Smashing Security

Passwords are under the microscope again, CrunchyRoll leads anime fans to malware, a sexy robot gains Saudi citizenship, and Carole begins her career as an agony aunt.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• LastPass reveals the threats posed by passwords in the workplace
• One in five security professionals still uses paper to manage privileged passwords
• Passwords - a Smashing Security splinter
• PSA : Don't enter crunchyroll.com at the moment, it seems they've been hacked
• Blaze's Security Blog: CrunchyRoll hack delivers malware
• Crunchyroll.com update
• Meet Sophia: The first robot declared a citizen by Saudi Arabia - YouTube
• Hot Robot At SXSW Says She Wants To Destroy Humans
• Saudi Arabia has a new citizen: Sophia the robot. But what does that even mean?
• Japan Has Just Granted Residency To An AI Bot In A World First
• Mythbuster seeks cash for roller skates to wear in virtual reality
• Jamie Hyneman's Electric Shoes - YouTube
• Swear Trek (@swear_trek) on Twitter
• Swear Who (@swear_who) on Twitter
• Stranger Things: The Game on the iOS App Store
• Stranger Things: The Game on Google Play
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

There's little time to celebrate our 50th episode, because there are rants to be had about MailChimp's switch to single opt-in, Graham upsets Piers Morgan on Twitter, and the Dark Overlord hacking gang are up to some pretty horrid tricks.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who didn't bother to organise a special guest this week.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.
• Enterskekt: Entersekt develops authentication and mobile security solutions that make the internet a safer place to bank and shop. Join Entersekt's webinar which promises to tell you EVERYTHING you need to know about "The secret key to PSD2 compliance" by visiting https://www.smashingsecurity.com/entersekt

Support Smashing Security

Links:

• Graham declines to appear on Good Morning Britain
• Piers Morgan responds to Graham
• Piers Morgan tells Leveson: Daily Mirror did not hack phones
• Piers Morgan told me how to hack a phone, says Jeremy Paxman
• Daily Mirror owners must pay £1.2m to celebrity phone-hacking victims
• Wendi Deng protects Rupert Murdoch from custard pie
• I can no longer recommend MailChimp
• Mailchimp backtracks on all their recommendations, enforcing single opt-in
• Massive email bombs target government email addresses
• Smashing Security: GDPR - The good and the bad
• Another Hollywood studio is hacked by The Dark Overlord
• Hackers hit plastic surgery, threaten to release patient list and photographs
• ‘Dark Overlord’ Hackers Text Death Threats to Students, Then Dump Voicemails From Victims
• "Saved you a click" on Reddit
• Google CEO to fix burger emoji after heated debate cooks up on Twitter
• "Get Me Roger Stone"
• Pencil Grip
• Ignite Elite - Rechargeable USB Flameless Lighter
• Smashing Security: Bonus behind the scenes - shower time
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Scammers show a lack of imagination after hacking a funeral home, more websites are secretly stealing visitors' resources to mine for cryptocurrency, and everyone is very confused about the USA's airline laptop ban.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's John Leyden.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Leyden.

Sponsored By:

• Enterskekt: Entersekt develops authentication and mobile security solutions that make the internet a safer place to bank and shop. Join Entersekt's webinar which promises to tell you EVERYTHING you need to know about "The secret key to PSD2 compliance" by visiting https://www.smashingsecurity.com/entersekt
• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• Local funeral home gets hacked in the middle of the night leaving employees without access
• Local business' Yahoo! account hacked
• Smashing Security: 014: Protecting webmail
• Stealth web crypto-cash miner Coin Hive back to the drawing board as blockers move in - The Register
• Cryptocurrency mining affects over 500 million people. And they have no idea it is happening.
• Laptops and tablets have been banned from being used on 56 routes to the US
• Laptop ban: How it works, what devices are forbidden on flights
• Questions and answers on proposed ban on laptops in luggage - The Washington Post
• Inspire Candle - Twelve South
• BBC Two - The Detectives: Murder on the Streets
• This Chrome extension blocks audio and video autoplay on any website
• Autoplay blocking is coming to Chrome
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

KRACK! Has the Wi-Fi vulnerability got you worried? Did North Korea hack a British TV company to prevent a "slanderous farce" from being made? And what have Dutch police learnt from Pokémon?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Virus Bulletin's Martijn Grooten.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Martijn Grooten.

