Mostly Security

Eric's password buttons were pushed this week, not-so-secure eMail clients, and a touch of Google I/O. Fake coin offerings and ... a knife?

Links:

• Password Rant
• Followup: Eero + Echo
• Weird Al Hamilton Polka
• eMail Client Vulnerabilities
• Google I/O
• Ordering with a Voice Assistant
• Buy Howeycoins!
• Cutco Cheese Knife

Eric's password buttons were pushed this week, not-so-secure eMail clients, and a touch of Google I/O. Fake coin offerings and ... a knife?

Links:

• Password Rant - https://twitter.com/ericwuehler/status/996509740673908736
• Followup: Eero + Echo - https://daringfireball.net/thetalkshow/2018/05/08/ep-221
• Weird Al Hamilton Polka - https://www.youtube.com/watch?v=3v0c6smpHSk
• eMail Client Vulnerabilities - https://efail.de/
• Google I/O - https://www.theverge.com/2018/5/8/17328828/google-io-keynote-summary-highlights-news-recap-2018
• Ordering with a Voice Assistant - https://twitter.com/jonathan_b_king/status/996517910158819335
• Buy Howeycoins! - https://www.howeycoins.com/index.html
• Cutco Cheese Knife - https://www.cutco.com/products/product.jsp?item=traditional-cheese-knife

 

Logging in with only a physical key, Twitter's oopsie, Facebook fires a stalker and Signal's messages do not "self-destruct". Jon chats about stuff from the Microsoft Build conference. Eric still likes Netflix. Jon likes books.

Links:

• Gigabit Router Followup - Botnet
• Gigabit Router Followup - Fix
• Death to Passwords!
• Twitter logs passwords
• Facebook fires analyst for stalking
• Signal notifications do not self-destruct
• Microsoft Build 2018
• Netflix: Lost in Space
• Book: Old Man's War

Logging in with only a physical key, Twitter's oopsie, Facebook fires a stalker and Signal's messages do not "self-destruct". Jon chats about stuff from the Microsoft Build conference. Eric still likes Netflix. Jon likes books.

Jon describes farm equipment, while Eric teaches driving lessons. Routers around the world are vulnerable, and a critical battle is won for the open web. A fun book tracking hackers and a crazy project for a VGA adapter.

Links:

• What is a flail?
• Oregon Instructional Permit
• Vulnerable GPON Routers
• Not a Computer Crime
• Python Environment
• The Cuckoo's Egg
• Software Defined Radio

Jon describes farm equipment, while Eric teaches driving lessons. Routers around the world are vulnerable, and a critical battle is won for the open web. A fun book tracking hackers and a crazy project for a VGA adapter.

Eric is back from the road trip. IoT, the gift that keeps on giving. Eric chats about hotel security cards. Jon channels Harry Potter with Obiliviate DNS. The Grand Canyon is really cool and Jon tries installing a garage door opener.

Links:

• Grand Canyon
• Ski lift exposed to the internet
• Hotel key card security
• The Hotel Hacker
• Oblivious DNS
• BGP Hijack

Eric is back from the road trip. IoT, the gift that keeps on giving. Eric chats about hotel security cards. Jon channels Harry Potter with Obiliviate DNS. The Grand Canyon is really cool and Jon tries installing a garage door opener.

Links:

• Grand Canyon - https://www.nps.gov/grca/index.htm
• Ski lift exposed to the internet - https://www.golem.de/news/patscherkofel-gondelbahn-mit-sicherheitsluecken-1804-133930.html
• Hotel key card security - https://wired.trib.al/RkHWQ0U
• The Hotel Hacker - https://www.wired.com/2017/08/the-hotel-hacker/
• Oblivious DNS - https://www.techrepublic.com/article/oblivious-dns-could-protect-your-internet-traffic-against-snooping/
• BGP Hijack - https://www.welivesecurity.com/2018/04/25/ethereum-cryptocurrency-wallets-raided/

Peter Wooley joins Jon to talk javascript while Eric cannot prevent it. NPM gains package signing capabilities; a casino is hacked courtesy of their fish tank; and once DeepFake matures, how do we tell what's real? Peter recommends playing Celeste on the Switch, Jon should have read a couple more books about bees, and clicky keyboards are awesome.

Links:

• Peter Wooley on Twitter
• Javascript won!
• NPM signed packages
• Typosquatting packages
• Fish Tank Thermometer
• Pi-hole
• WiFi Grill
• DeepFake Videos
• Celeste
• More Bees!
• Clicky keyboard

Peter Wooley joins Jon to talk javascript while Eric cannot prevent it. NPM gains package signing capabilities; a casino is hacked courtesy of their fish tank; and once DeepFake matures, how do we tell what's real? Peter recommends playing Celeste on the Switch, Jon should have read a couple more books about bees, and clicky keyboards are awesome.