Artwork for Mostly Security
Technology

Mostly Security

Jon King and Eric Wuehler

From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the show.

  • 446 episodes
  • Updated Saturday

Episodes446

  • Saturday · 34 min

    451: Fahrenheit

    Eric tests health bands, Jon makes pickles. More on OpenAI playing a game of thermonuclear war. Logos are back! The Scam Economy is bigger than you think. Lost civilizations discovered beneath the Amazon. Octopuses are cool! 0:00 - Introduction 11:35 - OpenAI Revisited 16:44 - Squidbleed 19:48 - The Scam Economy 26:57 - Hidden Amazon 30:34 - Octopuses are cool

  • July 25 · 24 min

    450: AI Finds A Way

    Eric's on vacation making apps, and Jon deconstructs a tree. Ransomware targeting Coca Cola's protein milk, and OpenAI's next model escapes to HuggingFace. The wonders of prehistoric squirrel coprolites, and the coming launch of the Nancy Grace Roman Telescope. 0:00 - Intro 7:57 - Shredded Protein Milk 11:37 - Motivated Model Mayhem 18:09 - Squirrel Coprolites 21:04 - Nancy Grace Roman Telescope

  • July 17 · 25 min

    449: Space Raspberries

    Eric needs a vacation. Jon discovers industrial sprinklers. Humans are optional. Grok takes it all. World Cup memes are fun. Space tastes like raspberries. 0:00 - Introduction 4:39 - Humans are Optional 9:24 - Grok All the Things 16:34 - World Cup Memes 21:03 - Space tastes like raspberries

  • July 11 · 30 min

    448: Plunar Eclipse

    Eric and Jon on the road again. HalluSquatting ... is a thing (?). Agents can be extremely persistent and exhibit malware like behaviors. The FBI seizes domains from NetNut residential proxy hosting botnet infrastructure. For fun you have a monthly Satellite Puzzler and New Horizing waking up from a nice long nap far past Pluto. 0:00 - Intro 4:09 - HalluSquatting 12:21 - Agent Persistence 15:59 - NetNut Proxy Seizure 23:45 - Satellite Puzzler 26:00 - New Horizons Wakes Up

  • July 3 · 37 min

    447: Redonkulous

    Eric's watching World Cup while Jon is driving his tractor in the dark. Fable 5 is back. Blocking the bad guy is dead. Hide My Email doesn't. Phantom squatting is now a thing. Eric describes the Great Giraffe Escape. Jon synthesizes a spud cell. 0:00 - Introduction 6:04 - Fable 5 is Back! 9:17 - Let's Work Together! 14:32 - !(Hide My Email) 19:02 - Phantom Squatting? 27:51 - Giraffe Escape! 31:48 - Spud Cell?

  • June 27 · 33 min

    446: Skin Of Banality

    Eric and Jon both return from travels, and the World Cup proceeds on Telemundo. UniFi issues exploited in the wild, and WhatsApp used as a malware delivery vehicle via hacked accounts. Google Wallet will allow TSA Touchless ID and if you're in NYC, visit the Frick Collection. 0:00 - Intro 13:54 - Network Issues 16:42 - WhatsApp Delivery Vehicle 24:39 - TSA + Google Wallet 29:16 - The Frick Collection

  • June 19 · 32 min

    445: Law of the Tongue

    Jon sees a movie. Not to be outdone, so does Eric. World Economic Forum reports on AI Fraud. Microsoft patches a Rogue Planet. A zombie spider may be the Last of Us. Whales have a phonetic alphabet. Humans and Orcas used to work together until #Greed. 0:00 - Introduction 9:07 - AI Fraud is Number One 17:08 - Rogue Planet 23:09 - Zombie Spiders 25:49 - Whale Speak 30:02 - Greedy Humans

  • June 13 · 41 min

    444: Malicious Beaver

    Eric sleeps and the ad experiment goes poorly. Jon does too much driving and not enough email reading. Meta's support AI hands out accounts when prompted, Microsoft releases another record breaking patch Tuesday, and what it's like working with Fable (and an unlimited token budget?). Toronto releases the Beavers, and why shouldn't a robot have All The Legs? 0:00 - Intro 15:00 - AI Blunder 21:14 - Record Breaking Tuesday 24:39 - Fable Studio 32:16 - The Great Beaver Quest 36:30 - Dynamic Isotropy Maximization

  • June 6 · 38 min

    443: Pump Up the Volume

    Eric is in the home wedding stretch, or, something like that and tries out Apple Ads. Jon has eight queens and eventually ended up at the symphony. Checking in with the rise of inference theft and account token theft (unrelated) with a quick Hermes sidetrack. Eric puts out fires with sound and Jon digs down near Notre Dame. 0:00 - Introduction 15:05 - Rise of Inference Theft 20:07 - Lows of Token Theft 26:13 - Hermes 28:31 - The Sound of Fire Suppression 33:01 - Notre Dame Dig

  • May 30 · 27 min

    442: Potato Tomato

    Eric passes a life milestone, and Jon does not (yet). The foam peddler might get stuffed, and Mythos consequences continue. Multiple (useless?) web funs, and the greatest (currently) living composer. 0:00 - Intro 8:27 - Shredded Foam 11:31 - More Mythos 18:29 - Discernment 19:18 - Edge Experiment 20:28 - Cursor Camp 22:00 - Jon Fun

  • May 23 · 29 min

    441: Old School Hacker Flex

    Wedding day week for Eric, and Jon may have a 7th hive (NB: Nope, didn't happen). Mythos + MacOS == 55 page hand delivered report to Apple Park, a contractor at CISA dumps creds in an open GitHub repo, and Cloudflare runs Mythos for exploit PoC generation. Journalists found the answer for K4 by Journalisting, and arXiv announces publishing bans for AI slop. 0:00 - Intro 6:30 - 55 Pages, Hand Delivered 10:27 - Private-CISA 13:11 - Cloudflare + Mythos 20:28 - Journalists vs. K4 24:21 - Slop Ban

  • May 16 · 26 min

    440: Metalheads

    Eric experiences the good, the bad, and the indifferent, while Jon is full on into spring chores. Firefox is the first (?) company to fix a massive haul of mythos identified vulnerabilities and Cloudflare posts an interesting response to Copy Fail. Scorpions incorporate metal into their stingers and pincers, and the clearest map to date of > 164,000 galaxies from the JWST. 0:00 - Intro 9:43 - Mythos + Firefox 14:40 - Cloudflare vs Copy Fail 19:27 - Heavy Metal Scorpions 23:10 - 164,000 Galaxies

  • May 8 · 31 min

    439: Your Fortunes Are Flipping

    Eric enjoys Taco Cinco de Mayo Tuesday. Jon get unexpected bees. The AccountDumpling Gang is out and about. DAEMON Tools and Instructure have a bad day. Eric spells random words with Landsat and Jon finds a world with an unexpected atmosphere. 0:00 - Introduction 10:08 - AccountDumpling Gang 14:44 - DAEMON Tools Bad Day 18:58 - Instructure's Bad Day 24:17 - Landsat Letters 27:18 - Unexpected Atmospheres

  • May 2 · 39 min

    438: Infinite Box

    Eric preps for an exciting week and it's all Bees in Jon's world at the moment. Will mythos overwhelming matter to the already overwhelmed, GitHub push options unescaped, and LiteLLM under active exploit hours after disclosure. Will OpenAI succeed in an AI-first phone, and detecting insect varieties with AI. 0:00 - Intro 13:19 - Little* Less Scary 19:50 - Little Bobby Push Options 24:13 - LiteLLM Exploit 28:04 - AI Phone 34:50 - Wingbeat Radar

  • April 24 · 25 min

    437: Real NY Pizza

    Eric kicked off talking about the latest wedding prep and Jon awaits his bees. A fake crypto app stole $9.5 million right off the Apple App Store, plus a review of 2026's nastiest cyberattacks. On the science side, Eric shared the wild discovery of trees secretly sparking with invisible UV light during storms, and Jon wrapped up by theorizing how the JWST found unexpected, thick water-ice clouds on a cold super-Jupiter exoplanet. 0:00 - Introduction 7:26 - Fake Crypto App 12:34 - 2026 Cyberattacks so far 18:19 - Sparking Trees 21:14 - Water-ice Clouds

  • April 18 · 32 min

    436: Life Sized Cutout

    Jon gets stopped by a Coffee Cop and Eric prepares some cardboard for a wedding in a couple of weeks. The Fed worries about Mythos, spear phishing is getting real, RCE of an agent builder, and Google starts rolling out device bound sessions. For fun we have a Bee documentary (but not from Jon), a book that may or may not turn out great, and improved opportunities to (someday) deploy CRISPR. 0:00 - Intro 10:30 - Mythos Preview + Banks 11:29 - Efficiency Explosion 15:59 - Flowise RCE 18:21 - Device Bound Sessions 21:42 - Eric Fun 23:22 - The Will of the Many 28:32 - Smaller and CRISPR

  • April 11 · 36 min

    435: To The Moon and Back!

    Jon has bee disappointments and Eric geeks out over the Artemis II mission. AI Agents are the attack surface. The ClickFix macOS abuse evolves. Anthropic's new AI Model is apparently pretty smart. Sandstorm found on Mars. Finally, mapping neuron connections using RNA barcodes? 0:00 - Introduction 8:24 - Artemis II 13:32 - AI Agent Dangers 19:33 - ClickFix Evolution 24:31 - Anthropic's New Model 29:04 - Sandstorm on Mars 32:04 - RNA Barcodes

  • April 4 · 41 min

    434: Squares Revival

    Eric releases updated apps, and Jon's back from vacation. Autonomous jailbreaks, a malicious release of a popular npm package, and Anthropic accidentally releases source maps for claude code. The Artemis II launched successfully, and an opportunistic visit to bronze age burial cairns. 0:00 - Intro 17:18 - AI, Attack Thy Brethren 22:04 - Malicious Axios Package 26:58 - Claude Code Leak 35:21 - To The Moon! 37:40 - Clava Cairns

  • March 27 · 27 min

    433: Mostly Fun, Vol 3

    Spring Break! Jon shares a couple fun notes before heading out and Eric pulls a few favorites from the archives. Enjoy Something Fun! 0:00 - Spring Break! 0:29 - Hidden Water Beneath Mars 2:36 - Chickpeas Grown in Simulated Moon Soil 4:43 - Episode 403: Commodore 64 8:51 - Episode 403: Really Old Honey 12:48 - Episode 378: Woolly Mammoth Mouse 16:15 - Episode 378: Greenland Sharks 21:48 - Episode 397: Aardwolfs and Numbats

  • March 21 · 25 min

    432: False Colored

    Eric enjoys Mozart's Requiem and Antigravity. Jon goes fishing. Amazon Kuiper is now Leo. Claude vulnerabilities are chained to do bad things. Google releases the H1 2026 Cloud Threat Horizons Report. Ravens are smart. Spiral Galaxies are cool. 0:00 - Introduction 8:13 - Amazon Leo 10:46 - Claudy Day 15:27 - Google Cloud Threat Report 21:31 - Wolf-Predicting Ravens 23:10 - Spiral Galaxy