Smashing Security

Latest Episodes:

Logic bombs, brain data exploitation, and Digga D tweets Jul 24, 2019

Show notes

Logic bombs in Excel spreadsheets, how should we protect our brain data from big companies, and how did bizarre messages about Drill rap end up on the Metropolitan Police's Twitter account and website?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BJ Mendelson.

Visit https://www.smashingsecurity.com/138 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: B J Mendelson.

Sponsored By:

Support Smashing Security

Links:

Tinley Consulting's website.
The meaning and origin of 'Come a cropper'.
Siemens contractor pleads guilty to planting logic bomb in company spreadsheets — ZDNet.
Brain data regulation — Practical Ethics, University of Oxford.
Monkey uses brain to control prothetic arm — YouTube.
Neuralink and the Brain's Magical Future — Wait But Why.
Kernel is trying to hack the human brain - but neuroscience has a long way to go — The Verge.
No, the Met Police wasn't hacked. But its Twitter account and website were hijacked — Graham Cluley.
The war against rap: censoring drill may seem radical but it's not new — The Guardian.
Katie Hopkins got her Twitter hacked - you had best continue ignoring her — Graham Cluley.
Sorry for the Nazi spam from my Twitter account — Graham Cluley.
Animated Knots by Grog.
Expel your shallow human form and offer it up to new Garfield! — /r/imsorryjon on Reddit.
Garfield minus Garfield.
French inventor to attempt to cross Channel on jet-powered flyboard — The Guardian.
Spider-Man vs Green Goblin — YouTube.
'Like a damp towel on a line': the day Boris Johnson got stuck on a zip wire — The Guardian.
B.J. Mendelson on Patreon.
Smashing Security on Patreon.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Porn trolling lawyers, Insta hacking, and Ctrl-Alt-LED Jul 17, 2019

Show notes

Erection your honour! Lawyers find themselves behind bars after they make porn movies in an attempt to scam internet users, boffins in Israel detail a way to steal data from an air-gapped computer, and Instagram coughs up $30,000 after a researcher finds a simple way to hack into anybody's account.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/137 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

Support Smashing Security

Links:

CTRL-ALT-LED: Leaking Data from Air-Gapped Computers Via Keyboard LEDs — IEEE.
Academics steal data from air-gapped systems via a keyboard's LEDs — ZDNet.
How I Could Have Hacked Any Instagram Account — The Zero Hack.
How any Instagram account could be hacked in less than 10 minutes — Hot for Security.
Takeru Kobayashi - hotdog-eating world record holder — Wikipedia.
Smashing Security 092: Hacky sack hack hack.
Porn pirating lawyer jailed for five years — BBC News.
Stiff penalty: Prenda Law copyright troll gets 14 years of hard time for blue view 'n sue scam — The Register.
Prenda Law boss John Steele to miss 2020 Olympics... unless they show it in prison — The Register.
InspiroBot.
What football will look like in the future — (Maria says don't try to read it on your smartphone)
The Life Of A Rock.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Oops, we created Iran's hacking exploit Jul 10, 2019

Show notes

Mac users of the Zoom video conferencing app are warned their webcams could be hijacked, security firms warn of how scammers are deepfaking audio to steal from businesses, and our guest owns up to the role he played in an Iranian cyberattack against US organisations.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Charl van der Walt.

Visit https://www.smashingsecurity.com/136 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Charl van der Walt.

Sponsored By:

Support Smashing Security

Links:

Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!
Zoom Mac flaw allows webcams to be hijacked - because they wanted to save you a click — Graham Cluley.
USCYBERCOM Malware Alert on Twitter.
CISA Statement on Iranian Cybersecurity Threats — Department of Homeland Security.
Patch for Microsoft Outlook security vulnerability.
U.S. Military Warns Outlook Users To Update Immediately Over Hack Linked To Iran — Forbes.
U.S. Cyber Command Shares Malware via VirusTotal — SecurityWeek.
Steve Buscemi Swapped On Jennifer Lawrence — YouTube.
Fake voices 'help cyber-crooks steal cash' — BBC News.
New AI deepfake app creates nude images of women in seconds — The Verge.
Horrifying DeepNude App Undresses a Photo of Any Woman With a Single Click — Motherboard.
Learn how to spot deepfake videos — Slate.
507 Mechanical Movements.
‘Born a Crime,’ Trevor Noah’s Raw Account of Life Under Apartheid — The New York Times.
The global tree restoration potential — Science.
How to erase 100 years of carbon emissions? Plant trees—lots of them — National Geographic.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)
Support us on Patreon!

