Mostly Security

Jon has a musical week, Eric decorates for the holidays. Android signing certs are compromised, LastPass breach continues and CrowdStrike blogs an attack on telecom companies. Launch Asteroids at Earth and check out the Pillars of Creation.

• 0:00 - Introduction
• 9:01 - Android Compromised
• 13:32 - LastPass Breach Continues
• 17:21 - Attack on Telecom Companies
• 25:18 - Astroid Launcher
• 30:45 - Pillars of Creation

Eric and Jon both have good Thanksgiving meals and breaks, Looney Tunes at the Oregon Symphony, and a recommendation for Glass Onion. iSpoof takedown in the UK, significant fines down under, and trusting your laptop to a repair shop may result in privacy violations. For fun we have a video teaching lockpicking to blind students, and Roal Road, an online portal for authors.

• 0:00 - Intro
• 13:00 - Glass Onion
• 14:39 - iSpoof No More
• 21:40 - That's not a Fine, this is a Fine
• 25:13 - Repair Shop Peeps
• 30:12 - Guelph in 72!
• 31:25 - Lockpicking Students
• 34:33 - Royal Road
• 36:40 - Path Of Ascension

It's Thanksgiving week in the US. More FTX nonsense. Apple's "privacy" is not what you think. Zeppelin ransomware keys. TwitterIsGoingGreat.com is exactly what you think it is. Chicken chicken chicken. Help for Honeybees. Mother Learning books.

• 0:00 - Intro
• 11:19 - FTX Nonsense
• 14:15 - Apple's "privacy"
• 21:24 - Zeppelin ransomware
• 26:35 - Twitter is going great
• 27:15 - Chicken chicken chicken
• 29:25 - Help for Honeybees
• 33:40 - Mother Learning

Eric and Jon both go on road trips, Eric goes stargazing, Jon fails to fix his mule. The FTX debacle continues apace, an "accidental" 70k lockscreen bypass bounty, a russian mobile software company masquerading as a US company, and 15k wordpress sites compromised to boost SEO for worthless Q&A sites. For fun we have minutia about the definition and measurement of time, and an AI model trained on scientific papers and textbooks.

Eric goes to a High School play while Jon plays with a laser engraver over a soggy weekend. Eric chats about MFA in Antarctica. Jon talks simple CVEs and order of operations. Web3 is still going great, FYI. Finally, check out a Submarine Cable Map online and decide for yourself if bees have feelings.

• 0:00 - Intro
• 0:53 - The Play That Goes Wrong
• 11:07 - Antarctic MFA
• 18:15 - Simple CVEs
• 23:47 - Cryptocurrency Fun!
• 30:56 - Submarine Cable Map
• 33:59 - Do Bees Have Feelings?

Halloween passes quickly this year; Eric finishes his kitchen magnetic board project, and Jon finally sets up the laser engraver. Three years later (was episode 70!) Amazon finally builds Eero into 5th gen Echo devices. An act may pass to help the government use open source software better, the FTC takes steps against Drizly CEO to enforce better security practices, and Android droppers found on Google Play. For fun, we have a nearly 2km long train in Switzerland and an obituary for Kathleen Booth, an early computer pioneer and inventor of Assembly Language.

• 0:00 - Intro
• 11:26 - Eero+Echo
• 12:25 - Securing Open Source Software Act
• 16:50 - Drizly CEO Ordered
• 22:27 - Android Droppers
• 27:22 - Not a Short Train
• 32:21 - Thanks for Assembly, Kathleen!

Jon's Fridge Saga Continues, Eric attends the Oregon AMS Winter Weather Conference. Passkeys are finally(?) here and GitHub Exploit PoCs should come with warning signs. Finally, check out Mark Rober's Squirrelimpics and Nikon's Small World.

• 0:00 - Intro
• 12:57 - Passkeys Are Here!
• 17:56 - GitHub PoC Exploit Fakes
• 25:43 - Squirrelimpics 3.0
• 27:51 - Nikon Small World

Jon enjoys Panic! and Eric goes to the pumpkin patch. Equifax uses their data to detect (and fire) the overemployed, a history of the Google Plasma Globe Affair, and how not to encrypt messages. Why some people are more attractive to mosquitos, and how to train a few hundred thousand brain cells to play pong.

• 0:00 - Intro
• 11:28 - Equifax Fires Overemployed
• 15:40 - Google Plasma Globe Affair
• 19:04 - Failed at Crypto
• 25:50 - Mosquito Attraction
• 29:48 - Dishbrain

Jon and Eric are in Texas, eating brisket. Eric's car insurance is about to spike and Jon's symphony visit takes a medical turn. Eric talks about Ikea Smart Lighting, Jon shares info on the US Airport Website hacks and Thermal Attacks for password discovery. Eric talks about Safer Nuclear Energy and Jon trolls Eric with "Fix Wasps". Finally, can CRISPR be used to cure HIV?

• 0:00 - Intro
• 10:54 - Ikea Smart Lighting
• 15:30 - Airport Websites Taken Down
• 17:30 - Thermal Attacks
• 22:55 - Safer Nuclear Energy
• 26:31 - Fig Wasps
• 31:14 - Cure HIV using CRISPR

Eric has a new driver and hutch-free-garage, and Jon has AAPL frustrations. Both Google and Facebook ahem Meta release AI driven text-to-video examples this week. The EU votes for USB-C, wifi cameras are easy to jam, Microsoft copes with two new Exchange zero days, and Mandiant finds novel malware VIB files loaded into ESX servers. For fun we have the longest running webcam on the internet (SFO Fog Cam) and the Steam game Slipways.

• 0:00 - Intro
• 19:25 - Imagen Video
• 22:25 - EU Votes for USB-C
• 25:37 - Jam the WiFi
• 28:39 - Exchange Zero Days
• 32:22 - Bad VIB(e)s
• 39:16 - Fog Cam
• 42:54 - Slipways