xxx
A set of hackers managed to impersonate Binance chief communications officer (CCO) Patrick Hillmann in a series of video calls with several representatives of cryptocurrency projects. The attackers used what Hillman described as an AI hologram, a deepfake of his image for this objective, and managed to fool some representatives of these projects, making them think Hillmann was helping them get listed on the exchange.
From Hackers Used Deepfake of Binance CCO to Perform Exchange Listing Scams – Exchanges Bitcoin News:
What is to be done? Unless Zoom clients check the digital signatures of the participants, how can anyone know who they are really talking to? But wait a minute… why don’t Zoom clients check the digital signatures of the participants?
If you come from the computer science department, it seems easy
Well, let me tell you what happens in practice. A while back, I was involved in a project for bank. A Swiss bank, as it happens. And the project was of a somewhat sensitive nature, so the bank asked me and other consultants to digitally sign and encrypt all mail. It took about two days for all of us to figure out how to get the relevant S/MIME certificates and configure our mail packages to use them properly. It was really difficult to get it working, and we knew what we were doing. The world of high security communications lasted about a day and then the bank called up and told us to stop encrypting thing because their anti-spam system was quarantining all of our messages (because it couldn’t read them). So we turned off the encryption and just signed the messages. After another day we were asked to stop doing that because the business managers were reading the messages on their phones, not their laptops, and their phones were reporting all of the signatures as invalid. We never found out why.
Look, PGP has been around for years. You can send me secure e-mail any time you want to by using PGP. The public key for dave@15Mb.ltd is on the PGP key servers and the fingerprint is B97A F576 4458 B23C 67EF 38E D91E AE41 896F E501. That’s a 4096 bit key. If you want to send me some juicy whistleblowing or insider trading tips, you can do it using a key that the NSA can’t break (for at least a decade or so, until they get their hands on a cool quantum computer).