View source for Signed, Entangled, Encrypted, I’m Yours

[[Category:Daily Tech News Show Episodes|.2804]]
{{Infobox Episode|
  title  = Signed, Entangled, Encrypted, I’m Yours |
  number = 2804 |
  date   = JULY 8, 2016|
  length = 39:04 |
  hosts  = [[Tom Merritt]]|
  guests = [[Darren Kitchen]], [http://lenperaltastore.com Len Peralta]}}
Facebook is adding an end-to-end encryption option to Messenger with disappearing messages. Darren Kitchen talks with Tom Merritt about how secure it really is. Plus a robot jellyfish made of rat parts. What will Len Peralta illustrate?

==Guest==
*[[Darren Kitchen]]
**[http://hak5.org/ Hak5]
*[http://lenperaltastore.com Len Peralta]
**[http://lenperaltastore.com/collections/daily-tech-news-show?page=1 All DTNS drawings]
**[http://lenperaltastore.com/products/secret-conversations-dtns-7-8-16-print This episode's drawing]

==Top Stories==
*[https://blogs.microsoft.com/next/2016/07/07/project-malmo-lets-researchers-use-minecraft-ai-research-makes-public-debut/#sm.00155ctoodw0dgw117k1w97tmutu5 Project Malmo, which lets researchers use Minecraft for AI research, makes public debut]
::Microsoft is open sourcing Project Malmo, its platform that uses Minecraft to improve AI problem solving. It will also have an overclocking feature to run experiments faster than the normal Minecraft game speed. The platform has a mod for the Java version of Minecraft and code to help AI agents act within the game. The code runs on Windows, Linux or MacOS and can be found at github.com/Microsoft/malmo.
*[http://dctv.link/dtns2804topstorylink Experimenting with Post-Quantum Cryptography]
::Google announced it is switching the TLS encryption in a test portion of Chrome installations from using just elliptic curve cryptography to also having Ring Learning With Error or Ring-LWE. In other words it's testing a type of encryption that cannot be broken easily by quantum computers. Traditional encryption is also still used so that the experimental connections are at minimum as strong as all others. The experiment is only enabled in Chrome Canary, the developer edition. You can see if your installation is by looking for CECPQ1 in the key exchange visible in the Security Panel.
*[https://techcrunch.com/2016/07/07/google-acquires-anvato-a-media-streaming-and-monetization-platform-for-broadcasters/ Google acquires Anvato, a media streaming and monetization platform for broadcasters]
::Google announced Thursday it has acquired Anvato, a video platform for cloud editing, on-demand and live streaming. NBC, CBS, Fox and Univision are among its clients. This puts Google in competition with Amazon, Microsoft and to some extent BAM.
*[https://techcrunch.com/2016/07/08/oops-wearables-can-leak-your-pins-and-passwords/ Oops! Wearables can leak your PINs and passwords]
::Research conducted by teams from the department of electrical and computing engineering at the Stevens Institute of Technology and Binghamton University in New York State how motion sensor data in a smartwatch could be used to deduce a user's PIN. The algorithm was tested on 5,000 key entry traces made by 20 adults using one of three different wearables with 80% accuracy on the first attempt rising to 90% after three tries. An exploit would need to capture packets from Bluetooth or by malware on a phone or watch. It could be foiled by using another hand or introducing random movements while entering a PIN.
*[http://abcnews.go.com/Technology/wireStory/wendys-1000-restaurants-affected-hack-40407208 Wendy's Says More Than 1,000 Restaurants Affected by Hack]
::Wendy's continues its investigation of malware that infected its point of sale systems AKA what used to be called cash registers. Wendy's has raised its estimate from 300 to 1,025 affected locations. Wendy's has put up a Web page where you can check to see if the location you've visited has been affected. That's at payment.wendys.com/paymentcardcheck.html
*[https://www.technologyreview.com/s/601834/robotic-stingrays-made-with-rat-heart-algae-and-plastic-fins/?set=601863 Robotic Stingrays Made with Rat Heart, Algae, and Plastic Fins]
::Researchers from Harvard University have developed a robot made of silicone, gold wire genetically engineered rat heart cells infused with photosensitive algae - that can swim like a stingray and follow a light source allowing for remote control. It cannot survive outside the lab. Yet.

==Discussion==
*[http://www.recode.net/2016/7/8/12126764/facebook-messenger-encryption-disappearing-messages-security-update Facebook Messenger is adding self-destructing messages and better encryption]
*[https://www.wired.com/2016/07/secret-conversations-end-end-encryption-facebook-messenger-arrived/ ‘Secret Conversations:’ End-to-End Encryption Comes to Facebook Messenger]
::'''[https://www.reddit.com/r/DailyTechNewsShow/comments/4ruqhf/secret_conversations_endtoend_encryption_comes_to/?ref=share&ref_source=link Submitted by tm204]'''
*[http://newsroom.fb.com/news/2016/07/messenger-starts-testing-end-to-end-encryption-with-secret-conversations/ Messenger Starts Testing End-to-End Encryption with Secret Conversations]
*[https://whispersystems.org/blog/facebook-messenger/ Facebook Messenger deploys Signal Protocol for end to end encryption]
*[https://fbnewsroomus.files.wordpress.com/2016/07/secret_conversations_whitepaper.pdf Messenger Secret Conversations Technical Whitepaper]
*[http://www.nytimes.com/2016/07/09/technology/facebook-messenger-app-encryption.html Facebook to Add ‘Secret Conversations’ to Messenger App]

