Jon King and Eric Wuehler
From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the show.
Eric finishes* painting, gets Paramount+ for "free" and construes adventures in 3D printing. Jon builds shields and drives a lot. TikTok's clock runs out while Scholastic entertains a bored hacker. Is it the Ad Industry or the Surveillance Industry or is there a difference? Here comes the Woolly Mammoth and Mars rises over the Moon.
Eric sends his kids back to school, and both Eric and Jon attend the last Harry Potter Oregon Symphony performance. HTTP is (evidently) still a (big) thing, and a roundup of the new Mac malware discovered in 2024. Los Angeles fires are still raging (donate to the Red Cross to help). For fun we have a startup that wants to bury its plant a mile underground, and scientists discovered the volcano that erupted in 1831 and wreaked havoc. 0:00 - Intro 13:49 - Open Port Chronicles 21:13 - 2024 Mac Malware Roundup 32:05 - Buried Nuclear Startup 36:39 - LA Fires Red Cross Response 38:01 - Volcano Mystery Solved
Happy New Year! Jon explains "Y2K" to his children, Eric continues to check off small projects around the house. NASA's Parker Probe is alive! Eric translates a VW data leak article from German and then gets side tracked by the new VW Buzz while Jon admires the Karmann Ghia before chatting about hacked Chrome extensions. For fun, Eric talks Thorium and Jon shares what's new on Public Domain Day! 0:00 - Introduction 7:40 - Parker Probe is alive! 8:39 - Dude, I Know Where Your Car Is 13:54 - Karmann Ghia 15:24 - Chrome Extension Attack 21:49 - Thorium Reactor 26:02 - Public Domain Day
Eric and Jon enjoy the holiday break with family. Ascension begins notifying people from the May breach, and NSO is ruled liable for WhatsApp hack in 2019. The Parker space probe does the closest (and fastest) flyby of the sun, and Jon visits the Chacchoben Ruins and Kennedy Space Center. 0:00 - Intro 11:06 - Ascension Ransomware Fallout 14:43 - NSO Liable for WhatsApp Hack 18:21 - Fastest Human Made Object 21:43 - Chacchoben Ruins 26:48 - Kennedy Space Center
Jon is on a ship and Eric is not. Microsoft Recall is making its way back to your PC while Project Zero hunts driver bugs. Nate Bargatze is funny (or at least Eric thinks so) and Jon thinks Orcas wearing salmon hats is funny. 0:00 - Introduction 4:17 - Recall is Back 9:03 - Driver Bug Hunting 16:24 - Self-deprecating Humor 17:59 - Salmon Hats
Eric and Jon get Treed and ready for holidays. AI for MacOS threat creation, and a buncha prompt attacks against various models and tools. Blue Origin says they're ready for testing, and science says the Clovis people ate Mostly Mammoths. 0:00 - Intro 13:17 - Moonlock 16:16 - Prompt Mania 23:43 - New Glenn Ready 26:38 - Mammoth-Eaters
Thanksgiving happened. Maybe don't threaten a security researcher. Phishers like cheap TLDs. Attacking LLMs for fun and profit. Students send a rocket beyond the Kármán line and Jon gets a ChipDrop. 0:00 - Introduction 3:31 - OpSec Fail 6:36 - New TLDs are for Phishers 14:02 - LLM Attacks 22:07 - Student Rockets 25:29 - ChipDrop
Eric and Jon prep for Thanksgiving with Tech Support Woes. Bluesky's day has come -- including 'interesting' persistence capabilities. Macy's 154 Million Dollar finding, and Starbucks has to resort to pen and paper timekeeping. For fun we have McKean's Inversion, BART on camera, Reality Builder TV, and a lost city in Greenland. 0:00 - Intro 15:22 - Advanced Bluesky Persistence 20:01 - $154 Million Mistake 24:33 - Pen and Paper 29:00 - McKean's Inversion 31:21 - Tunnel Vision 33:05 - Perkins Builder Brothers 35:39 - Camp Century
We're trying out Bluesky! Eric hates painting, Jon fixed his shower. Is Google catching up with Shielded Emails? Phishing with an SVG inception. Apple patches some things. Finastra is (sorta) frank with its customers. Rats in Cars getting Froot Loops. New species of bee discovered... 0:00 - Introduction 11:05 - Snowflake Followup 13:43 - Shielded Email? 15:12 - Phishing with SVGs 17:23 - Apple Ooopsies 18:57 - Sorta Frank Finastra 22:24 - Rats in Cars getting Froot Loops 26:33 - New Species of Bee
Eric prepares to Paint and Jon sightsees. Canada tells TikTok to shut down its office, a trove of MacOS escapes, and an ML Bug Bonanza from JFrog. Displays get twisted, and Jon visits an amazing 12th century Vishnu temple. 0:00 - Intro 10:34 - No Canadian TikTokkers 13:12 - Escape, anyone? 15:16 - ML Bug Bonanza 22:46 - Twisted Display 24:56 - Keshava
