Mostly Security

Eric's back from Chicago and Jon's destroying things with mowers. WWDC is going on, with some interesting security announcements already. Elastic buys Endgame, Quest Diagnostics is breached, and real life bank heists aren't like Hollywood movies. Eric had a good trip to NIST and Jon agrees with his buddies Gates and Buffet that Dairy Queen is Tasty.

• 0:00 - Intro -- Will it Flail?
• 8:56 - Sign In with Apple
• 12:35 - App Store Guidelines
• 17:01 - WWDC Keynote
• 22:50 - Elastic Buys Endgame
• 26:20 - Quest Diagnostics Breach
• 30:23 - Months not Seconds
• 32:32 - Bitdefender Report
• 39:15 - NIST is Nice
• 43:01 - Buffet and Gates

Eric's back from Chicago and Jon's destroying things with mowers. WWDC is going on, with some interesting security announcements already. Elastic buys Endgame, Quest Diagnostics is breached, and real life bank heists aren't like Hollywood movies. Eric had a good trip to NIST and Jon agrees with his buddies Gates and Buffet that Dairy Queen is Tasty.

No honey yet, but we now have a "Days Since Last Facebook Scandal" counter. If you only had an hour to talk security, what would you say? SnapChat joins Facebook, and not in a good way, so just plan for some users being evil. If your name is Jared and you played high school lacrosse, the world is your oyster (apparently). MS-SQL and PHP together enjoy some rootkit malware and another Docker bug. Finally: Earthquakes, Murals and Table Saws.

• 0:00 - Intro
• 4:23 - dayssincelastfacebookscandal.com
• 5:11 - Campaign Security
• 10:52 - SnapLion
• 12:48 - Some Users will be Evil
• 13:17 - Explainable AI
• 15:24 - MS-SQL + PHP = Rootkit Malware
• 21:33 - Docker Race Condition
• 27:55 - Peru Earthquake seen in Oregon
• 29:32 - Chronicles of San Francisco
• 31:39 - SawStop

No honey yet, but we now have a "Days Since Last Facebook Scandal" counter. If you only had an hour to talk security, what would you say? SnapChat joins Facebook, and not in a good way, so just plan for some users being evil. If your name is Jared and you played high school lacrosse, the world is your oyster (apparently). MS-SQL and PHP together enjoy some rootkit malware and another Docker bug. Finally: Earthquakes, Murals and Table Saws.

Eric and Jon are in Arizona; people seem to like the bees, and Jon gets to revel in his Bitcode conspiracy a little more. Instagram data found in an 'influencer' breach, and Google releases two factor auth effectiveness data. Jon's curious about Minecraft Earth, and everyone needs to sleep more.

• 0:00 - Intro
• 5:46 - More Bitcode Conspiracy
• 14:18 - Instagram Influencers Scraped
• 19:48 - 2FA Effectiveness Data
• 33:08 - Minecraft Earth
• 36:57 - Go to Sleep

Eric and Jon are in Arizona; people seem to like the bees, and Jon gets to revel in his Bitcode conspiracy a little more. Instagram data found in an 'influencer' breach, and Google releases two factor auth effectiveness data. Jon's curious about Minecraft Earth, and everyone needs to sleep more.

• 0:00 - Intro
• 5:46 - More Bitcode Conspiracy
• 14:18 - Instagram Influencers Scraped
• 19:48 - 2FA Effectiveness Data
• 33:08 - Minecraft Earth
• 36:57 - Go to Sleep

 

I've always wondered if anyone actually bothers to read the summary. You know, if I don't "summarize" the episode, would anyone notice? If they did, would they care - and now that I've started the summary this way, do I go ahead and actually summarize anyway? Like, should I mention Jon talking about bees again? Or the quick little follow ups on MDS Attacks, GitHub's Package Registry or Social Proofs? Hacking the "unhackable" might be a good thing to mention, along with a software update "crashing" ankle monitors in the Netherlands. Oh, yeah - and then there's the SHA-1 Collision Attacks that are moving from theoretical to practical. But surely nobody wants to know about learning languages at an older age or photobioreactors in space or the fact that scientists have created a living organism from human-made DNA...

• 0:00 - Bees. What else?
• 5:22 - MDS Attacks
• 7:46 - GitHub Package Registry
• 9:18 - Social Proofs
• 11:30 - Hacking the "unhackable"
• 15:01 - Software is Everywhere
• 17:28 - SHA-1 Collision Attacks
• 23:38 - Learning Languages
• 28:55 - Photobioreactor in Space
• 33:04 - Synthetic Life

I've always wondered if anyone actually bothers to read the summary. You know, if I don't "summarize" the episode, would anyone notice? If they did, would they care - and now that I've started the summary this way, do I go ahead and actually summarize anyway? Like, should I mention Jon talking about bees again? Or the quick little follow ups on MDS Attacks, GitHub's Package Registry or Social Proofs? Hacking the "unhackable" might be a good thing to mention, along with a software update "crashing" ankle monitors in the Netherlands. Oh, yeah - and then there's the SHA-1 Collision Attacks that are moving from theoretical to practical. But surely nobody wants to know about learning languages at an older age or photobioreactors in space or the fact that scientists have created a living organism from human-made DNA...

• 0:00 - Bees. What else?
• 5:22 - MDS Attacks
• 7:46 - GitHub Package Registry
• 9:18 - Social Proofs
• 11:30 - Hacking the "unhackable"
• 15:01 - Software is Everywhere
• 17:28 - SHA-1 Collision Attacks
• 23:38 - Learning Languages
• 28:55 - Photobioreactor in Space
• 33:04 - Synthetic Life

 

Go see Avengers. And don't be jealous, Star Wars, just Use the Force, Harry. Data on Let's Encrypt, HoloLens' live demo doesn't, and we reference two past episodes (37 and 39). Ransomware is targeting source on GitHub, Jon talks containers for Too Long, and a clever CSS hack. For fun, Eric likes the Texas Sand Fest winner and an AirPod that's 'been there, done that.' (no thank you). Jon is excited for Windows Terminal (go browse the source!).

• 0:00 - Intro
• 3:00 - Avengers: Endgame
• 4:36 - What does Star Wars have to do with it?
• 6:52 - Use the Force, Harry
• 8:19 - Let's Encrypt
• 9:30 - HoloLens Demo @ Build
• 12:24 - Mostly Security Episode 37
• 14:26 - GitHub Ransomware
• 16:35 - Mostly Security Episode 39
• 20:11 - Container Misconceptions
• 31:42 - Tracking with :hover
• 35:23 - 2019 Texas Sand Fest
• 36:19 - Man Swallows AirPod
• 38:24 - Windows Terminal

Go see Avengers. And don't be jealous, Star Wars, just Use the Force, Harry. Data on Let's Encrypt, HoloLens' live demo doesn't, and we reference two past episodes (37 and 39). Ransomware is targeting source on GitHub, Jon talks containers for Too Long, and a clever CSS hack. For fun, Eric likes the Texas Sand Fest winner and an AirPod that's 'been there, done that.' (no thank you). Jon is excited for Windows Terminal (go browse the source!).