Mostly Security

Eric rambles about photography, teaching his boy to drive, furniture items nobody wants, endangered flowers and sleeping with the  watch. Jon has a boring, beeless, bachelor weekend. Deep Fakes with Real People, Python bugs from 2007 and License Plate tracking for Fun and Profit. Eric eyes a new island while Jon denotes the DART damage. Finally, read up on the Tripitaka Koreana. Magnificent.

• 0:00 - Intro
• 12:47 - Deep fakes with Real People
• 22:05 - Trellix (re)finds bugs from 2007
• 27:34 - Tracking License Plates
• 33:21 - New Island
• 35:45 - DART
• 37:28 - Tripitaka Koreana

Eric battles CO2 and gets his Speed Pillows installed, and Jon's fridge is still broke. Beware remote controlled insulin pumps, and congrats (?) to the Solarium Commission; a story of industrial sabotage, and a critical Oracle Cloud vulnerability. For fun we have the makeup and history of a QR code, and can we use AI to understand whales?

• 0:00 - Intro
• 17:04 - Insulin Pumps Vulnerable
• 18:32 - Solarium Commission
• 23:48 - Industrial Espionage
• 30:25 - Oracle Cloud #AttachMe
• 36:03 - Makeup of a QR Code
• 39:10 - How to Speak Whale

Eric is haunted by spiders and Jon is on a hunt for jeans. US Congress hears from Mudge, Apple introduces Lockdown Mode, the US Government sanctions people and entities for their roles in conducting cyber attacks, and Glassdoor has a Cache Poisoning. Eric follows up with how spiders fly, Jon finshes with a Cosmic Tarantula and the Phases of Water.

• 0:00 - Intro
• 11:58 - Twitter Whistleblower
• 15:45 - Lockdown Mode
• 22:40 - Sanctions
• 26:20 - Cache Poisoning
• 32:05 - Electric Flight of Spiders
• 35:35 - Cosmic Tarantula
• 37:26 - The Phases of Water

Eric's back in the kitchen and the kids are back in school. Apple holds an event to #takeJonsMoney, and USB4 naming can get more complicated -- who knew? The IRS lets taxpayer data sit in the open for a year, and Facebook tweaked its URLs so the tracking parameters can't be removed by browsers. A 14 year old boy cracked the Australian Signals Directorate challenge coin in an hour, and rest in peace Peter Eckersley. Far too young.

• 0:00 - Intro
• 15:10 - Apple Event
• 21:47 - USB4 Version 2.0 SuperSpeed Gen 42
• 27:28 - IRS Data Exposure
• 31:01 - Facebook URL Scheme
• 36:39 - ASD Challenge Coin
• 39:25 - Thank You For Let's Encrypt

Eric walks his week backward from hiking Mt. St. Helens to becoming a Twitch celebrity. Jon gets a Dream Machine. Krebs follows up on Ubiquiti, Eric tweets #TwitterWhistleblower and notes that Plex is Too Good. Jon eyes an 0ktapus and then the whole show goes hilariously awry. Eric goes nuclear. Jon finds soft body physics and admires CO².

• 0:00 - Intro
• 4:18 - Eric on Twitch
• 10:21 - Ubiquiti followup
• 12:01 - #TwitterWhistleblower
• 15:15 - Plex Password Reset
• 20:00 - Phishing, Continued
• 27:53 - When the Show Goes Awry
• 36:07 - Modular Nuclear Reactor
• 42:06 - Soft Body Physics
• 43:23 - J Webb finds CO²

Eric cooks and desperately waits for a kitchen, and Jon harvests his honey for the year and goes camping. Go look at the JWST images of Jupiter! Amazon releases cybersecurity education videos, Apple releases patches for serious vulnerabilities across all its platforms, a long standing heap reuse bug to get priv escalation in Linux, and Cellebrite has years of emails exposed in a legal filing. For fun join Rocket League Old Farts or play Call to Adventure.

• 0:00 - Intro
• 17:29 - JWST Jupiter Images
• 19:07 - Protect, Connect
• 21:38 - Apple Security Bug
• 24:22 - DirtyCred
• 27:44 - Cellebrite Legal Doxing
• 33:49 - Rocket League Old Farts
• 37:48 - Call to Adventure

Eric crosses a bridge and Jon's bees escape. Twilio and Cloudflare disclose on phishing attempts while Deere, well, its not a good look. Eric tempts Jon with Fake Bacon and Jon talks about GPS Jamming which is neither GPS nor Jamming.

• 0:00 - Intro
• 6:37 - St. John's Bridge
• 14:38 - Phishing Targets
• 19:22 - Deere in the Headlights
• 26:00 - Fake Bacon
• 32:08 - GPS Jam

Eric paints and Jon does #nothingMuch. Riot profits more from *not* mining BitCoin (thanks #texas!), Microsoft releases 121 fixes for patch Tuesday, and a way to read uninitialized memory from CPU cache. For fun we have the Ig Nobel Prizes, and (thanks #science) how to use dead spider bodies as claw machines.

• 0:00 - Intro
• 11:57 - Riot Power Credits
• 13:47 - Hacking Fuel Pumps
• 19:43 - Patch Tuesday
• 23:07 - Æpic Leak
• 29:55 - Ig Nobel Prize
• 35:06 - Dead Spiders

Eric and Jon are both back from vacation; Jon still recovering from Covid. Apple shows how Passkeys will be used outside the Apple ecosystem, a dating site for the unvaxxed has its data exposed, some practical suggestions to assist in the fight against ransomware, and some interesting malware stats and search tips from VirusTotal. For fun we have the series Red Rising by Pierce Brown, and Jon gets his DALL-E invite.

• 0:00 - Intro
• 12:30 - Practical Passkeys
• 15:48 - Unjected Exposed
• 20:15 - Ransomware Suggestions
• 25:28 - VirusTotal Dorking
• 33:31 - Red Rising
• 36:26 - Jon DALL-E
• 40:58 - Eric DALL-E

Jon and Eric were unable to connect this week - so Eric takes a look back at a few of the "Something Fun" topics over the last several years. Enjoy!

• 0:00 - Intro
• 0:32 - Episode 8
• 1:11 - First Amazon Purchases
• 4:51 - Jon's Beekeeping Journey Begins
• 6:30 - Episode 42
• 6:51 - 42
• 9:23 - Episode 96
• 9:53 - Hacking Passwords
• 13:48 - Crazy Sauce
• 18:42 - Episode 156
• 19:27 - Star Wars Scroll Creator
• 22:20 - Arecibo Collapse
• 25:18 - Chapel of the Ancients
• 28:15 - Human Nature
• 28:59 - Outro