Jon King and Eric Wuehler
From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the show.
Eric updates Squares! after a 15 years hiatus and Jon decides to become an Apple Developer. The FBI issues a scam alert on planning and zoning permits. Google buys security company Wiz. Stryker Medical hit by wiper malware. NASA has cool eyes and we're now modeling every biological molecule. 0:00 - Introduction 11:10 - FBI Alert 14:12 - Google buys Wiz 17:03 - Cyber Destruction 20:05 - NASA Eyes 22:28 - Modeling Biology
Eric goes hiking and Jon gets his Eufy. AI assisted breaches faster than ever, and Anthropic struggles to expand server capacity. Fun playing with materials in a web Sandbox (sandvox?) and an image of 3I that took a while to download. 0:00 - Introduction 11:28 - 27 Second Breach 16:40 - Claud's Week 23:51 - Sandboxels 27:23 - 3I Image
Jon goes behind the scenes at the symphony while Eric gets back to normal. Steganography used to conceal malicious code. University of Mississippi Medical Center ransomware attack. AI-Assisted Threats continue to evolve. Eric clicks mindlessly in townscaper (not townscraper) and Jon finds AI helpful in finding rare earth metals. 0:00 - Introduction 12:12 - Steganographic Code 15:49 - Medical Center Ransomware 18:38 - AI-Assisted Firewall Breach 22:28 - Townscaper 25:42 - Rare Earth Metals
More AI coding, only Peter can go to [OpenAI], Human Rentals, Backup Persistence, and Really Old Vulnerabilities. Have fun on the Useless Web and why not release genetically engineered biophages? What could go wrong. 0:00 - Intro 12:19 - Peter Goes To OpenAI 12:52 - Openclaw Infostealer 16:22 - Rent-a-Human 19:20 - Backup Persistence 21:37 - 18 Year Old Vuln 24:40 - The Useless Web 26:48 - CRISPR for Antibiotic Resistance
More fun with AI Agents and Mason Bees. OpenClaw is all the rage and as insecure as it readily admits. Squatting 7Zip ia a Proxy Node? Eric marvels over the largest tree and Jon talks about AI building compilers. AI is going to college. 0:00 - Introduction 10:41 - OpenClaw Insecurity 17:33 - 7Zip Squatting 21:13 - Pando Tree 24:22 - AI Compiler Developer
Jon copes with flat tires and Eric continues AI coding adventures. Much ado about crustaceans, apple working towards ending carrier tracking, and abusing Microsoft to send scams. Weavesilk.com is fun to play with, and Google deepmind is attempting to understand dolphins. 0:00 - Intro 8:38 - Openclaw Renaming 11:09 - Closing the Carrier Loophole 17:04 - Power BI Abuse 22:57 - Weave Silk 24:58 - Dolphin Gemma
Eric does more AI coding and avoids water problems. Jon makes some AI coding discoveries and we're not talking about automobile water problems. Everybody uses a browser at work. Python RATs discovered in spell checkers. Eric looks through windows around the world and Jon introduces us to Gladys West. 0:00 - Introduction 8:42 - Browsers Everywhere 13:17 - Spell Checker RATs 17:23 - Windows around the World 19:22 - Gladys West and GPS
Eric codes and Jon harvests cocoons on the three day weekend. Path traversal bugs in Anthropic's git MCP server, and why LLMs continue to fall for prompt injection attacks. Drive and listen to local radio in cities around the world, and does a disconnected brain hemisphere dream? 0:00 - Intro 7:17 - Anthropic Git MCP 10:14 - Context and Judgement 19:04 - Drive and Listen 21:14 - Brain in a Vat
Jon and Eric are in Texas. Again. Eric continues his AI Coding journey porting old Mac Apps to SwiftUI. Jon may or may not have a fixed vehicle when he returns. China fights scam compounds for China. ClickFix continues to challenge consumers. Eric finds fun ways to say "No" while Jon discovers the Great Daylight Fireball. 0:00 - Introduction 3:42 - Do Not Buy This 9:32 - China Fights Scam Compounds 13:06 - ClickFix Continues 20:35 - No 22:06 - The Great Daylight Fireball
Eric makes an app, and Jon semi-celebrates the new year. For topics we have robocall registration penalties, reverse engineering a scooter's protocol, and the current saga of Mongo Bleed. And for fun we have a captcha game, training a doodle model, and a personal filament extruder. Happy New Year! 0:00 - Intro 10:52 - Robocall Deepfake Followup 17:06 - Reverse Engineered e-Scooter Protocol 22:17 - Mongo Bleed 29:13 - Not a Robot 31:23 - Quick Draw 33:17 - Filament Extruder
Eric goes out to eat, Jon gets powertools. Arrests at Coinbase outsourcing firm. Six Cybersecurity predictions for 2026. Eric finds a personally nostalgic TV show and Jon looks back on the scientific discoveries of 2025. 0:00 - Introduction 10:46 - Inside Job at Coinbase 13:59 - Cybersecurity Forecast 19:56 - Untamed 22:31 - Significant Scientific Stuff of 2025
