Sign up to save your podcasts
Or
Share Jared's Technology Podcast Network
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Jared's Technology Podcast Network
By Jared RimerTechnology
Jared's Technology Podcast Network episodes
- The Security Box, podcast 195: What Are .env Files and why should I care?Hello folks, welcome to podcast 195 of the security box. Let's start off with a set of questions that came out of something we did not cover as part of last week's box. If you listen via the podcast, please submit your guesses before the answers are revealed. I'll personally give you credit where credit is due, and we can work out what you will get upon correct answers. The questions are: What 8 companies, 1 of which was part of the big ticket master breach were attacked? What small time actor group took responsibility for these 8 company attacks?which two companies disputed the hack? Finally, what was the most recent company that came out with confirming they were part of the actors fiasco? We also are going to cover the news, the landscape, Lastpass' recent fiasco that can happen to anyone and more. Our topic this week will be the talking about environment files that are used to store secrets including keys, usernames and passwords. Apparently these files, known as .env files are wide open and can be taken for use. Enjoy the program and thanks so much for listening!Our Scam of the WeekKelly, formerly Kelly Services has been targeting users who know the JRN's work. Kelly informed the JRN that this scam has been going around in this form for at least 5 months. The first report came from TSB's participant, Preston Gaylor. The second came from another subscriber who assists me in another capacity. Please read this blog post titled New scam from work provider, Kelly (formerly Kelly Services) for complete details on this. We link to the official web site where you too, can alert them about this scam. The representative informed me that they have over 500 copies of this and asked about the version that is going around. We'll be discussing this as part of the program, don't worry!Our QuestionIf you intend to play, please do not look at the answers given below. We also are linking to sources of further reading too.Our QuestionWhat 8 companies, 1 of which was part of the big ticket master breach were attacked? What small time actor group took responsibility for these 8 company attacks?which two companies disputed the hack? Finally, what was the most recent company that came out with confirming they were part of the actors fiasco?The Answer: Skip if you intend to participate and winAnswer: Snowflake, Anheuser-Busch, State Farm, Mitsubishi, Progressive, Neiman Marcus, Allstate, and Advance Auto Parts. Progressive and Mitsubishi disputed the threat actor’s claims while Advance Auto Parts recently came out with details of their breach.Sources from the blog:
- Live Nation confirms breach at Ticketmaster
- Advance auto parts confirms breach, numbers don’t match
- Snowflake’s breach may be bigger than we think, let’s add yet another company to the mix
The links lead to our blog, where you can read more.Lastpass needs a break here, this can happen to anyoneThis can happen to anyone. While people want to jump ship because of this most recent outage, I don't blame them. It turns out, it was because of their chrome extension that somehow went completely ape and could have sent a DDOS attack. I don't want to go that far, but it was a 12-hour outage if not longer. I recently had to sign in and I was successful, and this happened on Thursday, June 6, 2024.5 hr 4 min - The Security box, podcast 194: News, notes and section 230 discussionHello folks, welcome to the security box podcast 194. On this podcast, we're going to talk about section 230 and its potential repeal. We've also got the news, the notes and the landscape. True stories are also told, one dealing with crypto and one dealing with a potential job. Running time, 4 hrs 21 minutes. We hope that you enjoy the program as much as we have.News and notesHere's what we're reading and potentially talking about. This list may not all be covered, but at the same time, some folk may miss things. Some may also be blogged too, so make sure you check out the blog where its free to register and comment.
- Over 90 malicious Android apps with 5.5M installs found on Google Play
- Is Your Computer Part of ‘The Largest Botnet Ever?’
