Smashing Security

User interfaces and poor procedures lead to pandemonium in Hawaii, hackers are attempting to trick victims into opening cryptocurrency-related email attachments, and yet more pox-ridden apps are found in Android's Google Play store.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul Ducklin.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Paul Ducklin.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private.

Support Smashing Security

Links:

• Hawaii's ballistic missile false alarm and a user interface failure
• Hawaii missile alert: How one employee ‘pushed the wrong button’ and caused a wave of panic
• What Hawaii Was Like After the False Nuclear Alarm
• Cryptocurrency as the lure, an ISO as the attachment – why not open it?
• Malware Displaying Porn Ads Discovered in Game Apps on Google Play
• Games with pornographic ads sneak into the Play Store, get 3 million downloads
• Fake WhatsApp app tricked over a million users
• @ruanyf on Twitter's picture of a visual display for a Chinese lavatory
• Police give out infected USBs as prizes in cybersecurity quiz
• IBM distributes USB malware cocktail at AusCERT security conference
• IBM has been shipping malware-infected USB sticks
• Olympus Stylus Tough camera carries malware infection
• Google Arts and Culture app: How to find which famous painting you look like – and why people don't want to
• Google Arts & Culture
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

The chips are down, as tech companies struggle to protect against the Meltdown and Spectre flaws. The White House is getting tough on leakers by banning personal devices from the West Wing. And someone has been embedding a Bitcoin wallet into their hand...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David McClelland.

Sponsored By:

• CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private.

Support Smashing Security

Links:

• Apple fixes the Meltdown and Spectre flaws in Macs, iPhones, and iPads
• Spectre? Meltdown? F*CKWIT? Calm down and make yourself some tea
• Until your anti-virus adds this Registry key, you aren't getting any more Windows security updates
• Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you
• Ouch! Microsoft's Meltdown and Spectre security update bricks some AMD-powered PCs
• Ripple soars, becomes second-biggest cryptocurrency by market cap
• BICHIP
• Would you store Ripple and Bitcoin in 'mark of the beast' microchip?
• Biohacker Summit 2017 – Uniting Technology & Nature
• Meet the first humans to sense where north is
• White House bans use of personal devices from West Wing
• “Fire and Fury” Is a Book All Too Worthy of the President
• Portal Knights - The award-winning sandbox action-RPG adventure game
• Portal Knights trailer for Nintendo Switch - YouTube
• Focus - Productivity Timer on the App Store
• Casefile: True Crime Podcast
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

In this special "splinter" episode of the "Smashing Security" podcast we take a look at Bitcoin and Blockchain. What's all the fuss about cryptocurrencies? How can you protect your Bitcoin wallet? And how does the Blockchain work?

Lots of questions, and Graham offers to sell his family.

Listen to the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Peter Ullrich of the "Explain Blockchain" podcast.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Peter Ullrich.

Support Smashing Security

Links:

• Bitcoin Resources from Jameson Lopp
• Mastering Bitcoin book by Andreas Antonopoulos
• Explain Bitcoin Like I’m Five
• Bitcoin Exchanges
• Silk Road's Ross Ulbricht sentenced to life in prison, without parole
• Bitcoin Energy Consumption Index
• Jaxx mobile cryptocurrency wallet
• Trezor hardware Bitcoin wallet
• "Explain Blockchain" podcast
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Is Face ID racist? Has Mr Robot infected your Firefox browser? Has Microsoft pushed a buggy password manager onto your Windows PC?

All this and much much more is discussed in the special first birthday edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by original co-host Vanja Švajcer.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Vanja Švajcer.

Sponsored By:

• OneLogin: OneLogin provides Single Sign On for customers like Airbus, Royal Mail, BSI, and Dun and Bradstreet. With hundreds of apps being used in the typical workplace, and the average user having to remember about 40 different passwords, we all know that if we don't have a product to remember passwords they end up in spreadsheets, stored in emails, or left on post-it notes. And that is a security nightmare. OneLogin allows IT to say which users have access to which applications at what time and also enforce two factor authentication. So even if credentials are compromised, hackers can’t get access to those corporate services. And, by connecting to Active Directory, access to all of these services is de-provisioned as soon as someone leaves the organisation.Learn more, and download a free guide to identity access management, at www.smashingsecurity.com/onelogin

Support Smashing Security

Links:

• Smashing Security #001: "One cup, two hotel guests" - YouTube
• Mozilla Slipped a ‘Mr. Robot’-Promo Plugin into Firefox and Users Are Pissed
• This Looking Glass/Mr Robot sh*t really p*sses me off - Reddit
• Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser... or is it just malware? - Firefox Support Forum
• Update: Looking Glass Add-on
• Bono and Tim Cook - YouTube
• How to remove Bono and U2 from YOUR f*#!ing iPhone - YouTube
• For 8 days Windows bundled a password manager with a critical plugin flaw
• Disabling Windows 10 Consumer Experience
• How Windows 10 Pro installs unwanted apps (Candy Crush) and how to stop it
• Troy Hunt explains why Face ID Stinks - YouTube
• 10-year-old kid succeeds in unlocking his mum’s iPhone X, with just a glance
• Apple's Face ID tech can't tell two Chinese women apart
• First iPhone X fondlers struggle to admit that Face ID sort of sucks
• Erase 2017 from your brain. Face ID never happened. The Notch is an illusion
• How I Learned to Deal with My Bitcoin FOMO
• Bitcoin FOMO Calculator
• Oh, My Coins! - Database Of Lost Crypto Assets
• Missing: hard drive containing Bitcoins worth £4m in Newport landfill site
• Is Bulgaria sitting on $3.5 BILLION worth of Bitcoin seized from criminals?
• WeCroak on the App Store
• Nose Dance! The Original Nose Twerking Miss Santa Face Paint! - YouTube
• Christmas Nose Twerk! Grinch & Max! - YouTube
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

How to protect yourself from Bitcoin hackers, why you should think twice before giving Amazon the keys to your house, and how a private investigator tried to hack Donald Trump's tax returns.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen from F-Secure.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Mikko Hyppönen.

Sponsored By:

• OneLogin: OneLogin provides Single Sign On for customers like Airbus, Royal Mail, BSI, and Dun and Bradstreet. With hundreds of apps being used in the typical workplace, and the average user having to remember about 40 different passwords, we all know that if we don't have a product to remember passwords they end up in spreadsheets, stored in emails, or left on post-it notes. And that is a security nightmare. OneLogin allows IT to say which users have access to which applications at what time and also enforce two factor authentication. So even if credentials are compromised, hackers can’t get access to those corporate services. And, by connecting to Active Directory, access to all of these services is de-provisioned as soon as someone leaves the organisation.Learn more, and download a free guide to identity access management, at www.smashingsecurity.com/onelogin
• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• Mikko Hypponen has his ponytail hair cut. - YouTube
• Cyber Security Sauna podcast
• Louisiana man admits misusing Trump's Social Security number
• One of Your Equifax Hack Protections Expires Soon
• How to protect yourself in the wake of the Equifax data breach
• Larry Flynt offers $10 million for info that could get Trump impeached
• Cryptocurrency Market Capitalizations
• Physical Bitcoins from Denarium
• TREZOR Bitcoin Wallet
• Ledger Wallet
• Amazon drivers forced to deliver 200 parcels a day with no time for toilet breaks while earning less than minimum wage
• Amazon wants a key to your house. I did it. I regretted it
• Black Friday Delivery THIEVES: 1 in 5 UK packages missing as thefts SURGE before Christmas
• Code.org
• The Arcade Blogger
• The Happiness of the Katakuris
• 'Rare Exports: A Christmas Tale' Trailer - YouTube
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Why you should check your Airbnb for hidden cameras, a hacker attempts a different kind of jailbreak, and British MPs prove that they really are clueless when it comes to cybersecurity.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Ian Whalley.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Ian Whalley.

Sponsored By:

