inThirty

A 0 day exploit hitting Zoom hit this week. Basically if you know what Zoom is, you are probably vulnerable. We talk about ways to reduce your attack surface when it comes to meeting softwares. https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://www.theverge.com/2019/7/9/20688113/zoom-apple-mac-patch-vulnerability-emergency-fix-web-server-remove https://mobile.twitter.com/riskybusiness/status/1148819622558236673?s=21 https://www.ohioinfosec.org/2019/07/13/2019-oisf-anniversary-conference/

All of these products that offer some sort of “better/safer internet” are just scams. We say why.

The EFF put out a guide on how to host your own security event. Since we do something like that, we discuss https://sec.eff.org/articles/first-training

Chrome is playing games with Adblock extensions again: https://www.vice.com/en_us/article/evy53j/google-struggles-to-justify-making-chrome-ad-blockers-worse https://www.theverge.com/2019/6/4/18650363/firefox-block-trackers-default-enhanced-tracking-protection Ring Doorbells and Police: https://www.cnet.com/features/amazons-helping-police-build-a-surveillance-network-with-ring-doorbells/ Apple does some magic voodoo to prevent find my mac stalking: https://www.wired.com/story/apple-find-my-cryptography-bluetooth/

Google found out that almost 100% of automated phishing attacks can be prevented with ANY form of 2FA: https://security.googleblog.com/2019/05/new-research-how-effective-is-basic.html

We got some big security holes for you this week. Last week ended with a WhatsApp bug. Update Now! https://arstechnica.com/information-technology/2019/05/whatsapp-vulnerability-exploited-to-infect-phones-with-israeli-spyware/ CPU.Fail: https://cpu.fail/ Google Security Key Vulnerability: https://security.googleblog.com/2019/05/titan-keys-update.html?m=1 Can you please fill out our podtrac survey: http://survey.podtrac.com/start-survey.aspx?pubid=B8NmaYB8k-kH&ver=short

So what privacy settings do you want in your smart cylinder?https://gizmodo.com/a-very-long-list-of-privacy-features-google-talked-abou-1834593900 Why is it a problem that “Works with Nest” is going away. https://variety.com/2019/digital/news/google-works-with-nest-discontinued-1203207335/ Can you please fill out our podtrac survey: http://survey.podtrac.com/start-survey.aspx?pubid=B8NmaYB8k-kH&ver=short

I saw how Banksy authenticates his work, and we got to thinking about how we verified things in the past, and future. https://reprage.com/post/how-banksy-authenticates-his-work https://en.wikipedia.org/wiki/EURion_constellation Can you please fill out our podtrac survey: http://survey.podtrac.com/start-survey.aspx?pubid=B8NmaYB8k-kH&ver=short

The EFF put out a privacy focused feature request to several tech companies titled #FixItAlready. https://www.eff.org/deeplinks/2019/02/announcing-fix-it-already Can you please fill out our podtrac survey: http://survey.podtrac.com/start-survey.aspx?pubid=B8NmaYB8k-kH&ver=short

This week: We talk wifi WPA3 vulnerabilities: https://gizmodo.com/new-super-secure-wifi-is-actually-full-of-security-hole-1833967122 Finally a settlement from the Pixel 6p: https://www.theverge.com/2019/4/11/18306552/google-huawei-nexus-6p-class-action-lawsuit-settlement-agreement-compensate Google Security Key is your phone: https://www.theverge.com/2019/4/10/18295348/google-android-phone-fido-webauthn-phishing-two-factor-authentication Can you please fill out our podtrac survey: http://survey.podtrac.com/start-survey.aspx?pubid=B8NmaYB8k-kH&ver=short