Sponsored By:

• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• UK TV drama about North Korea hit by cyber-attack - BBC News
• The World Once Laughed at North Korean Cyberpower. No More. - The New York Times
• Naked Attraction: Channel 4 show returns and viewers observe 'missing detail' on female contestants | The Independent
• 'Krack' wi-fi breach means every modern network and device is vulnerable to hack, researcher says - The Independent
• KRACK Attacks: Breaking WPA2
• KRACK Wi-Fi attack - the rules haven't changed
• Policing in the future uses citizen detectives, Pokémon Go-like app
• Politiepokémon op komst - Telegraaf.nl
• Blokus - Wikipedia
• Blokee - Inspired by Blokus - Online Board Game
• The crooked timber of humanity - 1843 Magazine
• The Victorian Internet - tomstandage.com
• Watch 100 people try to eat durian, a fruit that smells like hot garbage
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

America turns the heat up on Kaspersky anti-virus, Disqus announces a data breach, Elon Musk plans a bolthole on Mars to escape our robot overlords, and Graham gets to play chess with Garry Kasparov.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David McClelland.

Sponsored By:

• NetSparker: NetSparker is a web application security scanner that can automatically find security flaws in your website and fix them before hackers can exploit them. If you want to automatically check your web applications for cross site scripting, SQL Injection & other vulnerabilities and coding errors that can leave you and your business exposed to malicious hacker attacks, then you need NetSparker.Download a free demo now.

Support Smashing Security

Links:

• Altered Images - Happy Birthday
• Graham met Garry Kasparov
• Graham about to lose a game of chess to Garry Kasparov
• Sign in Office Depot store (via @gadievron on Twitter)
• Kaspersky accused of close ties to sauna-loving Russian spies
• Russian Hackers Stole NSA Data on U.S. Cyber Defense - WSJ
• What is Kaspersky's role in NSA data theft? Here are three likely outcomes - ZDNet
• Eugene Kaspersky says U.S. government can examine his company's source code
• McAfee joins the anti-Kaspersky witch hunt in shitty attempt to sell a few boxes
• Disqus security alert: User info breach
• Disqus reveals data breach, but wins points for transparency – HOTforSecurity
• It's 4PM on Friday, almost time to log off and, oh look, Disqus says it's been hacked - The Register
• A World Leader in AI Just Established an Ethics Committee for Artificial Intelligence
• The Artificial Intelligence Revolution: Part 1 - Wait But Why
• Open Letter on Autonomous Weapons - Future of Life Institute
• Sam Harris: Can we build AI without losing control over it? - TED Talk
• Elon Musk’s Billion-Dollar Crusade to Stop the A.I. Apocalypse - Vanity Fair
• Artificial Intelligence Is Our Future. But Will It Save Or Destroy Humanity?
• Artificial Intelligence - Internet Encyclopedia of Philosophy
• Google's AI Chief Is 'Definitely Not Worried About the AI Apocalypse
• Elon Musk is wrong. The AI singularity won't kill us all
• Robots - Flight of the Conchords
• "SEAGULLS! (Stop It Now)" -- A Bad Lip Reading of The Empire Strikes Back - YouTube
• David Stranack's post on the Smashing Security Facebook group
• TimeScapes by Nigel Stanford
• CYMATICS: Science Vs. Music - Nigel Stanford
• AUTOMATICA - Nigel Stanford
• Automatica Robot tests
• Comrade Detective - Wikipedia
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Bearded man entangled in dark web drugs market bust, Google researches how to make browser security warnings less confusing, and (ahem) "bedroom entertainment systems" probed for security holes.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Rich Baldry.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Rich Baldry.

