Security News for the Week Ending September 29, 2023
Writers Guild Settles Strike With Anti-AI Provision
The Writers Guild has tentatively agreed to a new contract with Hollywood that has some sort of anti-AI provision as writers don’t want to be replaced by a computer for much less money. The details have not yet been released, but will likely be copied in many contracts going forward if they can get away with it. It took the union 146 days so far, so fundamentally, the writers gave up a half-year’s pay to get this new contract. Credit: Cybernews
iPhone 15 is a Repair Nightmare
Apple does not factor repairability into the design of their phones because customers keep buying them in spite of repair costs. iFixit says the iPhone Pro Max 15 is a repair nightmare, thanks to parts-pairing. Even though you could replace the display, battery or camera on the phone, you could, but the software will turn the phone into a bit of a brick due to DRM. When The Verge went through Apple to replace an iPhone battery, Apple put a $1200 hold on their credit card and shipped them 79 pounds of equipment in two Pelican cases. iFixit sells similar tools to do the same thing for $32 and it comes in a small envelope. Of course, you still have to deal with the DRM to get it to work. So, make sure you treat your iPhone with kid gloves or prepare to write a large check. Credit: Vice
Tech Leaders and White House Clash over Improving Cloud Security
The government is proposing to require cloud providers to verify the identity of their customers. These rules, known generically as KYC (know your customer) will cause some pain for cloud providers. They say, interestingly, that this will increase the rate of identity theft (because, perhaps, the cloud providers’ security is not so good???) and the bad guys will figure out how to get around it (because, perhaps, the cloud providers will put as little effort into this as they think they can get away with without being sued???). I don’t think this should be a big issue, but the tech industry has gotten away with not being regulated for years and they won’t give up that benefit without a fight. Credit: The Record
Effects of Ransomware on Businesses
One of the UK’s largest privately owned logistics firms declared insolvency this week after a ransomware attack a few months ago. The attack made it impossible for them to secure additional funding, causing them to cease operating as a business. Credit: The Record
DoJ Arrests IRS Consultant for Leaking Tax Information
While the DoJ is not giving details, they say that the person they charged is 38 year old Charles Littlejohn, who is accused of passing tax information on thousands of wealthy individuals and a high-ranking government official to a news outlet. Since the IRS got more money from the Inflation Reduction Act, they have implemented better security. It is not clear yet which side of the political spectrum this guy is on, but we will learn more. Credit: The Hill
Hyundai-Kia Blame TikTok for their Cars Being Stolen, Not Their Security Shortcuts
Kia and Hyundai claim that the massive increase theft of their cars and the refusal of some insurance companies to insure them at all is not their fault, according to a court filing. The fact that they did not include inexpensive, basic anti-theft technology in their vehicles is not the cause of the thefts, but rather, the fact that people are talking about how easy it is to steal them on social media. They are being sued by 17 cities and want the suit dismissed. Not sure the courts are going to buy that, but maybe. Credit: Vice
by 