107: Sextorting the US army, and a Touch ID scam

Fitness apps exploit TouchID through a sneaky user interface trick, tech giants claim to have a plan to banish passwords, and you won't believe who was behind a sextortion scam that targeted over 400 members of the US military.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and Carole Theriault, joined this week by ferret-loving ethical hacker Zoë Rose.

Follow the show on Twitter at @SmashinSecurity, or http://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.
Special Guest: Zoë Rose.
Sponsored By:
https://www.lastpass.com/smashing (LastPass): LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

https://www.patreon.com/smashingsecurity (Support Smashing Security)
Links:
http://www.ncis.navy.mil/Pages/surpriseparty11282018.aspx (Military criminal investigative organizations crack down on sextortion ring targeting service members) — NCIS.
https://www.welivesecurity.com/2018/12/03/scam-ios-apps-promise-fitness-steal-money-instead/ (Scam iOS apps promise fitness, steal money instead) — WeLIveSecurity.
https://newsroom.mastercard.com/press-releases/mastercard-microsoft-join-forces-to-advance-digital-identity-innovations/ (Mastercard, Microsoft to Advance Digital Identity Innovations) — Mastercard press release.
https://www.theatlantic.com/international/archive/2018/02/china-surveillance/552203/ (China's Surveillance State Should Scare Everyone) — The Atlantic.
https://www.itpro.co.uk/security/32492/mastercard-and-microsoft-to-jointly-develop-universal-digital-id-technology (Mastercard and Microsoft to jointly develop universal digital ID technology) — IT Pro.
https://www.bertramfiddle.com/ (A Victorian point and click adventure game) — Bertram Fiddle.
https://www.youtube.com/watch?v=1zsC8yfUAP4 (Bertram Fiddle: A Bleaker Predicklement Trailer) — YouTube.
https://ouraring.com/ (Oura Ring sleep and activity tracker.)
https://ouraring.com/how-oura-works/ (Learn how Oura ring works.)
https://www.grahamcluley.com/marriott-hack-starwood/ (Marriott warns of hack. 500 million Starwood hotel guests' personal data could be exposed) — Graham Cluley.
https://www.cnet.com/news/marriott-breach-what-to-do-when-hackers-steal-your-passport-number/ (Marriott breach: What to do when hackers steal your passport number) — CNet.
https://www.smashingsecurity.com/store (Smashing Security merchandise (t-shirts, mugs, stickers and stuff))

Fitness apps exploit TouchID through a sneaky user interface trick, tech giants claim to have a plan to banish passwords, and you won't believe who was behind a sextortion scam that targeted over 400 members of the US military.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by ferret-loving ethical hacker Zoë Rose.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Zoë Rose.

Sponsored By:

LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

Military criminal investigative organizations crack down on sextortion ring targeting service members — NCIS.Scam iOS apps promise fitness, steal money instead — WeLIveSecurity.Mastercard, Microsoft to Advance Digital Identity Innovations — Mastercard press release.China's Surveillance State Should Scare Everyone — The Atlantic.Mastercard and Microsoft to jointly develop universal digital ID technology — IT Pro.A Victorian point and click adventure game — Bertram Fiddle.Bertram Fiddle: A Bleaker Predicklement Trailer — YouTube.Oura Ring sleep and activity tracker.Learn how Oura ring works.Marriott warns of hack. 500 million Starwood hotel guests' personal data could be exposed — Graham Cluley.Marriott breach: What to do when hackers steal your passport number — CNet.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)