Artwork for Smashing Security
Technology

Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

  • 480 episodes
  • Updated Wednesday

Episodes480

  • Oct 7, 2020 · 55 min

    A few tech cock-ups, and one cock lock-up

    An internet-connected adult toy could leave its users encaged, the official NHS COVID-19 contact-tracing app alarms users, and would you be happy if a robot interviewed you for a job? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Zoe Kleinman. Visit https://www.smashingsecurity.com/199 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Zoe Kleinman. Sponsored By: Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Smashing Security LIVE STREAM! CellMate chastity cage (Short model) — QIUI. Smart male chastity lock cock-up — Pen Test Partners. NHS Covid-19 app: 12m downloads - and lots of questions — BBC News. Hubert+1 - Add more to your team. Predictive Hire - Bias-free interviews. I Got a Job at an Amazon Warehouse Without Talking to a Single Human — Ryan Fan, OneZero. Tengai demo — YouTube. John Lennon at 80 - episode one. — BBC Sounds. John Lennon at 80 - episode two. — BBC Sounds. Sean Lennon's full conversation with Julian Lennon. — BBC Sounds. Sean Lennon's full conversation with Elton John. — BBC Sounds. Sean Lennon's full conversation with Paul McCartney. — BBC Sounds. John Lennon at the BBC: From The Beatles’ early days to his final interview — BBC Sounds. Television set — Wikipedia. Perspective — YouTube. Broad Canvas — Oxford art supplies store. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Sep 30, 2020 · 1 hr 7 min

    Chucky the coffee maker

    Coffee machines catching ransomware, Blacklight shines a torch on website tracking, and a woman is freaked out that a complete stranger can turn off her home's security system. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. And don't miss our featured interview with Greg Jensen from Oracle, who talks all about five free reports he has put together for listeners about cloud security. Visit https://www.smashingsecurity.com/198 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Dave Bittner and Greg Jensen. Sponsored By: Oracle: Check out the free cloud security reports that Oracle is making available for listeners of "Smashing Security" and learn how organizations can make security an essential part of the culture of their business. Read the free reports at smashingsecurity.com/oraclereport LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Trojan Room coffee pot — Wikipedia. Trojan Room Coffee Machine — Department of Computer Science and Technology, Cambridge University. Reversing the Smarter Coffee IoT Machine Protocol to Make Coffee Using the Terminal — Evil Socket. The Fresh Smell of ransomed coffee — Martin Hron, Avast Threat Labs. When coffee makers are demanding a ransom, you know IoT is screwed — Ars Technica. What a hacked coffee machine looks like — YouTube. Blacklight — The Markup. What They Know … Now — The Markup. Smart Home Security Market Share, Size & Forecast to 2024 — Market data forecast. Smart home penetration rates — Statista. New homeowner 'freaked out' when stranger took control of her security system — CBC News. Confirmed: 2 Billion Records Exposed In Massive Smart Home Device Breach — Forbes. John Miles - Music — YouTube. You Can't Unhear This — YouTube. The Mystery Singer in All You Need Is Love — YouTube. New Climate Maps Show a Transformed United States — ProPublica. ‎Hank the Cowdog — Apple Podcasts. Matthew Mcconaughey Lincoln MKZ Commercials compilation — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Sep 23, 2020 · 52 min

    Greedy bosses, game cheats, and virtual beheadings

    Why are Zoom and Twitter making some people disappear? How are Counter-Strike: Global Offensive cheats getting their just desserts? And the founder of a anti cyber-fraud firm is charged with fraud. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Visit https://www.smashingsecurity.com/197 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Package Thief vs. Glitter Bomb Trap — YouTube. CSGO Cheaters trolled by fake cheat software — YouTube. This Hacker Creates Fake Cheats That Make Cheaters Jump Off Buildings In-Game — Vice. Tweet by Colin Madland. Which will the Twitter algorithm pick: Mitch McConnell or Barack Obama? — Tweet by @bascule. GrahamOrCarole? — Twitter. Founder And CEO Of Cyberfraud Prevention Company Arrested And Charged With Securities Fraud Scheme — Department of Justice press release. Founder of Anti Cyber Fraud Company Charged With Fraud — Vice. Founder of cyber fraud startup ironically facing fraud charges — Gizmodo. Interview with NS8's Adam Rogas — YouTube. Mission to the Unknown Recreation - Doctor Who — YouTube. The making-of Mission to the Unknown — YouTube. Trillion Trees. Criminal: UK — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Sep 16, 2020 · 54 min

    Smart guns, smart cars, and smart street lights - oh my!

