{"id":1821,"date":"2022-09-20T01:59:27","date_gmt":"2022-09-20T08:59:27","guid":{"rendered":"https:\/\/killingit.smallbizthoughts.com\/?p=1821"},"modified":"2022-09-20T07:51:28","modified_gmt":"2022-09-20T14:51:28","slug":"episode-182-good-hack-for-solarwinds-bad-security-for-twitter-and-sock-puppet-phishing","status":"publish","type":"post","link":"https:\/\/killingit.smallbizthoughts.com\/2022\/09\/episode-182-good-hack-for-solarwinds-bad-security-for-twitter-and-sock-puppet-phishing\/","title":{"rendered":"Episode 182: &#8220;Good&#8221; hack for SolarWinds, &#8220;Bad&#8221; security for Twitter, and &#8220;Sock Puppet&#8221; phishing"},"content":{"rendered":"<br \/><iframe loading=\"lazy\" style=\"display:block;\"  style=\"border:none\" src=\"\/\/html5-player.libsyn.com\/embed\/episode\/id\/24378948\/height\/100\/width\/\/thumbnail\/no\/render-playlist\/no\/theme\/custom\/tdest_id\/1346593\/custom-color\/87A93A\" height=\"100\" width=\"100%\" scrolling=\"no\" 0=\"allowfullscreen\" 1=\"webkitallowfullscreen\" 2=\"mozallowfullscreen\" 3=\"oallowfullscreen\" 4=\"msallowfullscreen\" class=\"podcast-class\" frameborder=\"0\" placement=\"bottom\" libsyn_item_id=\"0\" theme=\"custom\" custom_color=\"75942D\"><\/iframe>\n<p>Topic 1: Could it actually be possible that the SolarWinds hack was &#8220;good&#8221; for their business?<\/p>\n<p><a href=\"https:\/\/www.scmagazine.com\/feature\/incident-response\/why-solarwinds-just-may-be-one-of-the-most-secure-software-companies-in-the-tech-universe\"> https:\/\/www.scmagazine.com\/feature\/incident-response\/why-solarwinds-just-may-be-one-of-the-most-secure-software-companies-in-the-tech-universe<\/a><\/p>\n<p>No one would argue that being the victim of &#8220;the largest and most damaging security breach in US history&#8221; is a good thing. But as a result of the hack, SolarWinds took unprecedented steps to fundamentally reengineer their approach to security and dev-ops \u2026 and they are telling a surprisingly compelling story about how this makes them the most secure system in the industry. What&#8217;s more, it seems like customers are listening \u2026 and buying. Do you buy it?<\/p>\n<hr>\n<p>Topic 2: Headline: Twitter is bad at data security and privacy.<\/p>\n<p>Conclusion: No duh.<\/p>\n<p><a href=\"https:\/\/www.protocol.com\/policy\/mudge-twitter-whistleblower-hearing\"> https:\/\/www.protocol.com\/policy\/mudge-twitter-whistleblower-hearing<\/a><\/p>\n<p>The Twitter whistleblower testified in congress yesterday \u2026 and he made the &#8220;shocking&#8221; accusation that Twitter doesn&#8217;t have (and never has had) sufficient control systems for data protection. Thank you, Captain Obvious. This brings up a few questions: 1) does any social media company have sufficient data controls (no); 2) is there any appetite to make social media companies accountable for actual privacy \/ security (no); and 3) why does our society accept the presence of a tech platform that is &#8220;too big to control&#8221; and not simply turn it off if it can&#8217;t be made secure?<\/p>\n<hr>\n<p>Topic 3: Because Security needs another piece of jargon: Beware Sock Puppet phishing<\/p>\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-now-use-sock-puppets-for-more-realistic-phishing-attacks\/\"> https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-now-use-sock-puppets-for-more-realistic-phishing-attacks\/<\/a><\/p>\n<p>Or would you rather call the attack &#8216;multi-persona impersonation&#8217; (MPI)? That&#8217;s the name used by researchers at Proofpoint.<\/p>\n<p>Basically, this is an orchestrated attack where the bad guys control multiple email accounts and email back and forth with the target in the middle of the cc: string. The idea is to provide (fake) social proof.&nbsp;<\/p>\n<hr>\n<p>&nbsp;<\/p>\n<p>Sponsor Memo: SBTTC<\/p>\n<p>This podcast is sponsored by the Small Biz Thoughts Technology Community. Check us out at <a href=\"https:\/\/www.SmallBizThoughts.org\">https:\/\/www.SmallBizThoughts.org<\/a><\/p>\n<p>Forms, templates, and checklists are just the start. Our Community includes ALL of the best-selling books on managed services in all available formats, plus free training, members-only programs, and the best business training available to managed service providers anywhere.