Smashing Security

Why a business spat resulted in Liberia falling off the internet, how the US Government shutdown is impacting website security, and the perplexing world of extreme IoT devices.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Zoë Rose.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Zoë Rose.

Sponsored By:

• Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.
• 
  
• 
  
• 
  
• Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Mirai Botnet DDoS (Sky News) — YouTube.
• Massive Cyber Attack Knocks Out Access To Websites (CNBC) — YouTube.
• Download the Mirai source code, and you can run your own IoT botnet — Graham Cluley.
• The makers of the Mirai IoT-hijacking botnet are sentenced — Tripwire State of Security.
• Danny Kaye — Wikipedia.
• "Wonderful Copenhagen" — Danny Kaye from the movie "Hans Christian Andersen".
• International hacker-for-hire jailed for cyber attacks on Liberian telecommunications provider — National Crime Agency.
• Courts Hand Down Hard Jail Time for DDoS — Krebs on Security.
• Liberian ISP sues rival for hiring hacker to attack its network — ZDNet.
• .gov security falters during U.S. shutdown — Netcraft.
• TLS Certificates for Many .gov Domains Not Renewed Due to Government Shutdown — Security Week.
• Owlet.
• Snuza.
• These ‘extreme baby monitors’ claim to track your child’s breathing, heartbeat and every movement — MarketWatch.
• Fisher-Price’s wearable baby monitor is an unreliable rash machine — Engadget.
• Threema - Seriously secure messaging.
• Africa by Toto to play 'for all eternity' in Namib desert — YouTube.
• Africa by Toto to play on eternal loop 'down in Africa' — BBC News.
• "The Brain: The Story of You" by David Eagleman — Amazon.
• "The Coddling of the American Mind: How Good Intentions and Bad Ideas Are Setting Up a Generation for Failure" by Greg Lukianoff — Amazon.
• How Trigger Warnings Are Hurting Mental Health on Campus — The Atlantic.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Twitter and the not-so-ethical hacking of celebrity accounts, study discovers how you can pay someone to quit Facebook for a year, and the millions of dollars you can make from uncovering software vulnerabilities.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.
• 
  
• "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.
• 
  
• Download it for free at smashingsecurity.com/intelligence
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Dad pays girl $200 to give up Facebook — YouTube.
• How much is social media worth? Estimating the value of Facebook by paying users to stop using it — PLOS.
• Being paid to quit Facebook — Graham Cluley.
• This account has been hijacked (temporarily)! — Insinia.
• Security firm hijacks high-profile Twitter accounts — BBC News.
• 'Serious' Twitter flaw allows hackers to post on other people's accounts — Computer Weekly.
• Twitter is Broken — The AntiSocial Engineer.
• About Twitter's SMS PIN feature — Twitter.
• How to Tweet via text message — Twitter.
• Earn $2,000,000 by remotely jailbreaking an iPhone — Graham Cluley.
• Zerodium Offers $2 Million for iOS Hacks, $1 Million for Chat App Exploits — Security Week.
• Life as a bug bounty hunter: a struggle every day, just to get paid — MIT Technology Review.
• Yahoo changes bug bounty policy following 't-shirt gate' — ZDNet.
• Equifax Was Warned — Motherboard.
• Remove Background from Image - remove.bg.
• 'Tidying Up With Marie Kondo' Is a Quiet Delight — The Atlantic.
• Tidying Up with Marie Kondo | Official Trailer — YouTube.
• Bear Brook podcast.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Join us for our special Christmas episode as we tell tales of printer hacking, website defacement, Grinches, and how Google is snooping on your private YouTube videos.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Dave Bittner from The Cyberwire.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• Smashing Security: We're sponsoring ourselves this week! Get in touch at [email protected] if you're interested in partnering with us for a future episode of the show.

Support Smashing Security

Links:

• PewDiePie printer hackers strike again — BBC News.
• ASCII art attack — Smashing Security episode 007.
• TheHackerGiraffe — Patreon.
• Buying PewDiePie a $1M Billboard in Times Square! — YouTube.
• I Bought Every Billboard In My City For This — YouTube.
• PewDiePie Billboards in INDIA | T-Series vs PewDiePie — YouTube.
• WSJ website defaced by PewDiePie fan in ongoing YouTube subscribers battle — ZDNet.
• Disney Severs Ties With YouTube Star PewDiePie After Anti-Semitic Posts — Wall Street Journal.
• TheHackerGiraffe comments on WSJ defacement — Twitter.
• Cockwomble definition — Urban Dictionary.
• The Wombles Season 1 — YouTube.
• YouTube is reading text in users’ videos — Naked Security.
• Google is Scanning for (and Crawling) URLs in Your Private YouTube Videos — Austin Burk.
• Santa's Little Helpers — Reddit.
• Posts about Christmas Grinches — Reddit.
• You're a Mean One, Mr. Grinch — Flearoy.
• Paul McCartney at O2 Arena, London — YouTube.
• Ronnie Wood praised by fans as he catches TUBE home after joining Paul McCartney on stage — Daily Mail.
• Paul McCartney Carpool Karaoke — YouTube.
• Wild Thing podcast.
• Analysis, The Replication Crisis — BBC Radio Four.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

