Smashing Security

Endangering your friends online, the fibs told by VPN vendors, developments from the world of cryptomining, and Carole shares an animated GIF with Mikko and Graham.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen from F-Secure.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Mikko Hyppönen.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Mikko's adventure game "Paha Juttu" at the Finnish Game Museum
• Download the Paha Juttu Commodore 64 floppy image file (d64)
• Commodore 64 online emulator (load a d64 file into this)
• Mat Johnson's tweet about Facebook logging his phone calls and texts
• Fact Check: Your Call and SMS History
• Who and What Is Coinhive?
• 100+ VPNs & Their Logging Policy (What Logs Are Kept by Who?)
• Which VPN Services Keep You Anonymous in 2018?
• ‘Lone DNC Hacker’ Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer
• HideMyAss defends role in LulzSec hack arrest
• TLDRLegal - Software Licenses Explained in Plain English
• Some Very Entertaining Plastic, Emulated at the Archive
• Handheld History
• This is what the Internet Archive's building looks like
• CERT-EU News Monitor
• You've never seen anyone climb a wall like this before...
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

It’s not fair to describe what happened at Facebook and Cambridge Analytica as a data breach - it’s much worse than that. An autonomous Uber vehicle kills a pedestrian. And sextortion continues to be a serious problem.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by researcher Scott Helme.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Scott Helme.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach
• Revealed: Trump’s election consultants filmed saying they use bribes and sex workers to entrap politicians
• Cambridge Analytica's grab of 50 million Facebook users' data
• Cambridge Analytica controversy: Was there a Facebook data breach?
• Martijn Grooten's GDPR joke
• How To Change Your Facebook Settings To Opt Out of Platform API Sharing
• Uber Halts Autonomous Car Tests After Fatal Crash in Arizona
• Warning from police: scammers solicit nude photos for blackmail
• Warning 'sextortion' on the rise as models used in online blackmail scams
• West Australians targeted on social media in ‘sextortion’ scam
• StartPage Web Search
• Introducing Cloudflare Workers
• The brand new Security Headers Cloudflare Worker
• PGN Piano on YouTube
• Move Forward Guitar on YouTube
• Fretjam on YouTube
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

How come Apple's Mac App Store authorised a buggy app that mined for cryptocurrency in the background? How can a Mosquito attack steal data from an air-gapped computer? And is China keeping score on its social media-loving citizens?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest John Hawes.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Hawes.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• There’s a currency miner in the Mac App Store, and Apple seems OK with it
• A Surreptitious Cryptocurrency Miner in the Mac App Store?
• MOSQUITO Attack Allows Air-Gapped Computers to Covertly Exchange Data
• MOSQUITO earbuds: Jumping air-gaps via speaker-to-speaker communication - YouTube
• Would you choose a partner based on their 'citizen score'?
• China eyes 'black tech' to boost security as parliament meets
• Big data meets Big Brother as China moves to rate its citizens
• How WeChat came to rule China
• The Rubik's Contraption
• 0.38 Second Rubik's Cube Solve - YouTube
• Statista - The Statistics Portal for Market Data, Market Research and Market Studies
• Bob Ross - Wikipedia
• Is there a way to stop certain video suggestions on Youtube? I watched like 3 flat earth videos so I could have a good laugh, and now 90% of the recommended videos are from flattards
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

If aliens did contact us would it be safe to open the email? Why would MoviePass track film lovers after they leave the cinema? Would you know how to get around Malaysia when your car rental website lets you down? And will Graham please stop talking about text adventure games?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by journalist (and possible spy) James Thomson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: James Thomson.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Eurozine discusses disinformation and democracy
• Malware from Space
• Interstellar communication. IX. Message contamination is impossible (PDF)
• MoviePass CEO proudly says the app tracks your location before and after movies
• CEO Mitch Lowe Says MoviePass Will Reach 5 Million Subs by End of Year
• MoviePass Privacy Policy
• GET LAMP: The text adventure documentary
• Leather Goddesses of Phobos
• GET LAMP: The Text Adventure Documentary - YouTube
• Infocom: The Documentary - YouTube
• Jacaranda Jim - retro text adventure game by Graham
• Humbug - retro text adventure game for MS-DOS by Graham
• Warrington Cycle Campaign
• Cycle Facility of the Month July 2017
• #WeThePeople LIVE podcast
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Incognito mode on your browser not as private as you think, consumer spyware companies get hacked, Graham is accused of "multitasking" in his hotel room, and Carole champions the students of Parkland, Florida.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who recorded without a special guest this week.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• How to go 'Incognito' on your web browser, and what it means
• Your private browsing isn’t as incognito as you want it to be
• Veil is private browsing for the ultra-paranoid
• Hacker Strikes ‘Stalkerware’ Companies, Stealing Alleged Texts and GPS Locations of Customers
• Spy on Your Valentine Using Spy Software
• How stalking has been made easier by the internet and social networks
• Trailer Nite
• Florida student to NRA and Trump: 'We call BS' - YouTube
• March for our lives
• Emma González on Twitter
• Florida Student Who Gave Emotional Gun Control Speech Now Has More Followers Than NRA
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Flight simulators packed with password-grabbing malware, Facebook fighting Russian trolls, and how vulnerability researchers fear being sued.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest The CyberWire's Dave Bittner.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Dave Bittner.

