Mostly Security

Cedric Cochin joins the podcast while Eric is on Spring Break. Norsk is still recovering from ransomware and Apple's News+ service is strangely open. ASUS distributed hundreds of thousands of malicious, signed updates, and heart implants that are vulnerable to attack. Cedric's vacuum cleaner is too smart, and Jon appreciates a fossil find in China.

• 0:00 - Intro, Welcome Cedric
• 2:24 - Norsk Recovering
• 7:08 - Apple News+
• 11:21 - Herd Immunity
• 12:09 - ASUS Malicious Updates (Shadowhammer)
• 20:16 - Heart Implants Remotely Controllable
• 24:47 - Falsifying Patient Vitals
• 29:25 - Too Smart Vacuum
• 33:30 - Spectacular Fossils

Cedric Cochin joins the podcast while Eric is on Spring Break. Norsk is still recovering from ransomware and Apple's News+ service is strangely open. ASUS distributed hundreds of thousands of malicious, signed updates, and heart implants that are vulnerable to attack. Cedric's vacuum cleaner is too smart, and Jon appreciates a fossil find in China.

• 0:00 - Intro, Welcome Cedric
• 2:24 - Norsk Recovering
• 7:08 - Apple News+
• 11:21 - Herd Immunity
• 12:09 - ASUS Malicious Updates (Shadowhammer)
• 20:16 - Heart Implants Remotely Controllable
• 24:47 - Falsifying Patient Vitals
• 29:25 - Too Smart Vacuum
• 33:30 - Spectacular Fossils

 

Cast/Snip is live. Jon corrects the record on SHA. Phone numbers are horrible identity proofs. Most AntiVirus for Android is garbage. Aluminum Ransomware. Mirai is not dead yet. Eric rides into Quantum Country. Jon sneaks a peek at an original iPhone prototype.

• 0:00 - Intro
• 0:10 - Cast/Snip is Live
• 1:33 - SHA is a hashing algorithm
• 4:40 - Phone Numbers Stink
• 12:47 - AV for Android Mostly Stinks
• 16:16 - Commodity Ransomware
• 24:18 - Mirai is not Dead Yet
• 29:24 - Quantum Country
• 33:19 - Apple M68

Cast/Snip is live. Jon corrects the record on SHA. Phone numbers are horrible identity proofs. Most AntiVirus for Android is garbage. Aluminum Ransomware. Mirai is not dead yet. Eric rides into Quantum Country. Jon sneaks a peek at an original iPhone prototype.

Eric's app (Cast/Snip) is launching soon, and Libby is awesome. Marriott discloses much more information about the previous Starwood breach, and Amazon has their own Project Zero. Microsoft releases a Windows 7 patch to add SHA-256 support, and Jon spends 15 minutes talking about serverless and serverless vulnerabilities. For fun we have potential dinosaurs, quantum mechanics turning back time, and new synthetic DNA pairs. Scientific fun FTW.

• 0:00 - Intro
• 0:33 - Cast/Snip
• 4:27 - Libby is Awesome
• 5:20 - Starwood Details
• 9:51 - Amazon Project Zero
• 14:05 - Windows 7 Signature Update
• 17:52 - Windows 7 Market Share
• 21:56 - Serverless Architecture
• 28:16 - 12 Serverless Risks
• 31:00 - Little Bobby Tables
• 36:48 - Making Dinosaurs
• 37:23 - Jeff Goldblum's Response
• 38:09 - Quantum Time Reversal
• 41:26 - 4 New DNA Letters

Eric's app (Cast/Snip) is launching soon, and Libby is awesome. Marriott discloses much more information about the previous Starwood breach, and Amazon has their own Project Zero. Microsoft releases a Windows 7 patch to add SHA-256 support, and Jon spends 15 minutes talking about serverless and serverless vulnerabilities. For fun we have potential dinosaurs, quantum mechanics turning back time, and new synthetic DNA pairs. Scientific fun FTW.

Jon's gonna catch himself some bees. Eric's trying to avoid getting sick. Facebook - uh, is still Facebook and there's still no cryptocurrency to be found. The NSA open sources a reverse engineering tool and, not to be outdone, Microsoft open sources a calculator. Your Chrome browser should have updated by now. McAfee gets a live look at servers used by North Korean Hackers. Jon pokes at a Drupal hack and a MongoDB leak - and then geeks about mice with infrared vision. Eric admires the Dangerously Funny.

• 0:00 - Intro
• 5:49 - Facebook 2FA Phone Shenanigans
• 7:28 - Facebook on Privacy?
• 8:50 - More Cryptocurrency Woes
• 9:51 - NSA - GHIDRA
• 11:11 - Windows Calculator
• 11:42 - Update Chrome!
• 13:19 - North Korean Hackers
• 14:55 - Video: North Korean Hackers
• 16:51 - Drupal Hack
• 24:15 - Caller ID App Ooops
• 28:40 - Mice with Infrared Vision
• 32:20 - Once Upon a Mattress
• 34:50 - Dangerously Funny

Jon's gonna catch himself some bees. Eric's trying to avoid getting sick. Facebook - uh, is still Facebook and there's still no cryptocurrency to be found. The NSA open sources a reverse engineering tool and, not to be outdone, Microsoft open sources a calculator. Your Chrome browser should have updated by now. McAfee gets a live look at servers used by North Korean Hackers. Jon pokes at a Drupal hack and a MongoDB leak - and then geeks about mice with infrared vision. Eric admires the Dangerously Funny.

• 0:00 - Intro
• 5:49 - Facebook 2FA Phone Shenanigans
• 7:28 - Facebook on Privacy?
• 8:50 - More Cryptocurrency Woes
• 9:51 - NSA - GHIDRA
• 11:11 - Windows Calculator
• 11:42 - Update Chrome!
• 13:19 - North Korean Hackers
• 14:55 - Video: North Korean Hackers
• 16:51 - Drupal Hack
• 24:15 - Caller ID App Ooops
• 28:40 - Mice with Infrared Vision
• 32:20 - Once Upon a Mattress
• 34:50 - Dangerously Funny

Jon is back from Arizona and Eric's playing seamster. Another cryptocurrency heist, another Ring vulnerability, how to abuse (web) Service Workers, and a hardware attack at bare metal clouds. For fun, both the NSA and Eric are on GitHub, and Jon had a good time at Biosphere2 and Taliesin West.

• 0:00 - Intro
• 0:53 - Suspicious White Powder
• 4:38 - More Cryptocurrency Fun
• 9:22 - Ring Doorbell Interception
• 19:17 - Abusing Service Workers
• 25:51 - Baremetal Cloud Firmware Attack
• 33:41 - NSA on GitHub
• 35:03 - MacWiFiChecker
• 37:13 - Biosphere #2
• 43:22 - Taliesin West

Jon is back from Arizona and Eric's playing seamster. Another cryptocurrency heist, another Ring vulnerability, how to abuse (web) Service Workers, and a hardware attack at bare metal clouds. For fun, both the NSA and Eric are on GitHub, and Jon had a good time at Biosphere2 and Taliesin West.