This week, Steve and Leo discuss the recent 'Salt Typhoon' hack of U.S. telecom providers by China, TPM 2.0 requirement for Windows 11, Microsoft's newly hacked Windows activation system, Apple patenting AI facial and body recognition, and much more. Steve also shares an intriguing conversation he had with the ChatGPT 4o AI system while working on an update to GRC's DNS Benchmark tool.

• All telecom providers have been hacked and may still not be safe to use. So now the government is recommending that we use our own encrypted communications.
• The plan to obsolete all non-TPM 2.0 PCs remains well underway. Microsoft must be feeling the heat, so they're taking time to not apologize.
• Whoops. Microsoft's product activation system has been fully hacked. All Windows and Office products may now be easily activated without any licensing.
• Here come the AI patents. Apple patents AI recognizing people by what they're wearing after earlier seeing their faces and noting what they're wearing.
• Zoom wasn't encrypting their early video conferencing. They're still trying to get out from under the mess their lies created for them.
• AWS introduces physical data terminal locations where users can go to perform massive data transfers to and from the cloud.
• The FTC has set its sights on data brokers. Let's hope something comes of it.
• GRC's email finally gets BIMI. (Can you see the Ruby-G logo?)
• Lot's a terrific listener feedback about authenticator policy, a new and free point-to-point link service, Tor's "Snowflake", linking PCs and Smartphones, and even recharging spent SodaStream canisters.
• Then we look at a recent conversation Steve had with "ChatGPT 4o with canvas" and the new plan that resulted

Show Notes - https://www.grc.com/sn/SN-1004-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

lookout.com
canary.tools/twit - use code: TWIT
bitwarden.com/twit

SN 1004: A Chat with GPT - China's Telecom Hack, Win 11's TPM Controversy, Microsoft Activation Cracked, Coding with ChatGPT 4o

Security Now (Audio)