Smashing Security

It's easy to phone up a celebrity on Instagram following security breach, facial recognition at Notting Hill Carnival can't tell the girls from the boys, and companies are spying on their workers' activities.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest David Bisson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David Bisson.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• "Who Is Marcus Hutchins?" — Krebs on Security
• Ahem, Kim Kardashian Is Naked Up A Tree - Huffington Post
• Hackers Claim Apparent Instagram Fightback Will Not Stop Them From Selling Stolen ‘Doxagram’ Data - The Daily Beast
• A Note on Security from Instagram’s CTO - Instagram Blog
• London police’s use of facial recognition falls flat on its face – Naked Security
• Misidentification and improvised rules - we lift the lid on the Met's Notting Hill facial recognition operation - Liberty
• Statement from police commander for Notting Hill Carnival 2016 - Metropolitan Police
• UK govt steams ahead with £5m facial recog system amid furore over innocents' mugshots - The Register
• ECHR court reverses ruling on sacking over private messages - BBC News
• Monitoring at work - UK Citizens Advice
• Through the Keyhole: Privacy in the Workplace, an Endangered Right - American Civil Liberties Union
• Employers, Schools, and Social Networking Privacy - American Civil Liberties Union
• The Big Sick (2017) - IMDb
• Group Therapy Radio | Streaming live every Friday - YouTube
• Above & Beyond - SoundCloud
• Above & Beyond present Group Therapy 250
• How To Fix a Toilet And Other Things We Can't Do Without Search
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Are public figures lying about being hacked? What were online criminals doing with 711 million email addresses? And how could scammers profit from Hurricane Harvey?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Troy Hunt.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Troy Hunt.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• Trump appointee says for the 'past several years' he has been the victim of 'multiple cyber attacks' — Graham Cluley.
• Trump appointee: Comment calling Obama's mother a 'w@!re' result of 'Internet crimes' against me — CNN.
• Inside the Massive 711 Million Record Onliner Spambot Dump — Troy Hunt.
• Have I been pwned? — Check if your email has been compromised in a data breach
• Harvey Hoax: There are no sharks on Houston's flooded freeways — WCVB 5.
• Photo of planes at flooded Houston airport is a fake — Daily Mail.
• Charity Listing - BBB Wise Giving Alliance — Give.org.
• Wise giving in the wake of Hurricane Harvey — FTC.
• The Phoenix Comic
• Little Ripper Lifesaver Drones Spot Sharks Electronically — YouTube.
• ChirpChange
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Hackers could change emails in your inbox after they are delivered, the web is getting more and more encrypted, and hacked robots can be commanded to umm... stab you.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by researcher Scott Helme.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Scott Helme.

Sponsored By:

• Rapid7: Identifying, prioritizing and managing vulnerabilities all the way through to remediation is not only possible, it can be simple. Right now.Build a vulnerability management program that works for you with Insight VM, by Rapid7. Get started with your free 30 day trial now.

Support Smashing Security

Links:

• Introducing the ROPEMAKER Email Exploit — Mimecast.
• Did ROPEMAKER just unravel email security? Nah, it's likely a feature — The Register.
• Measuring HTTPS adoption on the web [USENIX 17] — Research presented by Adrienne Porter Felt (Google) and April King (Mozilla).
• Alexa Top 1 Million Analysis - August 2017 — Scott Helme's report.
• ALPHA 2, The World's First Humanoid Robot for the Family — YouTube.
• UBTech Alpha 2 turns Chucky — YouTube
• Researchers warn against 'hackable' robots — IT Pro.
• Overcooked — Team 17.
• "Could you be paying for things using just your hand? — BBC Click on Twitter.
• 250,000 Dominoes - The Incredible Science Machine — YouTube.
• Smashing Security on Facebook
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

WannaCry hero Marcus Hutchins (aka MalwareTech) pleads not guilty to malware charges, the Scottish parliament is hit by a brute force attack, IoT smart locks aren't so smart, and.. ahem.. someone is sending intimate pics via AirDrop to unsuspecting commuters.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity keynote speaker Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White.

Visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Geoff White.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• "The Secret Life of Your Mobile Phone" — Geoff White's show at the Edinburgh Festival Fringe
• MalwareTech is back online, as he pleads not guilty to Kronos malware charges — Graham Cluley.
• Scottish parliament hit by cyber-attack similar to Westminster assault — The Guardian.
• Hackers try to break into Scottish parliament email accounts weeks after Westminster attack — Graham Cluley.
• Blocking Brute Force Attacks — Advice from OWASP.
• Hundreds of 'smart' locks bricked by flubbed remote update — Graham Cluley.
• Friendly neighborhood hacker helps family regain access to locked car — Graham Cluley.
• AirDropping penis pics is the latest horrifying subway trend — New York Post.
• Is there a way to view AirDrop transfer history? — Apple Support community.
• What Is AirDrop? How Does It Work? — Lifewire.
• Exposing yourself is illegal - so why should the law tolerate cyber-flashing on online dating apps? — The Independent.
• Saint Louis Rapid & Blitz — Grand Chess Tour.
• Amazon's LoveFilm postal rentals is shutting down — Radio Times.
• "Waking up with Sam Harris"
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Hackers are holding HBO to ransom after a massive data breach, and have leaked the phone numbers and email addresses of "Game of Thrones" cast members. Has security firm Carbon Black been leaking customers's sensitive files while trying to scan them? And Disney's mobile apps are accused of spying on kids...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Hawes.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• FBI arrests WannaCry's 'accidental hero' in connection with Kronos banking trojan
• HBO hack ransom note: Watch the video, set to Game of Thrones music
• Game of Thrones stars' personal phone numbers leaked, as HBO hackers attempt to extort ransom
• Markus Ueberall's tweet
• Movie studio tells all about Dark Overlord's leak of 'Orange Is the New Black'
• Harvesting Cb Response Data Leaks for fun and profit | DirectDefense
• DirectDefense Incorrectly Asserts Architectural Flaw in Cb Response | Carbon Black — Carbon Black responds.
• Children's Online Privacy Protection Rule ("COPPA") | Federal Trade Commission
• Parents claim Disney gobbled up kids' info through mobile games • The Register
• Adult Life Skills (2016) - IMDb
• Intelligence (Canadian TV series) - Wikipedia
• Secrets, Crimes & Audiotape
• BBC Radio 4 - Seriously...
• Smashing Security podcast on Facebook
• Smashing Security online store

A security threat researcher is badly hacked in a revenge attack. Some people want to save Adobe Flash, but is that wise? And a poorly-secured electronic billboard starts displaying offensive images...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• Hackers Leak Data From Mandiant Security Researcher in Operation #LeakTheAnalyst — Bleeping Computer.
• Hackers kick off #leaktheanalyst campaign by dumping data of $1bn security firm — The Next Web
• LinkedIn profile of a Mandiant employee — Warning - contains image of hairy bottom. This is really here just for Maria.
• How to choose a strong password - simple tips for better security — YouTube video from 2009, featuring Graham (and filmed by Carole). So, who remembered correctly what we actually said in the video?
• Smashing Security podcast: Protecting webmail — A Smashing Security splinter.
• Flash & The Future of Interactive Content — Adobe.
• Petition to open source Flash and Shockwave — Github.
• Adobe Flash Fans Want a Chance to Fix Its One Million Bugs Under an Open Source License — Gizmodo.
• Hackers hijack central Cardiff billboard to display swastikas and more... — Graham Cluley.
• Hackers plant obscene image on electronic billboard in Atlanta — Graham Cluley.
• Motorists warned of Dalek invasion by hacked road sign — Naked Security.
• How to Lock Down TeamViewer for More Secure Remote Access — How-To Geek.
• Long Distance — Reply All podcast by Gimlet Media.
• Tickled movie — Wikipedia.
• Tickled documentary to air on HBO with bonus follow-up special — The A.V. Club.
• Clock face with actual human face uses eyes to tell time — Mashable.
• Picture of Carole's clock (which Graham hates) — Twitter.

China is forcing people to install smartphone spyware, young cyberoffenders are offered rehab, and robot vacuum cleaners want to sell maps of the inside of your house to tech firms.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dan Ring.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Dan Ring.

Sponsored By:

• Rapid7: Identifying, prioritizing and managing vulnerabilities all the way through to remediation is not only possible, it can be simple. Right now.Build a vulnerability management program that works for you with Insight VM, by Rapid7. Get started with your free 30 day trial now.

Support Smashing Security

Links:

• Xinjiang Users Arrested over State Spyware Usage — Infosecurity Magazine
• China crams spyware on phones in Muslim-majority province — The Register.
• Rehab camp aims to put young cyber-crooks on right track — BBC News.
• Roomba vacuum maker iRobot betting big on the 'smart' home — Reuters.
• iRobot Wants to Sell Mapping Data Collected by Roomba Vacuums to a Tech Company Like Apple — Mac Rumors.
• Griffin BreakSafe Magnetic USB C Charging Cable — To make your upgraded MacBook Pro a little less of a downgrade.
• USB-C MagSafe - Will it work!?!? — iJustine's video on YouTube.
• Chipotle Blames Norovirus Outbreak on a Sick Employee — Pick of the week?
• Jim'll Paint It — See what Microsoft Paint can do in the hands of a genius.
• MS Paint is here to stay — Microsoft.

