Peter Wooley joins Jon to talk javascript while Eric cannot prevent it. NPM gains package signing capabilities; a casino is hacked courtesy of their fish tank; and once DeepFake matures, how do we tell what's real? Peter recommends playing Celeste on the Switch, Jon should have read a couple more books about bees, and clicky keyboards are awesome.

Gmail doesn't follow email address standards; having your accountant hacked is Not Good; and confidential data is found in VirusTotal. Eric shares a fun what-if, and Jon is mesmerized watching sorting algorithms.

Links:

• Followup - PF Chang's vs. Panera - https://medium.com/@AkshaySharmaUS/p-f-changs-security-flaw-revealed-following-panera-bread-s-leak-b47fa6a1bba6
• Google says: Ignore Those Dots! - https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user.html
• When Accountants Don't Patch - https://krebsonsecurity.com/2018/04/when-identity-thieves-hack-your-accountant/
• Confidential Data in VirusTotal - https://threatpost.com/malware-scanning-services-containers-for-sensitive-business-information/124802/
• Space Jetta - https://what-if.xkcd.com/142/
• 15 Sorting Algorithms in 6 Minutes - https://www.youtube.com/watch?v=kPRA0W1kECg

Gmail doesn't follow email address standards; having your accountant hacked is Not Good; and confidential data is found in VirusTotal. Eric shares a fun what-if, and Jon is mesmerized watching sorting algorithms.

Jon chats about his car and beekeeping. Cloudflare's Privacy Focused DNS and an ARM v Intel post. Will Apple use its own chips in it Macs? And poor, poor Panera... Eric tries hiking Multnomah Falls and ends up hiking somewhere else. Jon gets a kick out of colors.

Links:

• If you have an iPhone, use Overcast - https://overcast.fm
• Cloudflare's Privacy Focused DNS - https://1.1.1.1/
• Dot-cm Typosquatting sites visited 12M times - https://krebsonsecurity.com/2018/04/dot-cm-typosquatting-sites-visited-12m-times-so-far-in-2018/
• Beyond XSS: Edge Side Include Injection - http://gosecure.net/2018/04/03/beyond-xss-edge-side-include-injection/
• Apple Plans to Use Its Own Chips in Macs From 2020, Replacing Intel - https://www.bloomberg.com/news/articles/2018-04-02/apple-is-said-to-plan-move-from-intel-to-own-mac-chips-from-2020
• Intel v ARM power reqs - Killowatt - https://twitter.com/eastdakota/status/976560820611031040
• ARM Takes Wing: Qualcomm vs Intel CPU comparison - https://blog.cloudflare.com/arm-takes-wing/
• Panera doesn't take Security Seriously - https://medium.com/@djhoulihan/no-panera-bread-doesnt-take-security-seriously-bf078027f815
• Eric (tries) hiking in the Gorge - https://www.fs.usda.gov/recarea/crgnsa/recarea/?recid=30026
• Jon likes Color (courtesy of xkcd) - https://blog.xkcd.com/2010/05/03/color-survey-results/

Jon chats about his car and beekeeping. Cloudflare's Privacy Focused DNS and an ARM v Intel post. Will Apple use its own chips in it Macs? And poor, poor Panera... Eric tries hiking Multnomah Falls and ends up hiking somewhere else. Jon gets a kick out of colors.

Eric sees Ready Player One opening day. Boeing is hit by WannaCry and researchers demonstrate spoofing facial recognition using IR emitters in a ball cap. Someone built a game using HIBP passwords ("My Little Pwnage"). A personal VPN hotspot and a glowing meteorite ring.

Links:

• Ready Player One - http://readyplayeronemovie.com/
• Boeing + WannaCry - https://www.seattletimes.com/business/boeing-aerospace/boeing-hit-by-wannacry-virus-fears-it-could-cripple-some-jet-production/
• Invisible Mask Attack - https://arxiv.org/pdf/1803.04683.pdf
• My LIttle Pwnage - https://mylittlepwnage.eu/
• Amplifi Teleport - https://amplifi.com/teleport/
• Carbon Fiber and Meteorite Glowstone Ring - https://youtu.be/K2VWLT63_cI

Eric sees Ready Player One opening day. Boeing is hit by WannaCry and researchers demonstrate spoofing facial recognition using IR emitters in a ball cap. Someone built a game using HIBP passwords ("My Little Pwnage"). A personal VPN hotspot and a glowing meteorite ring.

Links:

• Ready Player One - http://readyplayeronemovie.com/
• Boeing + WannaCry - https://www.seattletimes.com/business/boeing-aerospace/boeing-hit-by-wannacry-virus-fears-it-could-cripple-some-jet-production/
• Invisible Mask Attack - https://arxiv.org/pdf/1803.04683.pdf
• My LIttle Pwnage - https://mylittlepwnage.eu/
• Amplifi Teleport - https://amplifi.com/teleport/
• Carbon Fiber and Meteorite Glowstone Ring - https://youtu.be/K2VWLT63_cI

What does Zuckerberg mean by dust in the chickens, exactly? If you look at the bitcoin blockchain, more than just bitcoin transactions can be found. AI learns to WIN by cheating. How safe is your bitcoin hardware wallet? Checking out the StackOverflow Developer Survey. Muppets and IKEA.

Links:

• Chicken Dusting? - https://www.theverge.com/2018/3/21/17150270/mark-zuckerberg-facebook-regulated
• AMD Follow up - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research
• What's in the Bitcoin Blockchain? - https://www.theguardian.com/technology/2018/mar/20/child-abuse-imagery-bitcoin-blockchain-illegal-content
• Serverless and Container Adoption - http://www.zdnet.com/article/serverless-computing-containers-see-triple-digit-quarterly-growth-among-cloud-users/
• AI Learns to play Tic Tac Toe - http://www.zdnet.com/article/serverless-computing-containers-see-triple-digit-quarterly-growth-among-cloud-users/
• Hardware wallet Security - https://krebsonsecurity.com/2018/03/15-year-old-finds-flaw-in-ledger-crypto-wallet/
• StackOverflow Developer Survey - https://insights.stackoverflow.com/survey/2018/
• Muppet Guys Talking - http://muppetguystalking.com
• IDEA Instructions - https://idea-instructions.com

What does Zuckerberg mean by dust in the chickens, exactly? If you look at the bitcoin blockchain, more than just bitcoin transactions can be found. AI learns to WIN by cheating. How safe is your bitcoin hardware wallet? Checking out the StackOverflow Developer Survey. Muppets and IKEA.

MemFixed sends flush packets to memcached servers. Security tools start showing up for Ethereum. ISPs insert spyware into downloads from legitimate sites. Carl joins to discuss the recently disclosed AMD vulnerabilities.

Links:

• Followup - MemFixed - https://www.bleepingcomputer.com/news/security/memfixed-tool-helps-mitigate-memcached-based-ddos-attacks/
• Ethereum Security Tool - https://blog.trailofbits.com/2018/03/09/echidna-a-smart-fuzzer-for-ethereum/
• Government injected spyware - https://citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-deploy-government-spyware-turkey-syria/
• AMD Vulnerabilities - https://www.wired.com/story/amd-backdoor-cts-labs-backlash/
• Two Photos, one millisecond - https://petapixel.com/2018/03/07/two-photographers-unknowingly-shot-millisecond-time/
• Numberphile - http://numberphile.com/videos/analytical_continuation1.html