Chrome and Edge spell-check functions send your passwords to the cloud. Australian Senator wants to ban TikTok. Augury gives Big Brother . . . everything.
Data Brokers are creepy. Password managers not considered harmful.
Pwn of the week: Empress EMS and an update on Uber. Fail of the week: Morgan-Stanley
Podcast: Play in new window | Download
Meta isn’t interested in what harm they cause to society. South Korea fines Meta and Google. A coalition wants the FTC to block Amazon’s purchase of iRobot. The FBI is worried about outdated medical devices. Excel Energy pays to control your thermostat.
Who is Mudge?
Pwns of the week: Uber, LastPass. Opsec tip of the week: don’t use face unlock. Fail of the week: Aer Lingus
Podcast: Play in new window | Download
Alphabet bans ad-blocking VPNs from the app store. Ireland’s DPC fines Meta. More Dobbs fun and games. Twitter bans using the API for law enforcement surveillance. Federal government sues a data broker. Mac now does real-time malware scanning. QNAP NAS appliances now have a malware. Peter Eckersley, PhD, RIP.
Pwns of the week: Doordash, OSLA, TikTok, The IRS, Yandex Taxi.
Fail of the week: about 1900 iOS apps.
Oh yeah, and it’s episode 100!
Podcast: Play in new window | Download
Programming note: I’m taking the Labor Day weekend off. Episode 100 will be posted in two weeks.
Twilio hack impactes 2FA services. Brennan Center for Justice sues the DHS for information. Zero-day used to steal cryptocurrency. Healthcare provider spills patient data to Meta.
Judge slaps public university for invading students’ privacy. Google makes false child-sexual-abuse accusations.
Pwns of the week: LastPass, Plex. Fail of the week: Tesla.
Podcast: Play in new window | Download
Janet Jackson breaks the machine. Realtek machines are already broken. Analyze how broken in-app browsers are. Wait, is someone following me? Get a warrant.
South Staffordshire water supplier pwnt, incompetent malware gang extorts Thames Water for it. Service included with purchase . . . until it isn’t. Amazon knows what I drive. Listener letter from Darryl and creepy reproductive health apps.
Pwn of the week: Twilio. Fail of the week: New York State Board of Regents.
Podcast: Play in new window | Download
Your car is a snitch. Your printer is a brat. Jared Mauch is the hero we need. Elon Musk might not be.
Abortion arrest in Nebraska used SMS and Facebook evidence. Ubiquitous surveillance becomes prime-time entertainment.
Pwns of the week: Twitter, Wooton Upper School, Kimberly College, and an un-named victim of three simultaneous attacks. Fail of the week: Google.
Podcast: Play in new window | Download
Side-effect of 988. Microsoft scrubs plans to help detect leaving employees. Anonymous attacks Russia. TOR gets past Russian censorship. Timmy Ho customers due some compensation. Robinhood fined $30 million.
Amazon is buying iRobot. What does that mean for you?
Opsec tip of the week: TOR.
Fail of the week: Alex Jones’s legal team.
Podcast: Play in new window | Download
Won’t someone think of the children? Huawei cell towers considered harmful. Nintendo Wi-Fi adapter also considered harmful. Answers about Rogers start to emerge. Persistent user tracking . . . again. Samsung introduces repair mode.
Focus: We need to talk about doorbell cameras.
Focus: IT burnout
Listener letter: Darryl
Fail of the week: Unjected
Podcast: Play in new window | Download
T-Mobile pays $350 million in settlement over getting pwnt. MinIO revokes Nutanix’ license under GPL. We’re going to stop trying to reach you about your vehicle’s extended warranty. FCC wants to know if cell phone providers are revealing your location. Lime adds a new level of surveillance to their electric scooters.
Focus piece: The ACLU’s efforts to FOIA federal use of cellular location data.
Messages from the listeners: Azriel and an anonymous listener from Texas.
Opsec tip: Duck Duck Go, Kiwix
Fails of the week: Microsoft 365, Albany International Airport parking
Podcast: Play in new window | Download
988 as bew phone number for national suicide prevention and mental health hotline goes live. Bridges into NYC no longer accept cash. NIST releases its first post-quantum cryptography standards. Rolling codes on remote car locks are sometimes not so rolling. Pluton prevents Linux loads on Lenovo Z13 and Z16.
What, exactly, happened with AT&T in 1991?
Fail of the week: ERCOT. Pwn of the week: PFC.
Podcast: Play in new window | Download