Sponsored By:

• Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr
• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• FSLabs' A320 installer seems to include a Chrome password extraction tool
• Flight Simulator Add-On Tried to Catch Pirates By Installing Password-Stealing Malware on Their Computers
• A320-X DRM clarification - Flight Sim Labs Forums
• FlightSimLabs Alleged Malware Analysis – Luke Gorman
• A320-X DRM - what happened - Flight Sim Labs Forums
• Lawsuits threaten infosec research - just when we need it most
• Facebook plans to use U.S. mail to verify IDs of election ad buyers
• Facebook’s secret weapon in the fight against foreign meddling? Postcards
• Fact-Checking a Facebook Executive’s Comments on Russian Interference
• Punycode - Wikipedia
• IDN Safe for Chrome
• IDN Safe for Firefox
• IDN Safe for Opera
• Firefox users - Spot phishing URL's more easily by enabling Show Punycode
• Privacy.com — (Dave's recommendation, not ours)
• How to remove your credit card information from your iPhone
• Change or remove your Apple ID payment information - Apple Support
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Cryptomining goes nuclear, YouTube for Kids gets scary, and TV ads have been given the green light to mess with your Amazon Alexa.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr

Support Smashing Security

Links:

• Government websites hijacked by cryptomining plugin
• Russian nuclear scientists arrested for allegedly hijacking supercomputer to mine Bitcoins
• Now that's taking the p... Sewage plant 'hacked' to craft crypto-coins
• Salon website gives you a choice: turn off your ad blocker or let us mine cryptocurrencies
• Coinhive review: Embeddable JavaScript Crypto Miner - 3 days in
• Smashing Security 059: An intro to Bitcoin and Blockchain
• YouTube Kids app still showing disturbing videos
• Something is wrong on the internet – James Bridle
• Amazon Echo Dot ad cleared over cat food order
• Broadcast Code - ASA
• Sarah Huckabee Sanders warns Twitter about Amazon Echo after 2-year-old orders $80 Batman toy
• Cat Food (Amazon Echo Commercial) - YouTube
• Dinosaur Chess
• The Furby Organ, A Musical Instrument Made From Furbies - YouTube
• Wintergatan - Marble Machine (music instrument using 2000 marbles) - YouTube
• Poppy introduces a plant - YouTube
• Poppy is a disturbing internet meme seen by millions. Can she become a pop sensation?
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

A Namecheap vulnerability allows strangers to make subdomains for your website, Troy Hunt examines password length, and ex-Google and Facebook employees are fighting to protect kids from social media addiction.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest HaveIBeenPwned's Troy Hunt.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Troy Hunt.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr

Support Smashing Security

Links:

• Namecheap Name Server Vulnerability Allows Unauthorized Users to Create Sub-Domains
• That’s not how security works, security is not obscurity
• Update on Recent Hosting Breach - Namecheap Blog
• Have I been pwned? Pwned Passwords
• How Long is Long Enough? Minimum Password Lengths by the World's Top Sites
• Center for Humane Technology
• Adam Alter: Why our screens make us less happy
• Ex Facebook, Google Employees Launch Anti-Tech Campaign
• Social Networking Sites and Addiction: Ten Lessons Learned
• 'Fiction is outperforming reality': how YouTube's algorithm distorts truth
• AlphaGo movie
• In Two Moves, AlphaGo and Lee Sedol Redefined the Future
• Ubiquiti Networks
• Basic Crepe Batter Recipe
• Gateau de crepes
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Fitness trackers breaching your privacy, how anyone can create convincing celebrity porn, and how ransomware authors are getting ripped off by scammers.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• Chess CyberSecurity: Chess CyberSecurity is taking the pulse of the IT nation. Complete their three-minute quiz and you could win amazing prizes - including limited edition t-shirts, wireless headphones, an iPad Pro and a Sony PS4.

Support Smashing Security

Links:

• Strava's Global Heatmap
• Nathan Ruser tweets about Strava's global heatmap
• Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online
• Thar she blows: Strava heat map shows folk on shipwreck packed with 1,500 tonnes of bombs
• Advanced Deanonymization through Strava
• Fake celebrity porn is blowing up on Reddit, thanks to artificial intelligence
• Reddit User Outperforms Disney with AI-Generated Princess Leia
• Fake News Is About to Get Even Scarier than You Ever Dreamed
• Josh Turner of The Other Favorites - YouTube
• The Levee by The Other Favorites - YouTube
• Blood on the Tracks by Bob Dylan
• United denies woman's attempt to bring peacock onto flight
• Dexter The Peacock on Instagram
• Reforestation Drones Can Plant 100K Trees In An Hour
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Your Tinder swipes can be spied upon, Amazon is opening high street stores that don't require any staff, and Russian fuel pumps are being infected with malware in an elaborate scheme to make large amounts of money.

With Carole on a top secret special assignment, it's left to security veteran Graham Cluley to discuss all this and much much more with special guests David McClelland and Vanja Švajcer.

Follow the "Smashing Security" podcast on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guests: David McClelland and Vanja Švajcer.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private.

Support Smashing Security

Links:

• Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes
• Tinder drift demo - YouTube
• Using public Wi-Fi - a Smashing Security splinter
• Watchdog Wednesday: WiFi hackers - BBC
• Apple drops requirement for apps to use HTTPS by 2017
• Amazon Go debuts, and its prying cameras foil our shoplifting attempts
• Hacker Infects Gas Pumps with Code to Cheat Customers
• Making Blake's Seven 101 - YouTube
• Jon Alpert Speaks On His Film, "Cuba and the Cameraman" - YouTube
• Review: ‘Cuba and the Cameraman’ Lavishes Love on a Country … and Castro
• CARROT Weather on the iOS App Store
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)