Episode 146 - The Hungry Hungry Caterpillar

<p><strong>This Week in InfoSec (08:33)</strong></p><p>With content liberated from the “today in infosec” twitter account and further afield</p><p>29th March 2010: OpenSSL version 1.0.0 was released. It's easy to take for granted how pervasive the open source library is in the myriad of technologies used to transmit data over the internet and other networks. Take a moment to think about it. </p><p><a href="https://twitter.com/todayininfosec/status/1641215201197412352">https://twitter.com/todayininfosec/status/1641215201197412352</a></p><p>25th March 2010: 2010: Albert Gonzalez was sentenced to 20 years in prison for stealing credit card data from TJX and other companies. He is currently serving his sentence at FMC Lexington and is scheduled to be released in less than 4 months.</p><p><a href="https://www.bop.gov/inmateloc/">Find an inmate</a>: BOP Register Number 25702-050</p><p><a href="https://twitter.com/todayininfosec/status/1639657037935067137">https://twitter.com/todayininfosec/status/1639657037935067137</a>  </p><p> </p><p><strong>Rant of the Week (13:55)</strong></p><p><a href="https://www.theregister.com/2023/03/31/nhs_highland_reprimanded_by_data/">NHS Highland 'reprimanded' by data watchdog for BCC blunder with HIV patients</a></p><p>In a classic email snafu NHS Highland sent messages to 37 patients infected with HIV and inadvertently used carbon copy (CC) instead of Blind Carbon Copy meaning the recipients could see each other’s email addresses.</p><p>This is according to Britain’s data watchdog, the Information Commissioner’s Office, which has “reprimanded” the Health Board, which serves a regional population of some 320,000 people and has an annual operating budget of £780 million ($964 million).</p><p>The error took place in June 2019 when a member of staff opened the prior group email and copied all those on the list and emailed a newsletter to the the group of 37 “data subjects” - aka patients - without using BCC. Efforts to recall the mail failed.</p><p>Rather than issuing a £35,000 ($43,000) fi