The curious case of George Duke-Cohan, Huawei's CFO finds herself in hot water, and the crazy world of mobile phone mental health apps.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guests Mikko Hyppönen from F-Secure and technology journalist Geoff White.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Mikko Hyppönen.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Three years in jail for teenager who spammed out school bomb threats, and made hoax call about hijacked plane — Graham Cluley.
• Schools bomb hoaxes: Bodycam shows George Duke-Cohan arrest — BBC News.
• Bomb Threat Hoaxer, DDos Boss Gets 3 Years — Krebs on Security.
• Estonian DDoS revenge worm crafter jailed — The Register.
• Canada could be at risk of ‘nasty’ retaliation from China — Vancouver Star.
• Bad news for scammers. Huawei executive Meng Wanzhou has been released on bail — Graham Cluley.
• Child advice chatbots fail to spot sexual abuse — BBC News.
• Alibaba already has a voice assistant way better than Google’s — MIT Technology Review.
• Making a Murderer — Netflix.
• Making a Murderer lawyer Kathleen Zellner is true crime's new star — BBC News.
• Rebutting a Murderer podcast — Spreaker.
• DOOM (Shareware Episode) — Internet Archive.
• Doom (1993 video game) — Wikipedia.
• Points of Egress — Love + Radio.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Fitness apps exploit TouchID through a sneaky user interface trick, tech giants claim to have a plan to banish passwords, and you won't believe who was behind a sextortion scam that targeted over 400 members of the US military.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by ferret-loving ethical hacker Zoë Rose.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Zoë Rose.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Military criminal investigative organizations crack down on sextortion ring targeting service members — NCIS.
• Scam iOS apps promise fitness, steal money instead — WeLIveSecurity.
• Mastercard, Microsoft to Advance Digital Identity Innovations — Mastercard press release.
• China's Surveillance State Should Scare Everyone — The Atlantic.
• Mastercard and Microsoft to jointly develop universal digital ID technology — IT Pro.
• A Victorian point and click adventure game — Bertram Fiddle.
• Bertram Fiddle: A Bleaker Predicklement Trailer — YouTube.
• Oura Ring sleep and activity tracker.
• Learn how Oura ring works.
• Marriott warns of hack. 500 million Starwood hotel guests' personal data could be exposed — Graham Cluley.
• Marriott breach: What to do when hackers steal your passport number — CNet.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

How are scammers stealing your money through Google Maps? Why did the FBI create a fake FedEx website? And how are US senators hoping to stop Grinch bots ruining Christmas?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

And don't miss our special bonus interview about passwords with Rachael Stockton of LastPass, sponsors of this week's show.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Maria Varmazis and Rachael Stockton.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• A new bank scam using Google Maps loophole — The Hindu.
• Google’s sorry that this crudely offensive image of the Apple logo turned up in Maps — The Washington Post.
• ‘Edwards Snow Den’ infiltrates the White House on Google Maps — The Washington Post.
• The FBI Created a Fake FedEx Website to Unmask a Cybercriminal — Motherboard.
• what3words | Addressing the world.
• When the FBI rather than the fraudsters make a fake FedEx website — Graham Cluley.
• Fingerlings — YouTube.
• Lawmakers introduce bill to stop bots from ruining holiday shopping — CNET.
• The Internet Arcade.
• Alley Cat — The Internet Arcade.
• On November 26th, a mole will land on Mars — The Oatmeal.
• Why did Apple remove the iPhone headphone jack? — Fast Company.
• A simple, cheap and very reliable solution for phones without headphone jack — Reddit.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Tesla takes customer service a step too far, is it a romantic gesture or stalking when you email 246 women called Nicole, and Carole finds herself in a Facebook dilemma.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jessica Barker.

Sponsored By:

• Smashing Security: We're sponsoring ourselves this week! Get in touch at [email protected] if you're interested in partnering with us for a future episode of the show.

Support Smashing Security

Links:

