Mostly Security

People actually still got their news despite the Facebook downtime and there's still something funny about a shaved alpaca. Eric talks about web site hacking and Jon shares his thoughts on SMS spam from hacked routers. Eric finds a couple planets and Jon find a math problem.

• 0:00 - Intro
• 11:00 - What to do with Facebook down
• 12:03 - NSA's ALPACA recommendations
• 15:12 - Missouri takes on "hacking"
• 20:08 - Routers that do SMS go boom
• 25:16 - Space!
• 27:40 - Math!

Eric's furnace is fixed, and Jon ekes forward the x-carve project. Quite the "quiet" week this week. The GriftHorse pun was right there, Twitch is doxed, Facebook blows their 9's, and Apple and Visa do not agree. For fun, images of a Mercury flyby, life advice from nerds, and defunct hyper compound eyes.

• 0:00 - Intro
• 14:48 - GriftHorse
• 20:02 - Twitch Dox
• 23:22 - Facebook Outage
• 34:30 - Apple Pay Visa Vuln
• 39:28 - Mercury Flyby
• 42:11 - Life Advice
• 47:20 - Hyper Compound Eyes

Eric is lazy and gets really cold, Jon fixes his CNC and gets his roof done. Tracking autodiscover websites, following bots that steal 2FA, scouting masked emails and chasing zero-day details. Eric ❤️ Van Gogh, Jon ❤️ justified text.

• 0:00 - Intro
• 15:36 - Autodiscover Followup
• 17:49 - Telegram Bots Stealing OTP
• 20:55 - 1Password+Fastmail=Private Emails
• 23:24 - Record Zero-day Hacks
• 28:31 - Van Gogh Art
• 31:46 - Super Metroid, Justified

(Anything *but* surprising ...). Eric and Jon are both excited about the rain, for different reasons. And a lot of "Security Bites (or Bytes)" tonight. A lock screen bypass, how to go passwordless, Facebook being evil in multiple ways, and an Autodiscover credential leak. For fun we have converting light to matter and a very hopeful look at the cost (or incredible, potential lack thereof) of a rapid transition to renewable energy. And a couple of book references along the way.

• 0:00 - Intro
• 11:59 - iPhone Lock Screen Bypass
• 14:03 - Passwordless Microsoft
• 17:07 - Facebook Blocking Watchdogs
• 20:33 - Project Amplify
• 21:36 - Autodiscover Leak
• 30:50 - Light to Matter
• 34:08 - Project Hail Mary
• 35:15 - The Man Who Solved The Market
• 38:19 - Oxford Study

Jon remembers he's no longer 25. Eric cleaned and went to a movie. Microsoft followup, a Walgreens Website Whoops and of course you would call a cyberweapon "Karma". Eric's fun is all space and Jon's fun is waiting for him to be able to come out and play.

• 0:00 - Intro
• 10:58 - CVE-2021-40444 Follow Up
• 16:37 - Covid Test Website Whoops
• 22:47 - Karma
• 28:04 - Inspiration 4
• 30:37 - LCRT
• 31:36 - DuAxel Robots
• 32:52 - X-Carve

Jon does plumbing and tail light repair, and Eric has a culinary weekend. Jailbreak detection evasion, spooky side channel of chrome, and two zero days, one in Microsoft and one in Zoho. For fun, the Perseverance rover has attained a core, an Asian Giant Hornet nest eradicated in Washington, and the "mythology of Bee Keeping" starring Jason Statham (??!?).

• 0:00 - Intro
• 14:37 - Jailbreak Detection Evasion
• 17:59 - Spoooook(y)
• 22:19 - MSHTML Zero Day
• 28:38 - Zoho Server Zero Day
• 33:06 - Perseverence Core (Dump)
• 35:59 - AGH Nest Discovered
• 40:50 - The Beekeeper

Eric does some electrical work, Jon chats with a police officer about his car. More Cryptocurrency is (are?) stolen. Apple has a double agent and can give you a digital driver's license. Azure has a bug and some more NSO iPhone hackery discussed. Eric finally knows what happened to the Red Delicious apples and Jon is looking forward to details from Venus.

• 0:00 - Intro
• 14:07 - More Cryptocurrency Theft
• 16:48 - Apple's Double Agent
• 20:23 - Apple Wallet Driver's License
• 26:45 - Azure Cloud Bug
• 36:35 - iPhone Exploits
• 45:25 - Red (not) Delicious Apples
• 49:39 - Going to Venus...

Eric returns home, and Jon goes Fishing. Why you should keep home and work on different computers, a man tracks down his digital (bitcoin) muggers, a local privilege escalation in a Razer installer, and a location vulnerability in the Bumble app. For fun we have nuclear batteries and how to roll your own handwriting recognition machine learning model.

• 0:00 - Intro
• 10:26 - Church and State
• 15:01 - Digitally Mugged
• 19:34 - Razer Local Privilege Escalatiom
• 26:01 - Bumble Vulnerability
• 32:37 - Nuclear Battery
• 38:35 - Handwriting Recognition Example

Eric drinks New Coke Zero. Jon gets less honey than he had hoped. Collisions in Apple's CSAM, a T-Mobile breach, a Covid testing site breach and Blackberry QNX bugs. Eric aspires to visit Machu Picchu now that he knows how old it really is and Jon talks about really hot tiny things and woolly mammoth travel tracking.

• 0:00 - Intro
• 14:36 - Apple CSAM collision
• 20:06 - T-Mobile breach
• 24:34 - Covid testing site breach
• 29:47 - Blackberry QNX Bugs
• 36:46 - Machu Picchu
• 40:02 - National Ignition Facility
• 43:42 - Mammoth Travels

Eric has mixed followup, and Jon finishes the Yurt; Scamming the wannabe scammers, AI authored phishing, and Poly Network Hacked and some crypto returned. A bit about the Apple CSAM detection features. A newly realized carnivorous plant, and a climate change serenity prayer.

• 0:00 - Intro
• 13:57 - Honor (?) Among Thieves
• 17:07 - Let the AI Phish
• 20:56 - Poly Network Hack
• 26:26 - Crypto Returns
• 29:26 - CSAM Take 1
• 35:50 - CSAM Take 2
• 43:20 - Carnivory
• 47:25 - Pinboard's Opinion