- Treasury Sanctions Creators of 911 S5 Proxy Botnet
- Chinese national arrested for operating proxy service linked to billions in cybercrime
- Police seize over 100 malware loader servers, arrest four cybercriminals
- Police seize over 100 malware loader servers, arrest four cybercriminals
- Microsoft: Windows 11 preview update causes taskbar crashes
- Live Nation finally confirms massive Ticketmaster data breach
- macOS version of elusive 'LightSpy' spyware tool discovered
- TikTok vaguely disputes report that it’s making a US-only app
- X tweaks rules to formally allow adult content
- Crooks threaten to leak 3B personal records 'stolen from background check firm'
- Data firm execs convicted for helping fraudsters target the elderly
Section 230Lawmakers say Section 230 repeal will protect children—opponents predict chaos is a two page article on the subject of section 230 and its potential update. We'll try to do our best and give you a fair balance of both sides. If you have not read this, what do you think?Other coverage from the blog on section 230- Section 230 is still valid, holds up for now
- Any time
4 hr 22 min - The Security box, podcast 193: a discussion on AI and tools for the disabledHello folks, welcome to the security box, podcast 193. On this program, we're going to talk in an open forum about AI.We'll find some articles, but we aren't going to cover articles in full but in passing.We'll also cover the news, the landscape and more including a demo on the capital one application and virtual cards.Things to ponder
- Capital One has added the ability of doing virtual cards to their mobile application. You can still use the Eno extension, but I never got that to work, so I've set up one for a demo and will be moving to merchant specific cards for better security.
- Have I Been Pwned has a couple of updates while Exposed doesn't. Both sites are good for what they do, and both should be checked if you're interested.
- Kim Komando is reporting that Vapes are being sent through the mail through secret words. Parents, check those packages. If an article is found on this, I'll be sure to publish it. Still think TikTok is safe to use?
NewsLots of different things the news could bring up, some of which will be listed below.- We found articles on the sanctions of proxy 911 folk
- Proxy 911 just got sanctioned, Brian posted on Maston
- Now, we have to be aware of … Shrinklocker
- x.ai looking for workers
- City in dutch got owned, looks to be internal
- Indian man steals 37k, may get 20 years
- Intercontinental to pay $10m fine
- Exposed data: Walmart employees exposed in Merrill email leak
- Patriot cell phone carrier owned
- T-Mobile wants to raise prices, I say no (opinion piece)
- Actress sues open AI as voice is similar to theirs from last week's show
- LockBit taking responsibility of London Drugs case
AI articlesThese are more recent AI articles, but there are plenty of others we either don't have or don't know about. This section is going to be in open forum format.- AI companies promise to protect our elections. Will they live up to their pledges? Cyberscoop
- Three bills governing AI in elections pass Senate committee Cyberscoop
- AI gives new life to old scam targeting seniors KNX 1070 97.1 FM
- FBI arrests man, charged with generating AI Child Abuse Mater
3 hr 35 min - The Security box, podcast 192: Open ForumHello folks, welcome to program 192 of the security box. This week, its going to be an open forum. We'll cover the news, we'll answer any questions that people have, and we'll traverse the landscape. No major topic, but a big piece of news about an arrest.News, Notes and the landscapeIncognitoThe biggest news coming out of the landscape is incognito's demise for good. the main man was arrested at a New York Airport. If convicted, he's going to spend a lot of time in jail. Each article is written a bit differently, and we want to be fair in our coverage and give you different perspectives.
- Owner of Incognito dark web drugs market arrested in New York Bleeping Computer
- The Press Release from the Justice Department: “Incognito Market” Owner Arrested for Operating One of the Largest Illegal Narcotics Marketplaces on the Internet The Justice Department
- 23-year-old man accused of running $100 million online narcotics marketplace | Ars Technica. Ars Technica
AI CSAMThis blew my mind. I don't know about anyone else, but this was wild. FBI Arrests Man For Generating AI Child Sexual Abuse Imagery comes from 404 media. This will prove that doing something like this, even if you start with other perps will eventually get you in trouble.An Arrest out of ArizonaArizona woman arrested and charged in North Korean IT worker scheme comes to us from Cyberscoop. She was not alone, there's another suspect mentioned and it goes in to details on who gets what if convicted.More potential newsThe following are linked from the blog. Accompanying articles are linked within.- Windows 11 recall AI coming to a Windows 11 near you
- IOS and Ipad 17.5.1
- PuTTY, Winscp targeted in Malware campaign
- Do you use Quick Assist? I’ve never heard of it!
