The 35th Edition of the Identity Jedi Newsletter

AI all the things, Do you even passkey?, Let's talk web3 and identity

Author

David Lee
May 10, 2023

Wednesday 5/10/23 - Identity Jedi Newsletter - Subscribe

Hey Jedi welcome to the 35th edition of the Identity Jedi Newsletter. I went simple with the graphic this week, but it’s cute, right?

We are off to a blistering start in the month of May, as we’ve put in 42 new subscribers in the last 10 days! We are on pace to smash the record for most subs in a month.

Shout out to Chris, who is the MVP of referrals. He is single-handedly making me have to rethink the swag tier. 😀 Your support is appreciated, sir!

Jedi, it’s not too late to catch him. Grab your referral link, and send it to some friends, I want to see you wearing an Identity Jedi Shirt at Identiverse!!

The Greatest Newsletter Platform Ever Created

This newsletter is brought to you by the number 1. As in the number 1 newsletter platform in the world, Beehiiv. Seriously if you’ve ever thought about starting a newsletter, here’s where you need to start. Features are fantastic and getting better all the time, and it takes a lot of the guesswork out of creating and just allows you to create.

Let’s Get to the Good Stuff!

  • Seeking maturity in Identity Security

  • PrivateGPT

  • Google gets jiggy with passkeys

Seeking maturity in Identity Security

A nice overview of the steps needed to start to asses your organization’s maturity when it comes to Identity Security. Spoiler alert: It’s more than just access reviews and automated provisioning. Those were always meant to be a start; the end goal was always to have a more active security environment that allowed your organization to reduce the risk associated with access.

How to map Identity Security maturity and elevate your strategy

To get started, consider two fundamental factors in tandem: capability breadth and deployment depth.

www.csoonline.com/article/3695949/how-to-map-identity-security-maturity-and-elevate-your-strategy.html

PrivateGPT

So I’m beginning to think the trend for the next two years will be to put AI, and GPT behind everything. But sarcasm aside, an interesting byproduct of ChaptGPT, PrivateGPT is a tool geared towards redacting PII data from ChatGPT prompts because as we’ve all seen over the past three decades, you give a user a text box, and they will tell you everything.

PrivateGPT Tackles Sensitive Info in ChatGPT Prompts

In an effort to curb employees from entering private data into the AI, ChatGPT is blocked from ingesting more than 50+ types of PII and other sensitive information.

www.darkreading.com/application-security/privategpt-tackles-sensitive-info-chatgpt-prompts

Google announces Passkeys

Google has announced that it will implement passkeys for users, allowing them to use biometric authentication to access their Google accounts without requiring a username, password, or multi-factor authentication. Passkeys are private cryptographic keys based on the FIDO Alliance FIDO2 specification, which implements the World Wide Web Consortium's Webauthn standard. The FIDO Alliance released a report showing end-users are more open to using passkeys than last fall. Companies such as 1Password, Dashlane, and Okta are all active board members and contributors to the FIDO Alliance.

Somewhere the EthoPass team is smiling…

Google Expands Passkey Support With Passwordless AuthenticationGoOne year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.ogwww.darkreading.com/dr-tech/google-expands-passkey-support-with-passwordless-authenticationle Expands Passkey Support With Passwordless AuthenticationGoOne year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.ogwww.darkreading.com/dr-tech/google-expands-passkey-support-with-passwordless-authenticationle Expands Passkey Support With Passwordless Authentication

One year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.

www.darkreading.com/dr-tech/google-expands-passkey-support-with-passwordless-authentication

The one Alibi you’ll be happy to have

Come hang out with the S3 crew and me in Vegas for Identiverse! This is going to be an amazing night with some of the brightest minds in identity. ( Not just me, but I’ll be there, OBVIOUSLY). It’s going to be a great time,and I don’t want you to miss it. Hit the button below and get registered!

I’ll see you in Vegas!

FBI Focuses on Cybersecurity With $90M Budget Request

Never before has cyber been higher on the FBI's list of priorities. Will more money allow the feds to make a greater impact?

www.darkreading.com/remote-workforce/fbi-focuses-cybersecurity-90m-budget-request

Review your on-prem ADCS infrastructure before attackers do it for you

Attacks through Active Directory Certificate Services are fairly easy for bad actors to perform but basic vigilance and built-in Windows protections can help mitigate the risk of a breach.

www.csoonline.com/article/3695769/review-your-on-prem-adcs-infrastructure-before-attackers-do-it-for-you.html

The (Security) Cost of Too Much Data Privacy

The online fraud prevention industry has taken the brunt of increased privacy actions.

www.darkreading.com/vulnerabilities-threats/the-security-cost-of-too-much-data-privacy

‎Secure Insights: Episode 25: The Rise of Data Breaches in the Healthcare Industry and How to Reduce the Risk: Part 2 on Apple Podcasts

‎Show Secure Insights, Ep Episode 25: The Rise of Data Breaches in the Healthcare Industry and How to Reduce the Risk: Part 2 - Apr 3, 2023

podcasts.apple.com/us/podcast/episode-25-the-rise-of-data-breaches-in/id1592833134?i=1000607171847

‎The One Identity Security Podcast: Identity, Access Governance...Go: Ep 4 on Apple Podcasts

‎Show The One Identity Security Podcast, Ep Identity, Access Governance...Go: Ep 4 - Apr 9, 2021

podcasts.apple.com/us/podcast/identity-access-governance-go-ep-4/id1517281008?i=1000516492086

‎The C-level Strategic Guide for CIAM investment: Putting Your CIAM Model to Work on a Continuous Basis on Apple Podcasts

‎Show The C-level Strategic Guide for CIAM investment, Ep Putting Your CIAM Model to Work on a Continuous Basis - Jun 8, 2021

podcasts.apple.com/us/podcast/the-c-level-strategic-guide-for-ciam-investment/id1561369563?i=1000524628062

Identity Jedi Show Podcast

Now available on Spotify!!

Identity Jedi Show Podcast

The Last Word

As the days inch closer to Identiverse, I’m excited to see what this year brings regarding conversations. What’s on the top of everyone's mind? How much of the conversation will be around AI, ChatGPT, and Web3? What’s the temperature of organizations as they try and forecast this rollercoaster economy, and we see massive layoffs in the sector?

SO MANY QUESTIONS !!

I’m also excited to be around the community, catch up with old friends, meet new ones, and hang out with you! Who knows, maybe one day we’ll have our own event.

You never know.. Until then

Be Good to each other, Be Kind to each other, Love each other

-Identity Jedi

The JEDI COUNCIL

Web 3 and Identity

It’s been an interesting couple of months researching and putting this talk together for RSA. One of the things I enjoy about putting together presentations is the research I get to do beforehand. What can I say, I was that nerd that LOVED whenever we got research assignments in school.

Subscribe to Identity Jedi Newsletter to read the rest.

Become a paying subscriber of Identity Jedi Newsletter to get access to this post and other subscriber-only content.

Already a paying subscriber? Sign In

A subscription gets you:
Blogs
Expert Interviews
Expanded Commentary
Early Access to Identity Show content

Join the conversation

or to participate.