The Eff It Bucket Ashley Keski, Paul Ruffalo, Alex Gallegos

This week in the bucket, a woman helps hundreds of North Korean IT workers get jobs at US companies, Slack uses all their customer data to train an AI model, the Pros and Cons of the Tik Tok ban, and orange, crusty leaders.
News Stories for Reference:
"Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms"
securityweek.com/woman-accused-of-helping-north-korean-it-workers-infiltrate-hundreds-of-us-firms/
"User Outcry as Slack Scrapes Customer Data for AI Model Training"
https://www.securityweek.com/user-outcry-as-slack-scrapes-customer-data-for-ai-model-training/
"How TikTok grew from a fun app for teens into a potential national security threat"
https://apnews.com/article/tiktok-timeline-ban-biden-india-d3219a32de913f8083612e71ecf1f428
"https://www.reuters.com/legal/tiktok-creators-file-suit-block-us-divestment-or-ban-law-2024-05-14/"
https://www.reuters.com/legal/tiktok-creators-file-suit-block-us-divestment-or-ban-law-2024-05-14/
"Using TikTok is Bad Cybersecurity"
https://blog.procircular.com/using-tiktok-is-bad-cybersecurity
"The House TikTok Ban Is an Empty Threat"
https://time.com/6962823/house-tiktok-ban-is-an-empty-threat/
A Little Something Extra
Harm Reduction: A Framework for Effective & Compassionate Security Guidance:
https://youtu.be/T1YEKAUJVjE
Connect With Us:
Twitter: @theeffitbucket
Reddit: r/theeffitbucket
E-mail: theeffitbucket@gmail.com

This week in the bucket, the government makes ineffective changes, then the government does MORE ineffective things, we discuss what effective technical teams can do to protect themselves from phishing besides training, and terrifying AI art.
News Stories for Reference:
"The US Government Is Asking Big Tech to Promise Better Cybersecurity"
https://www.wired.com/story/cisa-cybersecurity-pledge/
"UnitedHealth CEO faces grilling from Congress over Change Healthcare hack"
https://www.washingtonpost.com/business/2024/05/01/united-health-hack-ceo-congress-change-healthcare/
"Rudy Giuliani falsely blames Twitter after typo points to anti-Trump website"
https://www.nbcnews.com/tech/tech-news/rudy-giuliani-falsely-blames-twitter-after-typo-points-anti-trump-n944136
A Little Something Extra
"'A Gluten-Free Poodle…' - Derrick Stroup - Stand-Up Featuring"
https://www.youtube.com/watch?v=L30jZojyqQY
Check out Paul Ruffalo's Horrifying AI Artwork
https://www.theeffitbucket.com/2024/05/09/paul-ruffalos-horrifying-ai-artwork/
Connect With Us:
Twitter: @theeffitbucket
Reddit: r/theeffitbucket
E-mail: theeffitbucket@gmail.com

This week in the bucket, fallout from the Microsoft source code breach, our favorite sources for cyber security info, and our predictions on the future of the job market.
Connect With Us:
Twitter: @theeffitbucket
Reddit: r/theeffitbucket
E-mail: theeffitbucket@gmail.com

This week in the bucket, making a mockery of scam callers, pig butchering, and a whole bunch of terrible pickup lines.
News Stories for Reference:
"Pig Butchering Scams: Last Week Tonight with John Oliver (HBO)"
https://www.youtube.com/watch?v=pLPpl2ISKTg
"YouTube | Jim Browning"
https://www.youtube.com/@JimBrowning
"'Pig-butchering': The online scam that's raked in $75 billion and counting"
https://www.wbur.org/onpoint/2024/04/03/pig-butchering-online-scam-billion-crypto
"Instagram | Tara & Brian Ball"
https://www.instagram.com/tarablairball/?hl=en
Connect With Us:
Twitter: @theeffitbucket
Reddit: r/theeffitbucket
E-mail: theeffitbucket@gmail.com

This week in the bucket, education continues to be a target for cybersecurity, we talk about some terms that commonly get used (and misused) in the industry, and we catch up on nostalgic Martial Arts properties and horror movies that everyone else saw in 2022.
News Stories for Reference:
"One reason school cyberattacks are on the rise? Schools are easy targets for hackers"
https://www.npr.org/2024/03/11/1236995412/cybersecurity-hackers-schools-ransomware
A Little Something Extra
See the diagram Paul mentioned on our website:
https://www.theeffitbucket.com/2024/03/28/information-security-heirarchy/
Connect With Us:
Twitter: @theeffitbucket
Reddit: r/theeffitbucket
E-mail: theeffitbucket@gmail.com

This week in the bucket, deepfake video scams are on the rise, Golddigger trojan steals biometric data from mobile phones, and we use AI to steal the voice of one of our hosts. Plus, an attraction in Glasgow marketed entirely on the back of AI generated content causes a bit of a commotion.
News Stories for Reference:
"Deepfake CFO tricks Hong Kong biz out of $25 million"
https://www.theregister.com/2024/02/05/hong_kong_deepfaked_cfo/
"Cybercriminals are stealing iOS users' face scans to break into mobile banking accounts"
https://www.theregister.com/2024/02/15/cybercriminals_stealing_face_id/
"First ever iOS trojan discovered — and it’s stealing facial recognition data to break into bank accounts"
https://www.tomsguide.com/computing/malware-adware/first-ever-ios-trojan-discovered-and-its-stealing-face-id-data-to-break-into-bank-accounts
"New ‘Gold Pickaxe’ Android, iOS malware steals your face for fraud"
https://www.bleepingcomputer.com/news/security/new-gold-pickaxe-android-ios-malware-steals-your-face-for-fraud/
A Little Something Extra
See some photos from "Willy's Chocolate Experience" on our website:
https://www.theeffitbucket.com/2024/03/14/willys-chocolate-experience/
Connect With Us:
Twitter: @theeffitbucket
Reddit: r/theeffitbucket
E-mail: theeffitbucket@gmail.com