There's a new scam going around, where a thief gets you to unlock your phone under the guise of needing to make a call, then runs off with the phone and sends themselves all your money through your apps. Learn how to protect yourself and your money with a simple smartphone trick for iPhone and Android.

Send us a text

Support the show

Join our Patreon to listen ad-free!

The finale of HBO's Silicon Valley series pointed up a subtle parallel to the real-world challenges in vulnerability reporting—rather than risk going to jail, Pied Piper chose to burn the company to the ground. For decades, white hat and gray hat hackers had no place to report cybersecurity flaws without fear of legal hassles. Nowadays we have Bug Bounty programs, where hackers get paid to find and disclose security flaws, and even get some cash for their work.

Resources

• Internet Scanner Finds Security Holes
• CERIAS - Center for Education and Research in Information Assurance and Security
• A history of bug bounty programs & incentivised vulnerability disclosure
• Wearing Many Hats: The Rise of the Professional Security Hacker
• Hacking the Pentagon

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

What is Red Teaming, and what does it have to do with cybersecurity? In this episode, we look at how Red Teamers are hired to attack company security using all manner of tactics, from tossing malware-infested USB sticks into parking lots to posing as an HVAC technician. We also take a look at one of the most notorious Red Team exercises in history, when two Coalfire employees were arrested and fought a long legal battle, just for doing their jobs. 

Resources

• Inside the Courthouse Break-In Spree That Landed Two White-Hat Hackers in Jail
• Darknet Diaries Episode 59: The Courthouse
• Coalfire Systems website
• DEF CON 22 - Eric Smith and Josh Perrymon - Advanced Red Teaming: All Your Badges Are Belong To Us
• How RFID Technology Works: Revolutionizing the Supply Chain
• NolaCon 2019 D 07 Breaking Into Your Building A Hackers Guide to Unauthorized Physical Access

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

What goes on under the hood of random number generators (RNGs)? Here we look at one of the best sources of randomness—static from electronic chips—and discuss terminology like entropy and bias, the role of the Birthday Paradox in RNGs, and the fake bias of the Excel RAND function. We'll even do a simple exercise you can try with your friends to see who picks the most "random" number of all. 

Resources:

• How Slot Machines Work
• RAND Function
• Britons most likely to pick 7 as "random" number

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

Ever heard of the Internet of Things, or IoT? This episode explores the use of random numbers in our everyday devices, and how they’re often not as secure as our PCs. We also look at how Apple gets it right, and what we can do to keep our devices secure in this connected world.

Resources

• Securing the IoT Ecosystem: Challenges & Solutions
• Data security of IoT devices with limited resources: challenges and potential solutions
• What Is IoT Security? Challenges and Requirements
• Apple Platform Security Guide
• Hardware Accelerated Crypto

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

This episode explores the mysterious world of random number generators (RNGs) in video games. Looking at popular games like Minecraft, Stardew Valley, and Diablo II, we describe how players hack these random numbers in the same ways hackers hack encryption keys. This episode lays the groundwork for Part 2, a discussion of RNGs in encryption.

Resources:

• How Many People Play Minecraft 2025 (Active Players)
• Pre-determined RNG? (Reddit post)
• Diablo II Seeded Category - Rule / General Discussion
• 10 Perfect Minecraft Seeds You'll Want To Play FOREVER (YouTube video)

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

New season, new theme music—and even more hacks and scams to explore. Thanks for coming on these adventures with me. Let's do some more!  

Send us a text

Support the show

Join our Patreon to listen ad-free!

Need cash quick? Why not try a payday loan? While it might look like a better option than a credit card on its surface, the truth is that payday loans can be rather ugly and expensive, and can trap you in a cycle of debt if you don't know how it works. Find out how some states and countries keep a lid on exploding fees for short-term loans, and why a credit card is a far better option. 

Resources:

• The Victims of Payday Lending
• Payday Loan Information for Consumers: Legal Status of Payday Loans by State
• FCA confirms price cap rules for payday lenders (UK)
• High cost loans (NZ)
• Can taking out a payday loan help rebuild my credit or improve my credit score?

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

Scammers are still at it, happy to ruin our lives in search of a quick buck. Let's look at job scams that attempt to steal personal information, sextortion scams preying on teenage boys, and a really nasty threatening email I personally received. Know your scams, so you can keep yourself safe.

Resources:

• These teenage boys were blackmailed online – and it cost them their lives
• 'You might as well end it now': Terrorized by sextortion plot, a 17-year-old takes his life
• How To Identify Fake Job Postings: 10 Warning Signs

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!

Hacks used to be impressive, utilizing bits and pieces of technology that made us sit up and pay attention. Nowadays, every scam, breach, or sketchy text message gets labelled a "hack" when it's really just basic use of existing technology, or an outright scam. Let's take a closer look at how the meaning of “hack” has changed, from the complex brilliance of NotPetya in 2017, to today's flood of scams powered by stolen data and AI fakery. It’s the end of the Age of the Great Hack, and the rise of the Age of Many Scams.

Resources:

• Healthcare Data Breach Statistics
• Being Infected by NotPetya: What Maersk learned
• NotPetya: A Columbia University Case Study

Send us a text

Listen on: Apple Podcasts   Spotify

Support the show

Join our Patreon to listen ad-free!