The UK government wants you to give your credit card details to porn sites, Ashley Madison offers compensation to the people whose lives it ruined, and an adult website wants you to pass its unorthodox and below-the-belt biometric identity check... gulp!

All this and Myspace, Google Glass, Fleabag, and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David McClelland.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• BBC One - X-Ray, Summer Specials, Photography Special — Watch David McClelland on iPlayer if you're in the UK. There may also be ways of watching this outside the UK. We couldn't possibly comment...
• Vladimir Putin Cut From Two Upcoming Hollywood Movies — Hollywood Reporter
• It's not Yourspace, it's Myspace — Leigh-Anne Galloway shares her research on Myspace's diabolical security.
• Myspace fixes account security hole - but delete your account anyway
• The UK will block online porn from next year. Here's what we know — Wired
• Ashley Madison will pay $11.2 million to data breach victims — Engadget
• You can now use a dick pic as a password. Why, god? Why. — Mashable
• Nasty Bug Left Thousands of Internet of Things Devices Open to Hackers — Motherboard
• Millions of IoT devices at hacking risk due to flaw in open source software library — Bitdefender Box blog
• Meet the Thirteenth Doctor Who — YouTube.
• Fleabag — Sadly there is no way at all for anyone outside the UK to watch shows on BBC iPlayer. Definitely not. Nope. No way at all. Impossible.
• IRL Podcast: Online Life is Real Life — Mozilla's new podcast
• Google Glass is officially back with a clearer vision — Engadget
• Black Mirror: The Entire History of You — We didn't mention it on the podcast, but this episode of "Black Mirror" includes the new Doctor Who - Jodie Whittaker.
• This Startup Wants to Replace Your Office With 3D Holograms - Bloomberg — Article about Meta, which is testing augmented reality technology on its employees

Is password manager 1Password treating its customers unfairly? Are autonomous cars driving us around the bend? And what is this Net Neutrality thing anyway?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Michael Hucks from PC Pitstop.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Michael Hucks.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• sweetsweet — Michael's band.
• Why Security Experts Are Pissed That ‘1Password’ Is Pushing Users to the Cloud — Motherboard report.
• 1Password irks security experts in push toward cloud-based vaults — AppleInsider report.
• Are local vaults going to exist for the foreseeable future? — AgileBits Support Forum — 1Password's support forum.
• 1Password wants you to sync via the cloud, but won't force you
• The new Audi A8 luxury sedan is a high-tech beast that can drive itself — The Verge.
• Tesla owners are ignoring autopilot safety advice and putting the results on YouTube — The Verge.
• The biggest threat facing connected autonomous vehicles is cybersecurity — TechCrunch.
• Join the Battle for Net Neutrality
• The coming battle over 'net neutrality' — BBC News
• The FCC Insists It Can't Stop Impostors From Lying About My Views On Net Neutrality — Karl Bode isn't very happy in this Techdirt article.
• A Bot Is Flooding The FCC Website With Fake Anti-Net Neutrality Comments... In Alphabetical Order — Arnold Aardvark isn't a fan of net neutrality apparently.
• Alexa calls cops on man allegedly beating his girlfriend — Horrendous report from the New York Post, but for once Amazon's Alexa sounds like it did some good.
• Southern Rail on Twitter — Eddie takes over Southern Rail's Twitter account.
• Work experience boy runs Southern Rail's Twitter account — Sky News.
• The Red Pill movie — Wikipedia.
• Rapidfire Chimney Starter — Weber.
• Griddled spatchcock poussins with shallot vinaigrette recipe — Apparently Carole makes a mean one of these, although we've only got her word for it.

The iPhone 8 is on its way and may use 3D facial recognition rather than a fingerprint sensor to lock out intruders, and the UK's Automobile Association claims it hasn't leaked any credit card data, so why is it getting so upset about security researchers publishing screenshots of leaked data?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by umm.. nobody.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• Yes - despite what it says - AA customer credit card data was exposed
• Apple Readies iPhone Overhaul for Smartphone’s 10th Anniversary - Bloomberg
• The World's Blackest Material - An Inside Look At Vantablack — YouTube video.
• About Touch ID advanced security technology - Apple Support
• He thought a book would stop a bullet and make him a YouTube star. Now he’s dead. - The Washington Post
• Firik Sleep Headphones — For those of you who want to look like John McEnroe when you're snoozing in bed.