Mostly Security artwork

Mostly Security

328 episodes - English - Latest episode: 15 days ago - ★★★★★ - 14 ratings

From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job. From beekeeping adventures to hiking mountains to favorite shows, there's always something fun to wrap up the show.

Technology News Tech News
Homepage Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Episodes

331: Bonsai Herbs

April 13, 2024 01:37 - 33 minutes - 15.4 MB

Eric pulls out the BBQ, taunting the Rain Gods. Jon checks on his bees and deserves a third wire. Hackers lure folks with AI promises from hijacked social accounts while a software supply chain narrowly avoids a big oopsie. Eric dips his toes in hydroponic herb gardening while Jon eyes smart contact lenses (and narrowly avoids an April Fools oopsie). 0:00 - Introduction 9:42 - Fake AI Ads 12:29 - The xz that could have been... 20:11 - Hydroponic Herbs 26:09 - Smart Contact Lenses

330: Robust Investigation

April 06, 2024 14:34 - 35 minutes - 25.8 MB

Eric gets back home from vacation and Jon (tries to) defy range anxiety in his new car. Google has a proposed settlement for their harvesting of incognito browsers and the big AT&T breach has 'encrypted' PINs but are easily reversed. The first Neuralink transplant recipient pulls an all nighter playing Civ6, and we (may) have a record number of bee colonies in the US. 0:00 - Intro 11:02 - (Not so) Incognito 14:52 - (Uselessly) Encrypted 23:47 - Civ6 on Neuralink 26:49 - Record Bees

329: It Looks Exactly Like the License Plate

March 30, 2024 16:46 - 31 minutes - 16 MB

Eric and Jon chat about vacations, Jon looks for whales in Washington while Eric searches for license plates in Utah. Eric finds 3 million hotel room doors can be opened while Jon finds a company playing boths sides. Eric discovers he's a Lightweaver while Jon is an Elsecaller who also likes a whale museums. [NOTE: Eric's travel mic was having issues - sorry for the audio!] 0:00 - Introduction 4:30 - Subpar Park Poster 5:46 - Dead Horse Point State Park 10:45 - 3 Million Hotel Doors ...

328: Taunting Spring

March 22, 2024 23:51 - 45 minutes - 23.3 MB

Pi day, wasps about, new 3d printer, Dune 2, and a bee update. Stroustrup objects to the characterization of (modern) C++ as unsafe (but are any projects in C++ fully modern??), Apex Legends tourney participants forced to cheat, swappers come for the eSIMs, and your connected car is probably selling your driving behavior data to insurance companies. For fun we have a sick tulip identification and eradication robot and the Voyager 1 was POKEd in early March and is returning its FDS memory for...

327: I'm Not Confused

March 16, 2024 17:21 - 38 minutes - 18.9 MB

Eric survives a birthday at Benihana, laments the inability to game the system and looks forward to building a new 3D Printer. Jon is giddily gearing up for bee season and educates Eric on Yellowjackets. Roku discovers what its user accounts are worth on the dark web and Jon needs to update his QNAP. Again. The British Library is under-appraised the consequences of a cyber attack. Learning to program a computer is similar to learning a spoken language and Jon shares plans on how to build a L...

326: 3d Printer Brick

March 09, 2024 14:57 - 45 minutes - 33.4 MB

Eric's 'things are breaking' woes continue and Jon has a nice trip to UW. Info stealers are targeting ChatGPT creds, beware cheap IOT devices (like that's new advice), and Anycubic's cloud MQTT service is hacked (or misconfigured). Bumblebees exhibit cumulative culture (!!), Eric says to watch Resident Alien, and Colossal scientists manage to induce pluripotent (asian elephant) stem cells in their quest to resurrect mammoths. 0:00 - Intro 17:04 - ChatGPT Creds On Sale 21:38 - Mass Marke...

325: Building a Sarcophagus

March 01, 2024 03:49 - 29 minutes - 14.4 MB

Eric has a phone again! AT&T: 1, Apple: 0... then discovers wind chimes are not awesome at 4am. Jon puts his woodworking skills to ancient use and starts housing chickens in the bathroom. Don't miss the private lander relaxing on the moon. The White House says "Use Memory Safe Programming Languages" (and there was much rejoicing). Jon does a Hugging Face-Palm and asks why can't we have nice things - Eric immediately blames JavaScript. Did you celebrate Leap Day? And finally Jon discovers the...

324: Atomic Freeze Frame

February 24, 2024 16:28 - 41 minutes - 30.2 MB

Eric wardials and Jon fails to locate. Falling for scams is easier than you think and how threat actors are using LLMs. Oregon fails to adopt standard time, NASAs new moon landing, and snapshotting activity on the attosecond scale. 0:00 - Intro 12:48 - Eric Topic 18:26 - {color}{weather event} use of LLMs 29:47 - (Not) Standard Oregon Time 33:28 - Moon Landing 35:20 - Attosecond Fun

323: Wallow into a Hole

February 16, 2024 01:10 - 36 minutes - 16.8 MB

Sportsball weekend. Jon can't pause TV and he's annoyed. Eric still has negative opinions of JavaScript and adds cell towers to the list. Followup on political ad clones. Eric uses ChatGPT to find missing US States. Almost. LassPass is not a Dating App. Phishception is the word of the day. FTC says Fraud Losses top 10 Billion in 2023. For fun, Eric reminds you about XKCD and some random math facts about the number 323. Jon reads up on Lake Kivu's Potential Energy. 0:00 - Introduction 8:17...

322: No Words Minced

February 10, 2024 15:26 - 34 minutes - 24.9 MB

Eric Laser Tags and Jon's bees are (mostly) alive; arrests in a 400m crypto heist that may or may not have been from FTX, and the FBI cleans up old routers infected with a PRC botnet; a Chinese company announces new hyperloop speed record, and the winners of the Scrollprize demonstrate extracting text from papyrus charred by Vesuvius. 0:00 - Intro 10:01 - SIM Swap Heist Arrests 15:05 - PRC Botnet Disruption 22:47 - Hyperloop Speed Record 25:37 - Scrollprize Achieved

321: Bacterial DOOM

February 03, 2024 02:25 - 30 minutes - 14.3 MB

Eric has an eye for pain while Jon admires his bees and discovers upgrade issues with his TV. Google ads can send you to malicious software and Facebook has 2000+ companies send them your data. Doom runs everywhere, including bacteria while gene therapy treats hearing loss for kids. 0:00 - Introduction 9:06 - Google Ads are Risky 15:57 - All your data are belong to Facebook 19:51 - Running DOOM with E. Coli 24:19 - Treating Genetic Hearing Loss

320: Onion Volcano

January 27, 2024 17:34 - 35 minutes - 17.9 MB

The Oregon Thaw has happened and Eric and Jon can leave their houses. There was much rejoicing. Are or will AI Sleeper Agents be a thing, a President Biden Deepfake encouraging New Hampshire voters to stay home, and an extremely large data breach posted to Have I Been Pwned. For fun, the soon to be demise of the Leap Second, and a hidden city discovered in the Amazon thanks to lidar. 0:00 - Intro 10:20 - AI Sleeper Agents 16:44 - Don't Vote Deepfake 22:20 - Naz.API List 27:23 - Leap...

319: Ice Skating in the Backyard

January 20, 2024 00:58 - 34 minutes - 16.7 MB

It is all about the Ice. Kids out of school, but no Snow Days for the WFH crowd - and Jon avoids walking out his front door. Serving a court summons via Bitcoin is now a thing and irritating Mandiant is generally not a good move. Eric shares fun facts about Ice and Jon talks Noble Gas Clusters. 0:00 - Introduction 13:26 - Here's some bitcoin: Oh, and You've Been Served! 19:42 - CLINKSINK Drainer 25:38 - Fun Facts about Ice 29:51 - Noble Gas Clusters

318: Cloudy With A Chance Of Cellphones

January 13, 2024 22:56 - 40 minutes - 29.2 MB

Eric struggles with plane and weather issues (thanks Alaska!), and Jon drives in the Snow. Researchers demonstrate Denial of Wrench, the SEC is hacked to promote Bitcoin ETFs so they join the party, and Ransomware in 2023. For fun we have the Peregrine lunar lander and the first (?) person to beat Tetris on the NES. 0:00 - Intro 12:54 - Hacking Connected Wrenches 18:47 - Schröedinger's ETFs 23:45 - Ban or No Ban 30:07 - Peregrine Woes 35:48 - Tetris Savant

317: Not A Pleasant Noise

January 05, 2024 23:01 - 37 minutes - 25.8 MB

Happy New Year! Adult Diapers, what? Eric jumps a car, Jon eats brisket and has a stinkin' dishwasher. Security Best Practices for Earth and Beyond with more Triangulation Details. Eric likes a space picture and Jon shares a handful of the Good Stories you missed in 2023. 0:00 - Introduction 12:31 - Security in Space 19:39 - Triangulation Continuation 28:22 - Double Bang 29:55 - 66 Good Stories

316: A Firestick, Hotel TV, And A Mobile Phone

December 30, 2023 15:19 - 39 minutes - 29.2 MB

Jon has a relaxing Christmas while Eric faces More Water Issues. Also, tire size matters. The first two Lapsus$ teens are sentenced in the UK, Japan plans to crack down on app stores, Ukraine hacks back for Kyivstar, and SSH servers under attack. What is a Flow Battery and is it better than Lithium Ion, and the Juno space probe will pass close to Io Dec 30th. Happy New Year! 0:00 - Intro 16:02 - Two Lapsus$ Teens Sentenced 18:25 - Japan cracking down on App Stores 22:48 - Ukraine Hack...

315: Poprocks are next...

December 22, 2023 06:14 - 38 minutes - 19.4 MB

Eric recounts a 2500 mile roadtrip that includes a kidnapping while Jon enjoys concert week. Eric has a secret shoe shopping habit that has been compromized while Jon moots about a map mess. Garage chemists powered by ChatGPT and the world revolves around checks. 0:00 - Introduction 10:36 - VF Corp's 8-K 18:40 - Google Maps History 24:53 - Chemists use ChatGPT 29:40 - Checks!

314: Magic Is Real

December 16, 2023 14:24 - 41 minutes - 31 MB

Eric and Jon depart in two directions on road trips, Vans, Zoo Lights, and Bee Hives. Binance will be scoured for {evil,taxes}, Beeper Blues, and Push Notification spying by governments. A fun bonanza with We Are Bob, Humane, and Cassiopeia A in stereo(-ish). 0:00 - Intro 11:23 - Binance Scouring 18:07 - Beeper Woes 24:34 - Push Notifications Spying 30:10 - Bobiverse 32:00 - Humane 35:02 - Creative Selection 36:00 - Cassiopeia A Two Ways

313: A Spinny Router

December 09, 2023 02:53 - 31 minutes - 14.4 MB

Eric gets a new toy and installs a license plate holder thanks to Amazon - and no thanks to Amazon subscriptions. Jon gets his new router table set up and finds a photo frustration. Eric uses an (invalid) excuse to be annoyed with JavaScript while Jon checks in on iOS zero-days and Citrix bugs. The Internation Space Station turns 25, Charlie Munger passes on and we'll see you at CosMc's! (Maybe... or maybe not...) 0:00 - Introduction 15:24 - Fuzzy Hashing 20:27 - iOS Zero Days 22:22 -...

312: Nice And Cozy

December 02, 2023 16:01 - 31 minutes - 23.9 MB

Eric travels for Thanksgiving and Jon goes there and back again. Adversarial ML against LLMs, whether generated code is secure (it's not), the demise of a Crypto Drainer, and a complaint against Meta's new policy of pay-us-so-we-don't-track-you. For fun we have the California Railroad Museum and a video explaining just how Apple's Thunderbolt 4 USB-C cable can cost $130 (with CAT scans!). 0:00 - Intro 7:16 - LLM Adversaries 8:11 - Generated (In-)Security 14:58 - Inferno Drainer Demise...

311: The Next Domino

November 24, 2023 04:59 - 30 minutes - 14.1 MB

Happy Thanksgiving Everyone! Eric goes to visit family in California, Jon does a lot of driving and preemptively eats pumpkin pie. Fidelity National Financial has an ooopsie. Something something OpenAI something something. Binance is fined despite not being a US company. Eric takes the family to see the aftermath of the Oroville Dam and Jon explores the volcanic Io. 0:00 - Introduction 7:55 - FNF Oops 11:40 - Open AI had a strange week 14:56 - Binance Fines 20:01 - Oroville Dam 23...

310: Squintworthy

November 18, 2023 18:52 - 39 minutes - 28.1 MB

Jon constructs and Eric cleans house. Let google send your spam, bipartisan (??) surveillance reform bill, and how AI may change democracy. Quantitatively adults have better attention spans now than 30 years ago, and you should read Seth Ring's novels (start with the Titan series). 0:00 - Intro 10:41 - Quiz Spam 15:32 - Surveillance Reform 21:27 - AI for Democracy 31:44 - Better Attention 35:10 - Seth Ring (Terra Nova)

309: Nothing Untoward Going On

November 10, 2023 19:11 - 36 minutes - 16.9 MB

Eric wrote some code and was reminded what "at the speed of government" means while Jon did some travel and acquired discount Halloween candy. Google introduces a real-time code analysis for side-loaded Android apps and Krebs drops some education on how criminal reshipping services work. Eric suggests you check out neal.fun again while Jon avoids fun for a landmark real estate ruling. 0:00 - Introduction 8:11 - More Android Security 15:04 - Criminal Reshipping Services 25:23 - Neal.fu...

308: Pollute The Internet

November 03, 2023 04:16 - 48 minutes - 34.8 MB

Eric hobnobs with forecasters and Jon has an Electrical Mystery. How Kaspersky intercepted 'Operation Triangulation', Apple's new iMessage contact security, what if YouTube just used the tag, and maybe Microsoft shouldn't be putting 'generative AI engagement polls' next to *all* articles. For fun we have the wild flavors of Coke Creations, and the first CRISPR treatment (for sickle cell) is up for FDA approval Dec 8th. 0:00 - Intro 15:07 - Triangulation Interception 21:05 - Contact K...

307: Migratory Gravel

October 28, 2023 01:59 - 35 minutes - 16.5 MB

The rains have returned, Eric's Electric Car Experiment continues, Jon eats weeds and becomes tired. Despite an Oktaober event, 1Password is ok. IOS (the other IOS) has some issues to work through. A Space Winnebago is looking for a reentry permit from the FAA and Jon wants to buy some uncomfortably cool chairs. 0:00 - Introduction 9:00 - Okta-ober Suprise 12:35 - 1Password is Ok 15:11 - IOS XE Ooopsie 21:20 - Space Winnebago 30:14 - Chair Trek

306: Treat Wilma Right

October 21, 2023 16:20 - 36 minutes - 18.4 MB

Eric gets a car and Jon doesn't quite get into an AirBnB. Sourdough and roast failures. Virtual gaming company hacked via Discord, a part time DJ selling fake or unqualified airplane parts, and Slack's Google Drive integration allows information disclosure. For fun we have roll your own ambient audio (chaos!) and a Marsquake that didn't come from asteroids. 0:00 - Intro 14:35 - Shadow Discord Hack 20:06 - Fake Airplane Parts 24:06 - Slack's Drive App 28:43 - Ambient Chaos 32:10 - ...

305: Here Come the Passkeys!

October 14, 2023 01:06 - 30 minutes - 14.2 MB

Eric gets some 100 year old sourdough starter and Jon gets an oboe fixed despite the Jason mixup. Microsoft reveals more on a CVE. Have you been squatted? Here Come the Passkeys! Confluence gets a perfect score. Cloud providers weather a DDoS. Eric reveals some astroid dust while Jon goes to watch an eclipse. 0:00 - Intro 9:24 - Microsoft Stuffs 10:24 - Have I Been Squatted? 12:33 - Here Come the Passkeys! 15:17 - A Perfect 10! 19:17 - HTTP2 Rapid Reset DDoS 22:42 - OSIRIS-REx R...

304: Fuzzed To The Nines

October 07, 2023 14:53 - 44 minutes - 31.9 MB

Eric crochets and Jon ... doesn't. Deep fakes of Hanks, Gayle King, and Mr. Beast, Google to enforce eMail security standards to send to gMail users, and highs and lows of reproducing a tricky zero day in the libwebp library. For fun we have the Nimbus EV -- a small three wheeled, two seater electric vehicle and the Nobel Prize in Medicine is given to Karikó and Weissman in recognition of their mRNA work that led to the covid vaccines. 0:00 - Intro 9:32 - Fake Hanks Teeth Shills 14:38 -...

303: Acronymified

September 30, 2023 04:41 - 39 minutes - 18.3 MB

Eric goes on a trip to Chicago while Jon drops in at College. Complicated hotel scam and new security features in Windows 11. Eric checks in on OSIRIS-REX and Jon talks about non-Bee Bees. Finally, from the Mostly Security Book Club: We Are Bob and Warbreaker. 0:00 - Introduction 15:06 - Hotel Booking Scam 20:07 - Win11 Security Features 30:01 - SPACE! 32:41 - To bee or not-to-bee... 36:08 - We Are Bob 38:25 - Warbreaker

302: Cornhole Tournament

September 22, 2023 18:10 - 32 minutes - 24.7 MB

Eric wins the Oregon Zoo Volunteers Cornhole Tournament and Jon visits the Tillamook Forestry Center. A Linux malware was served for more than 3 years without notice, food companies battling Mexican label requirements, stopping trains by playing three tones, and identity theft from 1965 discovered by facial recognition. For fun we have inverse vaccines (!!) and the obit of a Bletchley Park codebreaker. 0:00 - Intro 11:21 - Linux Malware 14:36 - Kellogg's Nutrition Label War 20:51 - Ra...

301: A Very Asymmetric Problem

September 16, 2023 01:23 - 33 minutes - 15.6 MB

Jon spends the weekend waiting for the fence guy, Eric watches a movie. The International Criminal Court at the Hague will prosecute cyberattacks. Microsoft blogs a bit about Storm-0558. Eric finds a really fast EV and Jon discusses fluid dynamics. 0:00 - Introduction 8:50 - TMNT: Mutant Mayhem 12:15 - Cyberwar and the ICC 16:21 - Storm-0558 25:09 - 0 to 100km/h in less that a second 29:04 - Bottle Flip Physics

300: This is Sparta

September 09, 2023 14:44 - 38 minutes - 27.9 MB

Jon goes fishing and Eric potlucks. The Momas (meals) and the Papas (pals) both have security problems of different sorts. The government goes on a Duck Hunt to shut down QakBot. For fun we have the New York Times word game 'Connections' and a new method to create adult stem cells by resetting the epigenome. 0:00 - Intro 13:40 - Mom's Meals 17:29 - Papa's Pals 22:09 - Duck Hunt 29:12 - Eric Fun 33:16 - Jon Fun

299: That's how math works!

September 02, 2023 04:54 - 42 minutes - 19.6 MB

School is back in session! FYI - kites won't fly without wind. Cryptocurrencies continue to make the news for all the wrong reasons and credit companies skirt the law with your personal data. Eric (might) like Open Range while Jon ponders whether insects feel joy and pain. 0:00 - Intro 13:13 - Crypto Startup loses 40 million 17:11 - SIM Swapping for Money 22:41 - Doxing for pennies... 30:11 - Open Range 34:11 - Do insects feel joy and pain?

298: Ignorance Combined With Arrogance

August 26, 2023 05:05 - 36 minutes - 19 MB

Eric goes camping and Jon repairs his dishwasher. Apple is supporting California's right to repair law, the UK may outlaw end to end encryption and companies are threatening to remove features for residents (see Facebook vs. Canada), and Canary Tokens are awesome. India lands on the moon and you should see the movie Your Name! 0:00 - Intro 10:26 - Apple supports Right to Repair 17:12 - UK Tipping Point 21:15 - See: Canada+Facebook 23:21 - Canaries For All 30:02 - Chandrayaan-3 Lan...

297: Hot Takes

August 18, 2023 04:02 - 31 minutes - 14.6 MB

Eric spends 3 times as much to make better rotisserie chicken than Costco while Jon educates on bees and saves some hydrangeas with a couple trips to Lowes. The CSRB looks at Microsoft, Canon printers and Teslas have something in common, great profile of Window Snyder, and Colorado schools lose some data. Eric remind Jon about TV shows and Jon finds a fort off the coast of India. 0:00 - Introduction 8:51 - CSRB + Microsoft? 11:55 - Canon Printers... 14:30 - ...and Tesla 15:52 - Wind...

296: Feature Of Cenfi

August 12, 2023 14:36 - 41 minutes - 30.7 MB

Eric and Jon return from (mostly driving) trips. Eric visits Crater Parks. A settlement for the family of Henrietta Lacks, and no immediate relief from app store fees. Second hand experience of a bank scam, and the most accurate acoustic side channel attack yet. For fun Eric visits Craters of the Moon (and Crater Lake), and an internet superconductor validation race. 0:00 - Intro 11:38 - Lacks Settlement 15:50 - No App Store Relief 19:19 - Sophisticated Scam 25:53 - Acoustic Attack!...

295: Mostly Fun, Vol. 2

August 04, 2023 03:42 - 18 minutes - 10.8 MB

Jon and Eric are both out this week - enjoy a look back at a few of their favorite Something Funs! 0:00 - Introduction 0:47 - Bees Survive Notre Dame Fire 2:05 - Fake Good News 4:09 - Where's Waldo 5:20 - Those Damming Beavers 8:47 - Hidden Heroines of Chaos 14:05 - Nikon Small World

294: Artificially Real

July 29, 2023 14:44 - 29 minutes - 22.6 MB

Eric at the Night Market and his Schrödinger rotisserie; Jon at the coast. Microsoft makes useful logs more available, the SEC will require breach notifications within 4 days on an 8-K, and the JumpCloud breach is attributed to North Korea. For fun we have Red Rising book 6, and the space strategy game Stellaris. Enjoy! 0:00 - Intro 6:58 - MSFT Expanded Logging 9:17 - 8-K Breach Disclosures 13:21 - JumpCloud DPRK Link 18:45 - Jon's AI Experiment 23:43 - Red Rising book 6 26:27 -...

293: A Surfeit of Pickles

July 21, 2023 02:17 - 40 minutes - 18.5 MB

Eric is tricked into seeing part one of a movie and plans a baseball trip. Jon does pickles. Look for the US Cyber Trust Mark soon! Is your VM licensed for Java? AI summarizes an article with a few hallucinations. Eric enjoys romance novels and Jon hunts neutrinos. 0:00 - Introduction 12:18 - Brisket Saga Followup 13:30 - US Cyber Trust Mark 18:58 - Java Licensing Shakedown 22:54 - Government Backed Hacking 29:43 - Yumi and the Nightmare Painter 34:08 - Sparse Convolutional Neur...

292: People Farming

July 15, 2023 05:17 - 37 minutes - 27 MB

Jon gardens and Eric has a potpourri of activities (hiking, museuming, movieing). Scams and phishing up huge year over year, and will Meta ever launch Threads in the EU (honoring privacy laws?). For fun we have SR-71 stories and a fishing charter out of SW Washington. 0:00 - Intro 11:35 - Scams Up 16:45 - No Threads for EU 23:23 - SR-71 Blackbird 32:50 - Salty Dog

291: The Brisket Saga

July 06, 2023 23:50 - 39 minutes - 18.4 MB

Eric's attempt at making brisket was hampered by IOT failures, Jon's attempt at fishing was hampered by stomach failures. More surveillance camera oopsies and NSO acquisition notes. Will the UK force backdoors in encrypted messages and people really still send snail mail scams via the post office? Who knew. Threads is the latest Twitter replacement and we're looking forward to seeing pebbles from an asteroid. 0:00 - Introduction 19:37 - Surveillance Camera Fail 22:15 - NSO Acquisition F...

290: Muscular Barbarian

July 01, 2023 05:14 - 39 minutes - 28.5 MB

Eric goes stargazing and Jon road-trips to southern oregon. Electromagnetic Fault Injection in drones and a severe zero click apple bug used to target Kaspersky employees. For fun we have a reimagined We Didn't Start the Fire by Fall Out Boy, and a new 'zoom out' feature by Midjourney. 0:00 - Intro 18:03 - EMFI 23:16 - TriangleDB 31:44 - We Didn't Start the Fire 33:38 - Midjourney Zoom Out

289: Four Brain Cells

June 23, 2023 03:48 - 39 minutes - 18.1 MB

Father's Day stuffs, weddings, missed baseball games, beach pizza with carrot chasers. Google sells out to Squarespace. That 30TB external drive is not the deal you think it is. Oregon DMV data compromised. Eric ends up at America's Car Museum and Jon recommends He Who Fights With Monsters. 0:00 - Introduction 10:57 - Google Domains 15:00 - When is 30TB not 30TB? 23:03 - Oregon DMV Data Loss 29:45 - America's Car Museum 33:49 - He Who Fights With Monsters 36:30 - 仙俠

288: Inverse Honeypot

June 17, 2023 16:37 - 40 minutes - 29.3 MB

Jon stacks hay and has a graduate, while Amazon fails to deliver poptarts for Eric. Github repositories purporting to demonstrate zero days instead are malicious; Barracuda urges hardware replacement of compromised devices, unable to patch with software; and spy camera ecosystem completely compromised and practically unpatchable. For fun we have neal.fun's space elevator and a solar probe discovers more about the source of the solar wind. 0:00 - Intro 12:20 - Fake Exploits 16:03 - Hardw...

