I follow his podcast Security Now. It focuses on computer & network security at a high level, mostly geared towards an end user's point of view.
but it seems he also has a strong negative following - havent formed
an opinion as to whether that is justified yet (not really my area
of expertise).
I've seen some of this feedback, and some of it is justified. In a
recent episode of Security Now he went on a rant about some of
renaming of terms in the computer world..
There does seem to be a smear campaign out there for some of the hosts
on the Twit network, whether or not any or all of it is true is
another question.
That's a recent thing that people picked up on. But for the many years prior I don't think there is anything comparable to that.
Can you identify which episode contains the rant?
Can you identify which episode contains the rant?
It's episode 775 and begins at the 1:23:57 (~84 minute) mark in the audio.
https://twit.tv/shows/security-now/episodes/775
It's episode 775 and begins at the 1:23:57 (~84 minute) mark in the audio.
https://twit.tv/shows/security-now/episodes/775
Actually I found it to be a source of fun.
Some people are trying to use newspeak to identify enemies and mark
them for cancellation - if you don't their alternative language for
your projects, you are the enemy and must be destroyed - so making fun
of such mess is the least we can do.
There's a particularly disturbing one where someone is blaming Leo for the death of one of his hosts. I'm not sure whether it's true or not, but still a sad story none-the-less.
It's episode 775 and begins at the 1:23:57 (~84 minute) mark in the audio.
https://twit.tv/shows/security-now/episodes/775
I like how when he's done with the rant there's an uncomfortable pause in the audio and Leo's just like: "You wanna take a break?"
Probably rather smart for Leo to not touch that. :|
I read it and listened to it. I do not perceive the "rant" aspect of it at all. His delivery is clearly tongue in cheek. It was a nice piece
of subtle humour. The people following the show on the complementary
ngs don't even refer to that bit at all.
It was just a normal cue for the upcoming commercial. It's not like the commercial was added in a hurry to get Steve to shut up.
I think people who have reported this to you as a terrible segment on
the show are overreacting over nothing.
Steve remains a well accomplished programmer and communicator in his field. His documentation style is bar none. His brief foray into humor was well designed too.
I haven't followed Steve Gibson in years, but I think the most damning complaint I heard about his work was that SpinRite might get you some
data back, but it'll do it in such a way that'll hasten the demise of
the drive.
But I don't know if people even _use_ SpinRite at this point.
Steve referred to it in 776 himself as a rant, but I totally agree it
was _intended_ as tongue in cheek. The problem is once the
Twitterverse got ahold of it, it quickly descended into mob mentality.
It was just a normal cue for the upcoming commercial. It's not like
the commercial was added in a hurry to get Steve to shut up.
I believe he was done his monologue bu this point, Leo usually puts
his two cents into topics (not always), but I think his silence on
this topic was rather telling.
Another (newer) show I quite like is called "Hackable" from McAfee.
It takes many of the concepts & vulnerabilities discussed in Security
now and puts them into practice.
..they hire some hacker or cyber security expert to demonstrate..
Mr. PGP guy is still around and actually deploying for-profit projects. I don't think any of those is being particularly successful.
The Blackphone looked cool in theory, but in the end it was Android
without Google, with some secure coms tools bolted on which required expensive subscriptions. I think Copperhead looked like a superior competitor on paper, and their support model sorta sucked.
Leo is often fiddling around with other computers while Steve is on a 10 minute training speech. If you watch the videos you'd see that Leo is
not always paying attention to Steve's cues or may not realize when
Steve is done - especially when Leo is looking away at something. Hence
a pause.
A pause like that is not unusual.
Now that sounds interesting! Thanks for the heads up on that one.
I don't mind the odd podcast from this show:
https://www.smashingsecurity.com/episodes
It has a primarily humorous bent on technology SNAFUs.
I lurk in his hosted newsgroups. There are very fine technically articulate people hanging out there.
Steve was the first to discover that Sony was including a rookit..
Discovering something twenty years ago doesn't make someone knowledgable
on all aspects of security, much less any current aspects of it.
Steve seems way out of his element with MFA. We beat the snot out of current methods of MFA that are way more advanced... SQRL wouldn't
last a day under an directed attack.
I realize that people won't take my word for it. I guess I'm not
really trying to convince anyone. I'm just saying that it should
strike people as odd that (1) no one uses SQRL, (2) no one of any reputation has written about SQRL, and (3) he doesn't seem to have
anyone of any reputation following his social media accounts.
