Mostly Security

Eric goes out to eat, Jon gets powertools. Arrests at Coinbase outsourcing firm. Six Cybersecurity predictions for 2026. Eric finds a personally nostalgic TV show and Jon looks back on the scientific discoveries of 2025.

• 0:00 - Introduction
• 10:46 - Inside Job at Coinbase
• 13:59 - Cybersecurity Forecast
• 19:56 - Untamed
• 22:31 - Significant Scientific Stuff of 2025

Eric and Jon are both fully prepped for the holiday. Flock leaves (many) cameras including control panels open and exposed to the open internet, what if more malicious npm packages worked as advertised, and Microsoft is finally disabling rc4 by default in Active Directory. For fun we have two movies for holiday watching: F1: The Movie, and Howl's Moving Castle. Enjoy!

• 0:00 - Introduction
• 11:38 - Open Flock Livestreams
• 18:09 - WhatsApp Stealer
• 23:39 - Obsolete Cipher
• 30:38 - F1: The Movie
• 33:04 - Howl's Moving Castle

Jon's car may or may not be fixed. Eric didn't go to Disneyland. Android is making in-call scam protection better. AI is creating a Blessing of Unicorns. Parked Domains keep scammers alive. Space is getting crowded. Word of the Year - Slop.

• 0:00 - Introduction
• 6:38 - In Call Scam Protection
• 10:21 - A Blessing of Unicorns
• 13:15 - Parked Domains are Evil
• 17:55 - House of Satellite Cards
• 24:10 - Slop

Christmas in full swing at both Eric and Jon's places. Less secure certificate validation mechanisms being deprecated, and SEO of AI chats to deploy ClickFix style lures for Stealer installation. For fun we have a shockingly good way to avoid motion sickness in VR, and a promising Leukemia treatment using gene therapy.

• 0:00 - Intro
• 9:28 - Weak Validation
• 14:45 - No Red Flags
• 21:34 - Stimbox
• 27:42 - BE-CAR7

Eric tracks hack attempts and Jon trades blood for pinball. Shai-Hulud is back, Calendly invite scam, Rust for good and evil. Giving Machines for the holiday season and Spores in Space!

• 0:00 - Introduction
• 13:48 - Shai-Hulud is back
• 16:59 - Calendly Invite Scam
• 19:11 - Rust for Good and Evil
• 24:33 - Giving Machines
• 28:00 - Spores in Space

Eric and Jon prep for Thanksgiving. Will blue and green bubbles coexist in peace and harmony? Will the airlines stop sharing flight data with the IRS? And is monitoring every car, everywhere, at all times 'unreasonable search'? ¯\_(ツ)_/¯ Have some Ozone and a Honey chaser.

• 0:00 - Intro
• 8:11 - QuickShare + AirDrop
• 12:14 - Travel Intelligence Program
• 18:34 - 'Suspicious' Travel Patterns
• 25:16 - 5th Smallest (is good?)
• 32:40 - Honey Tasting

This week's roundup features a mix of personal updates, major tech news, and scientific intrigue. Eric is super late to the Minecraft party while Jon gets his bushes trimmed. In tech, a massive WhatsApp security flaw exposed data for up to 3.5 billion users, while Google announced the release of Gemini 3 Pro and the new "Deep Think" reasoning mode. Cybersecurity concerns also rose with the global spread of the TamperedChef malware, delivered via malvertising and fake software installers. On the innovation front, MIT researchers developed a new lipid nanoparticle that dramatically enhances the effectiveness of mRNA vaccines, promising cost savings and better seasonal flu shots. Finally, in a fascinating natural observation, a wild gray wolf in British Columbia was documented using a buoy line to haul a crab trap ashore, potentially marking the first documented tool use by a wild canid. This summary of today's podcast brought to you (mostly) by Gemini 3.

• 0:00 - Introduction
• 9:10 - Nanoparticle mRNA
• 12:36 - Gemini 3
• 17:24 - Tampered Chef
• 22:48 - Nanoparticle mRNA
• 26:48 - Smart Wolves

Eric goes to Nateland and Jon goes flying. Another javascript worm, and automatic license plate reader records declared public in Washington. For fun we have a repo of annual security reports and Jon suffering memory loss and search ineptitude, but fig wasps are still cool.

• 0:00 - Intro
• 17:20 - Glassworm
• 21:50 - Conclusions of Law
• 28:55 - Nate Bargatze
• 29:26 - Annual Security Repo(rts)
• 30:43 - Shy figs

Eric drills a door and Jon disagrees and commits to an electrical fix. Aisuru makes the Cloudflare Top 10. The Louvre had a bad week, while furniture trucks had a good one. Gemini used to write malware. Rivers in Alaska are orange.

• 0:00 - Introduction
• 14:11 - Aisuru makes the Top 10
• 16:25 - Louvre Password
• 20:03 - PROMPTFLUX
• 24:12 - The Böcker Agilo
• 26:45 - The Pink Panther
• 28:26 - Orange Rivers in Alaska

Remote Eric Assist and Jon enjoys ... hockey(??). More prompt injections, the most damaging UK cyber event (so far), and residential proxy use for fun and training data. Will Agentic AI bring back micropayments, and how is Costco's pumpkin pie so good?

• 0:00 - Intro
• 10:47 - Death, Taxes, and Prompt Injections
• 16:56 - Economically Damaging
• 19:32 - Veneer of Legitimacy
• 24:34 - Original Sin (??)
• 29:49 - Six Million Pies