{"title": "White hats and the Vastaamo extortion | Juho Ranta | Negotiator 42", "titleOriginal": "2NS-Valkohatut ja Vastaamon kiristys | Juho Ranta | Neuvottelija 42", "episodeNumber": "42", "guest": "Juho Ranta", "publishedAt": "2020-10-26", "duration": "36:24", "durationIso": "PT36M24S", "youtube": "https://www.youtube.com/watch?v=oFFR4exAbCI", "fiCanonical": "https://www.neuvottelija.fi/fi/episodes/48-neuvottelija-42-2ns-valkohatut-ja-vastaamon-kiristys-juho-ra", "originalLanguage": "fi", "format": "full", "topics": ["ai_enterprise_tech", "free_speech_society"], "description": "Second Nature Security CTO Juho Ranta unpacks the Vastaamo data breach and extortion while it was still unfolding: what white hat and black hat actually mean, why Tor and bitcoin are double-edged in the same way, and why you should neither pay the extortionist nor read the leaked files. The episode also covers common misunderstandings about GDPR, password practice and two-factor authentication, the three identifiers of which only two can be changed, and why security has to be run on the business's terms rather than by staring at a single system.", "chapters": [{"t": "00:00", "title": "A case unique in Finnish scale", "seconds": 0}, {"t": "02:31", "title": "The Twitter hack and what phishing means", "seconds": 151}, {"t": "05:06", "title": "White hats and black hats", "seconds": 306}, {"t": "07:36", "title": "Tor and the two sides of anonymity", "seconds": 456}, {"t": "10:10", "title": "Bitcoin and operational security", "seconds": 610}, {"t": "12:44", "title": "GDPR: legitimate interest and misunderstandings", "seconds": 764}, {"t": "15:26", "title": "Security as a whole, not a single system", "seconds": 926}, {"t": "17:58", "title": "Passwords and two-factor authentication", "seconds": 1078}, {"t": "20:41", "title": "Three identifiers: email, phone and identity number", "seconds": 1241}, {"t": "23:12", "title": "Can a Finnish identity number be renewed?", "seconds": 1392}, {"t": "25:42", "title": "Strong authentication, Estonia and deepfakes", "seconds": 1542}, {"t": "28:16", "title": "For companies: the business owns the risk", "seconds": 1696}, {"t": "30:53", "title": "Notification duties and contradictory instructions", "seconds": 1853}, {"t": "33:28", "title": "Do not pay, and do not read the leaks", "seconds": 2008}, {"t": "36:00", "title": "Crisis as an opportunity to improve", "seconds": 2160}], "sourceTranscriptType": "macwhisper_srt", "subtitleMethod": "none", "provenance": "Owner page assembled from the MacWhisper SRT transcript, YouTube metadata and the neuvottelija.fi episode record. Chapter timecodes are taken from the transcript; no caption files are published with this page.", "slug": "ep42-2ns-valkohatut-ja-vastaamon-kiristys-juho-ranta", "guestsCanonical": ["Juho Ranta"], "guestPages": ["https://www.neuvottelija.com/podcast/guests/juho-ranta/"], "page": "https://www.neuvottelija.com/podcast/episodes/ep42-2ns-valkohatut-ja-vastaamon-kiristys-juho-ranta/", "markdown": "https://www.neuvottelija.com/podcast/episodes/ep42-2ns-valkohatut-ja-vastaamon-kiristys-juho-ranta/index.md", "captions": null, "transcript": null}