Mostly Security

Travel Adventures, AI Advancements (and Challenges), Satellite Security Concerns, Machine Learning Insights, and De-Extinction Efforts for the Giant Moa.

• 0:00 - Introduction
• 4:49 - AI-Infused Siri?
• 9:15 - Leaky Satellites?
• 14:41 - Reinforcement Learning?
• 20:02 - Giant Moa!

Family weekends for Eric and Jon. A new side channel for pixel sniffing on Android, malware abusing github + steganography for configuration, and Apple doubles many of its security bounties. For fun, long live(d) the naked mole rat, and warp drives move from the irrational (negative energy ftw!) to the theoretically possible.

• 0:00 - Intro
• 8:55 - Pixnapping
• 12:59 - Asteroth Steganography
• 16:16 - Apple Security Bounties Doubling
• 23:08 - Naked Eusocial Mole Rats
• 27:15 - Warp Drive Maths

This was almost "The Quiet Episode" after some audio challenges, amazing what technology can hide... Eric gets back in town just in time to leave town. Jon goes to a bookstore. The UK is still trying to get Apple to create a backdoor. OpenAI talked about malicious use of AI. ShinyHunters are back. Pristine Stars are a thing and Powell's City of Books is cool.

• 0:00 - Introduction
• 3:04 - No Backdoors!
• 5:51 - OpenAI Report
• 15:32 - Scattered Spiders
• 22:59 - Pristine Stars
• 26:00 - Powell's

Eric is traveling and Jon is repairing. Coordinated arrests of scammers across Africa, the world's first malicious MCP server (is super simple), the release of the Sony CD player 43 years ago, and CRISPR modified yeast to create pollen substitute for the bees.

• 0:00 - Intro
• 10:27 - Operation Contender 3.0
• 17:13 - BCC Postmark
• 23:02 - Sony History
• 27:02 - Y. Lipolytica Sterols

This past weekend, Eric was forgetfully productive. Meanwhile, Jon moved a child into the dorms and battled some radiator problems. On other fronts, AI agents got duped, and self-replicating worms made their way through NPM. Good news: Entra ID tenants dodged a major security event. For a bit of nostalgia, Eric whipped up some lemon bars, and Jon chowed down on pizza.

• 0:00 - Introduction
• 9:05 - AI Agents FTW
• 13:56 - Shai-Hulud!
• 18:01 - One Token to Rule them All
• 22:55 - Lemon Bars
• 25:10 - HTTPizza

Eric paints and Jon does something I'm sure. Void proxy tackles the complexity of breaking MFA, and Bitcoin ATMs for Scammers. How about a bit of neuromodulation on Pythagorean Triple Square Day.

• 0:00 - Intro
• 13:19 - Void Proxy
• 16:54 - 93% Scams
• 21:24 - Neuromodulation (?)
• 24:33 - Pythagorean Triple Square Day

Eric updates the mostlysecurity.com vibe. Jon jars honey. Plex asks users to change their passwords. iPhone 17 has new security features. Not to be outdone numerically, 18 Javascript packages were compromised. Eric plays with epoxy and glitter, while Jon reminisces of Perl.

• 0:00 - Introduction
• 15:33 - Plex Passwords
• 20:09 - iPhone 17 Security
• 25:58 - 18 Javascript Packages
• 30:04 - Epoxy and Glitter
• 33:04 - Perl

Eric returns and Jon has a flat tire. Kuiper achieves a gigabit, Google releases fixes for 84 vulns in android, and prompt injection in Comet, Perplexity's AI browser. The Pixel 10 has a crazy good camera, and the third interstellar object ever discovered.

• 0:00 - Intro
• 10:02 - Followup
• 13:13 - Limited Targeted Exploitation
• 16:00 - Comet Injection
• 25:57 - Smartest Camera
• 33:04 - Interstellar Object 3I

Eric plays with epoxy resin, Jon has a new calf. Cybersabotage on your ex-employer will get you 4 years. There are 1200 fewer robocallers thanks to the FCC. Password manager plugins for web browsers can be fooled. The Commodore 64 is back and really old honey is discovered in Italy.

• 0:00 - Introduction
• 8:53 - Four Years
• 10:22 - Robocall Roundup
• 12:57 - Password Manager Hijack
• 18:39 - Commodore 64
• 22:47 - Really Old Honey

Eric prints and Jon fixes washer. The Noodlophile stealer propagates via legal infringement claims, and portal auth issues allow control of connected cars. For fun we have book four of the Lady Astronaut series, and using generative AI to create targeted antibiotics for drug resistant diseases.

• 0:00 - Intro
• 12:32 - Noodlophile
• 16:51 - Automotive Authentication Antics
• 23:39 - The Martian Contingency
• 27:33 - AI Antibiotics