Episode Details

A Note on the Passing of a Legend

• Howard Schmidt passed away this week
• Long, distinguished career as one of the CISOs who “got it”
• He will be missed in government and private industry - he was on our show too (December 2015) http://podcast.wh1t3rabbit.net/dtsr-episode-166-cyber-security-from-board-room-to-white-house

Are SysAdmins Violating the CFAA?

• This is, by all accounts, an insane criminal defense...or is it?
• Can what sounds like a stretch logically, be used maliciously by employers?
• The law is about intent - does this invalidate his claim?
• Link: https://nakedsecurity.sophos.com/2017/02/27/it-admin-was-authorized-to-trash-employers-network-he-says/

Yahoo Board Sends Message That Echoes

• After a string of breaches, the board conducted an investigation
• CEO will not receive 2016 bonus or 2017 equity award
• Top lawyer resigns (or was asked to, which ever)
• Is this THE event that will put CEOs on notice?
• Link: https://www.nytimes.com/2017/03/01/technology/yahoo-hack-lawyer-resigns-ceo-bonus.html?_r=0

Cloud-connected toys

• The example of “CloudPets” and Spiral Toys is a doozy
• Bluetooth + web (“cloud”) back-end
• Great idea, allow parents to interact with kids through a toy
• Execution is about as bad as it gets
• • Dispute over disclosure
  • 3rd party developer, apparently little security
  • Silly statements in their discloure/release
• Link: http://www.bankinfosecurity.com/yes-unicorns-bluetooth-problems-really-do-exist-a-9746

• Link: