The Device Casting Couch (Tech Podcast)

Season 1 Episode 8 of the Device Casting Couch Podcast

In this episode we talk about T-Mobile/OnePlus getting hacked, the huge California Consumer Privacy Act (CCPA), WhatsApp got compromised..again, touch on the new Tesla SUV, and much more!

Enjoy!

Like the bumper music? Check out the original from WoodyJ here!

https://www.youtube.com/watch?v=5BlvXiW3i88

Sources:

T-Mobile/OnePlus Hack (00:40)

https://thehackernews.com/2019/11/oneplus-store-data-breach.html https://thehackernews.com/2019/11/t-mobile-prepaid-data-breach.html

Monero Crypto-Currency Bug (07:46)

https://thehackernews.com/2019/11/hacking-monero-cryptocurrency.html

CCPA Links/Supporting Documents (17:55)

https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/ccpa-std399.pdf

https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/ccpa-isor-appendices.pdf

https://oag.ca.gov/system/files/attachments/press_releases/CCPA%20Fact%20Sheet%20%2800000002%29.pdf

New WhatsApp Spyware Trap (42:47)

https://thehackernews.com/2019/11/whatsapp-hacking-vulnerability.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29

InfoTrax Systems Years Long Hack (56:43)

https://thehackernews.com/2019/11/hacking-file-storage.html

Season 1 Episode 7 of the Device Casting Couch Podcast.

In this session we discuss Blizzard coming under fire for 'Blitzchung' decision, VPN hacks and beef, WhatsApp once again showing us why it's terrible, and much more!

Enjoy!

Like the bumper music? Check out the original here!

https://www.youtube.com/watch?v=jZLcg7IGdnk

Sources:

Check If Your Info Is Leaked:

https://haveibeenpwned.com 

Blizzard Story:

https://www.cnet.com/news/blizzard-hearthstone-and-the-hong-kong-protests-heres-what-you-need-to-know/

https://www.vox.com/2019/10/8/20904433/blizzard-hong-kong-hearthstone-blitzchung

https://www.thesixthaxis.com/2019/11/01/blizzcon-2019-opens-with-apology-for-hearthstone-hong-kong-controversy/

https://playhearthstone.com/en-us/blog/23179289

NSO Pegasus/WhatsApp:

https://www.vice.com/en_us/article/gyznnq/how-nso-group-helps-countries-hack-targets

https://www.reuters.com/article/us-facebook-cyber-whatsapp-nsogroup/exclusive-whatsapp-hacked-to-spy-on-top-government-officials-at-u-s-allies-sources-idUSKBN1XA27H

VPN Hacks/Fights:

https://thehackernews.com/2019/10/nordvpn-data-breach.html

https://fossbytes.com/nordvpn-hack-leads-credential-stuffing-attacks/

https://www.cpomagazine.com/cyber-security/vpn-services-now-under-closer-scrutiny-after-nordvpn-hack/

https://arstechnica.com/information-technology/2019/11/nordvpn-users-passwords-exposed-in-mass-credential-stuffing-attacks/

https://www.bleepingcomputer.com/news/security/nordvpn-plans-security-and-privacy-upgrades-after-hack/

Adobe Leak:

https://thehackernews.com/2019/10/adobe-database-leaked.html

Season 1 Episode 6 of the Device Casting Couch Podcast. 

In this session we discuss a bug found in the Signal Messaging App, Facebook Going Encrypted, And Google Nest Being Used to Spy on Kids.

Enjoy! 

Like the bumper music? Check out Isaac Woodall here! https://www.youtube.com/channel/UCZKlv7rWb7EoYyYMO-wshig 

Sources:

Google Nest: 

https://www.siliconvalley.com/2019/10/18/the-voice-from-our-nest-camera-threatened-to-steal-our-baby/

Internet Archive MS-DOS Games:

https://archive.org/details/softwarelibrary_msdos_games?and%5B%5D=emulator_start%3A%2Aiafix%2A&sin=&sort=-publicdate&page=2

https://www.cnet.com/news/internet-archive-releases-2500-ms-dos-games-so-you-can-relive-the-90s/#ftag=CAD590a51e

Right to Repair: 

https://www.vice.com/en_us/article/qvajpv/michigan-teen-right-to-repair

https://uisjournal.com/news/2019/09/24/apple-gives-in-to-repair-rights/

https://www.ifixit.com/

Dark Web Site Shutdown: 

https://thehackernews.com/2019/10/dark-web-child-abuse.html

Signal App Bug: 

https://thehackernews.com/2019/10/signal-messenger-bug.html

Facebook Encryption Delayed: 

https://www.cyberscoop.com/facebook-encryption-william-barr-letter/

iTunes/iCloud Exploit: 

https://thehackernews.com/2019/10/apple-bonjour-ransomware.html

Season 1 Episode 5 of the Device Casting Couch Podcast.

In this session we discuss the major Capital One hack by Paige Thompson, Door Dash app hack, updates on last sessions SIM card vulnerability, and a Dutch sex worker website data leak.

Enjoy!

