Mostly Security

Eric goes to the Auto Show, Jon didn't build anything or break anything. Eric checks in with Printer Security and Jon chats about security topics related to Ukraine. Eric promotes a couple videos explaining Wordle Information Theory and then proceeds to ruin Jon's fun.

• 0:00 - Intro
• 10:23 - Last Day
• 11:03 - Printer Security
• 16:25 - FoxBlade Malware
• 19:00 - Conti Leak
• 27:53 - Wordle Information Theory
• 29:11 - The Correction
• 30:35 - Eric Ruins Jon's Fun

Jon resurrects his pellet grill (with help) and Eric prints components for his security system. Is Immersive Art new, and art? 1Password hooks up with Phantom wallet, NIST initiates cybersecurity labeling programs, and watch out for phishing in Teams. Wordle is (evidently) fun, and please don't use pixelation as a redaction technique.

• 0:00 - Intro
• 19:21 - Immersive ... Art (?)
• 21:20 - Phantom + 1Password
• 25:09 - Cybersecurity Labeling
• 29:07 - Phishing Teams
• 34:52 - Wordle Fun
• 38:47 - Pixelation Unredactor

The Super Bowl came and went, Eric watched a concert 800 miles away and Jon worked on the farm. Check in with the Red Cross hack, another company doing facial recognition for login, a football team gets ransomwared, an attack led by a Modified Elephant and using BGP to hack crypto wallets. Eric likes Suspicion and Jon drops a crypto presentation and wonders where Webb is.

• 0:00 - Intro
• 9:28 - Red Cross Hack
• 13:45 - More Facial Logins
• 16:02 - 49er Ransomware
• 18:30 - Modified Elephant
• 22:46 - Crypto BGP Hack
• 27:21 - + Suspicion
• 31:59 - Graybeard Talks Crypto
• 35:06 - Where is Webb?

Jon is lazy-ish and Eric has a day at the coast. The IRS backs down from their facial recognition login, Subaru and Kia disable telematics in Massachusetts, the people allegedly behind the Bitfinex hack in 2016 are arrested, and Microsoft disables an install protocol handler being abused in the wild. For fun we have Valentine facts from around the world and a new polymer that's stronger and lighter than steel.

• 0:00 - Intro
• 11:06 - Just use login.gov
• 14:23 - Look MA, no Telematics
• 19:34 - Bitfinex Thieves
• 24:23 - MSIX Protocol Handler Disabled
• 30:42 - Fun Valentine Facts
• 36:09 - Novel Polymerization

Eric discovers much travel in his future, Jon shares Terrible News. The White House Website shares thoughts and provisions on government networks. Ransomware takes on the Oiltanking in Germany and Hospitals and Heath Care Facilities in the US. Eric looks between the couch cushions for money to send something into space and Jon attempts browser inception.

• 0:00 - Intro
• 13:21 - OMB Zero Trust
• 22:32 - Oiltanking Ransomwared
• 25:38 - Ransomware Internal Messages
• 31:57 - Send Stuff To Space
• 35:27 - webvm.io

Eric and Jon enjoy the (brief) respite from Oregon Winter Rain. Github enables second factor via push to mobile app, a 12 year old Linux privilege escalation, vulnerabilities in the Winter 2022 Olympics app, and remote controlling Tesla car functions via API keys. For fun a high schooler making circuits in his garage, and did you know McDonald's is a Real Estate company?

• 0:00 - Intro
• 14:02 - GitHub Push as 2nd Factor
• 19:47 - Linux Policy Kit Priv Esc
• 23:50 - Olympics App Vulnerabilities
• 29:36 - Teslamate
• 37:15 - Garage Chips
• 42:37 - McDonald's As Real Estate

Jon vaporizes some expensive bees, Eric creates an icon and is therefore serious. Cyber-Snow Days for Schools, Red Cross is hacked, Russia arrests some hackers and Ukraine has some PCs wiped. Eric's fun is Web3 and Jon's fun is new data on MS.

• 0:00 - Intro
• 9:56 - Out with snow days, in with cyber days
• 12:54 - Red Cross Hack
• 16:05 - REvil Arrests
• 20:27 - Ukraine PCs wiped
• 24:31 - web3isgoinggreat.com
• 28:42 - MS Discoveries

Eric returns from a wedding and Jon tidies up the apiary. A developer sabotages his own NPM packages, threat actors sending USB devices in disguise, and ransomware in the hardware. For fun, we have navigation by fish, public domain day 2022, and evidence of how lightning begins.

• 0:00 - Intro
• 16:23 - Dev Corruption
• 21:06 - USB in the mail
• 24:11 - iLOBleed
• 33:34 - Fish Drives Car
• 36:52 - Public Domain Day 2022
• 39:06 - How Lightning Begins

Happy New Year! Jon and Eric chat about cliché resolutions followed by log4j penalties. Eric softballs up a chrome note, a pixel 911 issue and an unlikely HomeKit crash. Jon talks about cryptocurrency contract bugs. Eric moves on to a serial brain and Jon drops a Cars reference while talking about tractors.

• 0:00 - Intro
• 9:52 - More Log4J Goodness
• 12:22 - Chrome Updates
• 14:00 - Pixel Updates
• 16:05 - HomeKit Crash
• 18:58 - Leon Spacewalker
• 27:24 - Your Brain
• 30:55 - Autonomous Tractors

Eric and Jon are enjoying a bit of downtime over the holiday; the JWST was launched successfully, and you might not realize "encouraged" meant "required" in China. More Log4J followup, Shutterfly hit with ransomware, phishing for stock info, and building automation systems attacked. For fun we have self replicating xenobots (what could go wrong?) and potential vaccines for addictive substances.

• 0:00 - Intro
• 1:10 - James Webb Launch
• 15:17 - "Encouraged"
• 17:22 - CISA Alert
• 21:28 - Shutterfly Ransomwared
• 26:37 - Phish to Market
• 30:39 - Building Automation System Hack
• 38:09 - Self Replicating Xenobots
• 41:32 - Opiod Vaccines