What does Black October teach us about Online Security?

Black October: a wave of AI-fueled security vulnerabilities and hacks, from the PHP exploit that hit WordPress and Wikipedia to attacks on DNS and SSL. Alex and Richard explain what's happening, why centralized data creates honeypots, and why the old "secure corporate server" idea is breaking down. They also look at alternatives like public-key identity, and what you can do now to protect yourself. New episodes every Sunday at 12 PM UTC. Timestamps 0:00 Intro: what "Black October" is 0:44 An avalanche of AI-driven vulnerabilities 1:57 What is a CVE, and why the system is overloaded 4:15 The PHP exploit and why it mattered (WordPress, MediaWiki) 7:36 Is this the new normal? 8:32 Code breaking, stockpiled exploits and the end of "security through effort" 10:58 Why corporate and government IT security is weaker than we think 13:09 Will we double down or rethink the architecture? 17:09 Scams, 2FA and how people are changing their habits 20:05 Why security keeps getting harder, and how public-key logins fix it 22:29 The business model that keeps centralization alive 26:07 Enshittification, DNS and SSL attacks 28:48 Centralized search and the honeypot problem 30:24 Creating an account: Gmail vs. Sido 34:07 The wallet analogy 35:34 A fork in the internet? 36:34 Pushing back on data collection 38:42 Why "Login with Google/Apple" is risky 39:09 Personal responsibility in the digital world 40:44 Wrap-up