pplpod

pplpod

Download on the App Store

pplpod episodes

  • Operation Aurora: Google's Stolen Source Code and an IE Zero-Day

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    On January 12, 2010, Google disclosed that it had been attacked in mid-December 2009, though forensics traced the campaign back to mid-2009. More than 34 organizations were targeted, including Adobe, Akamai, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman, Morgan Stanley and Dow Chemical. Dmitri Alperovitch of McAfee said the attackers wanted source code repositories, not financial data. They also went after the Gmail accounts of Chinese dissidents including artist Ai Weiwei, but saw only subject lines and creation dates for two accounts. McAfee CTO George Kurtz named the operation after the word Aurora, found in a file path in the malware.

    The attackers, called the Elderwood Group by Symantec and also known as APT17 or the Beijing Group, used watering hole sites, zero-day flaws in Internet Explorer 6, 7 and 8, and weaknesses in the Perforce source control system, with backdoors disguised as SSL traffic reaching servers in Illinois, Texas and Taiwan. Google said it might stop censoring search in China even if that meant closing its offices there, Secretary of State Hillary Clinton condemned the attacks, and a guard in Beijing removed flowers left at Google's offices, calling them an illegal flower tribute. A WikiLeaks cable cited a Chinese source saying the Politburo ordered the intrusion, while Chinese officials called the account a U.S. fabrication. Germany, Australia and France told citizens to stop using Internet Explorer, and Microsoft, aware of the flaw since September 2009, patched it on January 21, 2010.

    • The Guardian reported that a senior Politburo member had searched his own name on Google and found critical articles.
    • The exploit was added to Metasploit, and Websense saw criminals using it in drive-by attacks on ordinary users.
    • Traffic was traced to Shanghai Jiao Tong University and Lanxiang Vocational School, both of which denied involvement.
    • Some command and control servers ran on stolen Rackspace customer accounts.
    • In 2022 Google released Hacking Google, a six-part YouTube documentary series that revisits the attack.
    21 min
  • Colonial Pipeline: One Old VPN Password and a $4.4M Bitcoin Ransom

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    The Colonial Pipeline carries gasoline, diesel and jet fuel from Texas refineries through the Southeast to New York, about 45 percent of the fuel used on the East Coast. On May 6, 2021, the Russia-based group DarkSide stole 100 gigabytes of data, and on May 7 it deployed ransomware. The entry point was an inactive VPN account protected by a single password with no multi-factor authentication. The attack reached information technology systems such as billing, not the pumps, but Colonial shut down the physical pipeline out of fear the hackers could move into its operational technology.

    Shortages spread through Alabama, Florida, Georgia, North Carolina, South Carolina, Virginia and Washington, D.C. By May 11, 71 percent of gas stations in Charlotte were empty, and by May 14, 87 percent in Washington were dry. The national average topped $3 a gallon, the highest since 2014, and the Consumer Product Safety Commission warned people not to fill plastic bags with gasoline. Within hours of the attack Colonial paid nearly 75 bitcoin, about $4.4 million; CEO Joseph Blount called it the right thing to do for the country. DarkSide's decryption tool was so slow that Colonial's own backups did more to restore systems. Operations restarted on May 12, and on June 7 the Justice Department and FBI announced the seizure of 63.7 bitcoin, worth about $2.3 million after a crypto crash.

    • American Airlines added fuel stops to long-haul flights from Charlotte to Honolulu and London.
    • DarkSide said in a statement that its goal was to make money and not to create problems for society.
    • A blockchain analysis found DarkSide and its affiliates had collected $90 million in bitcoin from 47 victims, with developers taking about 17 percent.
    • Senate hearings revealed Homeland Security was not alerted at first and the Justice Department was not told the ransomware type or payment.
    • Regulators proposed a $986,400 penalty in 2022, and Executive Order 14028 tightened federal cybersecurity standards.
    26 min
  • Novo Nordisk: Krogh's Insulin Lab, Wegovy and a Value Bigger Than Denmark

