In this episode...

• A join Ponemon Institute & IBM Security study shows that, surprise surprise, developers are "neglecting security"
  • The study only looked at mobile apps and app developers
  • Less than half (of their study) test the mobile apps they build
  • About 33% never test their apps
  • http://www.eweek.com/developer/ibm-study-shows-mobile-app-developers-neglecting-security.html
• Illinois Bill SB1833 expands the definition of PII to include almost everything
  • Requires notification in the event of a breach of...
  • Online browsing history, online search history, or purchasing history
  • Is this absurd, or just protecting our privacy?
  • http://www.eweek.com/developer/ibm-study-shows-mobile-app-developers-neglecting-security.html
• The DOJ has jumped in and issued some sound fundamental breach guidance!
  • 4 sections: what to do before, during and after a breach plus what NOT to do after a breach
  • Fantastic fundamentals... great idea
  • The push to fundamentals is critical!
  • http://www.alstonprivacy.com/doj-issues-data-breach-guidance/
  • http://www.justice.gov/sites/default/files/opa/speeches/attachments/2015/04/29/criminal_division_guidance_on_best_practices_for_victim_response_and_reporting_cyber_incidents.pdf
• Mozilla is phasing out non-secure HTTP
  • HTTPS only is the way forward, so Mozilla (champions of liberty and all that) are leading the way
  • https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/
• First foreign hacker is convicted in the US
  • Canadian kid who hacked and stole trade secrets and other sensitive info from video game companies
  • He pled guity in September 2014, maximum of 5yr prison sentence
  • http://blogs.orrick.com/trade-secrets-watch/2015/04/30/first-foreign-hacker-is-convicted-in-the-united-states-of-hacking-crimes-involving-theft-of-trade-secrets-from-american-companies/

>>> If you're reading this, consider clicking the link above to support the show!
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
YouTube home: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
LinkedIn Page: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
X/Twitter: https://twitter.com/dtsr_podcast