Mostly Security

Jon breaks Big News on the Podcast. Eric Plays Video Games. Patch Tuesday says Super Size Me. Apple says Let's Help a Password Manager out. Honda says Hold Up a Minute. SGAxe says Hello (No relation to the body spray). Eric Doodles while Jon Noodles on his Network. Finally, Ty says Thank You, Germany...

• 0:00 - Intro
• 1:23 - Rocket League
• 4:59 - Big News
• 10:13 - Super Size Patch Tuesday
• 11:45 - Apple Password Resources
• 14:15 - HTML Tag for Passwords
• 15:47 - Honda Cyberattack
• 17:38 - SGAXE
• 27:32 - DeepFace Doodles
• 30:01 - Jon's Network
• 41:27 - Weather By Ty

Rough week for so many people. #BlackLivesMatter. Talk to your kids. Protest. Donate [time|money|both]. In the security world, the iOS Jailbreak is patched, there's a big Thai cell provider leak, a vulnerability in Sign in with Apple is fixed, and one of the largest dark web hosting providers is taken offline. For fun this week, Eric brings an 8gb Pi, and Time.gov, which can measure your clock. Jon brings hot Qubits and good audiobooks.

• 0:00 - Introduction
• 4:56 - Scalzi Easy Mode Post
• 15:42 - iOS Jailbreak Patched
• 17:25 - Thai Cell Network Leak
• 21:39 - Sign In With Apple Hack
• 25:52 - No Backups
• 29:25 - 8 Gigs of Pi
• 32:38 - Measuring Clocks
• 35:39 - Hot Qubits
• 39:01 - Lady Astronaut Series
• 42:29 - Mary Robinette Kowal

Eric logs another 1500 miles. Jon does more bee stuff and then can't print a microscope. There's a blue mockingbird with a juicy potato. A jailbreak is unc0vered and Alex Stamos starts with 0 and lists some levels of privacy protection. Eric tries some zsh aliases and marvels at 23 movies in chronological order... BY SCENE... Jon likes Cicada Prime, a windows package manager, and the history of the entire world while Eric sneaks in another Mt. St. Helens plug...

• 0:00 - Intro
• 12:59 - Semi-Followup: Microscope Printing
• 17:37 - Blue Mockingbird
• 18:39 - Juicy Potato
• 20:31 - Unc0ver Jailbreak
• 24:21 - Levels of Privacy Protection
• 33:12 - zsh aliases
• 36:13 - Marvel Movies: Chronological Order By Scene
• 41:17 - Cicada Prime
• 46:18 - WinGet Package Manager
• 48:58 - history of the entire world, i guess
• 50:07 - Mt. St. Helens is about to Blow Up

Welcome to Blackberry talk. Hospitals need to fix things too, and how to decode a data breach. Signal proxies Giphy, unemployment fraud, chrome 83, and Tracked By Beer. St. Helens erupted 40 years ago this week, you can build your own microscope with a Pi and a 3d printer, plastic eating enzymes and massive migrating magma blobs!

• 0:00 - Intro - too much about Blackberries
• 13:12 - Right To Repair in Medicine
• 15:03 - iFixit Repair Manuals
• 16:31 - Decode a Data Breach
• 18:34 - Signal + Giphy
• 21:19 - Unemployment Fraud
• 25:21 - Chrome 83
• 31:34 - Tracked by Beer
• 38:24 - Mt. Saint Helens 40th Anniversary
• 41:08 - Open Flexure
• 46:05 - Plastic Eating Enzyme
• 49:33 - Magma Blobs

What day is it? Eric saves a bird, Jon sees free bees in a tree. Zoom scouts Keybase. Twitter makes work from home permanent. Ohio gets HSDOS'd, Hackers attempt a Wordpress Hijack, and you've been... uh... Thunder... um... Thunderspy'd. Finally, Eric does some shameless promotion of his boy's podcast and Jon watches a show.

• 0:00 - Intro
• 5:42 - Baby Bird
• 14:23 - Swarm Of Bees
• 14:47 - Zoom + Keybase
• 18:15 - Twitter Remote Work Policy
• 21:37 - Ohio's COVID Fraud Website
• 24:23 - Wordpress Hijack Attempt
• 27:18 - Thunderspy
• 33:05 - weatherbyty.com
• 36:29 - AirPod Pros
• 39:05 - Devs

Social Isolation continues, and Jon has lost a bee colony (boo). Apple's T2 chip is a nightmare for refurbs, and two breaches this week. Social engineering doesn't qualify for bug bounties, facebook crashes lots of apps, and an icon-based-web-skimmer. For fun we have a time lapse and low light raspberry pi project and a 3d mini patreon to follow.

