Jon King and Eric Wuehler
From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the show.
Eric finishes his chess set project, Jon goes camping. Claude shares some of it's AI internals. Google fixes a zero-day exploit. Slack's AI allows extraction of unexpected data. 3D Printing with Glass?!?! Finally, a Grace Hopper YouTube video you should watch. 0:00 - Introduction 9:46 - System Prompts 14:09 - Browser CVE 16:13 - AI Exfil 22:36 - Printing with Glass 25:44 - Grace Hopper
Eric moves daughters to college, Jon extracts honey. The Oregon Zoo is compromised for ~6 months, a 60 million dollar BEC, and a new flavor of Mac Malware. Restoring and repairing an old Chess set, and Scientific American stories from 50, 100, and 150 years ago. 0:00 - Intro 9:38 - Zoo Heist 14:17 - Sixty Million Dollars 16:51 - TodoSwift 20:37 - Chess Repair 25:58 - Historical Stories
Eric is sending kids to college, Jon has four peaches, small green lemons (not limes), and other harvest bounty. Using 0.0.0.0 to attack local networks. Using SEC filings to disclose a breach. Using AI to craft content for Phishing Attacks in real time. Using non conductive liquid as a heat sink. Using Medieval Gibberish as a reference book. 0:00 - Introduction 4:40 - 0.0.0.0 Websites on the Rise 12:11 - ADT Breach Disclosure 14:12 - Realtime Phishing Attacks 19:28 - Dunking Servers in Liquid 24:59 - The Voynich Manuscript
Lazy(-ish) summer weekends for both. Crowdstrike releases their RCA (20!=21), an MDM vendor wipes 13k student devices in Singapore, and the results of a comprehensive audit of Homebrew. For fun we have electrostatics based propulsion and a long lost branch of the Nile likely used to help build the pyramids. 0:00 - Intro 8:20 - Missing Argument 13:43 - Wiped 21:55 - Brew Audit 31:48 - Propellantless Propulsion 37:44 - Nile Branch
Eric is afraid of getting his car washed. Jon has blackberries. Bits about Money has a humorous take on CrowdStrike and Banks. Google misplaces users' passwords for the better part of a day. Secure Boot isn't as secure as the name suggests. Forget Tamagotchi, here's a Friend. Blaze Star go Boom. Finally, Eric had way too much fun with the chapter titles and associated images this week. 0:00 - Introduction 8:32 - Because that's where the money is 14:03 - Dude, Where's my Passwords? 17:54 - NO MORE SECRETS 24:42 - Eliza 2024 29:29 - Blaze of Glory
Jon made it home, and Eric's away. Telegram has a zero day 'EvilVideo' allowing APK installation, and Crowdstrike's content update outage over the past weekend that caused mayhem. For fun we have a new game from Panic and the State Hall of the Austrian National Library. 0:00 - Intro 7:47 - Telegram Zero Day 12:22 - Crowdstrike Content Update 30:43 - Thank Goodness 32:51 - State Hall
Jon's about done with travel, Eric's about done with nothing. Quick Snowflake/Ticketmaster recap (Eric got his Ticketmaster breach notification). AT&T shared "nearly all" phone numbers with hackers (Eric got his AT&T breach notification). Squarespace shared unauthorized access to cryptocurrency domains. The football field sized ISS is set to burn up on re-entry in 2030 and potentially great news for brain cancer patients. 0:00 - Introduction 6:30 - Ticket-remaster 9:44 - All your ATT are belong to Hackers 15:56 - Squarespace Domain #FAIL 21:02 - Impending Death of the ISS 24:07 - Brain Cancer Hope
Jon is away on vacation and Eric retreats from the heat. The FCC is cracking down on a robocall purveyor and the DoJ takes down an RT 'botnet' of fake social media accounts. Eric gets an unprompted 5* review to brighten his day, and Jon visits 'the largest ancient castle in the world.' 0:00 - Intro 11:53 - Mandatory FCC Block 17:58 - RT Botnet Takedown 23:55 - HashCheck ***** 26:54 - Prague Castle
Jon makes some hay, Eric goes to a ball game. Authy inadvertently plays fast and loose with an API while polyfill.io loses control of their javascript, but Cloudflare steps in to save the day. Old man Eric rejoices in advances in hearing science and Jon discovers what Denisovans ate for dinner. 0:00 - Introduction 9:43 - Authy API Ooops 13:42 - polyfill.io Ooops 21:04 - Supercharged Hearing 24:26 - Denisovan Dinner
Eric returns from vacation and Jon makes Hay. Microsoft retires its under sea data center experiment, YouTube attempts to get artists onboard for AI Music, Apple may (or may not) be compliant with the DMA, and a Krebs master class in OSInt. Sleep cleans your brain, and how to make hay. 0:00 - Intro 13:24 - No More Barnacled Servers 16:36 - AI Composer 25:05 - Schrödinger's Compliance 31:34 - Krebs Brings Receipts 39:08 - Clean Your Brain 43:51 - Makin' Hay
