If you notice the team being a little bit more careful with their words than usual, it's because the topic of this episode is...a SANSitive one.

We'll leave it like that, shall we?

We also chat about the NCC/CREST/GitHub debacle, which sparks debate over how valuable certifications are when they can be played with 'leaked' step-by-step guides. Is there any real-world value in simply learning how to pass an exam? Does a certification truly indicate aptitude?

The topic turns next to facial recognition in law enforcement, following the news that Liberty won the first international case banning the use of facial recognition technology for policing. It's a serious debate – that gets a bit dystopian at times – and we take a look at it from every angle.

***

SANS data breach:

https://www.bleepingcomputer.com/news/security/sans-shares-details-on-attack-that-led-to-their-data-breach/

NCC/Crest:

https://www.theregister.com/2020/08/14/crest_investigates_ncc_group/

Liberty wins facial recognition technology case:

https://iottechnews.com/news/2020/aug/11/liberty-wins-case-banning-police-facial-recognition/