Mostly Security

Jon attempts to go fishing and repair a small engine. Eric attempts pest control. LockBit Ransomware code specific to Apple Silicon found and Kubernetes RBAC finds Monero "friends". Eric admires weed killing robots and Jon finds life deep in antarctic caverns.

• 0:00 - Introduction
• 16:40 - LockBit Ransomware for Mac
• 21:07 - Mac Ransomware
• 22:31 - Klever Kubernetes Exploits
• 29:12 - Weed Killing Robots
• 33:28 - Antarctic Caverns

Happy Tax Day (in the US). Read the latest Brandon Sanderson novel, Eric's going to coldplay, Jon tried a pottery class. Smooth Operator source is 'high confidence' North Korea, and it was still in the gathering stages (probably). Is Juice Jacking (again?) a thing, and principles of secure software development from CISA and supporting agencies. For fun, what your climate may be like in 60 years, and a talented potter on YouTube.

• 0:00 - Intro
• 14:13 - Smooth Operator Source
• 15:22 - Smooth Operator Followup
• 17:40 - Juice Jacking(?)
• 22:36 - Secure by-Design and -Default
• 40:19 - Climate in 60 years
• 44:50 - Matthew Kelly Pottery

Jon is unable to split bees and is still working out a cough. Eric drives half way to Seattle because Amtrak decided to stop functioning. Cars can now be stolen by popping out a headlight and no package manager is safe from supply chain attacks. Eric shares a Stitch and Jon gives credit to Einstein's first wife.

• 0:00 - Introduction
• 7:54 - Car Stealing
• 11:40 - NuGet Package Manager
• 20:35 - Stitch
• 23:22 - Forgotten Life of Einstein's First Wife

Eric and Jon are both back from their respective road trips. Samsung will patch for the Exynos flaws in April, the Biden administration issues and executive order limiting the government use of some forms of spyware, the RESTRICT act to ban tik tok is 'insanely broad' and could easily sweep other software into its net, and the 'Smooth Operator' supply chain vuln from last week hit the mac too. For fun we have two vacation happenings: freeze dried skittles and the shuttle Enterprise.

• 0:00 - Intro
• 11:08 - Exynos Followup
• 12:21 - Restrict Spyware
• 14:41 - Insanely Broad
• 20:21 - Smooth (Mac) Operator
• 29:54 - Freeze Dried Skittles
• 33:03 - The Shuttle Enterprise

Jon drives across the US, Eric takes his boy on college tours. ChatGPT has a bug, AirTags are used by the government, Bitcoin ATMs get hacked and Android Developers can better avoid fraud if they use the right APIs. Eric finally finishes book 2 of The Three Body Problem and Jon checks out a T-Rex.

• 0:00 - Introduction
• 9:27 - ChatGPT Outage
• 11:41 - AirTag Surveillance
• 14:42 - Bitcoin ATM Hack
• 18:47 - Android Fraud Abuse Help
• 23:46 - The Dark Forest
• 27:56 - Sue the T-Rex

Jon and Eric prepare for road trips; the trebuchet is (mostly) done, and spring may have started in Oregon. Project Zero finds a modem vuln in modern android phones and watches, Lionsgate streaming left an ElasticSearch instance wide open, and LinusTechTips YouTube channel was taken over. For fun we have Charlie Chaplin (and Einstein!) and a study on how bees learn the waggle dance.

• 0:00 - Intro
• 12:33 - Disable Voice over LTE
• 17:24 - Lionsgate Leak
• 21:35 - LinusTechTips Hacked
• 26:44 - Charlie Chaplin
• 31:22 - Waggle Dance Study

Eric does car things and watches a musical from 1875, Jon has trebuchet updates and enjoys the local High School production of The Addams Family. Telehealth company (legally) sells your medical data to advertisers. Cybercriminals are arrested in Europe and CISA will port scan your website. Eric is the only one who likes a 3 wheeled car and in the wake of SVB, Jon (after a sidebar on his Tablo woes) shares a great banking system explainer.

• 0:00 - Introduction
• 7:09 - Trial by jury
• 14:52 - Cerebral sells data
• 18:24 - Cybercriminals caught
• 21:24 - RVWP
• 26:41 - SOLO
• 30:27 - Bits About Money

Eric projects around the house and Jon gives a trebuchet update. LastPass hits keep coming, changing someone else's address, the (good!) network consequences of a DDoS takedown, and Wednesday was International Women's Day.

• 0:00 - Intro
• 11:05 - LastPass via Plex
• 13:56 - Address Change
• 21:42 - DDOS Seizure Fallout
• 26:53 - International Women's Day

Snow happens and disrupts everything except Eric's shiny new Rocket League Old Farts Season 8 Championship title. Scammy authenticator apps. AI generated voices breaking into banks. Typosquatting on PyPi. Electricity thieves for Crypto. Eric discovers Tatooine could exist and Jon speculates on how smart ChatGPT actually is...

Snow in Oregon! Eric refuses to buy a truck at 20%+ markup, Jon works on building a trebuchet. An old article about Advanced Persistent Manipulators, Twitter deploys an interesting 2FA "strategy," the largest breach of medical records so far in 2023, and the City of Oakland is still coping with their ransomware attack. For fun we have the "cheapest" way to space (so far) and the largest observed gathering of whales in potentially centuries.

• 0:00 - Intro
• 16:29 - Advanced Persistent Manipulators
• 20:13 - Twitter 2FA "Strategy"
• 25:02 - Regal Medical Group
• 27:57 - Oakland Ransomed
• 31:41 - A Perspective
• 35:41 - Krill Festival