Eric is on vacation, so Jon is up late. Panera lost some employee data and Snowflake is updating stuff. Eric enjoys the South Pacific Epcot while Jon looks forward to going to a library. 0:00 - Introduction 9:09 - Panera Fallout 12:04 - Snowflake Fallout 18:22 - Polynesian Cultural Center 23:14 - Klementinum
Eric graduates his last, and Jon hosts a field trip. Club Penguin fans post inside documents from Disney (among others) and Apple announces how they will securely and privately execute LLMs in the cloud. Wyoming nuclear power plant breaks ground, the Civ7 trailer is released, and Astronaut William Anders passes away in his plane. 0:00 - Intro 14:32 - Bad Penguins 21:10 - Private Cloud Compute 32:28 - Nuclear Wyoming 35:51 - Civilization VII 36:37 - William Anders
Eric says goodbye (sorta) to Coke Zero just in time for Chaos Week; aka Last Child Graduating High School. Jon cleans out his barn and discovers the bees are making him honey. Polish Hackers call out train repair shenanigans and Ticketmaster loses 560 million(ish?) user accounts due to(?) a Snowflake database misconfiguration? So many questions. Panamanian islands are "sinking" and China lands on the moon (again). Jon listens to a new "Harry Potter meets Ender's Game meets Ready Player One" book series and now Eric is spending more money on books. 0:00 - Introduction 12:00 - Polish Train Hackers 20:22 - Ticketmaster hack? 22:37 - Snowflake hack? 25:36 - Panama's Carribbean Relocation 27:51 - China lands on the Moon 29:32 - Warformed: Stormweaver
Eric grills ribs for Memorial Day, and Jon finds a goose. The internet archive under attack (literally and legally), and essays on programming. Two Mayan fun things ... books and bees. 0:00 - Intro 12:05 - Wayback Attack 16:20 - Essays on Programming 31:25 - Doomsday Match 35:13 - Stingless Bees
Eric hangs out downtown and plans a trip to the symphony. Jon is hitting the end of the high school concert season, has opinions on iPad and notes that the bees both giveth and taketh away. While recovering from a long trip, they ask themselves many important questions... Who knew college students would want free laundry services? When did your WiFi routers become Apple AirTags? Who wants Patch Tuesday details? Was there anything non-AI related at BUILD? Why won't more people buy Marshmallow Sky Ice Cream? What is that underground near the Giza Pyramids? When will this podcast end? 0:00 - Introduction 12:18 - Free Laundry! 16:53 - WiFi Router is an Airtag 23:14 - Patch Tuesday 27:05 - BUILD AI 35:42 - Marshmallow Sky 38:41 - Giza Anomaly
Eric has superlative steak and Jon has ... pizza. Northern lights, concerts, and grafting bees oh my. Microsoft's security priorities, FCC designates Royal Tiger, and Ascension hospitals attacked with/by Black Basta. A Vampire Drone and Wallets everywhere. 0:00 - Intro 16:05 - Top Priority 23:15 - Royal Tiger 27:28 - Ascension Land 32:09 - Vampire Drone 36:20 - Wallets Wallets Everywhere
Eric's on the road again and has irrelevant opinions about Taylor Swift's new music. Jon is surrounded by music and actually watches a show Eric recommended. LockBit gang is doxxed by the FBI. Microsoft's top priority is security. Eric is suprised by Sugar and Jon discovers a new show: Doctor Rakus, Medicine Primate. 0:00 - Introduction 11:58 - LockBit Exposed 15:57 - Microsoft's Priority 22:05 - Sugar 26:43 - Primate Doctor
Eric wins the exercise challenge and Jon's iPad is busted. The FCC is (attempting to) fine carriers for sharing your location data, stats on Google's android app store protections in 2023, and GitHub comments are abused to host malware. For fun we have a Netflix series of the Three Body Problem, and an every-80-years-not-a-normal-nova. 0:00 - Intro 14:07 - Fining Carriers 18:12 - Malicious App Police 21:05 - Github Comment Malware 26:22 - Three Body Problem 31:19 - White Dwarf Guyser
Jon and Eric make it back from Texas, despite airport security. Nespresso has an open redirect vulnerability, eScan AV delivers updates via HTTP and Cisco has Zero-day fun time. Eric admires vaporizing water without heat while Jon is impressed with a pushing firmware updates to a spacecraft 15 billion miles away... 0:00 - Introduction 2:29 - Brisket Seasoning 6:01 - Open Redirect 9:20 - Protect your Updates! 14:50 - Cisco Zero-day 19:27 - Vaporizing Water Sans Heat 23:36 - Programming Voyager 1
Eric performs Digital Spring Cleaning and Jon mostly works outside. Open source groups are worried about other 'XZ Style' hacks, Roku announces a second security incident, LastPass employee is deepfaked, and LG TV vulnerabilities. Don't expose your TVs to the internet folks. For fun we have an amazing article about deep sea cable repair ships and a performance by Drum Tao. 0:00 - Intro 13:34 - "XZ Style" Hacks 14:46 - Roku Part Deux 17:21 - LastPass Deepfaked 20:31 - LG TV Vulns 26:50 - Cable Repair Ships 29:57 - Drum Tao