Mostly Security

Time behaves differently for Jon and Eric. More data leaked as ATMs give out "free" cash. A cruise line gets hit with ransomware and Jon explains Hooking (not that kind!) while Eric reviews shooting lasers at the moon and Jon clones keys from sound.

• 0:00 - Intro
• 16:02 - Insta, TikTok & YouTube
• 18:33 - ATM Banking Ooops
• 22:06 - Cruise Line Ransomware
• 26:10 - EDR Hooking
• 36:13 - Shooting Lasers at the Moon
• 40:32 - Rocket men
• 42:49 - Cloning keys from sound

Paper Wasps vs. Yellowjackets, and a bit of a Cow Adventure. Tons of subreddits defaced, China begins blocking TLS 1.3, an LTE vulnerability in ReVoLTE, and statistics about Incident Responses. Eric likes automatic decryption in Ciphey, and Jon has trouble picking something fun: a sudoku ML tutorial, an immunology article, and a retro gaming cassette.

• 0:00 - Intro
• 2:22 - Paper Wasps Vs Yellowjackets
• 13:38 - Reddit Defacement
• 15:37 - China Blocking TLS 1.3
• 18:55 - ReVoLTE
• 24:33 - Incident Response Report
• 34:59 - Ciphey
• 38:30 - Solving Sudoku Tutorial
• 40:05 - Immunology != Intuitive
• 42:36 - Tape Loader

Eric is half way to becoming Spiderman. Jon rebuilds a carburetor. Twitter and Zoom followup. Disinformation and Phishing. Insulin Pump Hacks and stuff neither Eric nor Jon understands. (Yet!) Eric makes YARPSF (yet aother raspberry pi something fun) and Jon gets into the physics of time machines, pickles and sadness.

• 0:00 - Intro
• 12:56 - Twitter
• 16:11 - Zoom
• 20:33 - Disinformation
• 24:32 - Phishing
• 28:26 - Insulin Pump
• 37:04 - OpenAPS
• 37:17 - Page Protection Layer
• 43:34 - Watched Pot
• 46:06 - Pickles and Sadness

Eric takes Stormlight on the road, Jon tries to change the oil, and the pickles are coming out just fine. Substack epitomizes irony by violating privacy in a privacy policy update, and a tiny bit more info in the Twitter breach. Nintendo game source leak exploration, GDPR complaints, and a PDF Shadow Attack. For fun, Eric brings another Pi project for monitoring power, and Jon likes the Way of Kings kickstarter.

• 0:00 - Intro
• 16:15 - Substack Irony
• 19:22 - Twitter Breach
• 22:16 - Sudo Make Me A Sandwich
• 23:50 - Nintendo Leak
• 31:12 - GDPR Complaint
• 35:20 - Out of Control
• 39:46 - PDF Shadow Attack
• 48:20 - Pi Power Monitoring
• 50:14 - Right Hand Rule
• 53:12 - Way Of Kings Kickstarter

Intro segue goodness, and, how to phrase it, largely home ec pickle talk - because Jon eats sandwiches (a lot). Some twitter followup, a well documented Twilio breach and Apple tries to roll out its Security Research Device program to much rejoicing (that's a reference). Fast Chargers can be bad and a genealogy hack for lulz. Eric appreciates that the Beavers Have Won and Jon digs Task Manager pixels, both fake and real.

• 0:00 - Intro
• 0:59 - Black Lives Matter
• 8:07 - Making Pickles
• 17:17 - Twitter Followup
• 20:18 - Twilio Breach
• 24:39 - Apple SRD Program
• 30:55 - BadPower Fast Chargers
• 35:45 - GEDmatch and MyHeritage
• 44:05 - Those Damming Beavers
• 47:21 - Task Manager DOOM (fake)
• 48:32 - Bad Apple Task Manager (real)

Go see NEOWISE while you can! Eric's almost got his microscope built, and Jon can't pass a hardware store. An open source password manager, more dark web prices, and an Unc0ver followup. A bad vuln (SIGRed) in Windows DNS, a massive Twitter compromise, and an Indian social app (Chingari) lack-of-authentication. For fun Eric's going to build a Pi Sniffer, and Jon brings back track separation with machine learning.

• 0:00 - Intro
• 6:44 - NEOWISE
• 12:04 - passbolt
• 16:29 - Dark Web Price Index
• 18:40 - Unc0ver Followup
• 24:28 - SIGRed
• 29:19 - Twitter Hacked
• 37:28 - Chingari Vulnerability
• 42:53 - Pi Sniffer
• 47:20 - Algoriddim

Jon and Eric talk about their July 4th Activities. There's a Tsunami coming and not the billions of passwords on the dark web. Watch your DNS and BIG-IP. New Far Side, a CyberForge and a codec that makes Jon happy.

• 0:00 - Intro - 4th of July Events
• 14:44 - Tsunami Coming
• 16:50 - Billions Of Passwords
• 23:23 - Azure Takeovers
• 31:03 - BIG-IP
• 35:32 - The New Far Side
• 38:33 - CyberForge
• 41:18 - H.266

Eric goes to the beach for a change of scenery, while Jon shovels manure on his PTO. Local governments are hit with a MageCart attack, and a whole lot of discussion about Safari -- what isn't coming, what's been taken away, and what's new in the next version. A few other WWDC announcements like Apple Silicon. Eric's building his new 3D printer, and Jon's making Jam and watching videos (not at the same time).

• 0:00 - Intro
• 10:44 - Magecart Follow Up
• 13:26 - Safari Declined APIs
• 21:38 - Safari 14 New Features
• 28:58 - SMS OTP Standard Discussion
• 32:00 - WWDC Other Announcements
• 33:59 - Jon Bitcode Conspiracy
• 42:06 - Prusa
• 45:34 - Raspberry Jam
• 46:57 - Developer App

Father's Day ramblings, more magecart madness, and setup your MFA before the bad guys do it for you. Safe Browsing bug and printers exposing themselves. A rickroll, a basketball, and Smallville.

• 0:00 - Intro
• 8:15 - More Magecart Madness
• 12:58 - MFA Or Crooks Will
• 20:28 - Face ID for Safari
• 21:22 - Face ID and Touch ID WWDC Video
• 23:47 - Safe Browsing Oops
• 29:47 - Printers on the Internet
• 34:14 - Jello + Shredder
• 35:10 - Jello + Shredder, actual
• 36:43 - Basketball with an Excavator
• 37:47 - Smallville

Games, networks, filtering, and bees to start. Jon did a quantum podcast, Excalidraw is cool, and Words Matter. Ripple20 has only 19 vulns (Intel's affected), phishing private notes for bitcoin, and theft of a master key. For fun try Inspriobot, read More Pages Than You Want about programming languages, and enjoy Space Parallax from the 21st century!

• 0:00 - Intro
• 4:12 - Cloudflare Filtering
• 5:51 - Mason Bees
• 15:13 - Quantum Podcast
• 16:35 - Excalidraw
• 17:55 - Return of Trunk
• 21:04 - Ripple20
• 25:25 - Intel Advisory
• 28:24 - Privnote, Phished
• 34:34 - South African Bank
• 38:33 - Inspirobot
• 40:59 - ACM on Programming Languages
• 45:04 - Space Parallax