<\/p>\n<p>Plus, we have weekly live members-only Zoom calls. The average member saves more than 200% of their membership cost each year. We are totally dedicated to YOUR success.&nbsp;<\/p>\n<p>Just because you&#8217;re in business for yourself doesn&#8217;t mean you have to go it alone. Join us today at <a href=\"https:\/\/www.SmallBizThoughts.org\">https:\/\/www.SmallBizThoughts.org<\/a><\/p>\n<p>\ud83d\ude42<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/directory.libsyn.com\/episode\/index\/id\/24378948\/tdest_id\/1346593\">Check out this episode!<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Topic 1: Could it actually be possible that the SolarWinds hack was &#8220;good&#8221; for their business? https:\/\/www.scmagazine.com\/feature\/incident-response\/why-solarwinds-just-may-be-one-of-the-most-secure-software-companies-in-the-tech-universe No one would argue that being the victim of &#8220;the largest and most damaging security breach in US&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1820,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"libsyn-item-id":0,"libsyn-show-id":0,"libsyn-post-error":"","libsyn-post-error_post-type":"","libsyn-post-error_post-permissions":"","libsyn-post-error_api":"","playlist-podcast-url":"","libsyn-episode-thumbnail":"","libsyn-episode-widescreen_image":"","libsyn-episode-blog_image":"","libsyn-episode-background_image":"","libsyn-post-episode-category-selection":"","libsyn-post-episode-player_use_thumbnail":"","libsyn-post-episode-player_use_theme":"","libsyn-post-episode-player_height":"","libsyn-post-episode-player_width":"","libsyn-post-episode-player_placement":"","libsyn-post-episode-player_use_download_link":"","libsyn-post-episode-player_use_download_link_text":"","libsyn-post-episode-player_custom_color":"","libsyn-post-episode-itunes-explicit":"","libsyn-post-episode":"","libsyn-post-episode-update-id3":"","libsyn-post-episode-release-date":"","libsyn-post-episode-simple-download":"","libsyn-release-date":"","libsyn-post-update-release-date":"","libsyn-is_draft":"","libsyn-new-media-media":"","libsyn-post-episode-subtitle":"","libsyn-new-media-image":"","libsyn-post-episode-keywords":"","libsyn-post-itunes":"","libsyn-post-episode-itunes-episode-number":"","libsyn-post-episode-itunes-season-number":"","libsyn-post-episode-itunes-episode-type":"","libsyn-post-episode-itunes-episode-title":"","libsyn-post-episode-itunes-episode-author":"","libsyn-destination-releases":"","libsyn-post-episode-advanced-destination-form-data":"","libsyn-post-episode-advanced-destination-form-data-enabled":"","libsyn-post-episode-advanced-destination-form-data-input-enabled":false,"libsyn-post-episode-premium_state":"","libsyn-episode-shortcode":"","libsyn-episode-embedurl":"","_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[4],"tags":[],"taxonomy_info":{"category":[{"value":4,"label":"Killing IT Podcast"}]},"featured_image_src_large":["https:\/\/killingit.smallbizthoughts.com\/wp-content\/uploads\/2022\/09\/Episode-182-Graphic-1024x538.png",1024,538,true],"author_info":{"display_name":"Karl W. Palachuk","author_link":"https:\/\/killingit.smallbizthoughts.com\/author\/killingit_nkkbi3\/"},"comment_info":0,"category_info":[{"term_id":4,"name":"Killing IT Podcast","slug":"killing-it-podcast","term_group":0,"term_taxonomy_id":4,"taxonomy":"category","description":"","parent":0,"count":208,"filter":"raw","cat_ID":4,"category_count":208,"category_description":"","cat_name":"Killing IT Podcast","category_nicename":"killing-it-podcast","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/posts\/1821"}],"collection":[{"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/comments?post=1821"}],"version-history":[{"count":2,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/posts\/1821\/revisions"}],"predecessor-version":[{"id":1823,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/posts\/1821\/revisions\/1823"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/media\/1820"}],"wp:attachment":[{"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/media?parent=1821"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/categories?post=1821"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/killingit.smallbizthoughts.com\/wp-json\/wp\/v2\/tags?post=1821"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}