Mostly Security

By Jon King and Eric Wuehler

From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the ... more

4.9

1414 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Mostly Security:

How many episodes does Mostly Security have?

The podcast currently has 550 episodes available.

Mostly Security episodes:

March 23, 2018015: Chicken Dusting, What's in Your Blockchain?, and more!
What does Zuckerberg mean by dust in the chickens, exactly? If you look at the bitcoin blockchain, more than just bitcoin transactions can be found. AI learns to WIN by cheating. How safe is your bitcoin hardware wallet? Checking out the StackOverflow Developer Survey. Muppets and IKEA.

Links:

Chicken Dusting? - https://www.theverge.com/2018/3/21/17150270/mark-zuckerberg-facebook-regulated

AMD Follow up - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research

What's in the Bitcoin Blockchain? - https://www.theguardian.com/technology/2018/mar/20/child-abuse-imagery-bitcoin-blockchain-illegal-content

Serverless and Container Adoption - http://www.zdnet.com/article/serverless-computing-containers-see-triple-digit-quarterly-growth-among-cloud-users/

AI Learns to play Tic Tac Toe - http://www.zdnet.com/article/serverless-computing-containers-see-triple-digit-quarterly-growth-among-cloud-users/

Hardware wallet Security - https://krebsonsecurity.com/2018/03/15-year-old-finds-flaw-in-ledger-crypto-wallet/

StackOverflow Developer Survey - https://insights.stackoverflow.com/survey/2018/

Muppet Guys Talking - http://muppetguystalking.com

IDEA Instructions - https://idea-instructions.com
...more
38min
March 23, 2018 015: Chicken Dusting, What's in Your Blockchain?, and more!
What does Zuckerberg mean by dust in the chickens, exactly? If you look at the bitcoin blockchain, more than just bitcoin transactions can be found. AI learns to WIN by cheating. How safe is your bitcoin hardware wallet? Checking out the StackOverflow Developer Survey. Muppets and IKEA.
...more
38min
March 17, 2018014: Ethereum, Spyware, and AMD's security flaws
MemFixed sends flush packets to memcached servers. Security tools start showing up for Ethereum. ISPs insert spyware into downloads from legitimate sites. Carl joins to discuss the recently disclosed AMD vulnerabilities.

Links:

Followup - MemFixed - https://www.bleepingcomputer.com/news/security/memfixed-tool-helps-mitigate-memcached-based-ddos-attacks/

Ethereum Security Tool - https://blog.trailofbits.com/2018/03/09/echidna-a-smart-fuzzer-for-ethereum/

Government injected spyware - https://citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-deploy-government-spyware-turkey-syria/

AMD Vulnerabilities - https://www.wired.com/story/amd-backdoor-cts-labs-backlash/

Two Photos, one millisecond - https://petapixel.com/2018/03/07/two-photographers-unknowingly-shot-millisecond-time/

Numberphile - http://numberphile.com/videos/analytical_continuation1.html
...more
36min
March 17, 2018014: Ethereum, Spyware, and AMD's security flaws
MemFixed sends flush packets to memcached servers. Security tools start showing up for Ethereum. ISPs insert spyware into downloads from legitimate sites. Carl joins to discuss the recently disclosed AMD vulnerabilities.

Links:

Followup - MemFixed - https://www.bleepingcomputer.com/news/security/memfixed-tool-helps-mitigate-memcached-based-ddos-attacks/

Ethereum Security Tool - https://blog.trailofbits.com/2018/03/09/echidna-a-smart-fuzzer-for-ethereum/

Government injected spyware - https://citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-deploy-government-spyware-turkey-syria/

AMD Vulnerabilities - https://www.wired.com/story/amd-backdoor-cts-labs-backlash/

Two Photos, one millisecond - https://petapixel.com/2018/03/07/two-photographers-unknowingly-shot-millisecond-time/

Numberphile - http://numberphile.com/videos/analytical_continuation1.html
...more
36min
March 09, 2018013: Android P and network devices as a critical vector
Security implications of Google's Android 'P' first developer preview. Newly unclassified documents from 2016 (likely Shadow Broker fallout). Girl Scout cybersecurity badges and drones in Puerto Rico.

