Smashing Security

Your privacy may be at risk if you're on Fleek, hackers not only steal COVID-19 vaccine data but then tamper with it to spread mistrust, and the Bitcoin bungles keep on coming...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ron Eddings from the Hacker Valley Studio podcast.

Visit https://www.smashingsecurity.com/211 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Ron Eddings.

Sponsored By:

• 1Password: 1Password for Families is the safest way to share logins, passwords, credit cards and other important information with the people who matter most. Use 1Password everywhere, from your Chromebook to your Apple Watch.
• 
  
• Until March 31, if you purchase a $50 gift card you’ll get $10 towards any YubiKey 5 Series by Yubico – the security key that provides strong two-factor authentication with a simple touch.
• 
  
• Find out more at https://1password.com/giftcards
• Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources.
• 
  
• For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express.
• 
  
• Get it now at smashingsecurity.com/recordedfuture

Support Smashing Security

Links:

• Report: X-Rated Social Media App Exposes Users in Massive Data Breach — VPNMentor.
• Hackers Leak Stolen Pfizer-BioNTech COVID-19 Vaccine Data — Threatpost.
• Hackers alter stolen regulatory data to sow mistrust in COVID-19 vaccine — Ars Technica.
• EU regulator: Hackers 'manipulated' stolen vaccine documents — AP News.
• Smashing Security 058: Face ID, Firefox, and Windows SNAFUs, plus Bitcoin FOMO
• Bitcoin FOMO Calculator.
• Smashing Security 167: Coronavirus scams and an exaggerated lion
• Man offers Newport council £50m if it helps find bitcoins in landfill — The Guardian.
• Acting in Film Master Class - By Michael Caine — YouTube.
• Damn Fine Story: Mastering the Tools of a Powerful Narrative — Book by Chuck Wendig.
• Back to Life — Netflix.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Penile penal problems, identifying rioters in Washington DC, and can a sticker protect you from radiation?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

And don't miss our featured interview with CrowdSec's Philippe Humeau.

Visit https://www.smashingsecurity.com/210 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Dave Bittner and Philippe Humeau.

Sponsored By:

• CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.
• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• Smashing Security's Christmas live stream — YouTube.
• Smashing Security 199: A few tech cock-ups, and one cock lock-up.
• Taking a screwdriver to unlock your IoT sex toy is nuts — Graham Cluley.
• Zip tie guy Twitter thread.
• FBI Arrests Man Who Carried Zip Ties Into Capitol — The New York Times.
• SmartDot radiation-protection phone stickers 'have no effect' — BBC News.
• Fact check: Low-powered magnets do not protect against EMF emission — USA Today.
• Moving Out game — Team 17.
• Moving Out trailer — YouTube.
• Poly Bridge — Dry Cactus.
• The Cipher — BBC Sounds.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Watch out for Santas wearing hoodies! A rogue employee takes down WebEx for thousands of people, and Apple forces apps to show a privacy health warning.

All this and much much more is discussed in the final episode of the "Smashing Security" podcast for 2020, with computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

And don't miss our special featured interview with Kroll's Mari DeGrazia.

Visit https://www.smashingsecurity.com/209 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Maria Varmazis and Mari DeGrazia.

Sponsored By:

• Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and expertise 24x7 with Responder. Kroll Responder merges hunting, detection, containment and remediation to deliver best-in-class endpoint security.
• 
  
• See how Responder works at smashingsecurity.com/kroll
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Smashing Security Christmas Party live stream! — YouTube.
• Engineer admits he wiped 456 Cisco WebEx VMs from AWS after leaving the biz, derailed 16,000 Teams accounts — The Register.
• San Jose Man Sentenced To Two Years Imprisonment For Damaging Cisco’s Network — US Department of Justice.
• Why San Francisco's network admin went rogue — InfoWorld.
• After verdict, debate rages in Terry Childs case — Computerworld.
• 'Parents are desperate'. Zoom Santas are cashing in — CNN.
• Santa Gilbert Gottfried — Cameo.
• Don't Get Scammed By Santa This Holiday Season — LAist.
• "The holidays are here and so are the scammers." — LA City Attorney on Twitter
• Apple responds to WhatsApp criticism, confirms its own apps will show privacy labels — 9to5Mac.
• Facebook's Zuckerberg again takes aim at Apple over iOS 14 ad privacy move — iMore.
• Apple Launches Privacy Labels For Apps — Silicon UK Tech News.
• Let's Crack Zodiac - Episode 1 — David Oranchak on YouTube.
• Let's Crack Zodiac - Episode 5 - The 340 Is Solved! — David Oranchak on YouTube.
• Zodiac Killer: Code-breakers solve San Francisco killer's cipher — BBC News.
• Met Opera on Demand.
• The Magic Flute (with puppets) — Met Opera on Demand.
• Akhnaten — Met Opera on Demand.
• ars Paradoxica — The Whisperforge.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Was hidden treasure found with help from a hack? What security lessons can be learnt from a controversial police raid in Florida? And are you ready for safer online get-togethers this Christmas?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

And don't miss our special featured interview with Mimecast's Max Linscott.