Like the bumper music? Check out Isaac Woodall here! https://www.youtube.com/channel/UCZKlv7rWb7EoYyYMO-wshig

Sources:

Capital One Hack:

https://www.cbsnews.com/news/paige-thompson-what-we-know-about-accused-capital-one-breach-hacker-2019-07-31/

https://www.capitalone.com/facts2019/

https://nypost.com/2019/07/29/capital-one-reveals-100m-affected-by-data-breach-hacker-arrested/

https://www.businessinsider.com/capital-one-hack-was-data-stolen-2019-7

Door Dash Hack:

https://mashable.com/article/doordash-hack-exposes-millions-of-customers/

https://arstechnica.com/information-technology/2019/09/doordash-hack-spills-loads-of-data-for-4-9-million-people/

SIM Card Update:

https://srlabs.de/bites/sim_attacks_demystified/

https://thehackernews.com/2019/09/dynamic-sim-toolkit-vulnerability.html

https://thehackernews.com/2019/09/simjacker-mobile-hacking.html

Sex Worker Leak:

https://threatpost.com/vbulletin-flaw-dutch-sex-work-forum-breach/149100/

Season 1 Episode 4 of the Device Casting Couch Podcast.

In this session we discuss the looming SIM vulnerability, India implementing country wide CCTV, and a sprinkle of good news to end the week. 

Enjoy!

Bumper music made by Isaac Woodall. Check out his other stuff here!   https://www.youtube.com/channel/UCZKlv7rWb7EoYyYMO-wshig  

Sources: 

SIM Jacking: 

https://arstechnica.com/information-technology/2019/09/hackers-are-exploiting-a-platform-agnostic-flaw-to-track-mobile-phone-locations/

https://www.cyberscoop.com/simjacker-mobile-phone-vulnerability/

https://www.zdnet.com/article/new-simjacker-attack-exploited-in-the-wild-to-track-users-for-at-least-two-years/

https://threatpost.com/1b-mobile-users-vulnerable-to-ongoing-simjacker-surveillance-attack/148277/

https://thehackernews.com/2019/09/simjacker-mobile-hacking.html

https://srlabs.de/bites/rooting-sim-cards/

India CCTV:

https://www.bloomberg.com/news/articles/2019-09-19/india-seeks-to-adopt-china-style-facial-recognition-in-policing

Ad Blocker Story: 

https://threatpost.com/malicious-ad-blockers-for-chrome-caught-in-ad-fraud-scheme/148591/

Scammers Caught: 

https://www.justice.gov/usao-sdny/pr/two-defendants-arrested-10-million-tech-support-fraud-scheme

http://www.legalserviceindia.com/article/l406-Does-India-have-a-Data-Protection-law.html

Season 1 Episode 3 of the Device Casting Couch Podcast.

In this session we discuss Google/YouTube being shady, yet again.. and China targeting it's citizens' tech. 

Enjoy!

Sources:

Google Ad Scandal - 

https://1businessworld.com/2019/09/business/googles-paid-search-ads-are-a-shakedown-basecamp-ceo-says/

https://fortune.com/2019/09/04/google-trolled-search-ads/

https://blog.ericgoldman.org/archives/2009/04/second_circuit.htm

YouTube Collecting Children's Data - 

https://www.yahoo.com/entertainment/google-youtube-pay-170-million-134709438.html

https://www.ftc.gov/news-events/press-releases/2019/09/google-youtube-will-pay-record-170-million-alleged-violations

https://www.bloomberg.com/news/articles/2019-09-04/google-to-pay-170-million-for-youtube-child-privacy-breaches

James Bridle TedTalk - 

https://www.youtube.com/watch?v=v9EKV2nSU8w

Season 1 Episode 2 of the Device Casting Couch Podcast.

In this session we discuss the Equifax payout, vulnerabilities found in hospital equipment, and Google tracking your private activity. 

We apologize for the slight degrade in parts of our audio, this will be fixed in later episodes. 

Enjoy!

Like the bumper music? Check out the artist here! 

https://www.youtube.com/watch?v=jZLcg7IGdnk 

Sources:

Update Virus:

https://www.bleepingcomputer.com/news/security/fake-office-365-site-pushes-trickbot-trojan-as-browser-update/

**Website Spoofing Proof of Concept**

https://www.xn--80ak6aa92e.com/

Future Farms:

https://www.businessinsider.com.au/robotic-farm-uses-90-less-water-than-traditional-farming-2018-10 

Hospital Virus:

https://www.dotmed.com/news/story/47615

https://www.cyberscoop.com/medical-infusion-pump-system-two-critical-bugs-researchers-say/

Tracking Your Internet Usage:

https://www.businessinsider.com/facebook-google-quietly-tracking-porn-you-watch-2019-7

Season 1 Episode 1 of the Device Casting Couch Podcast. 

In this session we discuss a major Marriott data breach, robots parking your vehicle in France, and a strange yet useful app for farmers in the UK. 

Enjoy! 

Sources:

https://www.theregister.co.uk/2018/11/30/marriott_starwood_hotels_500m_customer_records_hacked/

https://techxplore.com/news/2019-03-flight-robot-car.html

https://www.theguardian.com/environment/shortcuts/2019/feb/12/tudder-tinder-cattle-helping-cows-meet-bull

https://www.reuters.com/article/us-valentines-day-cows/tinder-for-cows-matches-livestockin-the-mood-for-love-idUSKCN1Q226F