• How I Went From Tesla Delivery Hell To Tesla Giving Me Control Of Their Site Forums With Over 1.5 Million Tesla Account Contacts — DansDeals.com.
• Customer Complains About Tesla Forums, Tesla Accidentally Gives Him Control Over Them — Motherboard.
• A Guy Emailed 246 Nicoles Trying To Find The One He Met At A Bar And Now They're All Friends — Buzzfeed News.
• Facebook exodus: 44 percent of American users ages 18-29 have deleted app — CNBC.
• How Facebook employees reacted to NYT report on leadership, scandals — Business Insider.
• Delay, Deny and Deflect: How Facebook’s Leaders Fought Through Crisis — New York Times.
• Facebook’s top execs ‘make tobacco executives look like Mister Rogers’ — Recode.
• Facebook Morale, Hurt by Share Drop, Suffers Another Hit — Bloomberg.
• “I Hope It Cracks Who She Is Wide Open”: Inside Silicon Valley, Many Have Long Known Sheryl Sandberg Isn’t a Saint — Vanity Fair.
• Now eight parliaments are demanding Zuckerberg answers for Facebook scandals — TechCrunch.
• The Beatles - Glass Onion (2018 Mix) — YouTube.
• The Beatles (White Album) 50th Anniversary Edition — The Beatles.
• American Animals.
• Krissy Brierre-Davis (@krissys_kitchen) — Twitter.
• iPhone hack: Thousands of people just discovered the 'life-changing' space bar trick — The Independent.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Does your employer want to turn you into a cyborg? Was this phishing test devised by an evil genius? And how did a cinema chain get scammed out of millions, time and time again...?

Oh, and the subject of erasable pens comes up again.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Scott Helme.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Scott Helme.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Cinema Chain Sees Bad Movie Script Play Out As It Loses Millions In Email Scam — Martijn Grooten writes on Forbes.
• Internet con men ripped off Pathe NL for €19m in sophisticated fraud — DutchNews.nl.
• Court documents describing the scam — It's in Dutch. Don't ask us to translate it.
• Tweet from InfoSecSherpa describing diabolical phishing test.
• BBC Click on Twitter: "Could you be paying for things using just your hand?" — Scott Helme is filmed getting an implant.
• The future prospects of embedded microchips in humans as unique identifiers: the risks versus the rewards (PDF) — University of Wollongong, Australia.
• Alarm over talks to implant UK employees with microchips — The Guardian.
• I, Tonya trailer — YouTube.
• Rocketbook.
• Introducing Rocketbook Everlast — YouTube.
• Bohemian Rhapsody Performed in 42 Styles — YouTube.
• Open Culture.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

One travel blogger finds you don't have to be Kylie Jenner to be targeted by an Instagram hacker. When 40 iPhones at a hospital mysteriously die, what could be the explanation? And, surprise surprise, political parties in the USA are throwing around hacking accusations.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Mark Stockley.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Mark Stockley.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.
• 
  
• Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Kylie Jenner — Instagram.
• Hacker, angry over unpaid $200, deletes Abu Dhabi-based travel blogger's account — Gulf News.
• Of Travels & Tales — Delaine Maria D’Costa's blog.
• Delaine Maria D’Costa's Instagram account
• IG hacked! — Delaine Maria D’Costa posts an Instagram story about how she was hacked.
• Instagram finally supports third-party authentication apps for greater account security — Graham Cluley.
• Spooky miasmic gas bricks hospital iPhones (mwah ha ha ha) — Naked Security.
• MRI disabled every iOS device in facility — Reddit.
• Voting Machine Manual Instructed Election Officials to Use Weak Passwords — Motherboard.
• After failed hacking attempt SoS launches investigation into Georgia Democratic party — Press release on Secretary of State's website (which, by the way, doesn't use HTTPS).
• Mid-term elections 2018: Race rows mire campaign home stretch — BBC News.
• The Cybersecurity 202: Brian Kemp's hacking allegations highlight the challenges of preserving voter confidence — The Washington Post.
• Georgia governor’s race roiled by election security charges — Associated Press.
• Elections security: Federal help or power grab? — Politico (2016).
• Georgia Officials Quietly Patched Security Holes They Said Didn't Exist — ProPublica.
• The Erasable Pen - Pilot Frixion - Gear for Back to School — YouTube.
• FriXion Family by Pilot
• Sapiens: A Brief History of Humankind by Yuval Noah Harari — We're not listing the Pick of the Week Mark eventually chose as it's too rude.
• Isle of Dogs movie
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Who deserves to die in a driverless car crash? Who has been sniffing around the Girl Scouts' email account? And just how long would it take for a geologist to visit 9,000 adult web pages?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by journalist and "Friends" fan Dan Raywood.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dan Raywood.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Self-Driving Cars: The Ethical Dilemma — YouTube.
• Moral Machine — A platform for gathering a human perspective on moral decisions made by machine intelligence, such as self-driving cars.
• Moral Machine - Human Perspectives on Machine Ethics — YouTube.
• Girl Scouts' personal information affected by recent data breach — ABC30.
• Girl Scouts Alerted to Possible Data Breach — Infosecurity Magazine.
• Where does Girl Scout cookie money go? — SAS Learning Post.
• "You're a Big Scrud" — YouTube.
• USGS IT Security vulnerabilities (PDF) — Office of Inspector General management advisory.
• Porn-Watching Employee Infected Government Networks With Russian Malware, IG Says — NextGov.
• 100 Feds Found to Be Frequent Workplace Porn-Watchers — Government Executive.
• Ten Years Ago — See what the internet was doing...
• The Wayback Machine
• Dead Rock Stars podcast
• Free Rice
• World Food Programme
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)