In this episode, we explore the arrival of passwordless Google accounts that use “passkeys,” which offer enhanced usability and security. We discuss the benefits of passkeys over traditional passwords, but also why passkeys are not quite ready for prime time use.
Next, we discuss Google Domains’ introduction of new top-level domains (TLDs) like .zip and .mov, raising concerns about the potential use for malicious activities. We separate fact from fiction, and discuss the real risks involved.
Lastly, we examine Twitter’s long-awaited encrypted direct messaging feature. We explore the limitations and criticisms surrounding its implementation, highlighting the importance of true end-to-end encryption solutions like Signal.
** Links mentioned on the show *
Kevin Johnson on Security Weekly: Artificial Ignorance & Pen Testing
https://www.youtube.com/watch?v=_2Yq5VrEHf0
Google passkeys are a no-brainer. You’ve turned them on, right?
https://arstechnica.com/information-technology/2023/05/passwordless-google-accounts-are-easier-and-more-secure-than-passwords-heres-why/
Don’t panic. Google offering scary .zip and .mov domains is not the end of the world
https://www.theregister.com/2023/05/17/google_zip_mov_domains/
https://noperator.dev/posts/zip-snip/
Twitter’s Encrypted DMs Are Deeply Inferior to Signal and WhatsApp
https://www.wired.com/story/twitter-encrypted-dm-signal-whatsapp/
** Watch this episode on YouTube **
https://youtu.be/wLCzD6j13ys
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the podcast **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Watch and Subscribe on Odysee (YouTube alternative)
https://odysee.com/@SharedSecurity:c
Follow us on Mastodon: https://infosec.exchange/@sharedsecurity
Follow us on Twitter: https://twitter.com/sharedsec
Website: https://sharedsecurity.net
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Leave us a rating and review: https://ratethispodcast.com/sharedsecurity
Contact us: https://sharedsecurity.net/contact
The post Google Now Supports Passkeys, Risky New Top Level Domains, Twitter’s Encryption Dilemma appeared first on Shared Security Podcast.
Kaseya Ransomware Attack, PrintNightmare Zero-day, Kaspersky Password Manager Vulnerability
LinkedIn Data Leak, Western Digital NAS Attacks, STIR/SHAKEN Deadline
Asset Discovery with Chris Kirsch Co-Founder at Rumble
Off Limits Critical Infrastructure, Ransomware on Repeat, Cyber Safe Drinking Water
TikTok Collecting Biometric Data, Peloton Bike+ Vulnerability, Nextdoor App Concerns
ANOM FBI Global Crime Sting, Colonial Pipeline Updates, Password Leak Research
Amazon Sidewalk, NFTs and Cybersecurity, Norton 360 Cryptocurrency Mining
Biden’s Cybersecurity Executive Order, Apple’s AirTag, Cyber Insurance
How Gamification is Changing Cybersecurity
Colonial Pipeline Updates, DarkSide Goes Dark, Cybersecurity Best Practices
The Colonial Pipeline Ransomware Attack
World Password Day, Tesla Hacking via Drone, Ipsos Screenwise Panel
Remembering Dan Kaminsky, Apple AirDrop Vulnerability
3 Ways to Keep Your Cryptocurrency Safe
Instagram Anti-Abuse Tool, Apple Advertiser Restrictions, Terrible Passwords
Data Breaches vs. Data Leaks, FBI Exchange Server Controversy
Best of Episode: Interview with Jayson E. Street
Best of Episode: Interview with Rachel Tobac
SMS Two-Factor Authentication, New Internet Hygiene Model
Top 3 Privacy Tips for Travel
Create your
podcast in
minutes
It is Free
gm! crypto
The 404 Media Podcast
Big Technology Podcast
CyberWire Daily
Babbage from The Economist