Smashing Security

A Facebook friend request leads to arrest, Twitter scams ride again via promoted ads, and adult websites expose their members. Oh, and Graham finds out what Rule 34 is.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.
• 
  
• Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Robber contacts victim on Facebook to apologize, Reading police say — Reading Eagle
• Maria Varmazis spots a promoted, verified scam tweet — Twitter
• Why is Elon Musk promoting this Bitcoin scam? (He’s not) — Naked Security
• Twitter thought Elon Musk's bizarre tweets were evidence he'd been hacked — Graham Cluley
• Hack on 8 adult websites exposes oodles of intimate user data — Ars Technica
• Wife Lovers website snapshot — Wayback Machine
• Friends Reunited — Wikipedia
• The Beano — Wikipedia
• Former CIA Chief Explains How Spies Use Disguises — YouTube
• What Makes ‘The Good Place’ So Good? — The New York Times
• The Good Place Season 1 Trailer — YouTube
• Trolley problem — Wikipedia
• IRL Glasses Block All the Screens Around You — Wired
• IRL Glasses - Glasses that Block Screens by Ivan Cash — Kickstarter
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Yes, Smashing Security has reached its 100th episode!

Despite our celebratory mood, we don't forget to take a look at the security stories of the last week - including an alarming IoT failure and a dating app disaster for Donald Trump devotees.

All this and much more is discussed in this very special 100th edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.
• 
  
• 
  
• 
  
• Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor

Support Smashing Security

Links:

• The very first episode of Smashing Security: "One cup, two hotel guests" — Sorry about the poor audio quality. Turns out we got better...
• Yale UK announces some "unplanned network maintenance" — Twitter
• Yale UK's network maintenance isn't going well — Twitter
• Cllr Steve Wortley is not very happy with Yale UK — Twitter
• Beth is not impressed with Yale UK either — Twitter
• Kirstie Pendry doesn't fancy waking her entire street at 5am — Twitter
• Yale Smart Home Borkage: Server Issues Cause Alarm App Fail — Computer Business Review
• Yale Weds: Just some system maintenance, nothing to worry about. Yale Thurs: Nobody's smart alarm app works — The Register
• Hundreds of 'smart' locks bricked by flubbed remote update — Graham Cluley
• Hotel guests locked in their rooms by ransomware? It doesn't make sense — Graham Cluley
• 71% of Tinder users say political differences are a deal breaker — MSNBC
• New Dating App for Trump Supporters Seeks to ‘Make America Date Again’ — Newsweek
• The ‘Donald Daters’ Trump Dating App Exposed Its Users’ Data — Motherboard
• Donald Daters, a dating app for Trump supporters, leaked its users’ data — Techcrunch
• How I “found” the database of the Donald Daters App
• Robert Baptiste's video of Donald Daters vulnerability — Twitter
• Blue Peter — Wikipedia
• Tony Walsh's beautiful tribute to Blue Peter will give you goosebumps — CBBC on Twitter
• Janet Ellis — Wikipedia
• Sophie Ellis-Bextor — Wikipedia
• Tony Walsh's performance of 'This Is The Place' at the Manchester attack vigil — YouTube
• A Scary Time by Lynzy Lab — YouTube
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

With Carole in the wilds of Canada, and Graham knee-deep in a security conference in Glasgow, we drag an episode out from the archives of February 2017 - looking at the thorny subject of passwords.

Join computer security veterans Graham Cluley, Carole Theriault, and Vanja Švajcer as they offer some advice and tips for computer users.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Vanja Švajcer.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Millions of Facebook user accounts put at risk after hack! The UK Conservative party's conference app causes a privacy omnishambles! And Facebook (again) has been doing something naughty with the phone numbers you give it for security reasons! Oh, and Maria gets very excited about something to do with Star Trek.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Boxcryptor:

  Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.

  Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor

Support Smashing Security

Links:

• Our Podcast Awards trophy acceptance video — Even though we didn't actually win, we still thought you might like to see it.
• Virus Bulletin conference, Montreal — Say "Hi" to Carole if you see her there.
• Everything that went wrong during Theresa May’s 2017 conference speech - YouTube
• Die Hard on the One Show - Charlie Brooker's Weekly Wipe - YouTube
• Conservative Party conference app reveals MPs' numbers - BBC News
• The Tories Say They Were "Let Down" By A Conference App Platform After It Allowed Access To The Personal Numbers Of Hundreds Of MPs
• Conference apps are crap and (mostly) pointless
• Security Update – Facebook Newsroom
• The Facebook Security Meltdown Exposes Way More Sites Than Facebook
• Investigating sources of PII used in Facebook’s targeted advertising (PDF) — Research from Northeastern University.
• Facebook Is Giving Advertisers Access to Your Shadow Contact Information
• You Gave Facebook Your Number For Security. They Used It For Ads — The EFF is not impressed.
• The The One Show Show on iTunes
• manwhohasitall (@manwhohasitall) on Twitter
• Tiburn Enterprise Star Trek PC at Lenovo Tech World 2018 - YouTube
• Lenovo Sets Computer to Stun, Unveils Star Trek Enterprise PC
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Why was Zoho's website taken offline by its own domain registrar? How are dash cams making you less secure? And why are robocalls on the rise in the United States?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Update on Zoho Services Disruption - Zoho Blog
• Zoho CEO Sridhar Vembu asks for help on Twitter
• Whoa – oh no, Zoho: Domain name no-show deals CRM biz, 40m punters a crushing blow
• Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users
• Blackvue Dash-Cams Broadcasting Live Video and GPS of Your Car PUBLICLY by DEFAULT! - YouTube
• Tim Woodruff's tweet about BlackVue dash cams
• Yes, It’s Bad. Robocalls, and Their Scams, Are Surging
• YouMail - Robocall Index
• 4.2 Billion Robocalls in August Set All-Time Record for YouMail Robocall Index
• Does Local Presence Dialing Really Work?
• National Do Not Call Registry
• The Robocall Nightmare Is Getting Worse
• US Court Finds Anti-Robocall Rule Made Nearly Every Smartphone User a Criminal
• Stop Unwanted Robocalls and Texts - FCC
• Leatherman Micra 10-in-1 Multi-Tool
• Techmoan - YouTube
• The Guild of Ambience - YouTube
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Amazon staff are being bribed to delete negative reviews and leak data, deepfakes are getting more dangerous, an update on John McAfee's bitcoin bet, and our guest gets a shock...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week (for a while at least) by David Bisson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: David Bisson.

Sponsored By:

• Boxcryptor:

  Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.

  Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor

Support Smashing Security

Links:

• 'Pull your finger out' - the phrase's meaning and origin
• Amazon Investigates Employees Leaking Data for Bribes - WSJ
• Amazon staff said to be taking bribes to leak data
• Crooked firms bribe customers with free gifts to leave fake reviews
• Smashing Security 063: Carole's back! (where Maria Varmazis discusses deepfakes)
• Carnegie Mellon Researchers Develop New Deepfake Method
• Transferring One Video Into the Style of Another - YouTube
• The Secret to Detecting Deep Fakes Is in the Eye Blinks
• Reddit bans ‘deepfakes’ AI porn communities
• Bitcoin Price Prediction Tracker
• Serious Eats: The Destination for Delicious
• JoyofBaking.com
• How to cook the perfect ...
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Malicious script is being blamed for the British Airways hack, Trend Micro's apps are booted out of the Mac App Store for snaffling private data, and Paul Manafort's daughter wants Twitter to remove a link.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by David Emm of Kaspersky Lab.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: David Emm.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• A Deceitful 'Doctor' in the Mac App Store
• Alert: Adware Doctor stealing your files - YouTube video
• Apps that steal users' browser histories kicked out of the Mac App store
• Trend Micro apologises after Mac apps found scooping up users' browser history
• British Airways hacked - customer data and details of 380,000 card payments stolen
• The British Airways Breach: How Magecart Claimed 380,000 Victims
• British Airways hack: Infosec experts finger third-party scripts on payment pages
• Law firm launches £500 million group action over British Airways hack
• British Airways Fly The Flag We'll Take More Care Of You 1979 UK Advert - YouTube
• Hacked texts from family of former Trump campaign manager surface on the dark web
• Manafort's Daughter's Lawyers Pressured Twitter to Delete Links to Hacked Text Messages
• Wikileaks Refused To Publish Manafort Family Texts, So Someone Else Did
• AirHelp
• How Employing Autistic People Can Help Stop Cyber-Attacks
• McFadden's Cold War (@Coldwar_Steve) on Twitter
• When Phil Mitchell met Trump: Coldwar Steve and his Brexit Britain mashups
• Noel Edmonds - Wikipedia
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

