098: A Facebook omnishambles

Millions of Facebook user accounts put at risk after hack! The UK Conservative party's conference app causes a privacy omnishambles! And Facebook (again) has been doing something naughty with the phone numbers you give it for security reasons! Oh, and Maria gets very excited about something to do with Star Trek.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or http://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.
Special Guest: Maria Varmazis.
Sponsored By:
https://www.lastpass.com/smashing (LastPass): LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
https://www.smashingsecurity.com/boxcryptor (Boxcryptor): Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.

Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor

https://www.patreon.com/smashingsecurity (Support Smashing Security)
Links:
https://twitter.com/SmashinSecurity/status/1046697954822836224 (Our Podcast Awards trophy acceptance video ) — Even though we didn't actually win, we still thought you might like to see it.
https://www.virusbulletin.com/conference/vb2018/ (Virus Bulletin conference, Montreal) — Say "Hi" to Carole if you see her there.
https://www.youtube.com/watch?v=kypGOTDoiLI (Everything that went wrong during Theresa May’s 2017 conference speech - YouTube)
https://www.youtube.com/watch?v=rLMD1kyOaIo (Die Hard on the One Show - Charlie Brooker's Weekly Wipe - YouTube)
https://www.bbc.co.uk/news/uk-politics-45693143 (Conservative Party conference app reveals MPs' numbers - BBC News)
https://www.buzzfeed.com/alexwickham/the-tories-have-accidentally-revealed-the-personal-mobile (The Tories Say They Were "Let Down" By A Conference App Platform After It Allowed Access To The Personal Numbers Of Hundreds Of MPs)
https://thenextweb.com/opinion/2018/10/01/conference-apps-are-crap-and-mostly-pointless/ (Conference apps are crap and (mostly) pointless)
https://newsroom.fb.com/news/2018/09/security-update/amp/ (Security Update – Facebook Newsroom)
https://www.wired.com/story/facebook-security-breach-third-party-sites/ (The Facebook Security Meltdown Exposes Way More Sites Than Facebook)
https://mislove.org/publications/PII-PETS.pdf (Investigating sources of PII used in Facebook’s targeted advertising (PDF)) — Research from Northeastern University.
https://gizmodo.com/facebook-is-giving-advertisers-access-to-your-shadow-co-1828476051 (Facebook Is Giving Advertisers Access to Your Shadow Contact Information)
https://www.eff.org/deeplinks/2018/09/you-gave-facebook-your-number-security-they-used-it-ads (You Gave Facebook Your Number For...

Millions of Facebook user accounts put at risk after hack! The UK Conservative party's conference app causes a privacy omnishambles! And Facebook (again) has been doing something naughty with the phone numbers you give it for security reasons! Oh, and Maria gets very excited about something to do with Star Trek.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.Boxcryptor:

Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.

Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor

Support Smashing Security

Links:

Our Podcast Awards trophy acceptance video — Even though we didn't actually win, we still thought you might like to see it.Virus Bulletin conference, Montreal — Say "Hi" to Carole if you see her there.Everything that went wrong during Theresa May’s 2017 conference speech - YouTubeDie Hard on the One Show - Charlie Brooker's Weekly Wipe - YouTubeConservative Party conference app reveals MPs' numbers - BBC NewsThe Tories Say They Were "Let Down" By A Conference App Platform After It Allowed Access To The Personal Numbers Of Hundreds Of MPsConference apps are crap and (mostly) pointlessSecurity Update – Facebook NewsroomThe Facebook Security Meltdown Exposes Way More Sites Than FacebookInvestigating sources of PII used in Facebook’s targeted advertising (PDF) — Research from Northeastern University.Facebook Is Giving Advertisers Access to Your Shadow Contact InformationYou Gave Facebook Your Number For Security. They Used It For Ads — The EFF is not impressed.The The One Show Show on iTunesmanwhohasitall (@manwhohasitall) on TwitterTiburn Enterprise Star Trek PC at Lenovo Tech World 2018 - YouTubeLenovo Sets Computer to Stun, Unveils Star Trek Enterprise PCSmashing Security merchandise (t-shirts, mugs, stickers and stuff)