Privacy & Opt-Out: https://redcircle.com/privacy

Zombie grannies and unintended leaks Jul 03, 2019

Show notes

We take a bloodied baseball bat to Android malware, and debate the merits of a social media strike, as one of the team bites the bullet and buys a smart lock for the office.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Oli Skertchly.

Visit https://www.smashingsecurity.com/135 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Oli Skertchly.

Sponsored By:

Support Smashing Security

Links:

This scary game app is coming for your credentials — Wandera.
App vetting: How do you measure the risk level of risky apps? — Wandera.
The not so ultra lock — Pen Test Partners.
Cat playing the flute — Twitter.
Proposing a 'Declaration of Digital Independence' — Wired.
Declaration of Digital Independence — Larry Sanger.
@gcluley@mastodon.green — Follow Graham on Mastodon.
The Fediverse — Wikipedia.
Apollo 11 in Real-time.
Dark — Netflix.
Amazon reviews of the Chillow cooling pillow.
The Best Cooling Pillows for Night Sweats — Health.com.
Oli Skertchly on Instagram.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Sextortion, silicone face masks, and a DDoS doofus Jun 26, 2019

Show notes

Scammers steal millions by impersonating a French politician, we offer fashion tips for DDoS attackers, and hear how a small town fought a sextortionist preying on young women.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

Visit https://www.smashingsecurity.com/134 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jessica Barker.

Sponsored By:

Support Smashing Security

Links:

Anonymous hacker exposed after dropping USB drive while throwing Molotov cocktail — ZDNet.
18 maanden cel voor hacker die website Crelan en pizzeria plat legde — HLN.
The fake French minister in a silicone mask who stole millions — BBC News.
He Cyberstalked Teen Girls for Years—Then They Fought Back — Wired.
Childline — A counselling service for children and young people in the UK.
Cyberbullying information — FTC.
Information and resources to curb the growing problem of cyberbullying — National Crime Prevention Council.
The Coddling of the American Mind.
Depression, anxiety, suicide increase in teens and young adults, study finds — CBS News.
Dreyer's English by Benjamin Dreyer — Penguin Random House.
Stay Tuned: The Laws of Language (with Ben Dreyer).
The Defiant Ones (trailer) — YouTube.
The Defiant Ones — HBO.
myNoise.net
NCSC CyberThreat 2019 (London, GB).
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Cookie cock-ups, Hong Kong protests, and smart TV virus scans Jun 19, 2019

Show notes

We head to Hong Kong to look at how technology has helped anti-government protesters (and how China has tried to disrupt it), Samsung is skittish over whether to tell TV owners to virus-scan their devices, and you won't believe whose website is not GDPR-compliant.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by James Thomson.

Visit https://www.smashingsecurity.com/133 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language. "Chickens!"

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: James Thomson.

Sponsored By:

Support Smashing Security

Links:

Information about Cookies — ICO.
All About Do Not Track.
Apple is removing the Do Not Track toggle from Safari, but for a good reason — Macworld.
Google Chrome privacy extension hasn't been updated for years — Graham Cluley.
Tweet by Adam Rose — Twitter.
Cookie Control plugin — Civic.
China social media: WeChat and the Surveillance State — Stephen McDonell, BBC News.
DDoS attack that knocked Telegram secure messaging service offline — Tripwire.
Inside China's 'thought transformation' camps — BBC News.
Scan your TV to prevent malware — Samsung.
Samsung Deletes Frightening Tweet Warning That Its Smart TVs Can Get Viruses — Gizmodo.
Samsung: Here's how we're securing your smart TV — ZDNet.
Is the CIA's Weeping Angel spying on TV viewers? — Graham Cluley.
Samsung's Android Replacement Is a Hacker's Dream — Motherboard.
All of the Mueller report’s major findings in less than 30 minutes — PBS NewsHour, YouTube.
СтопХам - Урок географии — YouTube.
Where Mimes Patrolled the Streets and the Mayor Was Superman — New York Times.
Documentaries - watch free online documentaries — IHaveNoTV.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

CBP cyber attack, an iPhone privacy boost, and Twitter list abuse Jun 12, 2019

Show notes

United States Customs and Border Protection had sensitive data stolen, but the hackers didn't have to breach its network. Apple has ambitious plans to make iPhone users safer online. And trolls are using Twitter lists to target their victims.

