Mostly Security

Eric visits a few states, Jon has a pleasant Mother's Day and they both watch Dr. Strange. A little Patch Tuesday followup, some notes on credit card stealing as a service (CCSaaS), a "Delete All The Things" malware making the rounds and another cryptocurrency hack. Eric chats about his favorite Google IO announcement and Jon shares thoughts on steganography.

• 0:00 - Intro
• 7:12 - Patch Tuesday
• 10:38 - CCSaaS
• 12:27 - F5 BIG-IP Vulnerability
• 14:37 - Cryptocurrency Hack
• 20:46 - Google IO
• 28:28 - Steganography

Jon and Eric are both on the road this week. Dead whale on a Washington beach reminds us of the famous Oregon video (see link!). Followup on the mite killing fungus, and Pegasus spyware on Spain's PM's phone. Security.txt is official, Microsoft security tips, Chrome 101's security bounties and auto password changes (old, oops!). For fun we have the oligopoly of pop culture, a floating anvil, more about breeding bees, and an asian giant hornet update.

• 0:00 - Intro
• 15:49 - Exploding Whale Video
• 16:41 - Biological Weapons
• 17:17 - Pegasus Followup
• 21:16 - Security.txt
• 25:35 - Microsoft 10 tips
• 29:00 - Chrome 101 Bounties
• 32:06 - Chrome Auto Password Changes
• 35:24 - Pop Culture Oligopoly
• 40:39 - Floating Anvil
• 42:12 - VSH Bees
• 50:16 - Asian Giant Hornet Update

Jon's doing more experiments with bees. Eric goes on another roadtrip. Psychic Signatures in the latest Java, a Super-sized HTTPS DDoS attack, and some chat entertainment. Eric's boy suggests the Astronomy Picture of the Day, Eric grudgingly admires Classic Mac running in a Browser and Jon looks forward to bee fungus.

• 0:00 - Intro
• 11:30 - Psychic Signatures
• 17:21 - 15.3 million requests per second
• 22:42 - Leaked Lapsus Chats
• 31:35 - APOD
• 32:19 - Classic Mac in a Browser
• 35:15 - Fungus for Bees

Jon gets his new bees and Eric preps for upcoming travel during the Easter weekend. Amazon's log4shell hotpatch made things worse (!!), what to do about mis- and dis-information, an IoT company attempts to perform a vanishing act, and data about exploited zero days in 2021. For fun we have a newly discovered stellar phenomenon: a 'micronova' and a show that started slow and ended (season 1 at least) well ... Severance.

• 0:00 - Introduction
• 15:06 - Fixing the Hotpatch
• 20:20 - Mis- and Dis-information
• 30:55 - Insteon Vanishes
• 36:11 - Exploited Zero Days in 2021
• 45:26 - Micronova
• 47:00 - Severance

Snow in April. Uh, what? Jon hires an electrician and Eric replaces smart plugs. Eric notes that Apple is finally catching up to Microsoft and Google, but not how they might want. Jon chats LOOPBins, Patch Tuesday goodness and ICS Toolkits. Eric feels bad about Ohm. Jon watches a show and admires a comet.

• 0:00 - Intro
• 15:33 - Patch your Apples
• 19:55 - LOOPBins
• 24:47 - Patch Tuesday
• 28:18 - ICS Toolkit
• 32:59 - Ohm
• 36:31 - Severance
• 38:09 - Really Big Comet

Jon is out of commission for a couple of days, but his bees are doing well! Eric is reading, playing with a new Pixel 6 and frustrated with Southwest Airlines (lack of) good password management. GitLab has a static password 'oops', Mailchimp is compromised and phishes crypto holders, and the FBI & DOJ take down a GRU Botnet. For fun we have potential future fluid telescope lenses, The Princess Bride in concert, and a new way of dating buried stone tools.

• 0:00 - Intro
• 16:38 - GitLab Static Password
• 19:44 - Mailchimp Compromised
• 24:56 - GRU Botnet Takedown
• 29:21 - Fluid Telescopes
• 32:36 - Princess Bride + Oregon Symphony
• 36:34 - Cosmogenic Nuclide Isochron Method

Eric rides a bike and eats a burger. Jon eagerly awaits bees. A few follow ups to Okta, Lapsus, Cryptocurrency losses and a Ukraine hacker. The FBI goes after BEC scams, Exxon mines bitcoin with excess gas, forged Legal requests and a new exploit, logo pending. Eric find CRISPR cows interesting and Jon is looking forward to buying books in the Kindle app.

• 0:00 - Introduction
• 10:03 - More Okta
• 11:09 - Lapsus Mastermind
• 13:01 - $625 million more...
• 14:22 - Ukraine Hacker
• 17:35 - FBI BEC News
• 19:05 - Excess Gas Bitcoin Mining
• 21:39 - Forged Legal Requests
• 29:12 - Spring4Shell
• 34:22 - CRISPR Cows
• 37:04 - Apple Reader App News

Jon's on vacation in New Mexico (?) and Eric does Many Mundane Things. Exotic Lily was an IAB for Conti, how to make phishing even harder to detect with browser-in-browser popups, Germany warns against Kaspersky use, and Okta is breached by Lapsus$. For fun we have 9 lines to represent all of physics, a da Vinci exhibit at OMSI, and Mesa Verde National Park.

p>Eric finishes a big book, went to a concert and resurfaced his garage floor. Jon went to the Symphony and ordered some Bees. Risky Biz is joined by a favorite cybersecurity writer, Nvidia "hacks back" and more cryptocurrency is lost to software bugs. Jon chats about a Russian CA and some Node sabatoge. For fun, Jon finds Ernest Shackleton's ship and Eric is excited about Daylight Savings news. Ed. Note: Eric is well aware the Earth revolves around the Sun and not the other way around. He was tired.

• 0:00 - Intro
• 12:53 - Risky Biz Bonus
• 14:04 - Nvidia Hacks Back
• 15:34 - Math is Hard
• 17:56 - Russian TLS CA
• 22:01 - Node Madness
• 26:43 - Oregon Chorale
• 27:34 - Daylight Savings???
• 30:36 - Endurance
• 35:26 - 1917

Eric attempts a St. Helens visit and plays with IR filters, while Jon is going to a concert (!!). Google's TAG releases an update about Ukraine related activity, NVidia gets an "interesting" blackmail request from their breach, and NVidia code signing certs are seen signing malicious software on VT. For fun you may soon be able to buy a Purple Tomato, a non-Brandon Sanderson book kickstarter (by Will Wight), and the east coast may be taken over by palm sized flying spiders. Yay.