Mostly Security

Cursor Marketplace Extension Claude Code VS Code Extension (whew!) hack. Google catches a set-top box manufacturer doing bad things. Wildwood crows exhibit downtown Portland. Vesuvius Challenge winner!

• 0:00 - Intro
• 6:33 - Cursor Extension Marketplace
• 11:26 - Google TV Catch
• 16:19 - Follow the Crows
• 19:35 - Vesuvius Challenge

Eric is writing two more apps, and Jon gets a working bathroom. Apple command line tools are not only still vulnerable to eMudhra, if you fixed it before, please fix again after any Apple patch. PHP devs/hosters had a rough October, and Tailscale released fixes for Tailworm. Finally, Cohere shows an open weight model emitting posting code to China 'infrequently' even when not prompted. For fun you should see Wildwood in theatres, and a couple of steps closer to understanding silk production in spiders.

• 0:00 - Introduction
• 13:57 - Applied Fix Stomping
• 17:22 - Black October
• 21:19 - Tailworm
• 26:40 - Concerning Behavior
• 30:45 - Wildwood
• 32:36 - Silk Dope

Eric and Jon bump into each other at the Symphony. PHP sites are having a bad day. Some TLS certs are having a bad day. Smart TVs are having a good day (at your expense). Wendy's has an emo album and Doom now runs on DNS?

• 0:00 - Introduction
• 7:59 - Bad PHP
• 12:06 - Bad TLS
• 18:04 - Smart TVs
• 20:52 - Wendy's EMO
• 23:29 - Doom on DNS

Jon spends the weekend down for the count and Eric still declutters. (Both look forward to The Princess Bride at the Oregon Symphony.). Claude Code is used in Cyber Campaign, the worst password (and monitoring) ever (?) for Denmark's population register, and Anthropic's experimentation with self replicating AI. Have fun with Unusual Suspects and the oldest known land animal (Jonathan!).

• 0:00 - Intro
• 6:49 - CyberXero
• 11:53 - Population Register
• 16:31 - (Hypothetical) Self Replicating AI
• 23:35 - Unusual Suspects
• 25:47 - Long Live Jonathan

Eric and Jon are on the road again -- Jon back from a trip (sailing!?) and Eric does fall cleaning. Agents are abusing wiki[mp]edia and Chrome has another serious issue warranting a quick patch. For fun we have bizarre 80s ad choices for non-existent hardware, and the Schooner Adventuress.

• 0:00 - Intro
• 6:31 - Vandalizing Wikipedia
• 11:54 - More Chrome Bug Fun
• 17:04 - Mimic Systems
• 20:02 - Sound Experience

With Jon and Eric both unavailable this week, they asked the question, "What would happen if you asked Gemini Notebook to create a Mostly Security podcast episode about Mostly Security using the Mostly Security format?"

Eric rides the rails and Jon fishes the seas. A NightmareStresser is powered off and your favorite bands "never before heard bootleg" might be AI. Scientists name a new snake after Slash and archaeologists uncover 38 people in an unlooted tomb.

• 0:00 - Introduction
• 7:57 - NightmareStresser
• 10:48 - AI music in your feed
• 14:36 - Welcome to the Jungle
• 17:24 - Chimú Tomb

Eric reads and one of Jon's dogs has a vet scare. A Zero Click Zero Day on Pixel phones, and a third party Twitch Chrome extension harvesting bearer tokens. For fun we have the Nikon small world (in motion!) and what happens after a dinosaur eats a bird that ate a fish.

• 0:00 - Intro
• 7:13 - Zero Click
• 10:45 - "Enhanced" Viewing
• 14:47 - Nikon Small World
• 16:42 - DinoBirdFish

Coyote vs ACME and frustration then fishing. Faster Chrome updates. Identity verification company breach. Big Patch Tuesday. Breaking Botnets. Teaching fruit flies to play DOOM and Mario 64. Bee relics in fossilized Owl pellets.

• 0:00 - Introduction
• 10:59 - Faster Chrome
• 13:40 - ID Verification Oops
• 19:23 - Big Patch Tuesday
• 23:28 - Breaking Botnets
• 26:25 - Fruit flies play DOOM
• 29:56 - Bee relics

Eric complete's another road trip and listens to a "book". Jon gets some electrical work done. ClickFix has a sibling, TerminalFix. Chrome fixes a lot of things and more details emerge from the Hugging Face incident. Scientists may or may not have discovered a WIMP. Jon observes a partial lunar eclipse.

• 0:00 - Introduction
• 5:35 - TerminalFix
• 8:52 - Chrome 152
• 11:39 - Hugging Face fallout
• 15:39 - WIMP discovery
• 18:39 - Partial Lunar Eclipse