Smashing Security

By Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity veteran Graham Cluley, it serves up weekly tales of

... more

4.5

315315 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Smashing Security:

How many episodes does Smashing Security have?

The podcast currently has 453 episodes available.

Smashing Security episodes:

March 21, 2018070: Facebook and Cambridge Diabolica
It’s not fair to describe what happened at Facebook and Cambridge Analytica as a data breach - it’s much worse than that. An autonomous Uber vehicle kills a pedestrian. And sextortion continues to be a serious problem.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by researcher Scott Helme.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Scott Helme.
Sponsored By:
MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security
Links:
Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach
Revealed: Trump’s election consultants filmed saying they use bribes and sex workers to entrap politicians
Cambridge Analytica's grab of 50 million Facebook users' data
Cambridge Analytica controversy: Was there a Facebook data breach?
Martijn Grooten's GDPR joke
How To Change Your Facebook Settings To Opt Out of Platform API Sharing
Uber Halts Autonomous Car Tests After Fatal Crash in Arizona
Warning from police: scammers solicit nude photos for blackmail
Warning 'sextortion' on the rise as models used in online blackmail scams
West Australians targeted on social media in ‘sextortion’ scam
StartPage Web Search
Introducing Cloudflare Workers
The brand new Security Headers Cloudflare Worker
PGN Piano on YouTube
Move Forward Guitar on YouTube
Fretjam on YouTube
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
41min
March 14, 2018069: Cryptomining, China, and Bob Ross
How come Apple's Mac App Store authorised a buggy app that mined for cryptocurrency in the background? How can a Mosquito attack steal data from an air-gapped computer? And is China keeping score on its social media-loving citizens?
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest John Hawes.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: John Hawes.
Sponsored By:
LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security
Links:
There’s a currency miner in the Mac App Store, and Apple seems OK with it
A Surreptitious Cryptocurrency Miner in the Mac App Store?
MOSQUITO Attack Allows Air-Gapped Computers to Covertly Exchange Data
MOSQUITO earbuds: Jumping air-gaps via speaker-to-speaker communication - YouTube
Would you choose a partner based on their 'citizen score'?
China eyes 'black tech' to boost security as parliament meets
Big data meets Big Brother as China moves to rate its citizens
How WeChat came to rule China
The Rubik's Contraption
0.38 Second Rubik's Cube Solve - YouTube
Statista - The Statistics Portal for Market Data, Market Research and Market Studies
Bob Ross - Wikipedia
Is there a way to stop certain video suggestions on Youtube? I watched like 3 flat earth videos so I could have a good laugh, and now 90% of the recommended videos are from flattards
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
43min
March 07, 2018068: Malware from outer space!
If aliens did contact us would it be safe to open the email? Why would MoviePass track film lovers after they leave the cinema? Would you know how to get around Malaysia when your car rental website lets you down? And will Graham please stop talking about text adventure games?
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by journalist (and possible spy) James Thomson.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: James Thomson.
Sponsored By:
MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security
Links:
Eurozine discusses disinformation and democracy
Malware from Space
Interstellar communication. IX. Message contamination is impossible (PDF)
MoviePass CEO proudly says the app tracks your location before and after movies
CEO Mitch Lowe Says MoviePass Will Reach 5 Million Subs by End of Year
MoviePass Privacy Policy
GET LAMP: The text adventure documentary
Leather Goddesses of Phobos
GET LAMP: The Text Adventure Documentary - YouTube
Infocom: The Documentary - YouTube
Jacaranda Jim - retro text adventure game by Graham
Humbug - retro text adventure game for MS-DOS by Graham
Warrington Cycle Campaign
Cycle Facility of the Month July 2017
#WeThePeople LIVE podcast
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
45min
March 01, 2018067: Cyber stalking and gun control
Incognito mode on your browser not as private as you think, consumer spyware companies get hacked, Graham is accused of "multitasking" in his hotel room, and Carole champions the students of Parkland, Florida.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who recorded without a special guest this week.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Sponsored By:
LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security
Links:
How to go 'Incognito' on your web browser, and what it means
Your private browsing isn’t as incognito as you want it to be
Veil is private browsing for the ultra-paranoid
Hacker Strikes ‘Stalkerware’ Companies, Stealing Alleged Texts and GPS Locations of Customers
Spy on Your Valentine Using Spy Software
How stalking has been made easier by the internet and social networks
Trailer Nite
Florida student to NRA and Trump: 'We call BS' - YouTube
March for our lives
Emma González on Twitter
Florida Student Who Gave Emotional Gun Control Speech Now Has More Followers Than NRA
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
36min
February 21, 2018066: Passwords, pirates, and postcards
Flight simulators packed with password-grabbing malware, Facebook fighting Russian trolls, and how vulnerability researchers fear being sued.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest The CyberWire's Dave Bittner.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Dave Bittner.
Sponsored By:
Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr
MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security
Links:
FSLabs' A320 installer seems to include a Chrome password extraction tool
Flight Simulator Add-On Tried to Catch Pirates By Installing Password-Stealing Malware on Their Computers
A320-X DRM clarification - Flight Sim Labs Forums
FlightSimLabs Alleged Malware Analysis – Luke Gorman
A320-X DRM - what happened - Flight Sim Labs Forums
Lawsuits threaten infosec research - just when we need it most
Facebook plans to use U.S. mail to verify IDs of election ad buyers
Facebook’s secret weapon in the fight against foreign meddling? Postcards
Fact-Checking a Facebook Executive’s Comments on Russian Interference
Punycode - Wikipedia
IDN Safe for Chrome
IDN Safe for Firefox
IDN Safe for Opera
Firefox users - Spot phishing URL's more easily by enabling Show Punycode
Privacy.com — (Dave's recommendation, not ours)
How to remove your credit card information from your iPhone
Change or remove your Apple ID payment information - Apple Support
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
40min
February 15, 2018065: Cryptominomania, Poppy, and your Amazon Alexa
Cryptomining goes nuclear, YouTube for Kids gets scary, and TV ads have been given the green light to mess with your Amazon Alexa.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Maria Varmazis.
Sponsored By:
LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr

Support Smashing Security
Links:
Government websites hijacked by cryptomining plugin
Russian nuclear scientists arrested for allegedly hijacking supercomputer to mine Bitcoins
Now that's taking the p... Sewage plant 'hacked' to craft crypto-coins
Salon website gives you a choice: turn off your ad blocker or let us mine cryptocurrencies
Coinhive review: Embeddable JavaScript Crypto Miner - 3 days in
Smashing Security 059: An intro to Bitcoin and Blockchain
YouTube Kids app still showing disturbing videos
Something is wrong on the internet – James Bridle
Amazon Echo Dot ad cleared over cat food order
Broadcast Code - ASA
Sarah Huckabee Sanders warns Twitter about Amazon Echo after 2-year-old orders $80 Batman toy
Cat Food (Amazon Echo Commercial) - YouTube
Dinosaur Chess
The Furby Organ, A Musical Instrument Made From Furbies - YouTube
Wintergatan - Marble Machine (music instrument using 2000 marbles) - YouTube
Poppy introduces a plant - YouTube
Poppy is a disturbing internet meme seen by millions. Can she become a pop sensation?
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
50min
February 07, 2018064: So just a "teeny tiny" security issue then?
A Namecheap vulnerability allows strangers to make subdomains for your website, Troy Hunt examines password length, and ex-Google and Facebook employees are fighting to protect kids from social media addiction.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest HaveIBeenPwned's Troy Hunt.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Troy Hunt.
Sponsored By:
MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr

Support Smashing Security
Links:
Namecheap Name Server Vulnerability Allows Unauthorized Users to Create Sub-Domains
That’s not how security works, security is not obscurity
Update on Recent Hosting Breach - Namecheap Blog
Have I been pwned? Pwned Passwords
How Long is Long Enough? Minimum Password Lengths by the World's Top Sites
Center for Humane Technology
Adam Alter: Why our screens make us less happy
Ex Facebook, Google Employees Launch Anti-Tech Campaign
Social Networking Sites and Addiction: Ten Lessons Learned
'Fiction is outperforming reality': how YouTube's algorithm distorts truth
AlphaGo movie
In Two Moves, AlphaGo and Lee Sedol Redefined the Future
Ubiquiti Networks
Basic Crepe Batter Recipe
Gateau de crepes
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
44min
February 01, 2018063: Carole's back!
Fitness trackers breaching your privacy, how anyone can create convincing celebrity porn, and how ransomware authors are getting ripped off by scammers.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Maria Varmazis.
Sponsored By:
Chess CyberSecurity: Chess CyberSecurity is taking the pulse of the IT nation. Complete their three-minute quiz and you could win amazing prizes - including limited edition t-shirts, wireless headphones, an iPad Pro and a Sony PS4.

