Mostly Security

Jon is swimming in eggs and Eric is learning German. CryptoKitties are back in the form of NFTs and SMS hijacking just got easier. Using unregistered domain names in your code isn't awesome and more SolarWinds/Exchange disclosures. Eric watches a show in German while Jon discovers a Greek Computer.

• 0:00 - Intro
• 10:47 - Not Nifty NFTs
• 16:02 - Easy SIM Hijacking
• 20:59 - Default Values go Ooops
• 27:40 - Mimecast Incident Report
• 35:10 - Hackerville
• 39:10 - Pi Day (or Tau Day?)
• 41:53 - Antikythera

Jon fertilizes and Eric's got (more) water problems. The Exchange zero day has been seriously exploited. A vulnerability in a WiFi mouse app, a novel bitsquatting technique, and a new WebKit remote code execution. For fun you can get a job in Remote, Oregon, watch an amazing drone-in-a-bowling-alley video, and learn just what IS inside a proton?

• 0:00 - Intro
• 17:26 - Hafnium Timeline
• 24:26 - Krebs 30k Article
• 26:18 - WiFi Mouse
• 29:12 - Squatting Bits
• 33:55 - WebKit RCE
• 38:11 - Remote, Oregon
• 41:08 - Bowling for Drones
• 42:31 - What's In A Proton

Eric finds a drone and stinky garbage. Jon orders pizza and builds garden beds. Logos, Space and Spectre followup. People can't get into their cars without keys and Exchange can't deliver mail without a 0 day. SpaceX SN10 lands upright-ish until it doesn't and Eric suggests Talking to Strangers. Jon notes a cat identifier and SPACE HURRICANES.

• 0:00 - Intro
• 16:44 - Logos!
• 19:39 - Arecibo Cleanup
• 20:38 - Meet Nasa Flight Director: Diana Trujillo
• 22:23 - Weaponized Spectre
• 25:08 - Key Fob Failures
• 30:36 - Exchange 0-day
• 35:58 - Microsoft Note
• 38:06 - SN10 Goes Boom
• 41:02 - Talking to Strangers
• 44:34 - Cat Detector
• 47:40 - Space Hurricane

Jon talks too much bees (and hornets) and Eric plans deck changes and lockpicking. For followup the Nursery Cam "loophole" is disclosed and the Jamaica story gets worse. California DMV users exposed in data breach, a Washington State audit of unemployment fraud results in a huge breach, and Apple releases their platform security guide. For fun we have the Perseverance parachute message, hope for net neutrality, and accurate magnetic reversal calculations thanks to well preserved trees in New Zealand.

• 0:00 - Intro
• 1:34 - Bee Talk
• 10:22 - Lockpick Kickstarter
• 14:23 - Nursery Cam "Loophole"
• 16:24 - Jamaica One More Thing
• 18:50 - California DMV
• 23:33 - Audit Oops
• 28:03 - Apple Security Guide
• 32:28 - Perseverence Parachute
• 38:32 - Net New-trality
• 41:43 - Adams Event

Enjoying the cold... No snow day, but a "No Power Day". Space Helicopters, Nursery Cam Oopsies, Super Cookies, Jamaican Exposure and French Cyber Things. Eric shares a FIDO2 Kickstarter note and Jon reminisces about the origins of the Mozilla logo and Eric sneaks in a plug for folklore.org.

• 0:00 - Intro
• 11:27 - Space Helicopters
• 14:28 - Nursery Cam Oopsies
• 17:16 - Super Cookies
• 20:44 - Jamaican Exposure
• 23:53 - French Cyber Things
• 29:29 - Solo v2 FIDO2 Key
• 32:33 - Mozilla Logo
• 38:06 - Apple Folklore

Eric's latest app (Hash/Check) is officially released. Super Bowl was mostly watched and Jon can't gauge time. CISA releases malware analysis for Teardrop, a nifty bit of dependency research, cops playing music to take down live streams, Microsoft's TCP/IP patches, and a wordpress plugin vulnerability. For fun Eric brings a movie and short-shorts, and Jon brings the smallest known reptile and a prelude of next week's landing on Mars.

• 0:00 - Intro
• 4:07 - Hash/check
• 11:20 - CISA Teardrop MAR
• 12:32 - Dependency Confusion
• 18:35 - Dependency Confusion Pt. 2
• 20:52 - Beverly Hills Cops
• 25:11 - Microsoft TCP/IP Patches
• 28:26 - NextGen Gallery
• 32:02 - Along with the Gods: The Two Worlds
• 35:18 - Pixar Popcorn
• 37:05 - Nano Chameleon
• 39:32 - Perseverance Landing

Eric whines about 3D printing tools. John puts bees in his fridge and gets graded on his pruning skills. Eric then whines about Big Sur and TouchID issues. Jon mentions a few notes on SUPERNOVA, sudo on macOS and AIX (of all things) and iCloud Passwords beyond Safari. Eric fails to whine about how iOS 14 Messages work under the covers and Jon does math on Zero Day Patch Success. Eric shifts to fawning over Bletchley Park and Jon introduces you to Lynn Conway.

• 0:00 - Pre Intro
• 0:11 - Intro
• 15:02 - Big Sur and TouchID
• 18:41 - CISA SUPERNOVA Notes
• 19:52 - Sudo Bug on macOS & AIX
• 23:14 - iCloud Passwords for Chrome
• 24:30 - iOS 14 Messages
• 28:32 - 25% of Zero Day Patches Failed
• 34:01 - Bletchley Park Online
• 37:23 - Lynn Conway

Eric fixes his leaky faucet and gains an electrical problem, Jon "repairs" his Jetta. New Crypto-miner for QNAP, more iOS zero days, a decade old Sudo vulnerability, and an international Emotet takedown. For fun we have a password shanty, a cookie monster rock, seesaws at the border, and the whole GameStop situation. Oh, and bonus: Eric's written an app!

• 0:00 - Intro
• 8:37 - Jetta P2015 Fix
• 14:22 - QNAP Crypto-miner
• 16:17 - More iOS Zero Days
• 20:12 - Stackoverflow Redux
• 24:47 - Sudo Elevation
• 31:39 - Emotet Takedown
• 36:05 - Password Shanty
• 37:00 - Cookie Monster Rock
• 38:00 - Border Seesaws
• 39:33 - Outsider Trading
• 49:16 - Hash/Check

Eric's got another side project and Jon has a cow. A little Sunburst followup, a few Chrome 88 notes and DNSpooq has a logo. Oregon State discovers the first new Blue in 200 years and Dire Wolf DNA derived from planes, trains and automobiles. Finally, go watch Amanda Gorman. Really.

• 0:00 - Intro
• 15:31 - Sunburst Followup
• 19:55 - Chrome 88
• 25:20 - DNSpooq
• 37:00 - New Blue
• 40:57 - Dire Wolf DNA
• 44:14 - Amanda Gorman

Jon and Eric are both frustrated by water issues; Jon loses two bee colonies. Hope on the right-to-repair front from Europe, a side channel attack on hardware security keys, and evaluation of the Sunspot implant. For fun we have a Neal Stephenson novel 'Zodiac' and info about the James Webb Space Telescope that should launch in 2021.

• 0:00 - Intro
• 3:41 - Dead Bees
• 10:56 - Right To Repair
• 17:54 - Side channel on Security Keys
• 22:40 - Sunspot
• 30:41 - Zodiac
• 36:43 - James Webb Space Telescope