Our Things to ponder segmentIt seems as though Better Help is more in trouble than we thought. Besides the potential breaches, we spotted a video that talks about all kinds of stuff. Its 16 minutes, but I feel that this is of value. This is the link to the Youtube Video that we linked to from our blog post. If you want to see it, you may. This came from the mastodon account, Today I learned. Also read: Better help shares data to facebook as this is mentioned in the video.Our complete moron of the podcastThis has to be the moron of the podcast. While you can carry around cards like drivers licenses digitlly, this guy who is named in the article did not. He also either stopped after starting a chase, or the owner was able through the app to stop the truck. Besides theft, the suspect has no license at all. Nice going!3 hr 35 min - The Security box, podcast 191: Our Lax Damn CybersecurityOn podcast 187 of the security box, we covered water security and this podcast is no different. On this podcast, we're going to talk about lax our damn security is. The title of this program Our Lax Dam Cybersecurity is not meant to be taken as swaring as dam is defined as a stopping point for water. Once that breaks, water can cause tons of havoc, so it is actually a good thing. Besides this topic, we'll have our news, notes and more.Things that might be discussed
- Black Basta breached over 500 organizations to date
- https://technology.jaredrimer.net/2024/05/10/del-computers-had-a-databreach/
- So … What’s going on with the vistamo guy and his sentence?
- So, is lockbitsupp completely wrong in him saying they have the wrong man?
- What’s going on with Ascension ?
- Lockbit is still out there, sent through other network
Lax Dam CybersecurityI thought we blogged this, but it looks like we did not. Luckily for searching this out as I knew I had it in my inbox, the article comes from Cyberscoop. The article is titled Congress sounds alarm on lax dam cybersecurity which was a good one. If you read the article, what did you think?Supporting the podcastIf you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.Internet Radio affiliates airing our programOur Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!2 hr 17 min - The Security box, podcast 190: Is Age Verification Legal?The Security box, podcast 190: Is Age Verification Legal?Hello everyone, welcome to podcast 190 of the security box. The big question is here on this week's podcast, and it is: "Is Age Verification legal?"Besides finding out the answer to this, we'll have the news, the notes and the landscape. Hope you'll enjoy the show as much as we are bringing it to you.LockbitSupp identifiedHuge news coming out of the press in regards to the mastermind of Lockbit. Don't be surprised if you find more coverage, but these are the articles from our sources.
- LockBit ransomware admin identified, sanctioned in US, UK, Australia Bleeping Computer
- LockBit gang leader exposed in FBI ransomware breakthrough CyberNews
- U.S. Charges Russian Man as Boss of LockBit Ransomware Group KrebsOnSecurity
- Ransomware mastermind LockBitSupp reveled in his anonymity—now he’s been ID’d Ars Technica
As stated, there may be more than this around the web and the JRN will be blogging two, possibly all three or more if we find them.In the second, we not only know who he is, but what he's charged with. At the time of writing this in to the show notes, the JRN has not read Brian's article yet and only spotted signs of it on Mastodon as he does.Other Newsy things from the blogThese items may be braught up as part of the blog and news segment. They are in no particular order.- Are we surprised that TikTok will sue the U.S. Government?
- Chinese banks hit again
- Jack Dorsey praises Twitter for being “freedom technology”
- Fake tech support scams and sponsored search results
- The Yahoo boys are people you need to be aware of: Scripts, scams and more await
- Notice from Dropbox
There may be others not listed here, and this could be a subset.Is Age Verification Legal?This segment may contain adult themes. According to an article that was read and blogged, age verification has been found to be legal. With Coppa in various parts of the world, and sites that need to make sure they're dealing with adults per content law, we think that this is a clear and cut open and closed case. But how do we do this now that most do the bear minimum but yet nothing in place to verify anything entered?For example, staff that do this show could say they're over age on a site like Live Journal when for example, the mix opened its blog there but yet the mix was not even of age. This could be an example used.What to read- Age Verification is lawful the technology blog and podcast
- Court makes it clear – age verification on adult sites is constitutional Cybernews
What do you think? If this i3 hr 9 min - 38 min
- TSB 189: eSIM and Sim SwappingHello everyone, welcome to the security box, podcast 189. On this program, we're going to cover news and notes, the landscape and esim whcih may or may not be as secure as you think.ESIM and sim swappingESIM is relatively new, but one of my buddies has it. He says its much better since you don't need a Sim card. But is it?The blog post is titled E-sim is not as safe as you think and the article is titled SIM swappers hijacking phone numbers in eSIM attacks.We'll take the most important paragraphs I think, but the article is linked here. And now that we have the RSS working to show HTML, you can now follow along through RSS too. Woohoo!Supporting the podcastIf you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.Internet Radio affiliates airing our programOur Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!3 hr 12 min
- The Security Box, podcast 188: IncogniIncogni claims that it can remove your personal info. How? We'll talk about it with an article that talked about them and I'll talk about where the JRN first heard of this valuable service. We'll also talk about the news, any notes, we've got corrections to xposedornot.com and the work I'm doing with them as testing is going well, and more.Xposed or notI'm not employed at Xposed, but I found some thing that got fixed.
