Smashing Security

Latest Episodes:

The Bitcoin fraud factory Mar 04, 2020

Show notes

Fraudsters steal millions from those hoping to jump on the Bitcoin bandwagon, Twitter verifies a fake US politician, and it's another face palm for facial recognition.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/168 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

Support Smashing Security

Links:

Inside the Kiev fraud factory stealing senior citizens’ savings — Dagens Nyheter.
Revealed: fake 'traders' allegedly prey on victims in global investment scam — The Guardian.
Inside the Kiev Bitcoin fraud factory — YouTube.
A high school student created a fake 2020 candidate. Twitter verified it — CNN.
Verified account FAQs — Twitter.
London's Dazzle Club uses makeup to protest police use of facial recognition technology — WKSU.
CV Dazzle: Camouflage from Face Detection.
Clearview AI's Facial Recognition Tech Is Being Used By The Justice Department, ICE, And The FBI — BuzzFeed.
Amazon Dating: The Future of Dating — Not the real Amazon.
Carole's ideal date — Amazon Dating.
My Word! — BBC.
My Word recording from early 1960s — YouTube.
Solve podcast.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Coronavirus scams and an exaggerated lion Feb 26, 2020

Show notes

Scammers from Africa are preying on US businesses, a drug dealer makes a mistake when hiding his Bitcoin fortune, and the Coronavirus pandemic is causing scams to soar and raising questions about facial recognition.

Visit https://www.smashingsecurity.com/167 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Anna Brading.

Sponsored By:

Support Smashing Security

Links:

Business Email Compromise (BEC) and G Suite: How the Exaggerated Lion Cybercrime Group Cashes Out — Agari.
A weed dealer’s $59M lesson: Don’t hide Bitcoin keys with a fishing rod — Ars Technica.
Chance encounter with gardaí unmasked bitcoin millionaire drug dealer — Irish Times.
Man who ‘threw away’ bitcoin haul now worth over $80m wants to dig up landfill site — The Independent.
Novel Coronavirus Update — RSA Conference.
The Coronavirus Is Swiftly Breaching Defenses Across The World — Peak Prosperity.
Scores of Hongkongers hit by mask scam on Facebook, hundreds more could be fraud victims since coronavirus outbreak — South China Morning Post.
How Big of a Scam Are 'Coronavirus Protection Kits?' — Vice.
Wearing a mask won’t stop facial recognition anymore — Abacus News.
Coronavirus phishing scam targets victims with false information — Business Insider.
This Cat Does Not Exist.
These Cats Do Not Exist.
Intelligence — Sky.
This Country — BBC Three.
Farkle — Wikipedia.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

What the Dickens! Ad ban thank you scam Feb 19, 2020

Show notes

How to stop dick pics on Twitter, and a new way bad guys are extorting money from websites earning cash from Google ads.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Visit https://www.smashingsecurity.com/166 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

Support Smashing Security

Links:

Tweet from Kelsey Bressler.
safeDM – Making the Internet Safer.
@showYoDiq — Twitter.
This Dick Pic Filter For Your Inbox Does Block Most Pictures Of Dicks, And Some Dick-Like Things — Buzzfeed.
Smashing Security 034: The pen is mightier than the password — With special guest David McClelland.
Pay Up, Or We’ll Make Google Ban Your Ads — Krebs on Security.
The Personal History of David Copperfield (Trailer) — YouTube.
The Personal History of David Copperfield — Wikipedia.
Hunted — Endeavor Audio.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Cheapfakes, deepfakes, and Ashley Madison Feb 12, 2020

Show notes

Wi-Fi hopping malware, the return of Ashley Madison extortion scams, and should social media be doing anything about cheapfakes?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

Visit https://www.smashingsecurity.com/165 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jessica Barker.

