapidly going cashless, but not everybody is happy (there are some valid points in that thread, but also some pretty tenuous arguments IMHO)
- My friend Tanya Janca has published Alice & Bob Learn Application Security (I really like the way this book is structured, check it out!)
- The PC audio rabbit hole is deep, but I finally hit the bottom and placed my order (hopefully be here for next week's update)
- Microsoft Exchange got hit with some serious state-sponsored nasties ("allegedly" from China)
- The Exchange issue only hit self-managed instances, further supporting my long held view that managed platforms like O365 are the way to go (outsource the problem!)
- Gab got hacked again with a heap of posts made under users' identities (this is what happens when you don't take your first breach seriously enough!)
- Home Assistant started telling people not to use Pwned Password, and people got pissed (this is nuts, and it deserved a dedicated blog post)
- Sponsored by safepass.me: Get a FREE password audit on your Active Directory users with pwncheck from safepass.me