Jared's Technology Podcast Network

Hello folks, welcome to the Security box, podcast 134. This podcast is going to talk about PBKDF2, an encryption algorithm that is used in certain situations. We'll also have a moron of the week, maybe two, maybe more! We'll also dip our toes in the landscape and see what is on other folks minds.

Morons of the podcast

This first one is quite dumb. In fact, when I saw the boost which saw it, I had to title this the way I did. You Stupid F**k … its not going to look good for you now when you get picked up is my blog post on an article coming from a site called news24.com.

Not only is this guy found guilty, you're going to read that he just chose not to even show up! How dumb can you be?

This second one comes from this blog post about TikTok's newest challenge. There is some strong language with this post, and from at least two people, it is well warranted. I try not to use strong language in my posts, but this one is definitely beyond repair.

The short of this, for those who may be offended by strong language, is that scammers will stop at nothing to either get their wares out or to cause as much harm as possible. In this latest twist, we have someone going aroudn claiming they can turn loved one's ashes to a sculpture or even a painting. They claim its free ... but it isn't. The article leads to this Kim Komando article talking about the TikTok Scam. If it isn't mentioned as part of this segment, which it just may, please feel free to weigh in on this one.

Our topic, PBKDF2

PBKdf2 is one of many encryption types for passwords and the like. Here's the Wikipedia article on it as we take from the first two sections for now. There are replacements for it and its covered within this article, but we'll let you look this up later.

Book Selection: Tracers in the dark

I chose my next book. Tracers in the Dark by Andy Greenberg. During the podcast, we'll check in with folks to see where they are in this ... or other books that are on our list. This is my blog post talking about Tracers in the dark if you need it.

I finally got my book review up for If it's smart, its vulnerable by Mikko Hypponnen. Here's that blog post if you're interested to see what I have to say about it.

Supporting our podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

We have a round table today on the security box.

Domains, schemes, scams, tiktok, the landscape and much much more on this open forum of the program. Hope you all enjoy the program!

Welcome to the security box, podcast 132. On this edition of the program, we're going to talk about a newcomer I think, one that might be and up and comer. We have a rumor that we might have at least one moron, but who knows how many. We'll have news, notes and other commentary as well. Rumor has it, we've got a surprise while making a phone call before last Saturday's security hour that someone who I thought wouldn't read books is reading the same book several of us are reading. Find out as you listen to the podcast edition of the program.

Moron of the podcast

Nick, our normal staple now a day, mentioned this story in passing. Turns out that do have a moron as you'll see in the accompanying blog post.

As it turns out, other articles about this 90 million dollar takeover can be found, but my blog post This was mentioned as our possible moron of the podcast … a suspect found guilty but attorney will appeal has the details and some very interesting questions I think we need to talk about as this gentleman, Vladislav Klyushin, is our moron of the podcast. You should've stayed with cybersecurity and you would have been OK. Enjoy your award, the hammer is down on you this time.

Dark Pink

This week, we learn about a new group out there called Dark Pink. Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations is the article and it comes from Cyberscoop. Come with us as we take this malware apart and talk about what its up to. It comes from a group as you've probably read if you found the article through our list or even blog. This is going to get very interesting.

Supporting the podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

One sware word within the first hour and 15 minutes. A note has been placed in the audio for folks who need to be aware of it. Full notes below.

Hello everyone. Welcome to program 131 of the Security box. I hope you'll enjoy what we have to offer you today. On this podcast, we have a rumor that indicates that we'll definitely have at least one moron of the podcast, maybe more. We'll also have the topic of the Q4 threat trends Report from Phishlabs as well as questions, comments and more. We hope you'll enjoy the program and thanks for listening!

Here's a moron set for you

There were two articles in which broke this, and it definitely fits our Moron of the podcast. This blog post from February 10th has links to each of the articles and initial thoughts.

Also, I'm not too sure about this one, but we could probly fit this IRS update from February 10th as well as this blog post talking about an article by Andy Greenberg and a guy who thinks that he won't be caught as he apparently got a mixer going on and he's supposedly taken the right precautions.