Sponsored By:

Support Smashing Security

Links:

Smashing Security #162: Robocalls, health hacks, and facial recognition fears — Carole talks about the activities of Clearview AI.
‎The Daily: The End of Privacy as We Know It? — Apple Podcasts.
Emotet Malware Advisory — US Department of Homeland Security.
Emotet Wishes You a Merry Christmas from Greta Thunberg — Proofpoint.
Coronavirus - hackers exploit fear of infection to spread malware — Graham Cluley.
Emotet evolves with new Wi-Fi spreader — Binary Defense.
Dear Ashley Madison user, I know everything about you. Pay up or else — Ars Technica.
Here's what an Ashley Madison blackmail letter looks like — Graham Cluley.
Nancy Pelosi rips up Trump's speech after divisive State of the Union address — The Guardian.
Tweet by Dan Scavino Jr.
Video of Pelosi brings renewed attention to 'cheapfakes' — AP News.
Tool to Help Journalists Spot Doctored Images Is Unveiled by Jigsaw — The New York Times.
Smashing Security #143: Hacking from outer space, Ukrainian cryptomining, and deepfaked Canadians.
First survey of its kind for 50 years finds most Americans still think they have above average intelligence — Research Digest.
Grumpy Website.
The Courage to Be Disliked: The Japanese Phenomenon That Shows You How to Change Your Life and Achieve Real Happiness — Amazon.
Sophie's World: A Novel About the History of Philosophy — Amazon.com.
Fake Heiress – The woman who scammed New York — BBC Radio Four.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

A bitter pill to swallow Feb 05, 2020

Show notes

A gallery is tricked into giving millions to a fraudster, software tells doctors to push opioids onto patients, and an artist finds a novel way to trick Google Maps into thinking there's a traffic jam.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who ended up recording without a guest this week.

Visit https://www.smashingsecurity.com/164 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

Support Smashing Security

Links:

Fraudsters Posing as Art Dealer Got Gallery to Pay Millions — Bloomberg.
‘Hampstead Heath, Harrow in the Distance’, John Constable, David Lucas, published 1855 — Tate.
Electronic Health Records Vendor to Pay $145 Million to Resolve Criminal and Civil Investigations — Department of Justice.
In secret deal with drugmaker, health-records tool pushed opioids — Los Angeles Times.
Practice Management Software — Practice Fusion.
Opioid epidemic in the United States — Wikipedia.
Exclusive: OxyContin maker Purdue is 'Pharma Co X' in U.S. opioid kickback probe - sources — Reuters.
Smashing Security 122: The big fat con at Office Depot.
Google Maps hacks — Simon Weckert.
Google Maps Hacks by Simon Weckert — YouTube.
Telling Lies launch trailer — YouTube.
‎Telling Lies — iOS App Store.
Telling Lies — Steam.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Russian heists and Ring wrongs Jan 29, 2020

Show notes

Should possessing malware be illegal in itself? How did a Russian cryptocurrency exchange millionaire lose his fortune? And what on earth are Amazon Ring doorbell cams up to now?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Lisa Forte.

And don't miss our special featured interview with Adrian Sanabria, all about Thinkst Canary.

Visit https://www.smashingsecurity.com/163 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Adrian Sanabria and Lisa Forte.

Sponsored By:

Support Smashing Security

Links:

Senate Bill 30 (PDF)
Maryland: Make malware possession a crime! Yes, yes, researchers get a free pass — The Register.
The City Of Baltimore Blew Off A $76,000 Ransomware Demand Only To Find Out A Bunch Of Its Data Had Never Been Backed Up — Techdirt.
Smashing Security 151: Frankly, sometimes paying the ransom is a good idea.
Maryland Computer Crimes Laws — FindLaw.
Maryland Cookies TV advert — YouTube.
Hunting the missing millions from collapsed cryptocurrency — BBC News.
Inside the hellish workday of an Amazon warehouse employee — New York Post.
Ring Doorbell App Packed with Third-Party Trackers — Electronic Frontier Foundation.
Nicholas Parsons: 'Broadcasting legend' dies at 96 after short illness — BBC News.
Just a Minute — Wikipedia.
Nicholas Parsons interviewed by Richard Herring — YouTube.
Her Story - A Video Game About a Woman Talking to the Police.
Her Story trailer — YouTube.
Her Story follow-up takes place on a stolen NSA hard drive — Polygon.
Bezos learns the harsh lesson of texting a crown prince fond of crucifixions — Marina Hyde, writing in The Guardian.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Robocalls, health hacks, and facial recognition fears Jan 22, 2020

Show notes

A hospital gets hacked because of an ex-employee's grudge, robocalls are on the rise, and we share a scary story about the future of facial recognition.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Michael Hucks.

Visit https://www.smashingsecurity.com/162 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Michael Hucks.

