Smashing Security

Just how did sextortionists get (some) of the digits in your phone number? Why are some hackers saying they won't be going to DEF CON in Las Vegas anymore? And should Alex Jones from InfoWars be banned from Twitter?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• The Podcast Awards - The People's Choice
• Sex extortion emails now quoting part of their victim's phone number
• New Extortion Tricks: Now Including Your (Partial) Phone Number!
• In post-massacre Vegas, security policies clash with privacy values
• Katie Moussouris tweets about her Las Vegas hotel experience
• Video Shows Hotel Security at DEF CON Joking About Posting Photos of Guests' Belongings to Snapchat
• Google Spectre whizz kicked out of Caesars, blocked from DEF CON over hack 'attack' tweet
• Open letter to the Hacker Community from DEF CON's Head of Security
• Alex Jones banned from YouTube, Facebook, and Apple, explained
• Facebook, Apple, YouTube and Spotify ban Infowars' Alex Jones
• Now even YouPorn has banned Alex Jones, but he’s still on Twitter
• Twitter temporarily blocks Alex Jones from tweeting
• The Twitter Rules
• Giving social networking back to you - The Mastodon Project
• Charlottesville: Why one man is suing Alex Jones for defamation
• Shannon Coulter tweets about blocking Fortune 500 companies until Alex Jones is banned from Twitter
• lichess.org - Free Online Chess
• Magnus Carlsen playing as Dr Drunkenstein - YouTube
• Octopath Traveler for Nintendo Switch
• Alex Jones Rants as an Indie Folk Song - YouTube
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Fortnite players are told they'll have to disable a security setting on Android, the FCC finally admits that it wasn't hit by a DDoS attack, and Verizon's VPN smallprint raises privacy concerns.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by David Bisson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: David Bisson.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• You'll have to disable a recommended Android security setting to install Fortnite
• Fortnite is putting users at risk, to prove a point about Google's Android monopoly
• Introducing Android 9 Pie
• Safe-WiFi Wireless Private Network - Verizon Wireless
• Verizon Didn’t Bother to Write a Privacy Policy for its ‘Privacy Protecting’ VPN
• Terms of Service for the Verizon Safe Wi Fi App
• McAfee Privacy Notice
• Verizon customers can sue ad company over “zombie” cookies, judges rule
• Ajit Pai blames Obama administration over FCC DDoS attack that didn't happen
• Inside the FCC's risky IT overhaul
• The Triceratops Who Loved Me: A Primal Urges Extreme Fantasy - Amazon
• A Good Movie To Watch
• Overcooked! 2 for Nintendo Switch
• Christopher Robin: Winnie the Pooh film denied release in China
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Ransomware rears its head again, Dixons Carphone reveals its data breach was almost 1000% worse than they previously thought, a man is accused of stealing five million dollars worth of cryptocurrency through hijacking mobile phones, and a Canadian guy called Norman is rushing to get the typewriters out of storage.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by journalist Geoff White.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Geoff White.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Shipping company’s networks in the Americas crippled by ransomware attack
• Yahoo addresses used by Cosco following ransomware attack
• BitPaymer Ransomware Infection Forces Alaskan Town to Use Typewriters for a Week
• Jim Hagemann Snabe, Maersk chairman, describing their recovery from the NotPetya ransomware - YouTube
• Dixons Carphone admits hack far bigger than originally thought
• Dixons Carphone breach statement (June 2018)
• Dixons Carphone updated breach statement (July 2018)
• ‘Tell your dad to give us Bitcoin’ How a Hacker Allegedly Stole Millions by Hijacking Phone Numbers
• Smashing Security 086: Elon Musk submarine scams and 2FA bypass
• Slow Burn: A Podcast About Watergate
• Bill Clinton: "I did not have sexual relations with that woman" - YouTube
• How an Ex-Cop Rigged McDonald’s Monopoly Game and Stole Millions
• Legion Season 2 Teaser Trailer - YouTube
• Legion Season 2 - Amazon
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Websites still using HTTP are marked as "not secure" by Chrome, 85,000 Google employees haven't been phished for a year, and if you're buying drugs via PayPal’s Venmo app you should say goodbye to privacy.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Scott Helme.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Scott Helme.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Vote for Smashing Security in the podcast awards!
• Smashing Security 039: Woah - are we talking to a cyborg?
• Google: Security Keys Neutralized Employee Phishing
• Yubico
• Less than 10% of Gmail users have enabled two-factor authentication
• Google's Advanced Protection Program
• What is Google’s Advanced Protection Program? - YouTube
• Two-factor authentication versus two-step verification
• One small step for a browser, one giant leap for web security!
• Chrome browser flags Daily Mail and other sites as 'not secure'
• How to change Chrome's settings to be more in-your-face when you visit an unencrypted HTTP site
• Public by Default - Venmo Stories of 2017
• Why I Blasted Your “Drug” Deals on Twitter
• PayPal's Venmo App Exposes Most Transactions via Its API
• Reporting Trump's First Year: The Fourth Estate - BBC
• Why No HTTPS? The World's Largest Websites Not Redirecting Insecure Requests to HTTPS
• Scott Helme tweets about NewsNow's support for both HTTP and HTTPS
• NewsNow.co.uk
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Regardless of whether Donald Trump believes Russia hacked the Democrats in the run-up to the US Presidential election or not, we explain how they did it. And Carole explores some of the creepier things being done in the name of surveillance.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Vote for Smashing Security in the podcast awards!
• Scammers strike as Elon Musk retracts vile Twitter accusation against cave rescuer
• Donald Trump 'encourages Russia to hack Clinton emails' - YouTube
• Indictment against 12 Russian hackers
• Bears in the Midst: Intrusion into the Democratic National Committee
• This is the email that hacked Hillary Clinton’s campaign chief
• Guccifer 2.0’s schoolboy error reveals he’s hacking from Moscow
• Amazon Rekognition – Video and Image
• Amazon shareholders demand company stop selling facial recognition technology to governments
• Metropolitan Police's facial recognition technology 98% inaccurate, figures show
• Looking to Listen: Audio-Visual Speech Separation
• California Shopping Centers Are Spying for an ICE Contractor
• California passes landmark privacy legislation
• Walmart's Newly Patented Technology For Eavesdropping On Workers Presents Privacy Concerns
• Find a track - BBC Music
• The Staircase - Netflix
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

The world has been gripped with the story of that soccer team, those poor boys... but enough about England's World Cup hopes being dashed, it's time for another episode of "Smashing Security".

Crypto scamming Thai cave rescue scoundrels! $25 million to make anti-fake news videos! TimeHop data breach! Phone number port out scams!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by the author of "Social media is bullshit", B J Mendelson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: B J Mendelson.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Vote for "Smashing Security" in the Podcast Awards
• Thai Cave rescue scammers pose as Elon Musk
• Why was Elon Musk at the Thai cave rescue?
• The full story of Thailand’s extraordinary cave rescue
• Bad Checks: Twitter's Identity Crisis Is Costing Users More Than Bitcoin
• YouTube Pledges $25 Million to Help Fight Fake News
• Timehop security incident
• what3words | Addressing the world
• Justified Season 1 Promo / trailer - YouTube
• Dear Joan and Jericha: agony aunts of the most ribald kind
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Doctor Who's TARDIS has sprung a data leak, Facebook's creepy patents are unmasked, and an app to keep women safe on dates has surprising origins.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• BBC Goes to Court to Identify 'Doctor Who' Leaker
• Doctor Who episodes leak online - should you download them?
• Reality Winner pleads guilty after being unmasked by microdots
• German researchers defeat printers' doc-tracking dots
• Are you happy with this technology that Facebook’s developing?
• Emma Sayle - CEO. Wife. Mother. Liberator. Feminist.
• Killing Kittens Parties Liberating Women Worldwide
• Kate Middleton's friend holds orgies in sharia hotel
• Safe Date – Stay Safe And Get Peace Of Mind When Dating
• Killing Kittens sex party founder hopes new DateSafe app can improve women's safety
• GeoGuessr - Let's explore the world!
• Playground Buddy - Helping Families Find Playgrounds
• Blue Apron is releasing a smart, strong, sensual Bob’s Burgers meal kit
• Every Burger From Bob's Burgers Ranked
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Who's been collecting the voice prints of millions of people saying "My voice is my password"? Why has it become tougher for law enforcement to scoop up cellphone data? And who's been turning up your central heating?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes of AMTSO.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Hawes.