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    In 1923, Danish Nobel laureate August Krogh and his wife Marie, on a U.S. lecture tour, went to Toronto to meet insulin's discoverers Frederick Banting, John Macleod, Charles Best and James Collip, and won permission to produce insulin in Denmark. With Hans Christian Hagedorn and backer August Kongsted, Krogh formed the Nordisk Insulin Laboratory in 1924 under a non-profit structure. In 1925 brothers Harald and Thorvald Pedersen left to found the rival Novo Terapeutisk Laboratorium, and the two companies competed until merging in 1989. Today Novo Holdings, owned by a charitable foundation, controls the voting shares. Semaglutide, sold as Ozempic and Rybelsus for diabetes and as Wegovy for obesity, made weight-loss drugs 55 percent of revenue, and in 2024 Novo's $604 billion market value exceeded Denmark's GDP.

    To scale up, Novo Holdings bought Catalent for $16.5 billion, Novo took three of its sites for $11 billion, and it spent $4.1 billion on a North Carolina plant. A $1.3 billion hypertension drug bought from KBP Biosciences failed, and Novo sued in Singapore for up to $830 million, alleging hidden trial data. The UK's ABPI suspended Novo for two years in 2023 over marketing practices, and by 2025 Judge Karen Marston had consolidated more than 2,600 suits against Novo and Eli Lilly over gastroparesis and other harms. A Senate committee found Ozempic at about $969 a month in the U.S. versus $59 in Germany. In 2025 a Trump administration deal set $245 injectables and $149 pills for Medicare, Medicaid and TrumpRx, Novo cut 9,000 jobs, and Mike Doustdar became CEO.

    • Novo's logo shows the Egyptian bull deity Apis with a sun disc between its horns.
    • Corporate Knights named Novo the most sustainable company in the world in 2012.
    • In 2022, two thirds of Denmark's economic growth came from the pharmaceutical industry.
    • A late-2025 trial found semaglutide had no significant effect on Alzheimer's-related cognitive decline.
    • Novo launched the NovoCare pharmacy selling Wegovy for $499 a month and, in 2026, sued Eli Lilly for false advertising.
    15 min
  • Norwegian Cruise Line: The SS Norway Gamble and a Last-Place Ranking

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    Norwegian Cruise Line began in 1966, when Norwegian shipping executive Knut Kloster and Israeli businessman Ted Arison launched the car ferry Sunward between Southampton and Gibraltar. When that route failed, they moved to the Caribbean as Norwegian Caribbean Lines, and Arison left to found Carnival. Kloster bought Great Stirrup Cay, the first private cruise island, bundled airfare with cruise tickets, and in 1979 spent more than $100 million converting the SS France into the 1,035-foot SS Norway, making the ship itself the destination. NCL later fell behind with secondhand ships until Star Cruises, part of Malaysia's Genting Group, bought it in 2000 and funded the Norwegian Sky and freestyle cruising, with no assigned dinner seating or formal dress codes.

    NCL completed the Pride of America from a half-built hull towed from Mississippi to Germany; it is the only major U.S.-flagged cruise ship and can sail Hawaii without the foreign stop the Passenger Vessel Services Act requires. In 2017 NCL began weekly Miami to Havana sailings, which ended in 2019. A 2003 boiler explosion in Miami crippled the Norway, which was sold as Blue Lady, beached at Alang, India in 2006 and cleared for scrapping by India's Supreme Court in 2007. After the CDC's March 14, 2020 no-sail order, NCL raised $2.2 billion, including notes at 12.25 percent, lost $4 billion, furloughed 20 percent of its workforce and doubled CEO Frank Del Rio's pay to $36.4 million.

    • Leaked March 2020 emails showed managers telling sales staff to say the coronavirus could only survive in cold weather.
    • Del Rio retired in 2023 and sued NCL in 2026, claiming he was forced out and denied promised consulting pay.
    • Four ships ordered from Fincantieri for 2030 to 2037 will measure 227,000 gross tons and carry 5,000 passengers each.
    • A 2026 Consumer Reports survey of nearly 19,000 cruisers ranked NCL last of 19 lines for satisfaction.
    • NCL holds roughly 8.6 percent of the global cruise market.
    22 min
  • Sony Pictures Hack: Guardians of Peace, The Interview and Lazarus Group

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    On Monday, November 24, 2014, employees at Sony Pictures Entertainment found their computers frozen by a warning from a group calling itself the Guardians of Peace. Investigators later found the attackers had been inside for at least two months, and some claimed a year. The hackers said they took more than 100 terabytes, then used a variant of the Shamoon wiper to overwrite master boot records. A November 21 email to executives from a group called God'sApostles, demanding money, went unnoticed. The leaks that followed exposed 47,000 Social Security numbers, medical information and salaries, the script for Spectre, copies of Annie, Mr. Turner and Still Alice, and talks with Marvel over Spider-Man and with Nintendo over a Mario film.

    On December 16 the hackers named The Interview, the Seth Rogen and Evan Goldberg comedy about a plot to kill Kim Jong-un, invoked September 11 and threatened theaters. AMC, Regal and Cinemark declined to show it and Sony canceled the release; President Obama called that a mistake, and CEO Michael Lynton said the theaters had pulled out. The FBI and NSA attributed the attack to North Korea, citing malware overlap with attacks on South Korean banks and media and IP addresses hardcoded into the malware, and the U.S. imposed sanctions. Sony then released the film in about 300 independent theaters on Christmas Day and online. Skeptics including Norse and Hector Monsegur pointed to employees laid off in May 2014; the FBI rejected that, Novetta tied the attack to the Lazarus Group, and in 2018 the Justice Department charged North Korean citizen Park Jin Hyok.

    • Emails between co-chair Amy Pascal and producer Scott Rudin, including jokes about President Obama's film tastes, led Pascal to step down in May 2015.
    • Aaron Sorkin wrote that journalists publishing the stolen emails were doing the hackers' work for them.
    • North Korea denied involvement, praised the hack as a righteous deed and offered a joint probe, which the U.S. refused.
    • Sony spent $15 million on immediate damages in the first quarter of 2015.
    • WikiLeaks later published a searchable archive of the stolen documents over Sony's objections.
    23 min
  • Nikon: Duncan's Korean War Lenses, the Nikon F and the RED Cinema Buyout

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    Nikon was founded in 1917 as Nippon Kogaku Kogyo, a merger of three Japanese optical makers producing microscopes, binoculars and telescopes, and later periscopes and bomb sights for the Japanese military. The Nikkor lens name arrived in 1932 and the Nikon camera name in 1946, and early Canon cameras relied on Nikon lenses. During the Korean War, Life photographer David Douglas Duncan, introduced to Nikkor lenses by Jun Miki in Tokyo, mounted them on his Leica bodies, and the sharp, high-contrast results made Nikon's name worldwide. The 1959 Nikon F single lens reflex began three decades of dominance among professionals, and a modified, motor-driven Nikon F flew on Apollo 15 in 1971.

    Loyalty to the F-mount slowed Nikon's autofocus, and after Canon launched its all-electronic EF mount in 1987, Canon's white lenses took over the sidelines in the 1990s. Nikon's D1 arrived in 1999, its first full-frame digital body, the D3, in 2007, and the 2008 D90 became the first digital SLR to shoot video. After the Nikon 1 series and the DL compacts canceled in 2017, Nikon launched the Z-mount in 2018 and bought RED Digital Cinema in April 2024. EssilorLuxottica held 18.53 percent of Nikon by March 2026, and under new CEO Yasuhiro Omura the company reported a 112.4 billion yen operating loss for fiscal 2026, driven largely by impairments tied to its 2023 purchase of German metal 3D printer maker SLM Solutions.