Support Smashing Security
Links:
Strava's Global Heatmap
Nathan Ruser tweets about Strava's global heatmap
Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online
Thar she blows: Strava heat map shows folk on shipwreck packed with 1,500 tonnes of bombs
Advanced Deanonymization through Strava
Fake celebrity porn is blowing up on Reddit, thanks to artificial intelligence
Reddit User Outperforms Disney with AI-Generated Princess Leia
Fake News Is About to Get Even Scarier than You Ever Dreamed
Josh Turner of The Other Favorites - YouTube
The Levee by The Other Favorites - YouTube
Blood on the Tracks by Bob Dylan
United denies woman's attempt to bring peacock onto flight
Dexter The Peacock on Instagram
Reforestation Drones Can Plant 100K Trees In An Hour
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
46min
January 24, 2018062: Tinder spying, Amazon shoplifting, and petrol pump malware
Your Tinder swipes can be spied upon, Amazon is opening high street stores that don't require any staff, and Russian fuel pumps are being infected with malware in an elaborate scheme to make large amounts of money.
With Carole on a top secret special assignment, it's left to security veteran Graham Cluley to discuss all this and much much more with special guests David McClelland and Vanja Švajcer.
Follow the "Smashing Security" podcast on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guests: David McClelland and Vanja Švajcer.
Sponsored By:
LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private.

Support Smashing Security
Links:
Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes
Tinder drift demo - YouTube
Using public Wi-Fi - a Smashing Security splinter
Watchdog Wednesday: WiFi hackers - BBC
Apple drops requirement for apps to use HTTPS by 2017
Amazon Go debuts, and its prying cameras foil our shoplifting attempts
Hacker Infects Gas Pumps with Code to Cheat Customers
Making Blake's Seven 101 - YouTube
Jon Alpert Speaks On His Film, "Cuba and the Cameraman" - YouTube
Review: ‘Cuba and the Cameraman’ Lavishes Love on a Country … and Castro
CARROT Weather on the iOS App Store
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
45min
January 17, 2018061: Fallout over Hawaii missile false alarm
User interfaces and poor procedures lead to pandemonium in Hawaii, hackers are attempting to trick victims into opening cryptocurrency-related email attachments, and yet more pox-ridden apps are found in Android's Google Play store.
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul Ducklin.
Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.
Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!
Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Paul Ducklin.
Sponsored By:
LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private.

Support Smashing Security
Links:
Hawaii's ballistic missile false alarm and a user interface failure
Hawaii missile alert: How one employee ‘pushed the wrong button’ and caused a wave of panic
What Hawaii Was Like After the False Nuclear Alarm
Cryptocurrency as the lure, an ISO as the attachment – why not open it?
Malware Displaying Porn Ads Discovered in Game Apps on Google Play
Games with pornographic ads sneak into the Play Store, get 3 million downloads
Fake WhatsApp app tricked over a million users
@ruanyf on Twitter's picture of a visual display for a Chinese lavatory
Police give out infected USBs as prizes in cybersecurity quiz
IBM distributes USB malware cocktail at AusCERT security conference
IBM has been shipping malware-infected USB sticks
Olympus Stylus Tough camera carries malware infection
Google Arts and Culture app: How to find which famous painting you look like – and why people don't want to
Google Arts & Culture
Smashing Security on Facebook
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy
...more
51min

FAQs about Smashing Security:

How many episodes does Smashing Security have?

The podcast currently has 453 episodes available.

More shows like Smashing Security

Hacked by Hacked

Hacked

187 Listeners

Security Now (Audio) by TWiT

Security Now (Audio)

2,010 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

372 Listeners

Risky Business by Patrick Gray

Risky Business

372 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

651 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,020 Listeners

Click Here by Recorded Future News

Click Here

416 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,055 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

180 Listeners

Hacking Humans by N2K Networks

Hacking Humans

314 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

189 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

139 Listeners

Hacker And The Fed by Chris Tarbell & Hector Monsegur

Hacker And The Fed

169 Listeners

The AI Fix by Graham Cluley and Mark Stockley

The AI Fix

34 Listeners