Security News for the Week Ending October 6, 2023
After Privacy Fail, Google Tries to Secure Bard Results
Google created the ability to share Bard results, but, of course, accidentally, Google is indexing those results, so if you think what you are doing is private, it might not be – but only if you intentionally create a share link. Read details here. Credit: The Register
Details of Writers’ Guild Strike Settlement Anti-AI Clause Emerge
Details of the WGA settlement agreement have emerged. The agreement does seem to restrict the use of AI, which will make union shops less competitive than non-union shops. Netflix has signed an agreement with SAG-AFTRA, but other independent producers have not. Also, agents often provide scripts to actors and movie houses and those are not necessarily covered. Foreign films are also not covered. Bottom line, this is a short term win for unions, but it probably won’t last. Credit: WGA
Sam Bankman-Fried Sues His Insurance Company for Not Paying his Legal Fees
In the US, you could probably sue a tomato. As his trial starts in New York, he is suing insurance company CNA for not paying his legal bills. Two of the company’s policies have a $10 million limit, which has been reached. Also, given all of the apparent fraud, they might think they are not obligated to pay. Things just don’t go right for SBF. Credit: The Register
Russia Not Only Has to Worry About Hackers, it Attacks Itself
A website tied to Moscow City Hall accidently posted a document providing the addresses of “special consumers” of electricity. Special means, in this case, military and intelligence. Unfortunately, the good hackers discovered this 400+ page document before it was removed. I am sure that there is a lot of “interest” by a lot of intelligence agencies in the document’s contents. Credit” Cybernews
Google, Yahoo To Increase Authentication Requirements to Cut Down Spam
Google and Yahoo say they are going to require “strong authentication” for bulk mailers in 2024. Those senders will need to strongly authenticate their emails following best practices such as DMARC, SPF and DKIM. The purpose is to better identify and block malicious mail. Both have released email sender guidelines. Credit: CSO Online