287: Putting Some Honey Up Top

June 09, 2023 04:04 - 33 minutes - 15.4 MB

Eric's Rocket League team is in first place and Jon's bees are doing great! Kaspersky discovers a compromise on the inside (reboot your iPhone!), Chrome needs an update and BitDefender detects anomalies. Eric beams solar power down to earth and Jon muses what a lost couple decades might be. 0:00 - Introduction 8:53 - Reboot your iPhone 15:37 - Update your Chrome 18:16 - Check your Android Apps 24:25 - Solar Power from Outer Space 27:22 - Waking up after 2 decades

286: LoTR Type Hike

June 03, 2023 13:46 - 39 minutes - 28.4 MB

Eric runs around Oregon and Mostly Bee Talk with Jon. 60 Minutes demos DeepFake voice hacking -- social engineering remains the easiest and most prevalent way folks are compromised; and PyPi declares that all project and org maintainers must enroll in 2FA before the end of the year. For fun we have the Dragonfly Spectral Line Mapper that uses Raspberry Pi's and ZiGGY -- a mobile EV charging solution. 0:00 - Intro 13:52 - Eric Topic 19:52 - PyPi Goes 2FA 27:17 - Dragonfly Spectral Line...

285: Unprecedented Business Requirement

May 26, 2023 00:24 - 35 minutes - 16.2 MB

Jon goes fishing and figures he'll fix a car. Eric goes camping but doesn't really and learns about volunteering at the zoo. Please check out https://attachment.zip for fun, TikTok gets banned in Montana, Suzuki shuts down in India and TrendMicro informs us on the Lemon Group. Eric still enjoys playing Rocket League and Jon catches up on the Mistborn series. 0:00 - Introduction 11:56 - The .zip TLD is fun! 13:22 - TikTok banned in Montana 16:32 - Suzuki India 19:50 - Lemon Group 2...

284: Jellies and Sponges

May 20, 2023 04:35 - 38 minutes - 28.8 MB

Jon listens to concerts, the bees are doing well, and Eric avoids the heat and gets his sprinklers and AC working. The many scam apps claiming ChatGPT, new confusing top level domains, the FBI takes out a Snake with Perseus, and MSI has its firmware signing keys stolen by ransomware. Earth is probably safe from an asteroid for the next thousand years, and which came first, the (comb) jelly or the sponge? 0:00 - Intro 11:53 - ChatGPT Scams 15:39 - File Extension or TLD? 19:04 - Perseus...

283: Brag about it on Social Media

May 13, 2023 00:51 - 36 minutes - 16.8 MB

Eric survives a flash flood in his backyard and Jon's bees are alive. Wyoming will have a Nuclear Power Plant soon and ICS Patch Tuesday is a thing. The Spanish arrest a bunch of Phishing Pholks and there's 10 million bucks in easy money for somebody... Eric finishes The Three Body Problem series and Jon recommends the Paternus Trilogy. 0:00 - Introduction 11:04 - Nuclear Power is Back 13:55 - ICS Patch Tuesday 19:44 - Phishing Arrests 22:31 - Who wants $10,000,000? 28:53 - The Th...

282: Disappointed Face

May 06, 2023 12:55 - 37 minutes - 27.5 MB

Spring Grilling begun for both Jon and Eric, and Jon got his bees, and it's a Google Night for topics. First, Google fails to encrypt Authenticator secrets when synchronizing across devices, invalidating the security premise; and then Google enables support for passkeys across all its accounts. For fun we have a recipe aggregator and interface: Super Cook, and an undisturbed, ancient tomb found in Ireland. 0:00 - Intro 12:32 - Authenticator Exposes Secrets 17:26 - Passkeys for Google ...

Twitter Mentions

@jonathan_b_king 13 Episodes
@ericwuehler 9 Episodes
@campuscodi 4 Episodes
@engineeringvids 3 Episodes
@troyhunt 3 Episodes
@0xdabbad00 2 Episodes
@troutman 2 Episodes
@gossithedog 2 Episodes
@trungtphan 2 Episodes
@riskybusiness 2 Episodes
@doctorow 2 Episodes
@en_us 2 Episodes
@mcafee_labs 1 Episode
@leakissner 1 Episode
@beep 1 Episode
@jeffreygoldbium 1 Episode
@vessonsecurity 1 Episode
@tonygoldmark 1 Episode
@pitdesi 1 Episode
@colinpurrington 1 Episode