What's the danger when browser extensions go bad? Is Twitter sharing your online status a boon for stalkers? And which of the show's hosts is going to admit to cheating in their exams?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist David McClelland.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: David McClelland.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• MEGA.nz Chrome extension caught stealing passwords, cryptocurrency private keys
• Security warnings for MEGA Chrome extension users
• Twitter testing new feature that reveals when you're online... Who other than stalkers actually wants this?
• Giving social networking back to you - The Mastodon Project
• Graham Cluley on Mastodon
• Photomath - Camera calculator
• Technology Gives Students Innovative Tools for Cheating
• Students’ cheating takes a high-tech turn
• Microsoft Education: Take a Test - YouTube
• Required to install school malware on my personal computer - Reddit
• The Lord of the Rings (1978 film) - Wikipedia
• Rotoscoping - Wikipedia
• Tower – Official Trailer - YouTube
• Tower - Netflix
• Cone - Live Color Picker
• The dress - Wikipedia
• A professor and his son-in-law came up with a brilliant invention to slash water use by 98% – Ikea is already a partner
• Altered:Company
• Altered:Nozzle - YouTube
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

How do fraudsters exploit abandoned domains to steal your company's secrets? How can you better protect your privacy when looking for love online? And who has the longest arms in the animal kingdom?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who were joined briefly by a man in a wind tunnel for this episode.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• What do the drsolomon.com and sands.co.uk domains look like now?
• Hacking law firms with abandoned domain names
• Fraudsters Can Access Sensitive Information from Abandoned Domains
• Have I Been Pwned: Domain search
• John and Lorena Bobbitt
• He Used Tinder to Hunt the Women He Raped and Killed, Police Say
• Missing Paperwork Got Him Out of Jail. Then, Police Say, He Raped and Killed
• Man jailed after attempting to rob man he met on dating app
• Search for images with reverse image search
• Swytch lets you use up to five 'burner' UK phone numbers from a single device
• Smashing Security 072: Why are firms so cr*p with our private data?
• A Hacker's Guide to Protecting Your Privacy While Dating 
• How to Protect Your Privacy While Online Dating
• Gibbons have the longest arms relative to body size of any primate
• Bomb Chicken Teaser Trailer - YouTube
• Bomb Chicken for Nintendo Switch
• Fortnite fury over how Google handled its security hole
• The Godless Spellchecker podcast
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Is your used car still connected to its old owner? Just how did Apple manage to identify the teenager hacker who stole 90GB of the firm's files? And why on earth would a firm of lawyers start producing pornographic videos? You'll be surprised by the answers!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Paul Ducklin.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Connected car data handover headache: There's no quick fix... and it's NOT just Land Rovers
• Shock Land Rover Discovery: Sellers could meddle with connected cars if not unbound
• The hidden data danger of the ‘Connected’ car
• Your BMW or Merc may also be at risk of being hacked, because of your iOS app
• Samy, the MySpace worm written by Samy Kamkar
• Apple hacked by 16-year-old who “dreamed” of working for firm
• Melbourne teen hacked into Apple's secure computer network, court told
• Prenda Law stories at Techdirt
• Minneapolis lawyer pleads guilty to federal fraud, money laundering charges in porn troll scheme
• Cybercrime Investigations podcast with Geoff White
• Flash Drives for Freedom
• Final Space
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)