Mostly Security

By Jon King and Eric Wuehler

From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job. From beekeeping adventures to hiking mounta... more

4.9

1414 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Mostly Security:

How many episodes does Mostly Security have?

The podcast currently has 507 episodes available.

Mostly Security episodes:

March 26, 2021172: Where Have All The Containers Gone
Eric's on another road trip, and Jon's just back from camping (and plumbing). Exchange followup with 'indiscriminate' deployment of Black Kingdom ransomware, Hobby Lobby's exposed S3 bucket, Revenge Plot has real world consequences, more zero days used by an advanced group, and a walk through a TikTok RCE. For fun we have Space Probes, a Container Shortage, and no shortage of (bald) eagles.

0:00 - Intro

10:59 - Black Kingdom

12:45 - Hobby Lobby Exposed

14:04 - Revenge Plot

17:57 - "Expert" Hackers

23:04 - TikTok Android RCE

30:32 - Space Probes

34:02 - Container Shortage

39:51 - Eagles!
...more
44min
March 19, 2021171: I Liked The Segue
Jon is swimming in eggs and Eric is learning German. CryptoKitties are back in the form of NFTs and SMS hijacking just got easier. Using unregistered domain names in your code isn't awesome and more SolarWinds/Exchange disclosures. Eric watches a show in German while Jon discovers a Greek Computer.

0:00 - Intro

10:47 - Not Nifty NFTs

16:02 - Easy SIM Hijacking

20:59 - Default Values go Ooops

27:40 - Mimecast Incident Report

35:10 - Hackerville

39:10 - Pi Day (or Tau Day?)

41:53 - Antikythera
...more
51min
March 13, 2021170: Dark Spin
Jon fertilizes and Eric's got (more) water problems. The Exchange zero day has been seriously exploited. A vulnerability in a WiFi mouse app, a novel bitsquatting technique, and a new WebKit remote code execution. For fun you can get a job in Remote, Oregon, watch an amazing drone-in-a-bowling-alley video, and learn just what IS inside a proton?

0:00 - Intro

17:26 - Hafnium Timeline

24:26 - Krebs 30k Article

26:18 - WiFi Mouse

29:12 - Squatting Bits

33:55 - WebKit RCE

38:11 - Remote, Oregon

41:08 - Bowling for Drones

42:31 - What's In A Proton
...more
49min
March 05, 2021169: Space Hurricane...
Eric finds a drone and stinky garbage. Jon orders pizza and builds garden beds. Logos, Space and Spectre followup. People can't get into their cars without keys and Exchange can't deliver mail without a 0 day. SpaceX SN10 lands upright-ish until it doesn't and Eric suggests Talking to Strangers. Jon notes a cat identifier and SPACE HURRICANES.

0:00 - Intro

16:44 - Logos!

19:39 - Arecibo Cleanup

20:38 - Meet Nasa Flight Director: Diana Trujillo

22:23 - Weaponized Spectre

25:08 - Key Fob Failures

30:36 - Exchange 0-day

35:58 - Microsoft Note

38:06 - SN10 Goes Boom

41:02 - Talking to Strangers

44:34 - Cat Detector

47:40 - Space Hurricane
...more
52min
February 26, 2021168: Dare Mighty Things
Jon talks too much bees (and hornets) and Eric plans deck changes and lockpicking. For followup the Nursery Cam "loophole" is disclosed and the Jamaica story gets worse. California DMV users exposed in data breach, a Washington State audit of unemployment fraud results in a huge breach, and Apple releases their platform security guide. For fun we have the Perseverance parachute message, hope for net neutrality, and accurate magnetic reversal calculations thanks to well preserved trees in New Zealand.

0:00 - Intro

1:34 - Bee Talk

10:22 - Lockpick Kickstarter

14:23 - Nursery Cam "Loophole"

16:24 - Jamaica One More Thing

18:50 - California DMV

23:33 - Audit Oops

28:03 - Apple Security Guide

32:28 - Perseverence Parachute

38:32 - Net New-trality

41:43 - Adams Event
...more
49min
February 19, 2021167: Old Man Smiles At Cloud
Enjoying the cold... No snow day, but a "No Power Day". Space Helicopters, Nursery Cam Oopsies, Super Cookies, Jamaican Exposure and French Cyber Things. Eric shares a FIDO2 Kickstarter note and Jon reminisces about the origins of the Mozilla logo and Eric sneaks in a plug for folklore.org.