==Pick of the Day==
*[http://amzn.to/29Sk565 Eikon Mini Fingerprint Reader for Microsoft Windows Login and NEW Windows 10 Hello - Sign-in to Windows Using Your Finger - Remember Your Windows Password]
::I've been using this fingerprint reader (Eikon Mini Fingerprint Reader for Microsoft Windows) for nearly two weeks on my Win 10 desktop. It works well with the Win 10 Hello feature and has always worked on the first scan. I used double sided tape to attach it and a USB extension to the edge of my monitor. I have my system to lock after five minutes of idle, unless a video is playing. Paul Thurrott mentioned this device on Windows Weekly in an earlier episode.
::'''Submitted by Bill'''

==Messages==
::Hi Tom,<br /><br />Just thought you might want to hear from someone 20 years in the future.<br /><br />As a listener who is approaching the early stages of late youth I was interested in your discussion of how different generations get their news.<br /><br />I still read the LA Times every day. On my iPad.<br /><br />I've never been one to write to the newspaper, but now that I can send a response to an Op Ed piece by touching a link at the end of an article I'm writing in all the time.<br /><br />I also get breaking news from Twitter and Facebook, plus The Morning Stream, DTNS & other podcasts.<br /><br />Given the confirmation bias at our house we tend to watch Rachel Maddow & the Daily & Nightly Shows instead of network news or a 24 hour news channel.<br /><br />I'm 66 for the next 5 days. (Still counts). I suspect I'm atypical for my age. 😉
::'''Sent by Gary (SeniorGeek) Fisher'''


::Hey Tom, Jermaine from seesawing temps Champaign<br /><br />I think the question of having a real game controller on a touchscreen display may be a chance to reaffirm the link between technologies being used first by persons with disabilities and then in some cases being adopted by the tech community at large.<br /><br />Text to speech was first "mainstreamed" as a way to allow blind and visually impaired persons to access computers, and is now a technology that I don't think many of us wants to live without.<br /><br />Braille displays are screens which create tactile dots for a blind person to be able to read on a portable device, and as they get cheaper to manufacture I envision they will be used in many different ways. I expect that one of these uses could be to help solve the touchscreen gaming conundrum.<br /><br />So I imagine within five years, you might have an iPhone 9 gaming Edition which creates clear tactile buttons on the screen for use during gameplay.<br /><br />Thanks for the show Tom
::'''Sent by Jermaine from seesawing temps Champaign'''


::I wanted to give you some feedback on the IOT security question that came up recently, and the solution I used at my house.<br /><br />I'm in IT (Nuclear IT Architect), so I've got more advanced networking gear than most people, but I imagine that things like this will trickle down to consumer focused gear in the next couple of years (Like the onhub).<br /><br /><br />I have three wireless networks, all VLAN'd and segregated from each other<br />Family Name<br />Family Name Guest<br />Family Name IOT<br /><br />Family name is password protected, not filtered, and has unlimited speed.<br /><br />Family Name guest is open, but enforces speed limits (5/1 mbps), and is subject to content filtering. Devices on this network also can't connect to each other, only the internet.<br /><br />Family Name IOT is secured with a long password, speed limited, and I restrict via my firewall what services it's allowed to reach on the internet. The devices are restricted from contacting eachother, and there is no UPNP, meaning there shouldn't be the possibility of any incoming connections I didn't setup manually.<br /><br />I wanted to give the IOT devices a secure connection to the internet (hence not just putting them on guest), while preventing a possible out of date, infected IOT devices from infecting the rest of my network, while still giving them access to the internet.<br /><br />Currently the IOT network hosts my fitbit scale, wifi cameras (that record to a cloud server I run), several smart light bulbs/power sockets, as well as the management traffic for my software defined networking equipment (access points and switches).<br /><br />I think it's a good solution for me, but I hope doing so will get easier for people like my parents sooner rather than later because 99.9% of the public can't/won't set something like this up.<br /><br />Love the show, and a proud patreon supporter. Keep up the good work guys!
::'''Sent by Dustin'''

==YouTube==
<youtube>fimHcGS9elo</youtube>

==Links==
*[http://www.dailytechnewsshow.com/dtns-2804-signed-entangled-encrypted-im-yours/ This episode on dailytechnewsshow.com]
*[http://www.patreon.com/dtns Support DTNS on Patreon]
*[http://dailytechnewsshow.reddit.com/ DTNS subreddit]


{{Succession box|
preceded   = Headline: People Just Read Headlines |
followed   =  Democracy Sausage}}