187: Huawei ban, MGM hack, and a contact-tracing cock-up

Login chaos for England's contact tracing service, our drill-down on the Britain's Huawei 5G ban, MGM's blockbuster breach, and how to pronounce "Gigabyte."

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and Carole Theriault, joined this week by Maria Varmazis.

Plus we have a bonus featured interview with Scott Petry, the co-founder of Authentic8, all about how you can browse the internet safely, securely, and anonymously when conducting research, collecting sensitive evidence, and analyzing data.

Visit https://www.smashingsecurity.com/187 (https://www.smashingsecurity.com/187) to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the https://www.reddit.com/r/smashingsecurity (Smashing Security subreddit), or https://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.
Special Guests: Maria Varmazis and Scott Petry.
Sponsored By:
https://www.lastpass.com/smashing (LastPass): LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
https://www.smashingsecurity.com/authentic8 (Authentic8): Silo for Research (Toolbox) from Authentic8 is a secure and anonymous web browsing solution that enables threat intelligence, security, and public safety professionals to conduct research, collect evidence, and analyze data across the open, deep and dark web.

To learn how Silo for Research enables teams to timely and efficiently investigate, while ensuring maximum security and oversight to ensure compliance - including GDPR - go to smashingsecurity.com/authentic8

https://www.patreon.com/smashingsecurity (Support Smashing Security)
Links:
https://news.sky.com/story/coronavirus-contact-tracers-in-england-locked-out-of-accounts-12028196 (Coronavirus: Contact tracers in England 'locked out of accounts' ) — Sky News.
https://www.grahamcluley.com/dido-harding-coronavirus-app/ (TalkTalk’s ex-CEO Dido Harding heads up the UK’s Coronavirus tracing app…) — Graham Cluley.
https://www.grahamcluley.com/coronavirus-tracing-scammers/ (Apparently Coronavirus-tracing scammers won’t sound professional… (Yeah, right!)) — Graham Cluley.
https://www.bbc.co.uk/news/technology-53403793 (Huawei 5G kit must be removed from UK by 2027 ) — BBC News.
https://www.theverge.com/2020/7/6/21314340/huawei-5g-networks-security-risk-us-uk (US sanctions make Huawei more of a security risk, says leaked UK report) — The Verge.
https://www.ncsc.gov.uk/blog-post/a-different-future-for-telecoms-in-the-uk (A different future for telecoms in the UK) — NCSC.
https://www.commerce.gov/news/press-releases/2020/05/commerce-addresses-huaweis-efforts-undermine-entity-list-restricts (Commerce Addresses Huawei’s Efforts to Undermine Entity List, Restricts Products Designed and Produced with U.S. Technologies ) — U.S. Department of Commerce.
https://www.zdnet.com/article/a-hacker-is-selling-details-of-142-million-mgm-hotel-guests-on-the-dark-web/ (A hacker is selling details of 142 million MGM hotel guests on the dark web) — ZDNet.
https://window-swap.com/ (WindowSwap.)...

Login chaos for England's contact tracing service, our drill-down on the Britain's Huawei 5G ban, MGM's blockbuster breach, and how to pronounce "Gigabyte."

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Plus we have a bonus featured interview with Scott Petry, the co-founder of Authentic8, all about how you can browse the internet safely, securely, and anonymously when conducting research, collecting sensitive evidence, and analyzing data.

Visit https://www.smashingsecurity.com/187 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Maria Varmazis and Scott Petry.

Sponsored By:

LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.Authentic8:

Silo for Research (Toolbox) from Authentic8 is a secure and anonymous web browsing solution that enables threat intelligence, security, and public safety professionals to conduct research, collect evidence, and analyze data across the open, deep and dark web.

To learn how Silo for Research enables teams to timely and efficiently investigate, while ensuring maximum security and oversight to ensure compliance - including GDPR - go to smashingsecurity.com/authentic8

Support Smashing Security

Links:

Coronavirus: Contact tracers in England 'locked out of accounts' — Sky News.TalkTalk’s ex-CEO Dido Harding heads up the UK’s Coronavirus tracing app… — Graham Cluley.Apparently Coronavirus-tracing scammers won’t sound professional… (Yeah, right!) — Graham Cluley.Huawei 5G kit must be removed from UK by 2027 — BBC News.US sanctions make Huawei more of a security risk, says leaked UK report — The Verge.A different future for telecoms in the UK — NCSC.Commerce Addresses Huawei’s Efforts to Undermine Entity List, Restricts Products Designed and Produced with U.S. Technologies — U.S. Department of Commerce.A hacker is selling details of 142 million MGM hotel guests on the dark web — ZDNet.WindowSwap.How do you pronounce "Gigawatt"? — Waldo Jaquith on Twitter.Metric (SI) Prefixes — NIST.No podcast.In the No Part 1 — Radiolab.21 OSINT Tools for Cyber Threat Intelligence — Authentic8.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)