If you have anything in this category, feel free to mention it by sending us an email, an imessage, find me on Mastodon and even text or whats app me.

Our topic

Seems like QBot is back in the news as the top threat in this last quarters report from Phishlabs and Fortra. The article is titled QBot Campaigns Overwhelmingly Lead Reported Payloads in Q4 is the article we'll be taking from. It was posted to TSB's list last December, and of course, I do try and cover it. The threat may still be there, and with all of what we'll be talking about here, all of these threats have not gone away.

Supporting our podcast and work

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Hello everyone. Welcome to podcast 130A. We're going to rebroadcast a podcast from Cyber Crime Magazine about the book Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency which is also linked on our resources page.

I found the program of interest, and this could in theory be my next book. I hope that everyone enjoys this interview about the book!

Welcome to the security box, podcast 130. On this show, we're going to talk about a very interesting article that covers the fact that Coppa is out of date and congress hasn't done anything about it. We'll have news, notes, commentary and more. Who knows, will we have a bonehead award of the podcast? We'll have to see.

Topic: Coppa and Congress

I blogged this one, and on this podcast, we're going to discuss State legislators aren't waiting for Congress to regulate children's online privacy. It was quite interesting to see that Coppa is needing to be changed yet companies aren't really following it like they should.

Adult disclaimer

This program may contain some strong language. Parental desgression is advised. This means its an infrequent occurrence, but there.

There is one spot where some strong language is used within the following podcast. We want people to be aware of that. Its only one word, but due to rules and regs, we must bring this up to the listener.

Hello folks, welcome to the security box podcast 129. Last week, we talked about the government, but there's more to the story in which people may not be aware of.

Apparently, there has been a watch dog group out there taking reports on what the government has or has not done.

The article is titled Government watchdog: Feds fail to implement vast majority of cybersecurity recommendations and was covered by Cyberscoop.

This is a very interesting article which we'll be stepping through.

Besides that, my hunch may indicate that we'll have a moron of the podcast, people may have questions, and we'll see what the show has in store.

Welcome to the Security box, podcast 128. On this podcast, we probably have two morons of the podcast, one of which should've gotten it before we came up with the idea. We also ask the question, What's going on over at CISA? This acronuym stands for Cybersecurity and Infrastructure Security Agency.

Seems as though they don't know what's going on, or at least might be confused.

Moron of the podcast

We have listed both morons of the podcast by listing the basics of the story and links to the stories themselves.

1. It seems as though T-Mobile has had yet another breach with at least another estimated 37 million consumers, whether prepaid or postpaid.

2. The second moron goes to a guy in Russia that thought it would be fun to launder crypto currency. Not only was he funneling Crypto, but he was the founder of a crypto currency exchange. Russian founder of a cryptocurrency exchange known for funneling ransomware profits arrested comes to us from Cyberscoop and hasn't been blogged as of yet, but will be.

Topic: What's going on at CISA?

CISA has been known to send notifications via an email list that people can subscribe to. How I got on it, I don't remember, but it has since changed the way things are sent. Regardless, the article Insiders worry CISA is too distracted from critical cyber mission is our article that will help us with our discussion. It also comes from Cyberscoop.

Other stuff

I know that Nick missed last week's program so we'll give him an opportunity to get on the program and talk about anything from last week. We'll go through news, notes and other things too.

Supporting the podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

On this podcast, a video voice mail update and why didn't Lastpass let us know what's really going on with their breach?

here is the blog post that I wrote with the accompanying article that I talked about during the second segment.

Contact info is at the beginning and end of the program.

Welcome to the security box, podcast 127. This time, we're going to talk about something I don't think any podcast has ever covered. What that might be? That would be Bullet Proof Hosting. What is it? Why is it such a problem? How can you stay away from companies that allow such a thing?

We'll take from Wikipedia's write up on Bullet proof hosting but we aren't taking the entire thing. This term (written as bulletproof hosting) will be also included in this week's EMHS updates.

The podcast will also have any news and notes, updates on the particulars of screen readers and what they have to help us deal with the ongoing threats for looking at links, and much more.

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.