Visit https://www.smashingsecurity.com/208 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Anna Brading and Max Linscott.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams.
• 
  
• Learn more and try it for yourself at culture.ai/smashing
• Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation).
• 
  
• Grab your copy at smashingsecurity.com/mimecasthub

Support Smashing Security

Links:

• Smashing Security's Christmas 2020 live stream — Join us on YouTube on Thursday 17 December 2020 at 8pm (UK) / 3pm (Eastern) / Noon (Pacific).
• Forrest Fenn's Treasure.
• The Man Who Found Forrest Fenn's Treasure — Outside Online.
• A Statement on the Disclosure of My Identity — Jack Steuf.
• A Chicago treasure hunter was on the trail of a hidden chest worth more than $1 million — but she says she was hacked and her ‘solve stolen’ — Chicago Tribune.
• Cops raid home of ousted data scientist who created her own Florida COVID-19 dashboard — The Register.
• Video of police raid on home of Rebekah Jones — Rebekah Jones's Twitter account.
• Former Israeli space security chief says aliens exist, humanity not ready — The Jerusalem Post.
• Christmas pizza from Pizza Hut — Rotisserie Chicken paired with Crispy Bacon and Sage & Onion stuffing, all on top of a Red Wine Gravy base. (Contains Alcohol)
• Tiger Pig (Pig in Blanket) — Subway.
• Christmas menu at Pret A Manger.
• Festive food from Marks & Spencer.
• Brian & Roger.
• Carole, Graham, and Anna's Christmas party 2009 (with Yogi) — Tweet by Anna Brading.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Fears are raised about cyber bioterrorists, there's a widespread blackout for IoT devices caused by a cloud cock-up, and what role do strippers play in a revamp of the United States's computer crime laws?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

And don't miss our featured interview with Steve Salinas of Deep Instinct, discussing ransomware.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Mark Stockley and Steve Salinas.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams. Learn more and try it for yourself at culture.ai/smashing
• Deep Instinct: Most people agree that the most effective way to reduce the cost of an attack is to prevent it from happening in the first place! Check out a report by the Ponemon Institute, which studied the cost savings of adopting an efficient prevention model. Go grab it at smashingsecurity.com/deepinstinct

Support Smashing Security

Links:

• Smashing Security's Christmas 2020 live stream — Join us on YouTube on Thursday 17 December 2020 at 8pm (UK) / 3pm (Eastern) / Noon (Pacific)
• Increased cyber-biosecurity for DNA synthesis — Nature Biotechnology.
• New cyber-biological attack can trick biologists into generating dangerous toxins — News Medical Life Sciences.
• Screening Framework Guidance for Providers of Synthetic Double-Stranded DNA — Department of Health and Human Services (PDF).
• AWS: Amazon web outage breaks vacuums and doorbells — BBC News.
• The Supreme Court will finally rule on controversial US hacking law — Ars Technica.
• 18 U.S. Code § 1030 - Fraud and related activity in connection with computers≈ — Legal Information Institute, Cornell University.
• Online-voting company pushes to make it harder for researchers to find security flaws — CNET.
• The Supreme Court will hear its first big CFAA case — TechCrunch.
• Response to Voatz’s Supreme Court Amicus Brief. — An open letter from the security community.
• The Queen's Gambit Netflix series — Wikipedia.
• Twitter thread by Sarah Jamie Lewis.
• Win by Segfault and other notes on Exploiting Chess Engines — Sarah Jamie Lewis.
• One-Straw Revolution — A book by Masanobu Fukuoka.
• Bed of Lies podcast — The Telegraph.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Author and broadcaster Tim Harford joins us as we discuss the merits of robotic canine security guards, deepfakes, and the curious tale of an art forgery.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

And don't miss our special featured interview with James Moore from CultureAI.

Visit https://www.smashingsecurity.com/206 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: James Moore and Tim Harford.