Links:

GitHub DDoS - https://github.com/649/Memcrashed-DDoS-Exploit

Android P security features - https://www.theverge.com/2018/3/7/17088394/android-p-developer-preview-notifications-kotlin-microphone

Android ecosystem statistics - https://developer.android.com/about/dashboards/index.html

Unclassified 2016 'BOD-16-02' - https://twitter.com/RidT/status/970880435411709952

Girl Scouts cybersecurity badges - https://www.nbcnews.com/tech/tech-news/girl-scouts-fight-cybercrime-new-cybersecurity-badge-n852971

Drones in Puerto Rico - https://www.wired.com/story/drones-electricity-puerto-rico/
...more
36min
March 09, 2018013: Android P and network devices as a critical vector
Security implications of Google's Android 'P' first developer preview. Newly unclassified documents from 2016 (likely Shadow Broker fallout). Girl Scout cybersecurity badges and drones in Puerto Rico.

Links:

GitHub DDoS - https://github.com/649/Memcrashed-DDoS-Exploit

Android P security features - https://www.theverge.com/2018/3/7/17088394/android-p-developer-preview-notifications-kotlin-microphone

Android ecosystem statistics - https://developer.android.com/about/dashboards/index.html

Unclassified 2016 'BOD-16-02' - https://twitter.com/RidT/status/970880435411709952

Girl Scouts cybersecurity badges - https://www.nbcnews.com/tech/tech-news/girl-scouts-fight-cybercrime-new-cybersecurity-badge-n852971

Drones in Puerto Rico - https://www.wired.com/story/drones-electricity-puerto-rico/
...more
36min
March 03, 2018012: Emailing 23,000 private keys and GitHub survives a DDoS attack
Jon is back from Florida. Is it Trust-ICO or Trustico? Anatomy of an Amplification Attack. Visualizing data and watching documentaries.

Links:

Trustico emails private keys - https://arstechnica.com/information-technology/2018/03/23000-https-certificates-axed-after-ceo-e-mails-private-keys/

GitHub does not <3 open memcached - https://www.wired.com/story/github-ddos-memcached/

LA Times Open S3 == Cryptojacked - https://threatpost.com/cryptojacking-attack-found-on-los-angeles-times-website/130041/

Jon's pwned password - https://haveibeenpwned.com/Passwords

Jon's Something Fun: Visual Capitalist - http://www.visualcapitalist.com/

Eric's Something Fun: Round Planet - https://www.netflix.com/title/80212704
...more
32min
March 03, 2018012: Emailing 23,000 private keys and GitHub survives a DDoS attack
Jon is back from Florida. Is it Trust-ICO or Trustico? Anatomy of an Amplification Attack. Visualizing data and watching documentaries.

Links:

Trustico emails private keys - https://arstechnica.com/information-technology/2018/03/23000-https-certificates-axed-after-ceo-e-mails-private-keys/

GitHub does not <3 open memcached - https://www.wired.com/story/github-ddos-memcached/

LA Times Open S3 == Cryptojacked - https://threatpost.com/cryptojacking-attack-found-on-los-angeles-times-website/130041/

Jon's pwned password - https://haveibeenpwned.com/Passwords

Jon's Something Fun: Visual Capitalist - http://www.visualcapitalist.com/

Eric's Something Fun: Round Planet - https://www.netflix.com/title/80212704
...more
32min
February 22, 2018011: Peter Wooley joins to chat UI/UX and Disneyland
We chat CSS Keyloggers and are not worried. Careful what you put into securityheaders.io. Is your Password in the list of 500 million known passwords? And you can't chat with Peter without a Disney sidetrack.

Links:

CSS Keyloggers - https://www.bram.us/2018/02/21/css-keylogger-and-why-you-shouldnt-worry-about-it/

securityheaders.io - https://securityheaders.io

Pwned Passwords - https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/

Avatar Flight of Passage - https://disneyworld.disney.go.com/attractions/animal-kingdom/avatar-flight-of-passage/

Check your Password - https://haveibeenpwned.com/Passwords

Peter's Something Fun: D&D Starter Set - https://www.amazon.com/dp/B00SI774U6
...more
30min
February 22, 2018 011: Peter Wooley joins to chat UI/UX and Disneyland
We chat CSS Keyloggers and are not worried. Careful what you put into securityheaders.io. Is your Password in the list of 500 million known passwords? And you can't chat with Peter without a Disney sidetrack.
...more
30min

FAQs about Mostly Security:

How many episodes does Mostly Security have?

The podcast currently has 550 episodes available.