• 0:00 - Intro
• 10:44 - T2 Nightmare for Refurbs
• 17:01 - GoDaddy SSH Compromise
• 18:45 - Pakistani Mobile Users Breach
• 21:47 - Roblox "Hack"
• 26:12 - Facebook SDK Crash
• 28:47 - FBSDK GitHub Issue
• 32:11 - Favicon Based Skimmer
• 35:30 - PI-TIMOLO
• 41:57 - Artisan Guild
• 47:31 - MyMiniFactory

Eric reports on his Utah homework - receives an "F". Jon reports on his fence mending - receives an "Ouch". Hanging with Goats. Crashing Twitter. Exposure Notification (not camera related). Fuzzing and Image Processing. Falling for a phone scam. Eric might build a DIY Busy Light. Jon might buy a Mini CNC.

• 0:00 - Intro
• 4:57 - Byzantine Generals Problem
• 11:24 - Goat To Meeting
• 12:41 - Twitter App Crash
• 16:05 - Not Contact Tracing
• 17:26 - Breach Of The Week
• 19:58 - Apple 0clicks
• 22:54 - Episode 100 Fuzzing
• 24:39 - Industrial Control
• 27:07 - Falling For A Phone Scam
• 36:06 - DIY Busy Light
• 39:00 - Mini CNC

Eric reports on his Utah homework - receives an "F". Jon reports on his fence mending - receives an "Ouch". Hanging with Goats. Crashing Twitter. Exposure Notification (not camera related). Fuzzing and Image Processing. Falling for a phone scam. Eric might build a DIY Busy Light. Jon might buy a Mini CNC.

• 0:00 - Intro
• 4:57 - Byzantine Generals Problem
• 11:24 - Goat To Meeting
• 12:41 - Twitter App Crash
• 16:05 - Not Contact Tracing
• 17:26 - Breach Of The Week
• 19:58 - Apple 0clicks
• 22:54 - Episode 100 Fuzzing
• 24:39 - Industrial Control
• 27:07 - Falling For A Phone Scam
• 36:06 - DIY Busy Light
• 39:00 - Mini CNC

Walks in the rain for Eric and a Massive Bee Weekend for Jon. Facebook nudging people who like covid-19 misinformation, Avatarify deep fakes you, and Stripe has good API docs. An exposed payment processor for the breach this week, typosquatting Ruby Gems, Cloudflare tries to shame ISPs into security, and there's a bad iOS mail bug found. For fun, we have a game about nothing, earth day, and AI for audio.

• 0:00 - Intro
• 4:01 - Bee Weekend
• 10:32 - Facebook
• 11:31 - Avatarify
• 13:05 - Mostly Security Backgrounds
• 13:33 - Stripe API
• 15:23 - Paay Breach
• 18:37 - Ruby Typosquatting
• 19:19 - Npm Image Airplane Slide
• 24:03 - Cloudflare + BGP
• 29:11 - Previous Cloudflare+BGP Episode
• 30:02 - iOS Mail Vuln
• 39:01 - Seinfeld Game
• 41:35 - Earth Day
• 46:05 - Nvidia RTX Voice

Walks in the rain for Eric and a Massive Bee Weekend for Jon. Facebook nudging people who like covid-19 misinformation, Avatarify deep fakes you, and Stripe has good API docs. An exposed payment processor for the breach this week, typosquatting Ruby Gems, Cloudflare tries to shame ISPs into security, and there's a bad iOS mail bug found. For fun, we have a game about nothing, earth day, and AI for audio.

• 0:00 - Intro
• 4:01 - Bee Weekend
• 10:32 - Facebook
• 11:31 - Avatarify
• 13:05 - Mostly Security Backgrounds
• 13:33 - Stripe API
• 15:23 - Paay Breach
• 18:37 - Ruby Typosquatting
• 19:19 - Npm Image Airplane Slide
• 24:03 - Cloudflare + BGP
• 29:11 - Previous Cloudflare+BGP Episode
• 30:02 - iOS Mail Vuln
• 39:01 - Seinfeld Game
• 41:35 - Earth Day
• 46:05 - Nvidia RTX Voice