    • Early autofocus bodies such as the F3AF were compromised by the effort to keep old manual lenses working.
    • Nikon introduced Japan's first commercial stepper for chipmaking in 1980 and led lithography until about 2002, before ASML took the high end.
    • In 2015 Nikon bought Optos, a British maker of ultra-wide-field retinal imaging systems.
    • Nikon formed a joint venture with Essilor in 1999.
    • The Z9 flagship did away with the mechanical shutter entirely.
    27 min
  • Nextel: Taxi Dispatch Frequencies, a Forced Chirp and the Sprint Shutdown

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    In 1987, telecom lawyers Morgan O'Brien and Chris Rogers and investment bankers Brian McAuley and Peter Reinheimer founded Fleet Call. Rather than bid for costly cellular spectrum, they bought 800 MHz specialized mobile radio frequencies set aside for fleet dispatch such as taxis, delivery trucks and plumbers. With Motorola they built iDEN, a TDMA digital network, and renamed the company Nextel in 1993. Because the spectrum was licensed for dispatch, the FCC required a push-to-talk function; Nextel fought the mandate, lost, and sold the feature as Direct Connect, an instant half-duplex link with no ringing. Craig McCaw invested in 1995, alongside Mark Warner and Jack Markell.

    Nextel's digital signals bled into police, fire and ambulance radios sharing the 851 to 861 MHz range, and in August 2004 the FCC approved rebanding: Nextel gave up channels below 862 MHz, moved to 862 to 869 MHz behind a guard band, and received 2 GHz spectrum as compensation. Strained by rebanding costs and 3G pressure, Nextel merged with Sprint in August 2005. Sprint's CDMA network could not merge with iDEN, and in October 2005 Sprint removed WiDEN data from Nextel towers. The NASCAR Nextel Cup, which replaced Winston as title sponsor in 2004, became the Sprint Cup in 2008, and the iDEN network went dark at 12:01 a.m. on June 30, 2013.

    • Nextel had the first nationwide digital cellular footprint and was the first carrier to build GPS into its phones.
    • Nextel sued Verizon over push-to-talk advertising in 2003 and settled the following year.
    • Sprint's rival ReadyLink ran on SIP, which could take several seconds to connect a call.
    • Direct Talk let Nextel phones work off-network using frequency hopping in the unlicensed 900 MHz ISM band.
    • WiDEN, supported by the Motorola i850, i860, i870 and i880, raised packet data speeds to 90 kilobits per second.
    23 min
  • Newark Airport: Christmas Trees, Bank Safes and the 1952 Elizabeth Crashes

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    Newark Metropolitan Airport opened in October 1928 on 68 acres of marshland, pushed by Mayor Thomas Raymond. To support the first paved runway in the country, builders hauled in 6.7 million cubic yards of earth, 7,000 discarded Christmas trees and 200 bank safes donated by a junk vendor, making Newark the first commercial airport in the United States. In 1930 it added the nation's first air traffic control tower and an airport weather station, and its 1934 Art Deco administration building, dedicated by Amelia Earhart in 1935, housed the country's first passenger terminal. Critics faulted the mixing of arriving and departing passengers and the lack of room to grow, and when the airline leases ran out, United, American, Eastern and TWA moved to the new LaGuardia; by mid-1940 every passenger airline had left.

    The Army took over during World War II and made Newark headquarters of the Atlantic Overseas Air Service Command, and in 1945 captured German aircraft arrived aboard HMS Reaper under Operation Lusty. The Port Authority leased the airport in 1948. Between December 1951 and February 1952, three airliners crashed into Elizabeth, New Jersey, and Newark closed until November 1952, reopening with a new runway angled over Newark Bay and the Arthur Kill and the first high-intensity runway edge lights. United Airlines Flight 93 departed from gate A-17 on September 11, 2001; the airport was renamed Newark Liberty International in 2002, and the gate sign was donated to the Flight 93 National Memorial in 2025.

    • The three Elizabeth crashes killed 56 people; 23 on board and seven on the ground; and 29 on board and four on the ground.
    • People Express moved into the Old North Terminal in 1981, and Virgin Atlantic began Newark to London flights in 1984.
    • Singapore Airlines began what was then the world's longest nonstop flight, Newark to Singapore, in 2018.
    • The $2.7 billion, 33-gate Terminal A opened in late 2022 with a five-megawatt garage solar roof of more than 12,000 panels.
    • The code is EWR because NEW belonged to Lakefront Airport in New Orleans and the Navy reserved codes starting with N.
    24 min
  • Roku: Netflix's Scrapped Project Griffin, the YouTube TV Fight and Fox