Eric and Jon are both fully prepped for the holiday. Flock leaves (many) cameras including control panels open and exposed to the open internet, what if more malicious npm packages worked as advertised, and Microsoft is finally disabling rc4 by default in Active Directory. For fun we have two movies for holiday watching: F1: The Movie, and Howl's Moving Castle. Enjoy! 0:00 - Introduction 11:38 - Open Flock Livestreams 18:09 - WhatsApp Stealer 23:39 - Obsolete Cipher 30:38 - F1: The Movie 33:04 - Howl's Moving Castle
Jon's car may or may not be fixed. Eric didn't go to Disneyland. Android is making in-call scam protection better. AI is creating a Blessing of Unicorns. Parked Domains keep scammers alive. Space is getting crowded. Word of the Year - Slop. 0:00 - Introduction 6:38 - In Call Scam Protection 10:21 - A Blessing of Unicorns 13:15 - Parked Domains are Evil 17:55 - House of Satellite Cards 24:10 - Slop
Christmas in full swing at both Eric and Jon's places. Less secure certificate validation mechanisms being deprecated, and SEO of AI chats to deploy ClickFix style lures for Stealer installation. For fun we have a shockingly good way to avoid motion sickness in VR, and a promising Leukemia treatment using gene therapy. 0:00 - Intro 9:28 - Weak Validation 14:45 - No Red Flags 21:34 - Stimbox 27:42 - BE-CAR7
Eric tracks hack attempts and Jon trades blood for pinball. Shai-Hulud is back, Calendly invite scam, Rust for good and evil. Giving Machines for the holiday season and Spores in Space! 0:00 - Introduction 13:48 - Shai-Hulud is back 16:59 - Calendly Invite Scam 19:11 - Rust for Good and Evil 24:33 - Giving Machines 28:00 - Spores in Space
Eric and Jon prep for Thanksgiving. Will blue and green bubbles coexist in peace and harmony? Will the airlines stop sharing flight data with the IRS? And is monitoring every car, everywhere, at all times 'unreasonable search'? ¯\_(ツ)_/¯ Have some Ozone and a Honey chaser. 0:00 - Intro 8:11 - QuickShare + AirDrop 12:14 - Travel Intelligence Program 18:34 - 'Suspicious' Travel Patterns 25:16 - 5th Smallest (is good?) 32:40 - Honey Tasting
This week's roundup features a mix of personal updates, major tech news, and scientific intrigue. Eric is super late to the Minecraft party while Jon gets his bushes trimmed. In tech, a massive WhatsApp security flaw exposed data for up to 3.5 billion users, while Google announced the release of Gemini 3 Pro and the new "Deep Think" reasoning mode. Cybersecurity concerns also rose with the global spread of the TamperedChef malware, delivered via malvertising and fake software installers. On the innovation front, MIT researchers developed a new lipid nanoparticle that dramatically enhances the effectiveness of mRNA vaccines, promising cost savings and better seasonal flu shots. Finally, in a fascinating natural observation, a wild gray wolf in British Columbia was documented using a buoy line to haul a crab trap ashore, potentially marking the first documented tool use by a wild canid. This summary of today's podcast brought to you (mostly) by Gemini 3. 0:00 - Introduction 9:10 - Nanoparticle mRNA 12:36 - Gemini 3 17:24 - Tampered Chef 22:48 - Nanoparticle mRNA 26:48 - Smart Wolves
Eric goes to Nateland and Jon goes flying. Another javascript worm, and automatic license plate reader records declared public in Washington. For fun we have a repo of annual security reports and Jon suffering memory loss and search ineptitude, but fig wasps are still cool. 0:00 - Intro 17:20 - Glassworm 21:50 - Conclusions of Law 28:55 - Nate Bargatze 29:26 - Annual Security Repo(rts) 30:43 - Shy figs
Eric drills a door and Jon disagrees and commits to an electrical fix. Aisuru makes the Cloudflare Top 10. The Louvre had a bad week, while furniture trucks had a good one. Gemini used to write malware. Rivers in Alaska are orange. 0:00 - Introduction 14:11 - Aisuru makes the Top 10 16:25 - Louvre Password 20:03 - PROMPTFLUX 24:12 - The Böcker Agilo 26:45 - The Pink Panther 28:26 - Orange Rivers in Alaska
Remote Eric Assist and Jon enjoys ... hockey(??). More prompt injections, the most damaging UK cyber event (so far), and residential proxy use for fun and training data. Will Agentic AI bring back micropayments, and how is Costco's pumpkin pie so good? 0:00 - Intro 10:47 - Death, Taxes, and Prompt Injections 16:56 - Economically Damaging 19:32 - Veneer of Legitimacy 24:34 - Original Sin (??) 29:49 - Six Million Pies