2.5 Admins 312: Bus Factor
Summary
The hosts discuss the failure of AI image watermarks like SynthID, arguing for a cryptographic chain of provenance where photos are signed by hardware and publishers to ensure trust. They then address IT bus factor risks for small businesses, emphasizing documentation and avoiding over-engineered security. Finally, they advise on building a secure ZFS replication service, warning against SSH force commands and highlighting kernel panic vulnerabilities in untrusted ZFS receive streams.
Topics discussed
Intro, Patreon support, and London meetup announcement
Google Earth AI images and the failure of SynthID watermarks
Proposing a cryptographic chain of trust for photo provenance
Apple's reference images, privacy concerns, and default deny
EXIF data privacy risks and historical doxxing examples
Sponsor break and listener question intro
Handling the 'bus factor' for solo IT consultants
Securing multi-tenant ZFS replication with delegation
Why SSH force_command is weak for restricting ZFS access
OS choices for ZFS and risks of malicious receive streams
Outro and host social media links
Listen ad-free on Castria