Episode 69 - Think of a Number Bill and Ted

<p><strong>This week in Infosec</strong></p><p>With content liberated from the “today in infosec” twitter account</p><p>14th August 2013: Affinity Health Plan was fined $1,215,780 for a HIPAA violation after a photocopier purchased by CBS for an investigatory report in 2010 revealed medical info.</p><p><a href="https://www.healthcareitnews.com/news/12m-photocopy-breach-proves-costly">At $1.2M, photocopy breach proves costly</a></p><p><a href="https://twitter.com/todayininfosec/status/1294252352191565824">https://twitter.com/todayininfosec/status/1294252352191565824</a>  </p><p>17th August 2005: Jason Smathers, a former employee of AOL, was sentenced to 15 months in prison for selling screen names and email addresses of 92 million users to spammers.</p><p><a href="https://www.nbcnews.com/id/wbna8985989">Ex-AOL worker who stole e-mail list sentenced</a></p><p><a href="https://www.networkcomputing.com/networking/jason-smathers-internet-criminal">Jason Smathers: Internet Criminal</a></p><p><a href="https://twitter.com/todayininfosec/status/1295500512830394371">https://twitter.com/todayininfosec/status/1295500512830394371</a></p><p> </p><p><i><strong>The Box</strong></i> incidental music © Charlie Langford</p><p> </p><p><strong>Rant of the Week</strong></p><p><a href="https://www.bleepingcomputer.com/news/security/you-can-post-linkedin-jobs-as-almost-any-employer-so-can-attackers/">You can post LinkedIn jobs as almost ANY employer — so can attackers</a></p><p>Anyone can create a job listing on the leading recruitment platform LinkedIn on behalf of just about any employer—no verification needed.</p><p>And worse, the employer cannot easily take these down.</p><p>Now, that might be nothing new, but the feature and lax verification on career websites pave the ways for attackers to post bogus listings for malicious purposes.</p><p>The attackers can, for example, use this social engineering tactic to collect personal information and resumes from professionals who believe they are applying to a legitimate company, without re