(I will admit, I'm surprised it hasnt had greater adoption - but then
you might enlighten me... :)
This is true. It's rare that I ever watch the video, but sometimes when
I have a week off & I'm bored I'll watch live. I can't remember which episode it was (either TWiT or Security Now) there was a brief (albeit
I don't know what this MFA is, but I'll give you that. He studies code behaviour and shares his findings on the podcasts.
If you have evidences that SQRL is breakable, why not demonstrate that for him? Meanwhile, it's an open standard poised to be scrutinized and developed by the community.
** On Tuesday 04.08.20 - 07:12, Arelor wrote to Ogg:I don't think any of those is being particularly successful.
Mr. PGP guy is still around and actually deploying for-profit projects.
How can you tell they are not successful?
I do think that some of the negative things I read kinda got to me.
But Leo certainly has an easy, approachable style with his on-air personality.
I don't think any of those is being particularly successful.Mr. PGP guy is still around and actually deploying for-profit proje
I do think that some of the negative things I read kinda got to me.
We all say & do things we're not proud of. I think we just need to remember that they're only human just like us.
MacArthur where they were talking about this new website called YouTube that somehow makes streaming video from a webpage easy. I'd love to
find that episode again.
On 05 Aug 2020, Arelor said the following...proje
Mr. PGP guy is still around and actually deploying for-profit
There'sI don't think any of those is being particularly successful.
I think there's a valid argument to say that PGP isn't successful either.
never been widespread adopotion of it because it's extraordinarily difficultto use
for the average user.
- Andre
PGP is not an overly succesful product, but OpenPGP has found its niche. Lots of
developers and distribution maintainers use it to sign code. It is the default go-to
solution when you want email encryption without CAs (although in the corporate world
they usually pick a CA based solution).
I think there's a valid argument to say that PGP isn't successful
either. There's never been widespread adopotion of it because it's extraordinarily difficult to use for the average user.
Your points are all valid. But my point is simply that this isn't any
more secure than existing methods, and in some cases worse, and that
it's massively harder to deploy and use. It's just out of touch and
isn't going to see adoption.
There is Wordpress plugin to support SQRL logins. That can be a big
step to getting the user aware of it and implementing it.
So you may have seen me post about SQRL of late - and I'm thinking its a pretty innovative tool.
This thread started with having an ease of use experience of logging into (in this case) BBSes without having to remember "another" password.
Well, I rewrote an SQRL backend (just to learn it in more detail) - its in PHP and I built it to run with LUMEN.
I then added SQRL to synchronet - so yes, it polls the backend, gets an SQRL link and then converts that into a QRCODE which is rendered in the terminal.
Nice. Congratulations. But isn't there supposed to be a way to just allow the user's SQRL client do the login without the QR code too, and without the special sqrl:// link?
I lurk in his hosted newsgroups. There are very fine technically
articulate people hanging out there.
I checked those out several years ago & quickly realized I was out of
my element. They might as well have been speaking Greek, but they
sure seemed to be having fun.
Well, I rewrote an SQRL backend (just to learn it in more detail) -
its in PHP and I built it to run with LUMEN.
I then added SQRL to synchronet - so yes, it polls the backend, gets
an SQRL link and then converts that into a QRCODE which is rendered in
the terminal.
Well, I rewrote an SQRL backend (just to learn it in more detail) -I forgot to ask.. how much code does all that entail?
its in PHP and I built it to run with LUMEN.
I then added SQRL to synchronet - so yes, it polls the backend, gets
an SQRL link and then converts that into a QRCODE which is rendered
in the terminal.
So I've got it working.
Its pretty cool logging into the BBS by using the app on my
phone! Call it a fusion of 1980 and 2020
"As part of our ongoing commitment to further enhance security and confidentiality of ipage® users, we are implementing additional requirements for
ensuring account protection. Between now and September 14, 2020, login to ipage,
and adjust your security settings to align with the requirements outlined below (items marked Action Required):
| Sysop: | sneaky |
|---|---|
| Location: | Ashburton,NZ |
| Users: | 31 |
| Nodes: | 8 (0 / 8) |
| Uptime: | 154:31:23 |
| Calls: | 2,074 |
| Files: | 11,137 |
| Messages: | 946,948 |