Slow Motion Scraping [40]

Slow Motion Scraping

Episode: 40 Published: 1/10/2023

Low Risk and Big Reward - or the problem of highly centralized systems that contain critical data for thousands of customers Rackspace

• Rackspace���s managed Exchange service went mysteriously dark back in December 2nd
• Rackspace has since released the results of a forensic examination into the incident
• CrowdStrike determined that the mitigations were insufficient, and that there was a previously undisclosed method for intrusion that did not require VCE-2022-41040

LastPass

• On an episode of Backup Central���s Restore It All podcast I talked extensively about LastPass
• Everything else, for every LastPass user was exfiltrated. In LastPass���s own words
• I talk about this in more detail elsewhere but the tl;dr is: change all your passwords

CircleCI

• The information available on CircleCI���s website is frustratingly vague to the point of parody.
• Feels like a gross understatement to your alleged 1 Million developers and 30k organizations

Twitter

• The attack looks like it was slow motion scraping

Lightning Round

• Apparently Gen-Z thinks that the coolest technology is as old as they are
• Android without ARM? Sounds like a RISC-Y proposition
• Speaking of processors- Apple made a mistake designing one
• Noncompete is bullshit, and soon also illegal
• Artist who did real work accused of using AI because “it looks artificially generated”
• A Fond Farewell to 3G

Intro and outro music by James Bellavance copyright 2022