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    In 2007, Netflix engineer Anthony Wood, whose earlier DVR company ReplayTV had lost to TiVo, built a Netflix streaming box called Project Griffin. Weeks before launch, Reed Hastings killed it, reasoning that Netflix hardware would push Apple, Sony and Microsoft to keep the Netflix app off their devices. The team was spun out as Roku in early 2008 and released the N1000 in May 2008 as a neutral platform for Amazon, Hulu and YouTube as well as Netflix. Early boxes could not search; until a May 2010 update, users added movies to their queue on a computer. Roku shrank to a streaming stick in 2012, added 4K in 2015, sold the $15 Roku LE at Walmart on Black Friday 2021 and moved to USB-C in its 11th generation in 2025.

    From 2014 Roku licensed its Linux-based Roku OS to TV makers including TCL, Hisense, LG and Westinghouse; by January 2021 one in three smart TVs sold in the U.S. and Canada ran it, and by early 2025 it reached nearly 145 million people. Roku launched The Roku Channel in 2017, bought Quibi's library for a reported $100 million in 2021, then in 2025 launched the $2.99 ad-free service Howdy and bought Frndly TV for $185 million. Fights over ad inventory kept Peacock and HBO Max off Roku in 2020, and in 2021 Roku pulled YouTube TV from its channel store. On June 15, 2026, Fox Corporation agreed to buy Roku for $22 billion, and in July Senator Elizabeth Warren and other Democrats warned the Justice Department about the merger.

    • Roku asked content partners for 30 percent of their advertising inventory plus a share of subscriptions billed through its platform.
    • Google worked around the YouTube TV block by adding it to the main YouTube app before a multiyear deal in late 2021.
    • In 2017 a court in Mexico banned Roku device sales after broadcaster Televisa complained about pirate channels.
    • Roku shut down its open private channel system in 2022 and moved developers into a moderated beta program.
    • In 2023 Roku partnered with Best Buy on televisions carrying the Roku name on the bezel.
    26 min
  • Motorola DynaTAC 8000X: The $3,995 Brick Phone and Its Wrong-Number Debut

    Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

    The Motorola DynaTAC 8000X, short for Dynamic Adaptive Total Area Coverage, stood 10 inches tall before its rubber duck antenna, weighed about two and a half pounds, took 10 hours to charge and lasted 30 minutes of talk. It depended on a cellular concept Bell Labs proposed in 1947: the AMPS network of hexagonal cells, where low-power towers reuse frequencies and hand calls from cell to cell. At Motorola, engineer James Mikulski pitched a portable phone, and chief engineer John F. Mitchell rejected it until his own frustration with a 400 megahertz car phone changed his mind. Martin Cooper led the team that built the prototype, and on April 3, 1973, Motorola made the first publicized handheld cellular call, tying a phone number to a person instead of a place.

    The FCC did not approve the DynaTAC 8000X until September 21, 1980, after years of spectrum rulemaking and network construction. The first commercial wireless call came on October 13, 1983, when David D. Meilahn called former Ameritech Mobile president Bob Barnett, sitting in a car at Soldier Field in Chicago, who then called Alexander Graham Bell's grandson in Germany. Production began in April 1984 at $3,995, more than 1,192 hours of work at the $3.35 minimum wage, and the phone became a status symbol for traders and real estate moguls. The MicroTAC flip design replaced the brick in 1989, the line ended in 1994, and by Mitchell's 1998 retirement phones and services made up two thirds of Motorola's $30 billion in revenue.

    • Reportedly, the first call completed on the 1973 prototype reached a wrong number.
    • Besides the 12-key pad, the phone had RCL, CLR, STO and FCN keys and memory for exactly 30 numbers.
    • U.S. models lit their LED digits in red and international models in green; the vehicle-oriented 6000XL used a vacuum fluorescent display.
    • Motorola's one-hour fast charger overheated the nickel cadmium batteries, shortening their life and sometimes killing them outright.
    • Accessories included a brass swivel antenna and a zippered leather case with a clear front and a spring steel belt clip.
    21 min

About pplpod

From the publisher's feed

pplpod is a podcast about people, places and lots of other stuff. Each episode takes a deep dive into the lives, choices, and legacies of fascinating figures from history, culture,…