Mostly Security

Eric's attempt at making brisket was hampered by IOT failures, Jon's attempt at fishing was hampered by stomach failures. More surveillance camera oopsies and NSO acquisition notes. Will the UK force backdoors in encrypted messages and people really still send snail mail scams via the post office? Who knew. Threads is the latest Twitter replacement and we're looking forward to seeing pebbles from an asteroid.

• 0:00 - Introduction
• 19:37 - Surveillance Camera Fail
• 22:15 - NSO Acquisition Fail
• 23:40 - Backdoor Fail? 🤞
• 26:56 - Scammer OpSec Fail
• 33:36 - Threads isn't a Fail
• 37:09 - Pebbles from an Asteroid

Eric goes stargazing and Jon road-trips to southern oregon. Electromagnetic Fault Injection in drones and a severe zero click apple bug used to target Kaspersky employees. For fun we have a reimagined We Didn't Start the Fire by Fall Out Boy, and a new 'zoom out' feature by Midjourney.

• 0:00 - Intro
• 18:03 - EMFI
• 23:16 - TriangleDB
• 31:44 - We Didn't Start the Fire
• 33:38 - Midjourney Zoom Out

Father's Day stuffs, weddings, missed baseball games, beach pizza with carrot chasers. Google sells out to Squarespace. That 30TB external drive is not the deal you think it is. Oregon DMV data compromised. Eric ends up at America's Car Museum and Jon recommends He Who Fights With Monsters.

• 0:00 - Introduction
• 10:57 - Google Domains
• 15:00 - When is 30TB not 30TB?
• 23:03 - Oregon DMV Data Loss
• 29:45 - America's Car Museum
• 33:49 - He Who Fights With Monsters
• 36:30 - 仙俠

Jon stacks hay and has a graduate, while Amazon fails to deliver poptarts for Eric. Github repositories purporting to demonstrate zero days instead are malicious; Barracuda urges hardware replacement of compromised devices, unable to patch with software; and spy camera ecosystem completely compromised and practically unpatchable. For fun we have neal.fun's space elevator and a solar probe discovers more about the source of the solar wind.

• 0:00 - Intro
• 12:20 - Fake Exploits
• 16:03 - Hardware Replacement
• 22:47 - Spy Camera Vulnerabilities
• 30:30 - Space Elevator
• 34:57 - Coronal Holes

Eric's Rocket League team is in first place and Jon's bees are doing great! Kaspersky discovers a compromise on the inside (reboot your iPhone!), Chrome needs an update and BitDefender detects anomalies. Eric beams solar power down to earth and Jon muses what a lost couple decades might be.

• 0:00 - Introduction
• 8:53 - Reboot your iPhone
• 15:37 - Update your Chrome
• 18:16 - Check your Android Apps
• 24:25 - Solar Power from Outer Space
• 27:22 - Waking up after 2 decades

Eric runs around Oregon and Mostly Bee Talk with Jon. 60 Minutes demos DeepFake voice hacking -- social engineering remains the easiest and most prevalent way folks are compromised; and PyPi declares that all project and org maintainers must enroll in 2FA before the end of the year. For fun we have the Dragonfly Spectral Line Mapper that uses Raspberry Pi's and ZiGGY -- a mobile EV charging solution.

• 0:00 - Intro
• 13:52 - Eric Topic
• 19:52 - PyPi Goes 2FA
• 27:17 - Dragonfly Spectral Line Mapper
• 33:32 - Get ZiGGY With It

Jon goes fishing and figures he'll fix a car. Eric goes camping but doesn't really and learns about volunteering at the zoo. Please check out https://attachment.zip for fun, TikTok gets banned in Montana, Suzuki shuts down in India and TrendMicro informs us on the Lemon Group. Eric still enjoys playing Rocket League and Jon catches up on the Mistborn series.

• 0:00 - Introduction
• 11:56 - The .zip TLD is fun!
• 13:22 - TikTok banned in Montana
• 16:32 - Suzuki India
• 19:50 - Lemon Group
• 28:34 - Rocket League Old Farts
• 30:59 - Mistborn

Jon listens to concerts, the bees are doing well, and Eric avoids the heat and gets his sprinklers and AC working. The many scam apps claiming ChatGPT, new confusing top level domains, the FBI takes out a Snake with Perseus, and MSI has its firmware signing keys stolen by ransomware. Earth is probably safe from an asteroid for the next thousand years, and which came first, the (comb) jelly or the sponge?

• 0:00 - Intro
• 11:53 - ChatGPT Scams
• 15:39 - File Extension or TLD?
• 19:04 - Perseus vs. Snake
• 24:13 - Firmware Keys
• 30:19 - Probably Safe
• 33:39 - Jellies vs. Sponges

Eric survives a flash flood in his backyard and Jon's bees are alive. Wyoming will have a Nuclear Power Plant soon and ICS Patch Tuesday is a thing. The Spanish arrest a bunch of Phishing Pholks and there's 10 million bucks in easy money for somebody... Eric finishes The Three Body Problem series and Jon recommends the Paternus Trilogy.

• 0:00 - Introduction
• 11:04 - Nuclear Power is Back
• 13:55 - ICS Patch Tuesday
• 19:44 - Phishing Arrests
• 22:31 - Who wants $10,000,000?
• 28:53 - The Three Body Problem
• 32:36 - Paternus Trilogy

Spring Grilling begun for both Jon and Eric, and Jon got his bees, and it's a Google Night for topics. First, Google fails to encrypt Authenticator secrets when synchronizing across devices, invalidating the security premise; and then Google enables support for passkeys across all its accounts. For fun we have a recipe aggregator and interface: Super Cook, and an undisturbed, ancient tomb found in Ireland.

• 0:00 - Intro
• 12:32 - Authenticator Exposes Secrets
• 17:26 - Passkeys for Google
• 28:26 - SuperCook
• 33:06 - Ancient Tomb