Support Smashing Security

Links:

• Feds catch a lord of the 'dark web' suspected of drug deals - Miami Herald
• Trip to world beard competition ends in arrest for alleged dark web drug dealer - The Guardian
• Austin Facial Hair Club
• The World Beard and Moustache Championships
• Glorious Portraits from the 2017 World Beard And Mustache Championship
• Where the wild warnings are: Root causes of Chrome HTTPS certificate errors [PDF]
• Screwdriving. Locating and exploiting smart adult toys - Pen Test Partners
• Wi-Fi sex toy with built-in camera fails penetration test - The Register Forums
• Topo by Ergodriven
• Dirk Gently's Holistic Detective Agency - IMDb
• Dead roach in Utah man’s milkshake becomes Twitter hero - KSL.com
• Trevor The Roach: A Tribute Movie
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Deloitte suffers an embarrassing hack, CCleaner spreads malware, and Twitter explains why it isn't planning to ban Donald Trump from Twitter anytime soon.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Phil Wood of Cisco.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Phil Wood.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• Graham Cluley on Twitter: "Turns out I slept in a cheesegrater last night"
• Deloitte hit by cyber-attack revealing clients’ secret emails - The Guardian
• Source: Deloitte Breach Affected All Company Email, Admin Accounts — Krebs on Security
• Deloitte is a sitting duck: Key systems with RDP open, VPN and proxy 'login details leaked' • The Register
• CCleanup: A Vast Number of Machines at Risk - Talos Intelligence blog
• CCleaner Command and Control Causes Concern - Talos Intelligence
• North Korean Minister: Trump's 'Declaration Of War' Means N.K. Can Shoot Down U.S. Bombers - NPR
• Twitter PublicPolicy on Twitter
• The Twitter Rules - Twitter Help Center
• Wildergorn colour-in posters
• Star Trek: Discovery - CBS
• Rick and Morty - Wikipedia
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Carole wants to know why Graham keeps FaceTiming her from the shower.

Can you help solve the mystery?

("Bonus" behind-the-scenes content.)

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Support Smashing Security

In this special "splinter" episode of the "Smashing Security" podcast we tackle the tricky subject of backups - when did you last backup your data? how and what should you backup? and where should you store them?

Lots of questions and Graham gets to do his Tina Turner impression.

Listen to the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• Tina Turner - Private Dancer - YouTube
• The Ed Sullivan Show - 'Baranton Sisters' - “Foot Jugglers” (Aired February 2, 1969) - YouTube
• How to create a robust data backup plan (and make sure it works)
• How to back up your iPhone, iPad, and iPod touch - Apple Support
• How to back up your Android phone or tablet: The ultimate guide
• Crashplan stops offering its consumer backup solution
• Carbonite cloud backup
• Backblaze Online Backup
• Mozy Cloud Storage & Backup
• Amazon Glacier
• CloudBerry Lab - Cross-Platform Cloud Backup
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Equifax's shambolic response to its huge data breach, a scary-sounding Bluetooth exploit, and Apple's iPhone X comes with Face ID.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Javvad Malik of AlienVault.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Javvad Malik.

Sponsored By:

• Rapid7: Identifying, prioritizing and managing vulnerabilities all the way through to remediation is not only possible, it can be simple. Right now.Build a vulnerability management program that works for you with Insight VM, by Rapid7. Get started with your free 30 day trial now.

Support Smashing Security

Links:

• We tested Equifax's data breach checker — and it's basically useless | ZDNet
• Equifax hack: 44 million Britons' personal details feared stolen in major US data breach
• "The front page of Equifax's UK website. They don't seem to have room to mention the data breach affecting up to 44 million Brits." - Twitter
• Chatbot lets you sue Equifax for up to $25,000 without a lawyer - The Verge
• How to protect yourself in the wake of the Equifax data breach
• Ayuda! (Help!) Equifax Has My Data! — Krebs on Security
• BlueBorne Information from the Research Team - Armis Labs
• The five biggest questions about Apple’s new facial recognition system - The Verge
• Can the government force you to unlock your own phone? | The Guardian
• UK police have a new tactic to circumvent strong iPhone encryption: steal the unlocked phone out of the criminal’s hand | 9to5Mac
• Chessable
• The science that makes chess learning easier - Chessable.com
• You can actually be allergic to exercise - Pop Science
• Dr Mandell's Push and Pull Technique (20-Second Neck Pain Relief) - YouTube
• It's all about the Squinch! - YouTube
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)