0:00 - Intro

11:27 - Space Helicopters

14:28 - Nursery Cam Oopsies

17:16 - Super Cookies

20:44 - Jamaican Exposure

23:53 - French Cyber Things

29:29 - Solo v2 FIDO2 Key

32:33 - Mozilla Logo

38:06 - Apple Folklore
...more
40min
February 12, 2021166: Nano Chameleon
Eric's latest app (Hash/Check) is officially released. Super Bowl was mostly watched and Jon can't gauge time. CISA releases malware analysis for Teardrop, a nifty bit of dependency research, cops playing music to take down live streams, Microsoft's TCP/IP patches, and a wordpress plugin vulnerability. For fun Eric brings a movie and short-shorts, and Jon brings the smallest known reptile and a prelude of next week's landing on Mars.

0:00 - Intro

4:07 - Hash/check

11:20 - CISA Teardrop MAR

12:32 - Dependency Confusion

18:35 - Dependency Confusion Pt. 2

20:52 - Beverly Hills Cops

25:11 - Microsoft TCP/IP Patches

28:26 - NextGen Gallery

32:02 - Along with the Gods: The Two Worlds

35:18 - Pixar Popcorn

37:05 - Nano Chameleon

39:32 - Perseverance Landing
...more
44min
February 05, 2021165: They Are Teleporting...
Eric whines about 3D printing tools. John puts bees in his fridge and gets graded on his pruning skills. Eric then whines about Big Sur and TouchID issues. Jon mentions a few notes on SUPERNOVA, sudo on macOS and AIX (of all things) and iCloud Passwords beyond Safari. Eric fails to whine about how iOS 14 Messages work under the covers and Jon does math on Zero Day Patch Success. Eric shifts to fawning over Bletchley Park and Jon introduces you to Lynn Conway.

0:00 - Pre Intro

0:11 - Intro

15:02 - Big Sur and TouchID

18:41 - CISA SUPERNOVA Notes

19:52 - Sudo Bug on macOS & AIX

23:14 - iCloud Passwords for Chrome

24:30 - iOS 14 Messages

28:32 - 25% of Zero Day Patches Failed

34:01 - Bletchley Park Online

37:23 - Lynn Conway
...more
42min
January 29, 2021164: Ban Outsider Trading
Eric fixes his leaky faucet and gains an electrical problem, Jon "repairs" his Jetta. New Crypto-miner for QNAP, more iOS zero days, a decade old Sudo vulnerability, and an international Emotet takedown. For fun we have a password shanty, a cookie monster rock, seesaws at the border, and the whole GameStop situation. Oh, and bonus: Eric's written an app!

0:00 - Intro

8:37 - Jetta P2015 Fix

14:22 - QNAP Crypto-miner

16:17 - More iOS Zero Days

20:12 - Stackoverflow Redux

24:47 - Sudo Elevation

31:39 - Emotet Takedown

36:05 - Password Shanty

37:00 - Cookie Monster Rock

38:00 - Border Seesaws

39:33 - Outsider Trading

49:16 - Hash/Check
...more
54min
January 22, 2021163: Unusual Hyper-Spectral Properties
Eric's got another side project and Jon has a cow. A little Sunburst followup, a few Chrome 88 notes and DNSpooq has a logo. Oregon State discovers the first new Blue in 200 years and Dire Wolf DNA derived from planes, trains and automobiles. Finally, go watch Amanda Gorman. Really.

0:00 - Intro

15:31 - Sunburst Followup

19:55 - Chrome 88

25:20 - DNSpooq

37:00 - New Blue

40:57 - Dire Wolf DNA

44:14 - Amanda Gorman
...more
48min

FAQs about Mostly Security:

How many episodes does Mostly Security have?

The podcast currently has 507 episodes available.