<ul> 
<li>Is AI the Wizard of Oz? Or is it more?</li> 
<li>Microsoft's long standing effective MFA login bypass.</li> 
<li>Is TPM 2.0 not required after all for Windows 11?</li> 
<li>Meet 14 North Korean IT workers who made $88 million from the West.</li> 
<li>Android updates its Bluetooth tracking with anti-tracking.</li> 
<li>The NPM package manager repository has had 540,000 malicious packages discovered hiding in plain sight.</li> 
<li>The AskWoody site remains alive, well, and terrific.</li> 
<li>My iPhone is linked to Windows and it's wonderful. Yay.</li> 
<li>How has email been finding logos before BIMI?</li> 
<li>If we use Him and Her for people, how about Hal for AI?</li> 
<li>Another very disturbing conversation with ChatGPT.</li> 
<li>What's going on with the new ChatGPT o1 model? It wants to escape? What??</li> 
<li>Let's Encrypt plans to reduce its certificate lifetime from 90 to just 6 days. Why in the world?</li> 
<li>And all the best holiday wishes. See you in January</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-1005-Notes.pdf">https://www.grc.com/sn/SN-1005-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to Security Now at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://joindeleteme.com/twit" target="_blank">joindeleteme.com/twit promo code TWIT</a></li>
<li><a href="http://1password.com/securitynow" target="_blank">1password.com/securitynow</a></li>
<li><a href="http://bigid.com/securitynow" target="_blank">bigid.com/securitynow</a></li>
<li><a href="http://canary.tools/twit" target="_blank">canary.tools/twit - use code: TWIT</a></li>
</ul>

SN 1005: 6-Day Certificates? Why? - Android Anti-Tracking, MFA lLogin Bypass, BIMI