Oct 23, 2025 · 24 min
MS
Technology
Mostly Security
Jon King and Eric Wuehler
From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the show.
- 446 episodes
- Updated Saturday
Episodes446
- MS
Oct 18, 2025 · 33 min410: Gone
Family weekends for Eric and Jon. A new side channel for pixel sniffing on Android, malware abusing github + steganography for configuration, and Apple doubles many of its security bounties. For fun, long live(d) the naked mole rat, and warp drives move from the irrational (negative energy ftw!) to the theoretically possible. 0:00 - Intro 8:55 - Pixnapping 12:59 - Asteroth Steganography 16:16 - Apple Security Bounties Doubling 23:08 - Naked Eusocial Mole Rats 27:15 - Warp Drive Maths
- MS
Oct 11, 2025 · 29 min409: Menacing Missives
This was almost "The Quiet Episode" after some audio challenges, amazing what technology can hide... Eric gets back in town just in time to leave town. Jon goes to a bookstore. The UK is still trying to get Apple to create a backdoor. OpenAI talked about malicious use of AI. ShinyHunters are back. Pristine Stars are a thing and Powell's City of Books is cool. 0:00 - Introduction 3:04 - No Backdoors! 5:51 - OpenAI Report 15:32 - Scattered Spiders 22:59 - Pristine Stars 26:00 - Powell's
- MS
Oct 4, 2025 · 34 min408: Request Timeout
Eric is traveling and Jon is repairing. Coordinated arrests of scammers across Africa, the world's first malicious MCP server (is super simple), the release of the Sony CD player 43 years ago, and CRISPR modified yeast to create pollen substitute for the bees. 0:00 - Intro 10:27 - Operation Contender 3.0 17:13 - BCC Postmark 23:02 - Sony History 27:02 - Y. Lipolytica Sterols
- MS
Sep 25, 2025 · 30 min407: Vampires
This past weekend, Eric was forgetfully productive. Meanwhile, Jon moved a child into the dorms and battled some radiator problems. On other fronts, AI agents got duped, and self-replicating worms made their way through NPM. Good news: Entra ID tenants dodged a major security event. For a bit of nostalgia, Eric whipped up some lemon bars, and Jon chowed down on pizza. 0:00 - Introduction 9:05 - AI Agents FTW 13:56 - Shai-Hulud! 18:01 - One Token to Rule them All 22:55 - Lemon Bars 25:10 - HTTPizza
- MS
Sep 20, 2025 · 27 min406: Triple Square
Eric paints and Jon does something I'm sure. Void proxy tackles the complexity of breaking MFA, and Bitcoin ATMs for Scammers. How about a bit of neuromodulation on Pythagorean Triple Square Day. 0:00 - Intro 13:19 - Void Proxy 16:54 - 93% Scams 21:24 - Neuromodulation (?) 24:33 - Pythagorean Triple Square Day
- MS
Sep 12, 2025 · 40 min405: Method Not Allowed
Eric updates the mostlysecurity.com vibe. Jon jars honey. Plex asks users to change their passwords. iPhone 17 has new security features. Not to be outdone numerically, 18 Javascript packages were compromised. Eric plays with epoxy and glitter, while Jon reminisces of Perl. 0:00 - Introduction 15:33 - Plex Passwords 20:09 - iPhone 17 Security 25:58 - 18 Javascript Packages 30:04 - Epoxy and Glitter 33:04 - Perl
- MS
Sep 6, 2025 · 39 min404: Not Found
Eric returns and Jon has a flat tire. Kuiper achieves a gigabit, Google releases fixes for 84 vulns in android, and prompt injection in Comet, Perplexity's AI browser. The Pixel 10 has a crazy good camera, and the third interstellar object ever discovered. 0:00 - Intro 10:02 - Followup 13:13 - Limited Targeted Exploitation 16:00 - Comet Injection 25:57 - Smartest Camera 33:04 - Interstellar Object 3I
- MS
Aug 29, 2025 · 26 min403: Forbidden
Eric plays with epoxy resin, Jon has a new calf. Cybersabotage on your ex-employer will get you 4 years. There are 1200 fewer robocallers thanks to the FCC. Password manager plugins for web browsers can be fooled. The Commodore 64 is back and really old honey is discovered in Italy. 0:00 - Introduction 8:53 - Four Years 10:22 - Robocall Roundup 12:57 - Password Manager Hijack 18:39 - Commodore 64 22:47 - Really Old Honey
- MS
Aug 23, 2025 · 32 min402: Payment Required
Eric prints and Jon fixes washer. The Noodlophile stealer propagates via legal infringement claims, and portal auth issues allow control of connected cars. For fun we have book four of the Lady Astronaut series, and using generative AI to create targeted antibiotics for drug resistant diseases. 0:00 - Intro 12:32 - Noodlophile 16:51 - Automotive Authentication Antics 23:39 - The Martian Contingency 27:33 - AI Antibiotics
- MS
Aug 16, 2025 · 29 min401: Unauthorized