All this and much much more is discussed in the latest edition of the MULTI-AWARD-WINNING "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

Visit https://www.smashingsecurity.com/132 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

Support Smashing Security

Links:

Smashing Security named the Best Security Podcast — Graham Cluley.
U.S. Customs and Border Protection says photos of travelers into and out of the country were recently taken in a data breach — Washington Post.
Maker of US border's license-plate scanning tech ransacked by hacker, blueprints and files dumped online — The Register.
US border cops confirm: Maker of America's license-plate, driver recognition tech hacked, camera images swiped — The Register.
Tweet from Sam Soffes.
Apple previews iOS 13 — Apple.
Sign In with Apple human user interface guidelines — Apple.
How trolls use Twitter lists to target and harass other users — CNBC.
Trolls get tricky on Twitter with targeted harassment lists — Kim Komando.
10 hours worth of the original Firestorm TV series (Japanese, with English subtitles) — YouTube.
Gerry Anderson’s Firestorm Exclusive FULL Minisode — YouTube.
Gerry Anderson's Firestorm — A brand new science fiction series from the creator of Thunderbirds (or, more precisely, his son).
AITA — Reddit.
Ecosia - the search engine that plants trees.
Ecosia privacy policy and the data it collects.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Zap yourself from the net, and patch now against BlueKeep Jun 05, 2019

Show notes

Microsoft issues warning to unpatched Windows users about worm risk, and how do you delete all traces of yourself off the internet after you murder your podcast co-host?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who aren't joined by a special guest this week.

Visit https://www.smashingsecurity.com/131 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

Support Smashing Security

Links:

WannaCry ransomware hits systems worldwide — Graham Cluley.
WannaCry - Who's to blame? — Smashing Security #021.
Remote Desktop Services Remote Code Execution Vulnerability CVE-2019-0708 — Microsoft.
A Reminder to Update Your Systems to Prevent a Worm — Microsoft.
Microsoft practically begs Windows users to fix wormable BlueKeep flaw — Ars Technica.
Almost One Million Vulnerable to BlueKeep Vuln (CVE-2019-0708) — Errata Security.
Intense scanning activity detected for BlueKeep RDP flaw — ZDNet.
Greatest Love Of All (Official Music Video) - Whitney Houston — YouTube.
DeleteMe.
Deseat.me.
Removing Content From Google.
I want to know how to go about deleting everything about myself online — Reddit.
Remove yourself from the internet, hide your identity, and erase your online presence — ZDNet.
Chernobyl Trailer — YouTube.
The 23-Year-Old Woman Who Pioneered Investigative Journalism — The Atlantic.
Undercover in an Insane Asylum: How a 23-Year-Old Changed Journalism — YouTube.
Nellie Bly — Wikipedia.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Doctored videos, Bcc blunders, and a diva May 30, 2019

Show notes

You won't believe who had to report themselves to the data protection agency for a breach, or who has been sharing doctored videos of political rivals, or how much money you can make selling a laptop infected with malware... and how Carole gets her diva on.

Visit https://www.smashingsecurity.com/130 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

Support Smashing Security

Links:

Final chance to vote for Smashing Security!
Apple Podcasts New & Noteworthy, What’s Hot Sections Are Back — Kate Erickson.
When selling security awareness training by email, probably a good shout not to hit 'reply all' — The Register.
Ghostery Email Incident Update — Ghostery.
NHS IT bod sends test email to 850k users – and then responses are sent 'reply all' — The Register.
Google mistakes the entire NHS for massive cyber-attacking botnet — The Register.
UK NHS 850k Reply-all email fail: State health service blames Accenture — The Register.
BCC warning when emailing to many TO/CC recipients — SafeSend.
SendGuard for Outlook.
Privacywaakhond AP blundert met cc-knop — Computable.
Tweet by Jeroen Terstegge.
Canada Plans Fines for Tech Companies That Spread Disinformation — Motherboard.
#DeleteFacebook: Twitter Users Urge People To Deactivate Accounts After Fake Nancy Pelosi Video Goes Viral — Newsweek.
Half of European voters may have viewed Russian-backed ‘fake news’ — Politico.
Inside Facebook's war room: the battle to protect EU elections — The Guardian.
The Nancy Pelosi Videos Are Part of a Long GOP Campaign — The Atlantic.
Mona Lisa 'brought to life' with deepfake AI — BBC News.
The Persistence Of Chaos — Guo O Dong.
Samantha-Antoinette Smith.
Samantha Antoinette - Don't You Know Baby - Copenhagen Blues Festival 2016 — YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Too Long; Didn't Listen May 22, 2019

Show notes

Don't hire a hacker, they might scam you! What works and what doesn't when it comes to protecting your email account? And China's controversial social credit system comes under the microscope.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/129 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

Support Smashing Security

Links: