-
Listen Now
EPISODE 278
Broadcast Date:
February 17, 202311 minutes
Podcast Feb 17, 2023Root Causes 278: Microsoft on Certificates and FIDO
Recent public discussion of FIDO and digital certificates reveal details of Microsoft's approach to consumer digital authentication.
-
Listen Now
EPISODE 277
Broadcast Date:
February 13, 202315 minutes
Podcast Feb 13, 2023Root Causes 277: Privacy Sandbox
Google has announced the Privacy Sandbox. In this episode we describe concepts like k-anonymity and differential privacy.
-
Listen Now
EPISODE 276
Broadcast Date:
February 9, 20238 minutes
Podcast Feb 09, 2023Root Causes 276: ChatGPT and Identity Reputation
People may use ChatGPT for reputation analysis, KYC, and other info about individuals and companies. This is subject to error and deliberate misdirection.
-
Listen Now
EPISODE 275
Broadcast Date:
February 6, 20238 minutes
Podcast Feb 06, 2023Root Causes 275: No Fly List Stolen
An attacker gained a copy of the full 2019 TSA No Fly list, including subject PII, all enabled by failures in digital identity and encryption.
-
Listen Now
EPISODE 274
Broadcast Date:
February 3, 202314 minutes
Podcast Feb 03, 2023Root Causes 274: New Quantum Readiness Law
The U.S. government has a new law requiring that government agencies create plans for migrating to PQC in response to threats from quantum computers.
-
Listen Now
EPISODE 273
Broadcast Date:
January 30, 202321 minutes
Podcast Jan 30, 2023Root Causes 273: A Deep Dive on CA Agnostic
We catalog the various ways a Certificate Lifecycle Management (CLM) system can be "CA agnostic."
-
Listen Now
EPISODE 272
Broadcast Date:
January 27, 202312 minutes
Podcast Jan 27, 2023Root Causes 272: OCSP's Privacy Problem
Concerns recently have been raised about OCSP real-time certificate checking and its potential to violate privacy.
-
Listen Now
EPISODE 270
Broadcast Date:
January 20, 202312 minutes
Podcast Jan 20, 2023Root Causes 270: What Is the Difference Between KEM and PKE?
We explain the difference between Public Key Exchange (PKE) and Key Encapsulation Methods (KEM) and why we're moving from one to another.
-
Listen Now
EPISODE 269
Broadcast Date:
January 16, 202310 minutes
Podcast Jan 16, 2023Root Causes 269: Did a Patent Dispute Nearly Derail PQC?
On July 5, 2022 NIST announced its Round 3 PQC winners. That same day, a patent cleared that made this possible.
-
Listen Now
EPISODE 268
Broadcast Date:
January 12, 20239 minutes
Podcast Jan 12, 2023Root Causes 268: WAFs Subverted by JSON Bypass
Rising attacks can overcome the protections of Web Application Firewalls (WAF). We explain these attacks and what you should do to ensure you're safe.
-
Listen Now
EPISODE 267
Broadcast Date:
January 9, 202323 minutes
Podcast Jan 09, 2023Root Causes 267: Can Quantum Computers Break RSA Today?
New research suggests a quantum computer may be applied to breaking RSA in a different way from Schor's algorithm. We discuss the potential implications.
-
Listen Now
EPISODE 266
Broadcast Date:
January 4, 202318 minutes
Podcast Jan 04, 2023Root Causes 266: End-to-end Encryption in the Apple Technology Stack
Recent announcements from Apple lay out a set of expansions in the scope and capability of encryption throughout the Apple ecosystem.