• OneLogin: OneLogin provides Single Sign On for customers like Airbus, Royal Mail, BSI, and Dun and Bradstreet. With hundreds of apps being used in the typical workplace, and the average user having to remember about 40 different passwords, we all know that if we don't have a product to remember passwords they end up in spreadsheets, stored in emails, or left on post-it notes. And that is a security nightmare. OneLogin allows IT to say which users have access to which applications at what time and also enforce two factor authentication. So even if credentials are compromised, hackers can’t get access to those corporate services. And, by connecting to Active Directory, access to all of these services is de-provisioned as soon as someone leaves the organisation.Learn more, and download a free guide to identity access management, at www.smashingsecurity.com/onelogin
• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• The lax computer security of British MPs - as detailed in their own tweets
• Nadine Dorries MP tweets about sharing her password
• Hackers attempt to break into UK MPs' email accounts, as Houses of Parliament targeted by cyber attack
• Now criminals are ringing up British MPs to ask them their passwords
• Nadine Dorries MP admits she's always shouting out "What's my password?"
• Will Quince MP admits he leaves his PC unlocked
• Nadine Dorries reveals all MPs have porn on their PCs
• Ann Arbor Man Pleads Guilty to Computer Intrusion Case
• Man Hacks Jail Computer Network to Get Friend Released Early
• Prison hacker who tried to free friend now likely to join him inside
• Court documents (PDF)
• Tweet from Jason Scott
• Smile, you’re on hidden webcam Airbnb TV!
• What are Airbnb’s rules about electronic surveillance devices in listings?
• Colorise Bot (@colorisebot) on Twitter
• The science behind @Colorisebot
• The Leftovers
• Little Alchemy 2
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Uber covers up a data breach, the noose tightens on net neutrality, and Bulletproof's website spills the data beans.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by umm.. nobody because they didn't arrange a special guest.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• Uber paid hackers $100,000 to keep data breach quiet
• Bulletproof breach notification letter to customers (PDF)
• Bulletproof Coffee lacks bulletproof security: Nerd brain juice biz hacked, cards gulped
• Net Neutrality: What You Need to Know Now
• Racist, threatening attacks on FCC Chair Ajit Pai won't save net neutrality
• Americans are spending Thanksgiving fighting for net neutrality
• An update on the fight for the free and open internet
• Google YouTube Keyboard Shortcuts
• Tom Baker returns to finish shelved Doctor Who episodes penned by Douglas Adams
• Bitcoin: How Does it Work? (Roger Ver Interview)
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Yes, you can log into macOS High Sierra's root account with no password.

In this special "emergency" edition of the podcast computer security veterans Graham Cluley and Carole Theriault discuss the breaking news of a serious Apple macOS bug that allows anyone to log into your Mac with root admin rights, without having to enter a password.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Support Smashing Security

Links:

• Tweet by Lemi Ergin
• Huge MacOS bug lets anyone login as root without a password: what you need to know
• How to enable the root user on your Mac or change your root password - Apple Support
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

The FBI think they've identified the HBO hacker, the US military have been caught with a leaky bucket, and web tracking has just got scarier than ever.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Iain Thomson.

Support Smashing Security

Links:

• Uber paid hackers $100,000 to keep data breach quiet
• HBO offered its hackers $250,000 after attack, leaked email claims
• Game of Thrones stars’ personal phone numbers leaked, as HBO hackers attempt to extort ransom
• Smashing Security 037: Boobs, dragons and data breaches
• Iranian ‘Game of Thrones’ Hacker Demanded $6 Million Bitcoin Ransom From HBO, Feds Say
• Sealed Indictment
• Over 400 of the World's Most Popular Websites Record Your Every Keystroke, Princeton Researchers Find
• No boundaries: Exfiltration of personal data by session-replay scripts
• Data release: list of websites that have third-party “session replay” scripts
• The dark side of Replay Sessions that record your every move online
• Shark Attack 3 - That Famous Line (NSFW!)
• Father Ted: Dougal the Milkman & the Booby Trap
• Paddington 2 - the movie
• Paddington Bear, Singin' in the rain
• Baby Driver - the movie
• Baby Driver - 6-Minute Opening Clip
• Mathmos Lava Lamps
• Tom Scott's How Lava Lamps Keep the Internet Secure
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Is your dildo listening to you? Do you trust Facebook with your most intimate photos? And just how did a vengeful DDoSer come up with that nickname?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest John Hawes.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Hawes.

Sponsored By:

• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• Give Facebook your nude pics to tackle revenge porn
• The Facts: Non-Consensual Intimate Image Pilot
• Using Technology to Protect Intimate Images and Help Build a Safe Community
• Sex toy company admits to recording users' remote sex sessions, calls it a 'minor bug'
• PSA: Lovense remote control vibrator app recording "private" sessions without express permission
• Hack a BT Low Energy (BLE) butt plug
• Man Uses DDoS-for-Hire Services to Attack Former Employer, Taunts Firm via Email
• Google's Inactive Account Manager
• Lee Valley Tools - Woodworking Tools, Gardening Tools, Hardware
• Snap Circuits
• What is Snap Circuits? - YouTube
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)