Sponsored By:

Support Smashing Security

Links:

YOU Season 2 Trailer — YouTube.
Hospital administrator sacked for using NHS computer to download over 10,000 records is spared jail — Daily Mail.
Robocalls: Americans got 58.5 billion in 2019, up 22% from last year — USA Today.
Microsoft and Google just can't agree on proposed ban on facial recognition — ZDNet.
Clearview - Technology to help solve the hardest crimes.
The Secretive Company That Might End Privacy as We Know It — New York Times.
Clearview FAQ (PDF).
Episode review: Columbo Double Shock — Graham got it wrong. It was Martin Landau, not Leonard Nimoy, who played the twins. And they weren't surgeons (but Nimoy did play an evil surgeon in a different Columbo episode that season)
Eunoia: Words that Don't Translate.
Dog wagging her tail every time she sees her owner — YouTube.
She Said: Breaking the Sexual Harassment Story That Helped Ignite a Movement — Amazon.com.
Harvey Weinstein Paid Off Sexual Harassment Accusers for Decades — New York Times.
‘She Said’ Recounts How Two Times Reporters Broke the Harvey Weinstein Story — New York Times.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Love, lucky dips, and 23andMe Jan 15, 2020

Show notes

The man who hacked the UK National Lottery didn't end up a winner, Japanese Love hotel booking tool suffers a data breach, and just what is 23andMe planning to do with your DNA?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

Visit https://www.smashingsecurity.com/161 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Thom Langford.

Sponsored By:

Support Smashing Security

Links:

Cyber criminal jailed over National Lottery hack — National Crime Agency.
Man who hacked National Lottery for just £5 is jailed for nine months — Hot for Security.
Booking data stolen from Japanese short-time love hotel booking service HappyHotel — SiliconANGLE.
23andMe Licenses Drug Compound to Spanish Drugmaker Almirall — Bloomberg.
Big Data and the End of Painful, Invasive Medical Procedures — Wired.
How 23andMe Won Back the Right to Foretell Your Diseases — Wired.
Privacy policy — 23andMe.
Turbo Boost Switcher for macOS.
Embarrassed patients can now send photos of genitals to doc for STI checks — The Sun.
Messiah trailer — YouTube.
Messiah — Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

SNAFUs! MS Word, Amazon Ring, and TikTok Jan 08, 2020

Show notes

We discuss how Microsoft Word helped trap a multi-million dollar fraudster, how Amazon Ring may be recording more than you're comfortable with, and how teens are flocking to TikTok (and why that might be a problem).

All this and much much more is covered in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/160 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

Support Smashing Security

Links:

Senior Manager Of Global Internet Company Pleads Guilty To Wire Fraud — Department of Justice.
IT exec sets up fake biz, uses it to bill his bosses $6m for phantom gear, gets caught by Microsoft Word metadata — The Register.
We Tested Ring’s Security. It’s Awful — Motherboard.
Amazon Ring isn’t even good at pretending to care about your privacy and safety — Fight for the Future
Amazon’s Ring to let customers opt out of receiving police video requests — GeekWire.
Letter to Amazon's Jeff Bezos from Senator Ron Wyden and others (PDF).
House panel asks Apple, Google if app makers must reveal foreign ties — Engadget.
U.S. Military Bans TikTok Over Ties to China — Wall Street Journal.
The Growing Popularity of Chinese Social Media Outside China Poses New Risks in the West — PIIE.
TikTok Privacy Policy.
Statement on TikTok's content moderation and data security practices — TikTok.
Revealed: how TikTok censors videos that do not please Beijing — The Guardian.
Parents warned to check kids' phones for 15 popular apps used by paedos and bullies to target youngsters — The Sun.
Dracula — BBC iPlayer.
Dracula — Netflix.
Obsessed With... - Dracula - Episode 1: The Rules of the Beast feat. Mark Gatiss and Steven Moffat — BBC Sounds.
Dracula TV series — Wikipedia.
The Witcher — Netflix.
The Witcher Soundtrack - Toss A Coin To Your Witcher Lyrics — YouTube.
Ricky Gervais 2020 Golden Globe Monologue — Reddit.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Rap, robbery, and IoT holiday hell Dec 18, 2019

Show notes

A rapping bank worker is accused of stealing from the vault, the devices that can hide your car's true mileage, and why it may be a case of "No No No" rather than "Ho Ho Ho" when it comes to IoT toys this Christmas.

And as Carole sups the mulled wine, Graham has problems with his internet connection...

Visit https://www.smashingsecurity.com/159 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

Support Smashing Security

Links: