BSides SD announcement, finding fraudulent workers, Flock flocks things up, insider threat checks

BSides San Diego's call for papers opens October 1, a teardown of Flock Safety's license-plate cameras published by Micah Lee turns up 53 hard-coded credentials and a Wi-Fi password of "security", new research says two-thirds of fraudulent hires are caught by gut feeling rather than security controls, LG explains what its smart TVs do and don't listen to, and CISA's Insider Threat Mitigation Guide ties it back to the fake-worker problem. Plus a first live test of Bryan's home-built Twitch/YouTube chat bridge.

Chapters 

00:00 Correction: BSides San Diego 2027 is March 27, not April 3 as said later in the show 

00:30 Back after the Miramar Air Show drowned out last week's stream 

02:23 Building a unified Twitch + YouTube chat bridge with Claude (and why it isn't open source) 

08:56 BSides San Diego 2027: call for papers and workshops, October 1 to December 20, 2026; the event is March 27, 2027 

17:37 Flock cameras: Android 8.1, a 2019-era kernel, 53 hard-coded credentials, and the encryption key stored next to the data it protects 

39:58 Hiring fraud: 98% of HR leaders have seen it, and fake workers average six days of access before anyone notices 

45:22 How Amazon caught a North Korean IT worker by 110 ms of keystroke lag

53:56 LG's smart TV "spying" story: wake words, automatic content recognition, and the 18-second voice limit

1:03:55 CISA's Insider Threat Mitigation Guide, and MICE: money, ideology, coercion, ego

1:23:03 Wrap-up: Seattle this weekend, and raiding FreedomDAO

Links

BSides San Diego: https://www.bsidessd.org

CISA Insider Threat Mitigation Guide: https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide

Music:

Music provided by Chillhop Music: https://chillhop.ffm.to/creatorcred

"Flex" by Jeremy Blake Courtesy of Youtube media library

Some portion of this stream contain the use of AI agents for coding and content creation purposes, specifically, the show notes you're reading, and the background, and the chat application used in the stream.