Episode 177 - The Are We Doing This Episode

<p><strong>This week in InfoSec (07:51)</strong></p><p>With content liberated from the “today in infosec” twitter account and further afield</p><p>5th December 2011: Fyodor reported that CNET's<a href="https://t.co/PgQhBDAU40"> http://Download.com</a> had been wrapping its Nmap downloads in a trojan installer...in order to monetize spyware and adware. CNET quickly stopped, then resumed within days, it affected other downloads, and was a debacle.</p><p><a href="https://insecure.org/news/download-com-fiasco.html">Download.com Caught Adding Malware to Nmap & Other Software</a></p><p><a href="https://twitter.com/todayininfosec/status/1732073893912047860">https://twitter.com/todayininfosec/status/1732073893912047860</a></p><p>4th December 2013: Troy Hunt launched the site "Have I Been Pwned? (HIBP)". At launch, passwords from the Adobe, Stratfor, Gawker, Yahoo! Voices, and Sony Pictures breaches were indexed. Today? Billions of  compromised records from hundreds of breaches. Search your email addresses for free.</p><p><a href="https://twitter.com/todayininfosec/status/1731673318560801228">https://twitter.com/todayininfosec/status/1731673318560801228</a>    </p><p> </p><p><strong>Rant of the Week (13:29)</strong></p><p><a href="https://www.theregister.com/2023/12/05/uk_age_verifcation_proposals/">It's ba-ack... UK watchdog publishes age verification proposals</a></p><p>The UK's communications regulator has laid out guidance on how online services might perform age checks as part of the Online Safety Act.</p><p>The range of proposals from Ofcom are likely to send privacy activists running for the hills. These include credit card checks, facial age estimation, and photo ID matching.</p><p>The checks are all in the name of protecting children from the grot that festoons large swathes of the world wide web. However, service providers will likely be stuck between a rock and a hard place in implementing the guidance without also falling foul of privacy regulations. For example, Ofcom notes the following age checks as potenti