Sponsored By:

• VirusTotal: VirusTotal Intelligence is one of the world’s largest malware intelligence services. Security professionals rely on it to better understand the effects of malware in enterprise networks.Find out more at https://www.virustotal.com/learn

Support Smashing Security

Links:

• Voice ID showcases latest digital development for HMRC customers
• HMRC takes 5 million taxpayers’ Voice IDs without consent – Big Brother Watch
• UK taxman has amassed voice profiles of 5.1 million taxpayers
• BBC fools HSBC voice recognition security system
• Knock down ginger — What Graham meant to say when he referred to "Postman's knock"
• Victory! Supreme Court Says Fourth Amendment Applies to Cell Phone Tracking
• Thermostats, Locks and Lights: Digital Tools of Domestic Abuse
• Safety Net: the National Safe & Strategic Technology Project
• US Tech Safety hotlines
• UK National Domestic Violence Helpline
• Worldwide helpline directory
• Music-Map - The Tourist Map of Music
• Del Amitri
• Ron Sexsmith
• BBC Radio 4 - Short Cuts
• Tandoori Lambchop Sent to Space (Meatspace) - YouTube
• Adam Buxton podcast with Charlie Brooker
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Hell hath no fury like a jealous clarinetist's girlfriend! Your Google ChromeCast could be letting stalkers find out where you live! And why on earth is Graham recommending people write their passwords down in a book!?

Join computer security veterans Graham Cluley and Carole Theriault on a shorter episode of the "Smashing Security" podcast than normal, as they're awfully busy touring up and down the country doing things in front of live audiences.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• View from Carole's hotel room in Manchester
• Eric Abramovitz plays the clarinet - YouTube
• McGill music student awarded $350,000 after girlfriend stalls career
• Eric Abramovitz vs Jennifer (Jooyeon) Lee - Court documents
• Google’s Newest Feature: Find My Home
• Steve Gibson's Three Router Solution to IOT Insecurity
• Google Removes 'Don't Be Evil' Clause From Its Code of Conduct
• Password Minder Infomercial - YouTube
• LaDonna - This American Life
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Coinrail cryptocurrency exchange goes offline after hack, Russia appears to be 'live testing' cyber attacks, and Florida stopped running background checks on gun buyers because of forgotten password.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's football-mad John Leyden.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Leyden.

Sponsored By:

• VirusTotal: VirusTotal Intelligence is one of the world’s largest malware intelligence services. Security professionals rely on it to better understand the effects of malware in enterprise networks.
• 
  
• Find out more at https://www.virustotal.com/learn

Support Smashing Security

Links:

• Bitcoin price takes a dive after another cryptocurrency exchange hack
• Mikko Hypponen on Twitter explains why cryptocurrency exchanges get hacked
• $1m by 2020: John McAfee will still ‘eat his own d*ck’ if he’s wrong about Bitcoin
• 2018 FIFA World Cup Russia
• Russia appears to be 'live testing' cyber attacks - Former UK spy boss Robert Hannigan
• French TV network taken off air after attack by pro-ISIS hackers
• TV5Monde attack proves hacking attribution is very difficult
• TV station exposé its own passwords on l'air. A Franglais report
• VPNFilter botnet has hacked 500,000 routers. Reboot and patch now!
• VPNFilter exploits endpoints, targets new devices
• Florida Didn't Run FBI Background Checks on Gun Buyers for a Year Because of a Forgotten Login
• Adam Putnam’s office stopped reviewing concealed weapons background checks for a year because it couldn’t log in
• Background Check Procedures: State by State
• Department of Agriculture investigative report
• Is It Normal?
• What is the Camino de Santiago?
• Eating and Drinking on the Camino de Santiago
• Pulperia Ezequiel - Great place to eat pulpo (octopus)
• Britannica Insights Is a Chrome Extension to Fix False Google Results
• Britannica Insights - Chrome Web Store
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)