Eric's garage has a beep, Jon makes his way to India. Phish n' Ships is a great name, but really it should be Phish n' Not-Ships... An EMERALDWHALE makes its way through exposed Git configurations. Eric appreciates Wind Turbine Art and Jon discovers Mayan ruins via LiDAR. 0:00 - Introduction 12:24 - Phish n' Ships 15:17 - EMERALDWHALE 21:37 - Micro Wind Turbines 23:25 - Mayan Ruins
Eric Ikeas and Jon ... does stuff. The quantum breaking of RSA was a mite early (1002 bits shy of 1024), Landmark Admin suffers a data breach, and Spectre is still a thing (6!) years later. For fun we have the source of all meteorites and 'compelling evidence' of an Exomoon. 0:00 - Intro 15:52 - Quantum Overblown 18:52 - Landmark Data Breach 22:41 - Spectre Persists 27:06 - Meteorite Source 31:33 - First (?) Exomoon
Jon installs an automatic chicken door, Eric does some more 3D printing. Quick update on a SIM swap hack while checking in on the EU throwing a hand grenade at software liability and apparently people are wardriving for Redbox kiosks. Eric shares a shameless plug for a friend's Kickstarter. Jon goes old school with some Hubble telescope goodness. 0:00 - Introduction 12:50 - SIM Swap 16:09 - EU Hand Grenade 21:16 - Redbox Kiosks 27:24 - Rift Zone: Contact 30:30 - Hubble
Eric pays to recycle and Jon has much ado about not very much. How to break RSA with D-Wave, North Korea gets job applicants to install malware as part of coding tests, and Cloudflare stops a 3.8Tbps DDoS attack. For fun we have King the Land, a Korean rom-com, and two pioneers of machine learning get the Nobel prize in physics. 0:00 - Intro 17:20 - Quantum RSA 20:46 - Coding Test Malware 24:09 - Hyper Volumetric 29:36 - King the Land 33:19 - Physics Nobel
Eric has no rhythm and went for a hike, Jon works on luxury apartments for chickens. License plate readers see more than just license plates. Smart glasses make doxxing super easy. Eric eyeballs an incoming solar storm while Jon drops in on a treasure hunt. 0:00 - Introduction 8:52 - License Plates and More! 14:10 - Sunglasses and More! 19:28 - Solar Storms and More! 24:29 - Treasure Hunt and More!
Jon builds an arbor and rents a bull (?) and Eric does driving for styrofoam recycling. Meta fined for storing passwords in plaintext, Google continues its march against passwords, remote controlling any kia just from its license plate, and Kaspersky swaps itself out in the US. For fun we have the largest mapped brain to date (a fruit fly), and validating the inverse link between Alzheimer's and colon cancer. 0:00 - Intro 11:47 - Plaintext Penalty 14:31 - Gmail Password Update 17:25 - Remote Kia Control 22:15 - Kaspersky Deletes Itself 27:48 - Fruit Fly Brain Map 33:00 - Alzheimer's or Colon Cancer?
Both Jon and Eric have mic issues, but Eric gets a new monitor and Jon goes fishing again. Everyone should start looking at Passkeys. Jon finds a ClickFix and ways to attack LLMs with math. Eric discovers 3600 year old cheese and Jon shares some poetry. 0:00 - Introduction 11:01 - Passkeys are In! 14:54 - Social Engineering with a ClickFix 18:47 - Using math to fool LLMs. 24:44 - Some Cheese with your Mummy 28:10 - Poetry
Eric's nest has emptied, and Jon's pantry is full of asian pear derivatives. Temu denies (rightly?) that the data didn't come from them, Transport for London has to restore 30k employee creds in person, and why not to let the authoritative server for a domain expire. For fun we have another word puzzle by the NYT, and estimating an avatar's gaze at a virtual keyboard to deconstruct typed text. 0:00 - Intro 12:55 - Not Temu 17:40 - Transport for London 21:23 - .mobi authority 28:15 - Eric Fun 31:42 - Gazeploit
Eric has some travel news and Jon smells like plums. Eric's beloved Yubikey is unpatchable. AT&T want VMWare security updates and Android malware uses OCR to find cryptocurrency creds in your photo album. Eric doesn't understand transparent flesh while Jon looks at a diamond making machine. 0:00 - Introduction 10:24 - Yubikey Vuln 14:08 - Security Updates for VMWare 18:06 - OCR for Cryptocurrency Creds 21:52 - Transparent flesh 27:45 - Making Diamonds
Eric gets productive, while Jon goes to the fair. An airline service to register crew can be SQL Injected, scammers combine location data and photos in sextortion emails, and Microsoft's Mac apps are vulnerable-ish. For fun Eric will be visiting the Monterey Bay Aquarium, and Ganymede had a smashing past. 0:00 - Introduction 12:46 - Pilot Test TestOnly 19:39 - Location Aware Sextortion 22:27 - Secure Your Plugins 28:02 - Monterey Bay Aquarium 30:46 - Intriguing Ganymede