Eric makes it home from vacation, Jon goes fishing. Tough time to be graduating in Computer Science. DrawAFish.com security incident. AOL discontinues down dial up service. Mendenhall Glacier makes the local news. 0:00 - Introduction 8:24 - Tough Times in Tech 14:34 - Draw A Fish 21:48 - AOL Dial Up 25:06 - Mendenhall Glacier
- MS
Aug 9, 2025 · 48 min400: Dredge Operator
Eric's on vacation and Jon wrangles cows. Cloudflare accuses perplexity of stealth scraping tactics, Google tweaks their disclosure policy, Microsoft studies AI impact on jobs, and OpenAI shared chats disclose a little (lot) too much. For fun, how about a hike in the Tetons, and Potatoes from Tomatoes. 0:00 - Intro 11:55 - Stealth Bots 16:24 - Disclosure Policy 20:29 - Occupational Implications 29:49 - ChatGPT Confessions 39:42 - Jenny Lake 41:56 - Potato, Tomato
- MS
Aug 1, 2025 · 30 min399: Cut the Black Wire
Eric has a problem with "smart" smoke alarms. Jon feeds happy cows round bales of hay (but not the fermented kind). Debian making 64 bit time work with 32 bits. A woman is unaware she is working for North Korea. Eric plays tower defense with CSS. Jon finds scarecrow spiders. 0:00 - Introduction 11:31 - 64bit time in 32bit parts 17:30 - It's totally legit! 23:21 - flexboxdefense.com 25:14 - Scarecrow Spiders
- MS
Jul 26, 2025 · 34 min398: Beautiful Bird Songs
Eric publishes a book, and Jon is trepidacious. The National Nuclear Security Administration is affected by the Sharepoint attack, and DNS is used as a file transfer system. Amazon buys Bee (Echo, coming soon to a wrist near you), and we're one step closer to a universal cancer vaccine. 0:00 - Intro 14:29 - Nuclear Sharepoint 18:54 - It's Always DNS 26:26 - Bee Hearing You 30:07 - Cancer Vaccine Candidate
- MS
Jul 19, 2025 · 34 min397: Schrödinger's Myrmecophagy
Eric gets new doors (almost) and Jon gets A/C. Amazon launches more Kuiper satellites with the help of SpaceX. You can use Passkeys to encrypt files and Android get's Gemini whether the user wants it or not. GPS is not the only location game in town and lots of mammals evolved into ant eaters? 0:00 - Introduction 12:22 - Kuiper Satellites 14:56 - Passkey Encryption 18:13 - Gemini All The Things 23:11 - MagNav vs GPS 29:10 - Aardwolfs and Numbats
- MS
Jul 12, 2025 · 30 min396: Gnawing on Wax
A 4th of July was had by both. An extension hijacking campaign that infected as many as 2.3 million users and software to protect the small web from AI scrapers with computational overhead. For fun we have car tipping (off a cliff!?), and evidence for even more water on Mars. 0:00 - Intro 13:06 - Hijacking Campaign 16:33 - Weighing the Soul of the Web 22:41 - Good ol' Alaskan Fun 25:41 - Fluvial Sinuous Ridges
- MS
Jul 4, 2025 · 29 min395: Alliteration is Fun
Hay is Jon's nemesis and Eric has pictures taken. Cloudflare blocks AI Bots by default. After 7 years, Ubuntu disables Spectre protections. ERYAT (Eric reserves yet another truck) and stumbles nostagically across Make Magazine. Jon finds a 4,800 year old Egyptian. 0:00 - Introduction 6:27 - Cloudflare blocks AI Bots 11:19 - Ubuntu minus Spectre 18:05 - Scout Motors 21:48 - Make: 24:29 - 4,800 Year Old Teeth
- MS
Jun 29, 2025 · 22 min394: Whether The Weather
Eric paints and Jon drives. SparkKitty is a new mobile malware searching photo libraries for crypto passphrases, and when is a 16 billion password breach not a breach. Honda has been quietly working on its own rocket, and the JWST images its first new exoplanet. 0:00 - Intro 7:55 - SparkKitty 12:06 - Not a New Breach 16:09 - Honda Rocket 19:02 - JWST Exoplanet
- MS
Jun 20, 2025 · 33 min393: Less Need for Me Right Now
Ex? Un? Post? Father's Day activities and Eric tries Vibe Coding. Gemini 2.5 is out of beta. Phone wallets can(?) be hacked. Italy loses its Paragon license. Spaceballs 2! A microbe may be evolving into virus. 0:00 - Introduction 10:34 - Gemini 2.5 14:03 - Phone Wallets 17:58 - Paragon Spyware != Italy 23:53 - Spaceballs 2! 26:54 - Microbe Evolution
- MS
Jun 14, 2025 · 35 min392: Vibe Coding
Summer is here. WWDC has ... liquid glass? And many android features, evidently. Vibe coding is the "remarkably insecure" inevitable future, and a simple (dumb?) github policy bypass. For fun there's a new season of Phineas and Ferb on Disney+, and researchers discover a way to fully expose HIV in white blood cells. 0:00 - Intro 8:09 - WWDC 13:08 - "Remarkably Insecure" 18:34 - World's Dumbest Policy Bypass 26:32 - New Phineas and Ferb! 30:46 - White Cell Exposure