The secret Strava service, deepfakes, and crocodiles

Key takeaways

Crocodiles possess a bite strength significantly stronger than that of humans, posing a real danger in the wild.
Fitness tracking apps like Strava can inadvertently compromise the security of high-profile individuals by revealing their locations.
Deepfake technology presents serious risks during elections, including potential misinformation campaigns aimed at confusing voters.
Government interest in AI-generated personas by the Pentagon raises ethical concerns regarding digital identity and misinformation.

Summary

Crocodiles and Their Fearsome Bite

The episode begins with a humorous banter between the hosts, Graham Cluley and Carole Theriault, about their fear of crocodiles. Graham mentions a trip to 'Crocodiles of the World' and the impressive strength of a crocodile's bite, comparing it to a human's bite. This sets a light-hearted tone, contrasting nature's fearsome creatures with the everyday world of cybersecurity.

Strava's Security Breach Exposed

The discussion shifts to Strava, a fitness tracking app, and its implication in exposing the locations of world leaders. The hosts share a report indicating how bodyguards' use of Strava could inadvertently reveal sensitive movement patterns of individuals like Joe Biden and Emmanuel Macron. They detail the lapses in security protocol, humorously suggesting that bodyguards prioritize fitness tracking over their primary job of protecting VIPs.

The Deepfake Dilemma

Carole introduces the topic of deepfakes, particularly in the context of the upcoming U.S. elections, highlighting the risks of misinformation campaigns using AI technology. The conversation delves into a public service announcement aimed at raising awareness about how deepfakes could be used to deter voters. The hosts analyze the effectiveness and potential shortcomings of such announcements.

The Pentagon's Interest in Deepfakes

In an intriguing segment, Graham and Carole explore a report about the Pentagon's interest in developing technologies for AI-generated online personas to gather intelligence. They discuss the implications of such tools, including the risks of misinformation and the potential for abuse in social media environments. A critical reflection on how this technology could blur the lines between real and artificial interactions emerges.

Show notes

In this week's episode your hosts practice standing on one leg, Carole gives Graham a deepfake quiz, and we investigate how Strava may be exposing the movements of world leaders.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Smashing Security #063: Carole’s back.
Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online - We Live Security.
Smashing Security #330: Deepfake Martin Lewis, and a deadly jog in the park.
How Emmanuel Macron can be tracked - Le Monde.
How Emmanuel Macron can be tracked - YouTube.
The Pentagon Wants to Use AI to Create Deepfake Internet Users - Intercept.
Is AI eroding democracy ahead of the US election? - BBC News.
Fooled twice: People cannot detect deepfakes but think they can - PMC.
Detect Fakes - Kellogg Northwestern.
DON'T LET AI STEAL YOUR VOTE! - YouTube.
Deepfakes fool more than half of Americans, UVU study shows - KLS News radio.
Crocodiles Of The World.
Here's How Long You Should Be Able To Stand On 1 Leg By Age - Huffington Post.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy