Just as a rock climber meticulously checks their gear and follows strict safety protocols to navigate treacherous heights, security UX professionals must also anticipate risks and design safeguards to ensure a smooth and safe journey for users in a digital landscape. In Lou’s interview with Heidi Trost, author of Human-Centered Security: How to Design Systems that are Both Safe and Usable, Heidi highlights the critical safety protocols climbers and belayers follow, which mirror the precautions needed in system design to mitigate human error and anxiety. This analogy sets the stage for a broader discussion on security user experience challenges.

Heidi stresses the necessity of cross-disciplinary collaboration, especially when dealing with sensitive data like personally identifiable information (PII) and electronic protected health information (EPHI). She points out how involving legal and security teams early can streamline projects and improve outcomes. Designers, as facilitators, must bridge the gap between complex security concepts and user comprehension. Heidi’s book helps them do this by using personas to understand how the dynamic between users, security UX, and threat actors shapes. 

Lou and Heidi’s conversation explores the evolution of multi-factor authentication (MFA) and its unintended consequences. What started as a simple 6-digit code morphed into a troublesome fatigue for users. Heidi underscores the importance of iterative design to adapt to these evolving challenges, likening the chaos of security interactions to a relentless ping-pong match.

As they look ahead, Louis and Heidi discuss the rapid evolution of AI in security contexts, emphasizing the balance between technological advancement and user protection. With AI assistants poised to know more about individuals than ever, designers must remain vigilant to prevent potential misuse. Their conversation is an invitation for professionals to rethink how they approach security UX and design, encouraging a proactive stance in this ever-changing landscape.

Rock Climbing and Security UX

Show Main Idea: This lesson examines how a misplaced desire impacts our identity, breeds insecurity, and prevents genuine spiritual growth. Through practical self-reflection and biblical insights, we begin learning how to discern this idol, redirecting our hearts toward God’s approval as the true anchor of our identity.

Show Notes: https://lifeovercoffee.com/podcast/ep-532-fear-of-man-understanding-the-root-of-approval-addiction/

Will you help us to continue providing free content for everyone? You can become a supporting member here https://lifeovercoffee.com/join/, or you can make a one-time or recurring donation here https://lifeovercoffee.com/donate/

Life Over Coffee

Will you help us?

Ep. 531 Fear of Man: Understanding the Root of Approval Addiction, Lesson 1

In episode 4 of Open Source Ready, Brian and John chat with open source expert Tobie Langel about the critical issues of sustainability and security in open source software. Tobie shares insights on the vulnerabilities of widely used open source projects, the need for professional maintainers, and the evolving legislative landscape that could reshape the future of open source.

Subscribe

Open Source Ready - Ep. #4, A Billion-Dollar Idea with Tobie Langel

Willkommen zu einer neuen Folge GeekInspires, in der wir (Thomas, Eric und Gregor) live aus Chicago von der gerade zu Ende gegangenen Microsoft Ignite 2024 berichten.
Dazu gibt es zu Beginn reichlich Infos zu den Neuigkeiten rund um Entra, Azure, Security und Windows. Außerdem am Ende noch die Gelegenheit unseren Impressionen zu lauschen.

Viel Spaß dabei.

Shownotes: https://www.geekpsprech.de

#102 - GeekInspires - Microsoft Ignite 2024 Recap

Welcome to the Tartle Cast, where we explore the revolutionary world of data ownership and how you can take control of your data. In this podcast, we'll discuss:  What is Tartle? Learn about the platform that allows you to securely store, manage, and sell your data to companies.   &nbsp;          How to Earn: Discover how to increase your income by sharing your data on your terms.   &nbsp;          Data Control: Understand how Tartle gives you granular control over your data and how it is shared.   &nbsp;          Charities &amp; Causes: Find out how to support your favorite charities by donating your data.   &nbsp;          The Future of Data: Join us as we discuss the future of data ownership and the impact it will have on the world.  Subscribe to the Tartle Cast today and start taking control of your data!

How to Take Control of Your Data and Make Money

On October 10 and 11, San Quentin held its first ever Film Festival.  150 people from the outside, including Everyday Injustice, got to go inside San Quentin and hang out with around 100 or so incarcerated people, many of them intimately involved in the production of various films.

Incarcerated Films competed with films submitted from the outside.  One of the big winners was The Strike, which was a documentary about the hunger strike held over a decade ago against solitary confinement at Pelican Bay.
A few days after the film, Everyday Injustice walked with the production team.

Lucas Guilkey – Director/Producer of the The Strike
JoeBill Muñoz – Director/Producer of The Strike
Dolores Canales – Film protagonist, founder of CA Families Against Solitary Confinement, organizer on behalf of her son who was in solitary confinement during the hunger strikes
Jack Morris – Film protagonist, spent over 30 years in solitary confinement, participated in the hunger strikes

Article: https://davisvanguard.org/2024/10/the-strike-wins-first-san-quentin-film-festival-award-highlights-horrors-of-solitary-confinement-at-pelican-bay/

Listen as the production team walks us through the horrors of Pelican Bay’s SHUe during the hunger strike from 2014.

Everyday Injustice Podcast Episode 262: The Strike - Film Captures Horrors of Solitary Confinement

Attorney, award winning blogger and AI expert Ralph Losey's curated and vetted podcast features his Anonymous Podcasters as they do a deep dive on Ralph's EDRM blog post on his summary of AI's bipartisan plan to repair a house divided by polarization after the November 2024 election. The 11 point comprehensive plan, laid out on the Losey.AI website gives practical steps for neighbors and fellow citizens to intentionally bridge the gap.

Echoes of AI: Episode 8 |  AI’s 11 Point Bipartisan Plan to Repair a House Divided

Check out this episode from the BSW Vault, hand picked by main host Matt Alderman! This segment was originally published on Jan 24, 2023. Richard Seiersen and our guest, Doug Hubbard, are finishing the second edition of How to Measure Anything in Cybersecurity Risk. Doug is here to share the success of the first edition and preview the second edition. With more insights, the second edition will share more more research data, free tools, and new concepts like FrankenSME. If you're a risk management professional or want to learn more about risk management, don't miss this interview. Show Notes:

2nd Edition: How to Measure Anything in Cybersecurity Risk - Doug Hubbard - BSW Vault

True rest cannot come from getting what we want. We will always just have to keep it, guard it, grow it. It won't give us rest. In Genesis 22, we read about the command from God to Abraham to sacrifice his son Isaac. In this chapter, we discover that true rest comes from God, not what God provides. We learn that God knows what he's asking of us and we can know him, even if we don't know why, how, or when. If we identify with God, rather than with what he provides, we find rest because he himself is good, above all his provision. After all, he did not spare his own Son, but graciously provided him for us all.

Remedy City Church

Rest Comes from the Provider not the Provision (Genesis 22)11-24-24-JeremiahKinney

Check out this episode from the SWN Vault, originally published on February 13, 2019! This Secure Digital Life episode was hand-picked by main host Doug White. Well, there are a lot of terms that are around in Cyber these days. I think we could do shows every week for a while and never get through them all. From AI to Zero Day Exploits, there are a plethora of terms that everyone uses all the time but maybe you don't know them yet. So, I thought we would grab some of the more common ones and try to explain. Show Notes:

Terms & Acronyms - SWN Vault

Tesla, Druids, Salt Typhoon, North Korea, Amazon, Microsoft, Google, Joshua Marpet, and More, on this edition of the Security Weekly News. Visit  for all the latest episodes! Show Notes:

Tesla, Druids, Salt Typhoon, North Korea, Amazon, Microsoft, Google, Joshua Marpet... - SWN #433

After my previous dance sets, which focused solely on mixing techniques, I’ve decided to take things to the next level. This time, I’ve crafted a set inspired by Mother Earth. It’s about connecting with her energy—grounding, security, safety, and unity. To deepen the experience, I’ve included a sound journey that I created at the end of the set.

I hope you enjoy it! Your comments and feedback are invaluable for helping me learn and refine my skills. Thank you!

This mix is for promotional use only. All rights to the tracks belong to their respective artists and labels. If you like the music, please support the artists by purchasing their work.

** Tracklist**
00:00 Rising Earth - Kalilah (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=0m1s)
04:51 I'm free - Symbolico (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=4m51s)
08:07 Alala (El Búho Remix) - Populous (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=8m7s)
09:36 Sidi Bouzid - Filastine (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=9m36s)
11:24 Alami (Mula edit) - Koudede (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=11m24s)
14:00 Baixi Baixi (Baiuca Remix) - Yeahman & Aluna Project (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=14m0s)
16:16 Miles Away (Main Mix) - The Muziq Broz, Major Kapa (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=16m16s)
18:34 Ra Ma Da Sa Sa Say so Hung - Lincoln Jesser (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=18m34s)
21:27 Flight Of Birds - Bedouin (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=21m27s)
26:35 Tonantzin (Drumspyder Remix) - Porangui (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=26m35s)
30:41 Lua (Pippi Ciez Retake) - Pippi Ciez and Djamou Sangare (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=30m41s)
37:32 Longarinas (Kurup Remix) - Venga Venga (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=37m32s)
40:33 Otun (feat. Nidia Gongora) - Montoya (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=40m33s)
43:02 Chaman Imana (Kareem Raïhani Remix) - Elea (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=43m2s)
46:37 Sueño Contigo (La Dame Remix) - Yeahman & Aluminé Guerrero (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=46m37s)
49:05 Wind (Baptiste Sejourne Remix) - Faran Ensemble (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=49m5s)
53:17 Valley of the Ancients (Mose Remix) - Deya Dova (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=53m17s)
56:42 Earth Connection Sound Journey - Hózhǫ́ (https://soundcloud.com/h-zh-935983405/earth-connection?si=0ff156950d2a48c2a849e0f148f8d4ba#t=56m42s)

Earth Connection

Stephanie Wienke, Security Specialist for our wonderful Trusted Partner, HaystackID, sits down with Kaylee &amp; Mary to talk about her journey to eDiscovery, how her English major and creative writing background helps in the security field and how she and her team collaborate to keep the organizational certifications active and current. She explained HaystackID's mentorship culture and the security certifications she is pursuing in the near term.

Illumination Zone: Episode 189 | Stephanie Wienke of HaystackID sits down with Kaylee & Mary

SECURITY GANG MIX 2024

002

FEATURES ARE AS FOLLOWS:

1: Lazer Dim 700 - reel trench boy
2: jojo! - ashamed
3: 406ahmad - Hittin
4: Screwly G X Vonoff1700 X Big Opp X Q50 - (Unreleased)
5: Glokk40Spaz - lost my damn mind
6: Ken Carson - Fighting My Demons
7: brokeboitaylor - weirdo
8: brokeboitaylor - tony snell
9: Lil Xurco - HENCHMEN
10: pintscored - slime
11: OsamaSon - slime
12: Dave Blunts - CRYING IN THE KITCHEN
13: JELEEL! - July

I SHIT MYSELF

FOLLOW & LIKE

securityMix (002)

Check out this episode from the ESW Vault, hand picked by main host Adrian Sanabria! This segment was originally published on December 22, 2023. We're excited to give an end-of-year readout on the performance of the cybersecurity industry with Mike Privette, founder of Return on Security and author of the weekly Security, Funded newsletter. This year, this podcast has leaned heavily on the Security, Funded newsletter to prep for our news segment, as it provides a great summary of all the funding and M&amp;A events going on each week. In this segment, we look back at 2023, statistics for the year, comparisons to 2022, interesting insights, predictions, and more! Segment Resources: Mike's blog; Return on Security:  Mike's newsletter; Security, Funded:  Show Notes:

2023 Funding and Acquisition Summary with Return on Security - Mike Privette - ESW Vault

Keep it lowkey 
When im moving millions you don’t need to know me 
Encryption game won we don’t need a trophy 
StealthAI is the one and only 
Full privacy in the suite what we need 
We been doing things that you ain’t ever seen 
Stealth AI change the world in a sneak 
Portfolio Turn your girl to a freak 
Gotta keep it hidden 
Email Text call 
They gon track your moves 
When you start to ball 
Opps always creeping just forget them all 
Stealth ai like a creep proof wall 
Bullet proof all in the range I’m swerving 
Unique identities it’s full immersion
Dev team cranking out cracked new versions 
Fudders and sellers all dumb broke virgins 
Tell me you ain’t heard this 
Stealth AI revolutionize the game 
When they hit the App Store is when everything changed 
Anonymize what matters when you trading in this space  
Gotta keep your fat bag and your loved ones safe 
That’s real 
Revenue share 
That’s real 
Price climbing like stairs that’s real 
Steal ai that’s real

Full privacy in the suite what we need 
We been doing things that you ain’t ever seen 
Stealth AI change the world in a sneak 
Portfolio Turn your girl to a freak 
Gotta keep it hidden

STEALTH AI @CRYPTORAPCALLS

Artificial Intelligence has made extraordinary advancements, but a critical challenge remains: the gap between synthetic data and real human intelligence. In this episode of TARTLECAST, Alexander McCaig and Jason Rigby delve into the concept of the "synthetic ceiling" — the inherent limitations of AI systems reliant on synthetic and scraped data. They discuss how this disconnect, often leading to "synthetic drift," impacts the accuracy, adaptability, and ethical considerations of AI models. The hosts introduce TARTLE's revolutionary approach to bridging this gap using Real-Time Human Feedback (RTHF) and ethically sourced zero-party data. By creating a "Human Resonance Loop," TARTLE allows AI to align with real human behaviors, improving model accuracy, reducing bias, and enhancing contextual understanding.  Key Topics Discussed: 1. The Synthetic Ceiling &amp; Synthetic Drift  Definition of the "synthetic ceiling": A barrier preventing AI from achieving human-like reasoning. Explanation of "synthetic drift": The gradual disconnection between AI models and real human behaviors due to over-reliance on synthetic data.  2. The Reality Gap in AI  Challenges in AI performance caused by the lack of real-world context. The measurable disconnect between test scenarios and real-world applications. Insights into the "Data Vitality Score" as a measure of dataset relevance to human behavior.  3. The TARTLE Difference  Introduction to ethically sourced zero-party data and Real-Time Human Feedback. How TARTLE creates a "Human Resonance Loop" to align AI predictions with human intuition. Real-world results: 30% improvement in AI model accuracy and 60% faster development cycles.  4. Technical Architecture of Real Intelligence Integration  Foundations of TARTLE’s approach:  Zero-Party Data: Direct, consent-based user information. Human Feedback Loops: Continuous refinement through dynamic, real-world input. Contextual Enhancement Layers: Incorporating experiential knowledge, emotional context, and cultural nuances.    5. Philosophical Implications of Human-AI Collaboration  Why human intelligence cannot be replicated but must be integrated into AI. The ethical necessity of consent in data sourcing. Creating symbiotic relationships where AI enhances human decision-making without replacing it.  6. Future Applications and Scalability  The role of TARTLE in creating AI systems that evolve with human behaviors. Scalable solutions for data scientists, AI developers, and ethical businesses.   Key Takeaways:  AI Needs Real Intelligence: Synthetic data alone is insufficient for achieving true AI potential. Real human data provides the context, adaptability, and emotional resonance needed for advanced AI models. Ethical AI Starts with Consent: TARTLE’s approach emphasizes permission-based data sharing, ensuring privacy and trust. Scalable Impact: With TARTLE’s platform, AI systems continuously evolve, grounded in the richness of real human input.   Quotes from the Episode:  “Without consent, AI models hit a synthetic ceiling they cannot break through.” “AI can only achieve neural resonance when it integrates real human feedback.” “TARTLE isn’t just about building better AI; it’s about redefining human-AI collaboration.”   Connect with TARTLE:  Website:   Subscribe &amp; Review: Enjoyed this episode? Subscribe to TARTLECAST on your favorite podcast platform and leave us a review! Join the TARTLE Movement: Sign up to share your data ethically and make a global impact: www.tartle.co Stay Tuned: In the next episode, we’ll dive into real-world AI applications transforming industries through TARTLE’s platform. Don’t miss it!

Why 73% of AI Models Fail (and How Real Human Data Fixes It)

Attorney, award winning blogger and AI expert Ralph Losey's curated and vetted podcast features his Anonymous Podcasters as they do a deep dive on Ralph's EDRM blog post on The Theory of Mind (ToM) which appears to have emerged as an unintended by product of LLMs' improving language skills. They discuss Michal Kosinski's article, "Evaluating large language models in theory of mind tasks" (Proceedings of the National Academy of Sciences "PNAS," 11/04/24). Ralph Losey used this ToM approach in creating the 11 Point Bipartisan Plan to Repair a House Divided discussed in Episode 8, Echoes of AI.

Echoes of AI: Episode 9 | GPT-4 Breakthrough: Emerging Theory of Mind Capabilities in AI

Are there holes in your security program? Quite likely. In this episode of SM Highlights, host Brendan Howard speaks with red team expert Gary DeMercurio about how to develop a testing program and scope that deliver actionable results and value. Also, Marc Weber Tobias outlines the concept of insecurity engineering in locks and the basic awareness security practitioners should leverage. Then, Mark Johnson explains how data-driven video surveillance systems are being used to improve operations and safety for medevac helicopters. 

Additional Resources
Interested in penetration testing? Watch a selection of key takeaways from GSX 2024 speakers here: https://www.youtube.com/watch?v=cHXSh77ONPw 

Read more about pen testing and red teaming in Security Management’s coverage publishing later in December. 

Read more from WIRED about Marc Weber Tobias’s work on Medeco locks here: https://www.wired.com/2008/08/medeco-locks-cr/ 

For more on medevac helicopter security, read Mark Johnson’s article here: https://www.asisonline.org/security-management-magazine/monthly-issues/security-technology/archive/2024/december/Data-Driven-Video-Technology-Enhances-Medevac-Helicopters-Safety/ 

Learn more about flying debris affecting helipad safety in this National Transportation Safety Board safety alert: https://www.ntsb.gov/Advocacy/safety-alerts/Documents/SA-057.pdf 

Dive deeper into transportation security in the December 2024 issue of Security Technology here: https://www.asisonline.org/security-management-magazine/monthly-issues/security-technology/archive/2024/december/ 


Imagination Required: Red Teams, Better Lock Design, and Helicopter Security Technology

Lou Rosenfeld talks with a LOT of brilliant, interesting changemakers in the UX world and beyond. Subscribe to the Rosenfeld Media podcast for a bird's eye view into what shifts UX faces, and how individuals and teams can respond in ways that drive success.

Heavybit is the leading investor in developer-first startups that turn visions into movements, products into platforms, and contributors into communities. Since 2013, Heavybit companies have redefined how teams build, deploy, secure, and scale mission-critical technology. From JAMstack, to DevSecOps, to feature flagging, Heavybit founders build the future of software from the bottom up.

Security is the Gang Security rise 2024 We takin the cake
Following Security Members
NOT insecurity We on sum new wave Type shi type shi drop follow

Welcome to my SoundCloud page! I’m Hózhǫ́ (pronounced hoh-zhoh), an Ecstatic Dance DJ just starting out. Hózhǫ́ is a central concept in Navajo (Diné) culture, meaning "beauty" or "harmony." It represents well-being, balance, and the interconnectedness of all things, reflecting an ideal state where one lives in alignment with the natural order, embracing physical, emotional, mental, and spiritual health.

This SoundCloud page is my DJ journey in audio form. Each upload captures my growth and creativity as I progress—imperfections and all. Feel free to explore! Thank you for visiting. May your life be filled with harmony, joy, beauty, and love. Aho!

Information security news, hacking, interviews, podcasts, live Internet TV, cocktails, and more!

Hack naked.

Security Management Highlights brings the security professional expert interviews and information on the most critical industry topics. Join host Brendan Howard as he interviews thought leaders and industry professionals, as well as editors from the magazine.

Rick launched the Life Over Coffee global training network in 2008 to bring hope and help for you and others by creating resources that spark conversations for transformation. His primary responsibilities are resource creation and leadership development, which he does through speaking, writing, podcasting, and educating.

In 1990 he earned a BA in Theology and, in 1991, a BS in Education. In 1993, he received his ordination into Christian ministry, and in 2000 he graduated with an MA in Counseling from The Master's University. In 2006 he was recognized as a Fellow of the Association of Certified Biblical Counselors (ACBC).

Hier spricht Eric Berg mit Gästen zu aktuellen Themen aus dem ITPro-Segment. Thematisch befasst sich der Podcast mit aktuellen Microsoft Enterprise-Lösungen, Erfahrungsberichten, News, Kritik und mehr. Neben der Technik schwenkt der Blick aber auch auf aktuelle Messen, Veranstaltungen und andere interessante Dinge, die seit der letzten Folge GeekSprech passiert sind.

Davis Vanguard Podcast will be covering criminal justice reform, mass incarceration, wrongful convictions, and more.

TARTLE is a global personal data marketplace. Free to join, free to use. It is where humanity goes to get paid for their data.

Remedy City Church exists to take the remedy of Jesus Christ to the needs of Muncie, Indiana, and beyond. We are called to care about our church community (to help one another move from where we are to where God wants us to be), about our communication of Christ (to tell good news to church and city, Christian or not), and about our city (to show how God’s forgiveness radically changes a person from the inside out).

New tracks tagged #security