- The table as well as tree view of the exposures page not properly giving correct dates, I.E. the table was showing 2023 items while the default view was not quite showing current dated items added to the site.
- We learn about the news page and its purpose while asking questions.
- We found a very interesting post about data exposures and their categories. At the time of writing, I don't have a blog post on this yet.
IncogniI earlier blogged There are many data brokers, only one company that might help which links to an article titled Your data, their profit: the data brokers you know nothing about goes in to what's going on and who might be able to help. Yes, Incogni might just be the one that might do the job. Step on forward and learn.Supporting the podcastIf you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.Internet Radio affiliates airing our programOur Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!4 hr 2 min - The Security box, podcast 187: What's going on with our drinking water?
Hello everyone, welcome to program number 187 of the security box. On this program, we're going to talk about our drinking water. No, not the fact that it could taste bad or that it is the best water ever, we'll talk about the security aspect of where our drinking water comes from. Besides that, the news, the notes and the landscape. Remember to contact us with your questions, comments or concerns. If we don't know, we've got people that do, so get those questions in.
Open forum: A New ServiceRecently, the Jared Rimer Network discovered a service in which we are happy to use. While haveibeenpwned.com is good, I do find some things that don't work well accessibly. While I got the domains to work, and those instructions were easy to follow, I did have issues with the service I'm about to recommend. I got it to work and it is more accessible. Even the exposed breaches may not be that extensive, both services get their breaches through verification. To learn more about the service Exposed or not, please view the latest blog post We have a new service up, accessible too for complete details. The service is spelled xposedornot. Drop the E.
Some of the newsy items- Unconfirmed, trust wallet could be at risk with a zero day
- Bot attacks as a top threat this year was supposed to be posted earlier but it missed its schedule
- Sans News Bites for April 16, 2024
- Lawfirms now have AI Generated lawyers?
Some may bring these up, but may bring other things as well. We'll have to see. Keep on reading!
Topic: Our Drinking WaterI've never really liked the taste of water. Especially from our faucets. But this podcast isn't talking about whether we like water, which we're told we should drink to keep ourselves healthy.
I know, I know, I'm just as guilty as the rest when it comes to that. But this podcast isn't about whether we like the stuff, its about the security of how it gets to us. We know it goes through pipes, but do we honestly know how it gets to those pipes to how we drink it, cook with it, or use it in our coffee? There's an elaborate system, but is it as secure as it can be?
Apparently, hackers can get in to these systems, and this is where we could be in some real trouble. The latest blog post I penned on this subject is titled Hackers interrupting critical drinking water which links to the CyberNews article US officials warn of hackers disrupting the “critical lifeline” of drinking water which was an interesting read.
If you search for water by itself, you'll find other blogs like:
- Cyber Attack cuts off Water for 2 days
- Iran hits Pennsylvania water
3 hr 40 min
About Jared's Technology Podcast Network
From the publisher's feed
This podcast network will have my main tech program when something comes out which is not security related. Sans News Bites, The Security Box, and other tech nuggets will also be here too. Some…
adult language may be possible in content, and a disclaimer plays on TSB as its a show on the mix. Enjoy!