Cloudflare launches DNS Privacy apps for iOS and Android, a security "researcher" gets his hand caught in Krebs' cookie jar, and more speculative execution in x86-land. Jon describes his favorite whistle and Eric discovers you can build a cashless payment system without a blockchain.

• Intro
• Cloudflare's DNS Privacy Apps
• "Researcher" playing both sides...
• More Speculative Execution @ Intel
• WHLSL
• Sweden goes cashless (sans blockchain)

 

Eric continues basement construction, and Jon gets stung (but not by a bee). A tale of two cryptocurrency topics: the good and the sad. HSBC is breached, but we doubt the statistics about successful credential stuffing. And Krebs has a great article about skimmers in your online shopping cart. DeOldify is machine learning for colorizing old photos, and Eric's got three fun things this week.

• Intro
• Yellow Jacket != Honey Bee
• More Upload Plugin Fail
• Statcounter Trojan Horse
• Cryptocurrency Tumblers
• Ethereum City
• Celebration, Florida
• HSBC Breach
• Cart Skimmers
• Bend Trails
• Paypal Data Sharing
• Dorking for Printers
• DeOldify

Eric continues basement construction, and Jon gets stung (but not by a bee). A tale of two cryptocurrency topics: the good and the sad. HSBC is breached, but we doubt the statistics about successful credential stuffing. And Krebs has a great article about skimmers in your online shopping cart. DeOldify is machine learning for colorizing old photos, and Eric's got three fun things this week.

• Intro
• Yellow Jacket != Honey Bee
• More Upload Plugin Fail
• Statcounter Trojan Horse
• Cryptocurrency Tumblers
• Ethereum City
• Celebration, Florida
• HSBC Breach
• Cart Skimmers
• Bend Trails
• Paypal Data Sharing
• Dorking for Printers
• DeOldify

Happy Halloween! We reflect on some ad fraud and right to repair followup, contemplate CAPTCHAs, cerebrate insecure devices, ponder Big Blue and their Red 34-billion-gallon Hat, and, uh, think, or errm, well, you know, chat about, um, filler words and top it all off with some good ol' reinforcement learning.

• Happy Halloween! Now go Vote.
• Ad Fraud Followup
• Right to Repair Followup
• Google reCAPTCHA v3
• Google Home Insecurity
• GitHub Incident Writeup
• IBM Buys RedHat
• How to Stop Saying "Um", "Ah" and "Ya Know"
• Reinforcement Learning

Happy Halloween! We reflect on some ad fraud and right to repair followup, contemplate CAPTCHAs, cerebrate insecure devices, ponder Big Blue and their Red 34-billion-gallon Hat, and, uh, think, or errm, well, you know, chat about, um, filler words and top it all off with some good ol' reinforcement learning.

Implausible Bloomberg followup, JQuery plugin vulnerability (not JavaScript!), and no more GrayKey. An interesting theoretical Cromium vulnerability and an absolutely epic ad fraud article. Eric's screentime has stopped working, and Jon enjoyed the Apologetic Miner.

• Intro
• Kumoricon
• LibSSH Docker Container
• Implausible Supermicro
• JQuery Plugin "Zero Day"
• GrayKey Stops Working
• Cromium Vulnerability
• Massive Ad Fraud
• Screen Time in iOS 12
• The Apologetic Miner

 

Implausible Bloomberg followup, JQuery plugin vulnerability (not JavaScript!), and no more GrayKey. An interesting theoretical Cromium vulnerability and an absolutely epic ad fraud article. Eric's screentime has stopped working, and Jon enjoyed the Apologetic Miner.

Jon and Eric, live(ish) from Las Vegas! Facebook (again) and the coming PHPocalypse, along with a vulnerability in libssh. Jon learns about The Big Mac Index on a trip to Argentina and Eric geeks about The Illustrated TLS Connection.

• Intro
• McAfee MPOWER
• Jon's Root Beer
• Facebook Update
• Facebook Portal
• The PHPocalypse
• Vulnerability in libssh
• The Economist publishes...
• ...The Big Mac Index on GitHub
• The Illustrated TLS Connection

 

Jon and Eric, live(ish) from Las Vegas! Facebook (again) and the coming PHPocalypse, along with a vulnerability in libssh. Jon learns about The Big Mac Index on a trip to Argentina and Eric geeks about The Illustrated TLS Connection.

• Intro
• McAfee MPOWER
• Jon's Root Beer
• Facebook Update
• Facebook Portal
• The PHPocalypse
• Vulnerability in libssh
• The Economist publishes...
• ...The Big Mac Index on GitHub
• The Illustrated TLS Connection

 

Eric and Jon both use chat support for network gear, the Bloomberg story gets stranger, and a double pile on Facebook and Google Plus. Microsoft joins OIN, opening up its patent portfolio. For fun Eric likes The Good Place, and Jon likes both The Broken Earth trilogy as well as binary layout optimization(??).

• Intro
• Frontier Woes
• Amplifi Teleport Setup
• Bloomberg Followup
• More Bloomberg Followup
• Facebook's Access Token Bug
• Verge on FB Breach
• Whatsapp Video Vulnerability
• Google Plus No More
• Microsoft Joins OIN
• The Good Place
• Codestitcher
• The Broken Earth