Sponsored By:

• CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams.
• 
  
• Learn more and try it for yourself at culture.ai/smashing
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• How To Make The World Add Up — Tim Harford.
• Computerized canines to join Team Tyndall — Tyndall Air Force Base.
• Computerized canines semi-autonomous robot dogs into their patrolling regimen to join Team Tyndall — YouTube.
• Incredible Tyndall 'Robot Dogs' Demonstration — YouTube.
• Perimeter-patrolling 'robo-dogs' coming to Tyndall Air Force Base — YouTube.
• Revolutionizing Legged Robots — Ghost Robotics.
• Immersive Wisdom.
• Norwegian oil company employs robot dogs to patrol dangerous areas — Metro News.
• Japanese farm town deploys 'Monster Wolf' robots to scare off wild bears from neighborhoods — ABC7 San Francisco.
• Willo the Wisp — Wikipedia.
• Willo the Wisp: "The Thoughts of Moog" — YouTube.
• How Mediocre Dutch Artist Cast 'The Forger's Spell' — NPR.
• Do These A.I.-Created Fake People Look Real to You? — The New York Times.
• The Liar's Dividend — Definition from Macmillan Dictionary.
• BBC Motion Graphic archive — Ravensbourne University London.
• Emu's Broadcasting Company (1978) — BBC Motion Graphics archive.
• Discovering Portuguese (1987) — BBC Motion Graphics archive.
• I Claudius (1976) — BBC Motion Graphics archive.
• The Rise and Fall of Getting Things Done — The New Yorker.
• Sticky Pickles.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Watch out for a whole different type of shoulder-surfing, researchers uncover the CostaRicto hackers-for-hire gang, and we take a peek at who is behind Parler.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Chris Cochran from the Hacker Valley Studio podcast.

Visit https://www.smashingsecurity.com/205 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Chris Cochran.

Sponsored By:

• Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources.
• 
  
• For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express.
• 
  
• Get it now at smashingsecurity.com/recordedfuture
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Hackers could now know what people type on Zoom video call by evaluating the shoulder movement of users — Digital Information World.
• Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks — Cornell University.
• The CostaRicto Campaign: Cyber-Espionage Outsourced — BlackBerry.
• New stealthy hacker-for-hire group mimics state-backed attackers — Bleeping Computer.
• The conservative alternative to Twitter wants to be a place for free speech for all. It turns out, rules still apply — Washington Post.
• Parler: what you need to know about the 'free speech' Twitter alternative — The Conversation.
• What If Cambridge Analytica Owned Its Own Social Network? CA Backer Rebekah Mercer Admits She's A Co-Founder Of Parler — Techdirt.
• Hazel — Automated organization for your Mac from Noodlesoft.
• Make Noise — A creator's guide to podcasting and great audio storytelling by Eric Nuzum.
• Rendevous C'était un Rendez vous 1976 — YouTube.
• C'etait un Rendezvous, The Original Street Racing Video — YouTube documentary.
• C'était un rendez-vous — Wikipedia.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Darknet Diaries host Jack Rhysider joins us to discuss a cybersecurity goof in the wake of the US presidential elections, the US finally fingering the hackers responsible for disrupting the Winter Olympics in South Korea, and to take a long hard look at long hard legal mumbojumbo...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jack Rhysider from Darknet Diaries.

Plus don't miss our featured interview with Mimecast's Danielle Papadakis.

Visit https://www.smashingsecurity.com/204 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Danielle Papadakis and Jack Rhysider.

Sponsored By:

• Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation).
• 
  
• Grab your copy at smashingsecurity.com/mimecasthub
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and expertise 24x7 with Responder. Kroll Responder merges hunting, detection, containment and remediation to deliver best-in-class endpoint security.
• 
  
• See how Responder works at smashingsecurity.com/kroll

Support Smashing Security

Links:

• Legal complaint on behalf of Donald J Trump for President Inc and Republican National Committee — PDF.
• Don't touch the green button!
• Reddit thread about Donttouchthegreenbutton.com
• Richey Ward's Twitter thread showing how over 163k records were exposed in the Don't Touch The Green Button database — Twitter.
• Trump lawsuit site to report 'rejected votes' leaked voter data — Bleeping Computer.
• Hilarious news report of the Four Seasons Total Landscaping debacle — Tweet by Ros Atkins of the BBC.
• “Yourefired” was Donald Trump’s Twitter password, claim hackers — Graham Cluley.
• Donald Trump’s Twitter password is “maga2020!”, and there’s no 2FA, claims hacker — Graham Cluley.
• Six Russian GRU Officers Charged in Connection with Worldwide Deployment of Destructive Malware and Other Disruptive Actions in Cyberspace — Department of Justice.
• What does your phone know about you? — Think Money.
• Popular app T&Cs 'longer than Harry Potter' — BBC News.
• Study on consumers' attitudes towards Terms and Conditions (T&Cs) — European Commission (PDF).
• Terms of Service; Didn't Read
• TLDRLegal — Software Licenses Explained in Plain English.
• TermsFeed — Generator of Privacy Policy, Terms & Conditions, Disclaimer, EULA.
• Simply Docs — Legal, Business & Property Documents & Templates.
• The Armstrongs Episode 1 Part 1 — YouTube.
• Oral Breeze — Jack's pick for the best dental irrigator for water flossing.
• ‎You're Wrong About — Apple Podcasts.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Students are being spied on as they do online exams, how did a televised football match reveal the truth about artificial intelligence, and what on earth is the Canny Lumpsucker vulnerability?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford from The Host Unknown podcast.

Plus don't miss the second part of our featured interview with LastPass's Dalia Hamzeh.

Visit https://www.smashingsecurity.com/203 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Dalia Hamzeh and Thom Langford.

Sponsored By:

• Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and expertise 24x7 with Responder. Kroll Responder merges hunting, detection, containment and remediation to deliver best-in-class endpoint security.
• 
  
• See how Responder works at smashingsecurity.com/kroll
• Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation).
• 
  
• Grab your copy at smashingsecurity.com/mimecasthub
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Vulnonym: Stop the Naming Madness! — Carnegie Mellon University Software Engineering Institute.
• Vulnonym — A bot generating names for CVE IDs.
• Thrangrycat — Not better known as 😾😾😾.
• Soccer match ruined when AI-controlled camera mistakes ref’s bald head for ball — SB Nation.
• Students Are Rebelling Against Eye-Tracking Exam Surveillance Tools — Motherboard.
• Proctorio sues UBC staff member for tweets sharing ‘confidential’ information about the software — The Ubyssey.
• ProctorU confirms data breach after database leaked online — Bleeping Computer.
• Proctorio CEO releases student’s chat logs, sparking renewed privacy concerns — The Ubyssey.
• Some news about proctoring at the University of Calgary — Reddit.
• My wife has proctored (webcam monitored) online classes. We live in a studio apartment, so I’m relegated to the bathroom. Rate my setup. — Reddit.
• How Many Potatoes Does It Take To Run DOOM? — YouTube.
• Raspberry Pi 400: the $70 desktop PC.
• Raspberry Pi 400: New All-in-One Pi! — YouTube.
• All Tilted Room Sketches — Shaun Micallef on YouTube.
• The Goes Wrong Show - Series 1: 6. 90 Degrees — BBC iPlayer.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Voting machines are under the microscope, scammers are posing as rap stars, and American politician AOC isn't the only one who's been getting into the Among Us game.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by James Thomson.

Plus don't miss the first part of our featured interview with LastPass's Dalia Hamzeh.

Visit https://www.smashingsecurity.com/202 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Dalia Hamzeh and James Thomson.

Sponsored By:

• Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources.
• 
  
• For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express.
• 
  
• Get it now at smashingsecurity.com/recordedfuture
• Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats.
• 
  
• Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses.
• 
  
• Go to immersivelabs.com/smashing
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Rapper scammers admit faking association with musical group in conspiracy to cheat hotels, bank, limo service — US Department of Justice.
• This U.S. Election Could Be the Most Secure Yet. Here’s Why — The New York Times on YouTube.
• Report: Ransomware disables Georgia county election database — AP.
• Pity the nation: Americans’ choice of president on November 3 will affect Slovaks too. — Slovak Spectator article by James Thomson.
• AOC’s Among Us livestream hints at Twitch’s political power — MIT Technology Review.
• AOC makes explosive Twitch debut with over 435,000 Among Us viewers — Ars Technica.
• A massive spam attack is ruining public 'Among Us' games — Engadget.
• AOC Among Us FULL STREAM — YouTube.
• Among Us Has A Cheating Problem — Kotaku.
• Trump News Today | What The Fuck Just Happened Today?
• ‎WTF Just Happened Today — Apple Podcasts.
• No Filter — Book by Sarah Frier.
• Fake Instagram follower services slapped with lawsuit — HOTforSecurity.
• From Our Own Correspondent — BBC Radio 4.
• From Our Own Correspondent Podcast.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)