Mostly Security

Eric gets new windows and watches a movie. Jon watches a show, fences some things and continues his flood watch. A look back 3 years at Spectre/Meltdown, Nissan leaks some code, Zyxel has backdoors and finally, SMB for your Browser! Jon pitches project pyodide and Eric mentions five axis printing and floating point video gaming.

• 0:00 - Ortni
• 11:01 - Spectre/Meltdown 3 years later
• 15:57 - Nissan Source Code Leak
• 21:05 - Zyxel Backdoor
• 25:01 - Web Assembly SMB
• 27:38 - Project Pyodide
• 30:35 - The Browser Will Be the OS
• 30:49 - Pitch and Yaw Printing?
• 34:10 - Floating Point Leviathan

Final episode of 2020. Eric and Jon talk holidays. Solarwind actors potentially using resellers as intrusion vector into cloud accounts. Physical security keys, ransomware against plastic surgeons, and taking down three bulletproof VPN providers. For fun we have dancing robots and an Alaskan Native rights activist.

• 0:00 - Intro
• 16:13 - Credential Abuse
• 22:21 - Physical Security Keys
• 27:02 - Plastic Surgery Dox
• 30:46 - VPN Takedown
• 34:19 - Do you Love me?
• 36:41 - Elizabeth Peratrovich

Eric complains about Apple and Jon chimes in. More SolarWinds and Sunburst notes. Farmers get their own Cybersecurity talking to and Journalist Phone Security is discussed. Happy Virtual Holidays, all! If you like choral music, check out the Oregon Chorale. Jon mentions the Great Conjunction and Science Events to watch for in 2021.

• 0:00 - Intro
• 15:03 - More SolarWinds
• 17:38 - More Sunburst
• 20:43 - Cybersecurity for Farmers
• 25:33 - Journalist Phone Security
• 38:01 - Happy Virtual Holidays
• 40:53 - Oregon Chorale
• 42:00 - The Great Conjunction
• 44:29 - Science Events to Watch in 2021

Eric drives slow and safe, Jon is late for Christmas. CRISPR for sickle cell looks amazingly promising. A Trillion Dollar problem, exfil data by turning your memory into a wifi card, and the Big Hack. Solarwinds supply chain attack disclosed and fallout continues. For fun we have a grazing goat math problem, listening to a whale heart, and macroeconomics for sovereign nations.

• 0:00 - Intro
• 4:17 - In Colbert We Trust
• 11:01 - CRISPR Follow Up
• 14:05 - Hidden Costs of Cybercrime
• 15:16 - AIR-FI
• 20:03 - Solarwinds Supply Chain
• 25:12 - Fireeye Sunburst
• 26:45 - Sneaky Injection
• 32:28 - Grazing Goats
• 36:13 - Whale Heart
• 39:05 - Spend then Tax

Tangents galore in the intro. Drone footage of Arecibo collapse. The Death of Flash (for realsies this time). The Next Apple Chips (already?) and some Public Transportation Ransomware, eh. Can you say "Socially Steganographic" with a straight face? Finish up with a glass of Quine Tweet and a stien of Kaggle Survey.

• 0:00 - Intro
• 17:04 - Arecibo collapse
• 17:56 - Flash EOL
• 19:10 - Next Apple Chips
• 21:40 - Public Transportation Ransomware
• 23:10 - The Ransom Note
• 25:07 - FireEye
• 29:49 - Socially Steganographic
• 36:02 - Quine Tweet
• 38:54 - Kaggle Survey

Post Thanksgiving Link Extravaganza. Donate to Wikipedia! Monolith, LoRa (sidewalk??), and iOS followup; Ransomware Days instead of snow days, M1 shines with Windows and Tensorflow, and AWS announces a Mac service. And an enormous iOS radio proximity zero click attack. For fun the Star Wars scroll creator, the Arecibo collapse (not fun), ice age paintings in Columbia, and Human Nature on Netflix.

• 0:00 - Intro
• 11:27 - Monolith Follow Up
• 12:44 - Donate To Wikipedia
• 14:06 - Sidewalk and LoRa
• 16:59 - iOS Zero Day
• 20:01 - Ransomware Days
• 23:52 - Windows on M1
• 24:48 - Tensorflow on M1
• 26:31 - Amazon EC2 Macs
• 28:06 - iOS Proximity Zero Click
• 45:08 - Star Wars Scroll Creator
• 47:58 - Arecibo Collapse
• 50:56 - Chapel of the Ancients
• 53:53 - Human Nature

Jon and Eric talk about a book and forget to mention the name (Rhythm of War, btw). Running Office on Apple Silicon times 3. More Ragnar Locker followup just so we can say Ragnarlok again. cPanel 2FA oops and a MobileIron RCE (along with a Password Manager Detour). Finally, booting from vinyl, a mysterious obelisk in the middle of Southern Utah, and a look at Bees and LoRa.

• 0:00 - Intro
• 7:02 - The book!
• 16:13 - Office on the Apple M1 x3
• 19:37 - Ragnarlok followup
• 21:41 - cPanel 2FA oops
• 25:53 - Password Manager Detour
• 28:50 - MobileIron RCE
• 35:26 - Booting From A Vinyl Record
• 38:53 - Utah Monolith
• 41:25 - LoRa and Bees

Covid continues, "winter" has arrived; MA passes right to repair law, how to turn off web site notifications, Microsoft announces their security co-processor, and Cisco fixes the ghost(s) in the machines. For fun we have the M1, how to install any iPhone/iPad app, Bill Gates and Rashida Jones' new podcast, and Mars' water loss.

• 0:00 - Intro
• 6:58 - Loss Of Bee Tree
• 15:44 - Right To Repair Initiative
• 20:32 - Web Site Notifications (Just ... don't)
• 24:28 - Pluton Processor
• 30:17 - Webex Ghosts
• 40:35 - M1
• 46:04 - Install any iPhone App
• 51:55 - Bill Gates and Rashida Jones Ask Big Questions
• 53:45 - Water On Mars

Eric doesn't hike Mt St Helens, instead finds mold growing in the bathroom. Jon goes to the coast and puts a wifi switch in his shop. Honest Criminals, Play Store "Malware", Liquor Ransomware, and 3 little iOS 0days. Eric throws a Jeopardy tribute and Jon does XSS and bioconductive ink.

• 0:00 - Intro
• 12:25 - Mt St Helens Hike 2020
• 13:28 - Honest Criminals
• 15:39 - Play Store "Malware"
• 27:05 - Liquor Ransomware
• 31:42 - iOS 0days
• 35:48 - Jeopardy!
• 38:51 - COVID Vaccine?
• 40:46 - XSS Company Name
• 43:17 - Bioconductive Ink

Eric has a covid scare (and cake!). Jon preps garden for next year. Zerologon and (not much) hospital followup, DoJ seizes domains, and Mattel discloses ransomware attack in SEC filing. REvil interview allegedly describes internals of ransomware as a service. For fun, we have What the Golf?, reconnecting with distant friends, and training a magpie to exchange bottle caps for peanuts.

• 0:00 - Intro
• 7:27 - Garden Beds
• 14:10 - Zerologon Followup
• 14:51 - No News is Good News
• 16:55 - Domain Seizure
• 20:02 - Mattel Ransomware Attack
• 22:59 - REvil Interview
• 30:11 - What the Golf?
• 35:31 - Voyager 2 Re-contact
• 39:07 - Peanuts for Bottle Caps
• 41:14 - Mark Rober Squirrel Course