    Kalashnikov unveils its "smart" shotgun, San Diego struggles with its street lights, and a researcher reveals how he found a way to hack every Tesla on the planet. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by David McClelland. Visit https://www.smashingsecurity.com/196 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: David McClelland. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing Support Smashing Security Links: Kalashnikov smart shotgun - MP-155 Ultima. Kalashnikov reveals first Russian-made smart shotgun MP-155 Ultima — YouTube. Mike Jernigan, blind veteran, uses a TrackingPoint system to land a 300+ yard shot — YouTube. See how a self-aiming sniper rifle can be remotely hacked — Hot for Security. Tesla Network Vulnerability Report - 2017-03-24 (Annotated) — Google Docs. The Big Tesla Hack: A hacker gained control over the entire fleet, but fortunately he's a good guy — Electrek. Smart Streetlights Program — City of San Diego. Cops Tap Smart Streetlights Sparking Controversy and Legislation — IEEE Spectrum. Mayor orders San Diego's Smart Streetlights turned off until surveillance ordinance in place — The San Diego Union-Tribune. Mayor was right to shut off Smart Streetlights — The San Diego Union-Tribune. Hints of life on Venus — University of Manchester. "This Is Paris - The Real Story of Paris Hilton" — YouTube. “This is Paris” is a quixotic redemption story about what it means to be a human and a brand at once — Salon.com. Moriarty's Game: A Killer in the Hive. Castolog - a podcast recommendation podcast — That's Not Canon Productions. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Sep 9, 2020 · 50 min

    Selene Delgado Lopez is not your friend - with Jon Bentley

    The Gadget Show's Jon Bentley joins us to discuss the mystery of a Facebook friend you never requested, software updates for the Mercedes S-Class, and risks in the online classroom. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jon Bentley. Visit https://www.smashingsecurity.com/195 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Jon Bentley. Sponsored By: Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing Deep Instinct: Most people agree that the most effective way to reduce the cost of an attack is to prevent it from happening in the first place! Deep Instinct strives to prevent all known and unknown threats using deep learning, making detection and response automated, fast and effective for any threat that cannot be prevented. Check out a report by the Ponemon Institute, which studied the cost savings of adopting an efficient prevention model. Go grab it at smashingsecurity.com/deepinstinct LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Say hello to to the latest weird viral Facebook hoax: ‘Selene Delgado Lopez’ — Mashable. Veja Quem é Selene Delgado Lopez - a Fantasma do Facebook — YouTube. The 10 most important innovations in the New Mercedes-Benz S‑Class! — Exhibit. Mercedes Revs mbrace2 With Cloud Updates — Wired. San Leandro schools stepping up online security after latest Zoombomb — San Francisco Chronicle. ‘Zoombombers’ using porn to troll students across US — Miami Herald. Schoolgirl is robbed during a Zoom lesson in Ecuador — Daily Mail. Digital Education: The cyberrisks of the online classroom — SecureList. E-safety for schools — NSPCC Learning. A robot wrote this entire article. Are you scared yet, human? — The Guardian. Smart heater for water & milk — Heatle. Autopia: The Future of Cars by Jon Bentley — Amazon. Rayvolt Cruzer V3 E-Bike — CostCo. Harry Hill's TV Burp - Gadget Show Competition Prizes — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Sep 2, 2020 · 48 min

    Carry on droning

    A Bitcoin bungle causes one user to lose millions, hackers attempt to bribe a Tesla employee into infecting the company's network, and are we ready for a sky full of drones? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker. Visit https://www.smashingsecurity.com/194 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Jessica Barker. Sponsored By: Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Confident Cyber Security by Jessica Barker. Tweet by John McAfee about the mathematical impossibility of Bitcoin being less than $1 million by the end of 2020. The Dickening Countdown to John McAfee Dick Eating. Bitcoin Holder Loses $16 Million in BTC to Well-Known Scam — Decrypt. Electrum user says he has lost 1400 Bitcoin — GitHub. Electrum Bitcoin wallets under siege — Malwarebytes. Electrum vulnerability announcement — Github. Sybil attack — Wikipedia. Fawlty Towers: The best of Sybil — YouTube. Electrum Bitcoin Wallet homepage. Elon Musk Says Tesla Saved From 'Serious' Ransom Attempt — Data Breach Today. Jennifer Lopez - Jenny from the Block (Official Music Video) — YouTube. The security impact of drones: Challenges and opportunities for the UK (PDF) — University of Birmingham. Security analysis of drones systems: Attacks, limitations, and recommendations — NCBI. Drone Delivery? Amazon Moves Closer With F.A.A. Approval — New York Times. What Security Threats Are Posed By Drones? — Avast. The Surprising Ways Drones Are Saving Lives — National Geographic. HEAVE HO! Heave Ho - Launch Trailer — YouTube. Behind the Schemes: Heave Ho with Le Cartel — YouTube. StartUp (TV series) — Wikipedia. StartUp - Launch Trailer — YouTube. Steal the Stars podcast — Tor Labs. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Aug 26, 2020 · 58 min

    Hacking the CIA, Bridgefy, and college lockdowns

    Whatever happened to Crackas with Attitude, perfidious Albion College's approach to locking down Coronavirus, and the Bridgefy mesh messaging app falls down when it comes to security. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading. Visit https://www.smashingsecurity.com/193 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Anna Brading. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: CIA boss has his personal email account hacked… and yes, it’s on AOL — Graham Cluley. Two years' detention for UK teenager who 'cyberterrorised' US officials — The Guardian. Kane Gamble sentencing remarks (PDF). What It’s Like for a Hacker to Get Back Online After a Two-Year Internet Ban — Motherboard. Fearing coronavirus, a Michigan college is tracking its students with a flawed app — TechCrunch. Bridgefy, the messenger promoted for mass protests, is a privacy disaster — Ars Technica. Bridgefy’s Commitment to Privacy and Security. Mesh Messaging in Large-scale protests: Breaking Bridgefy — Technical paper by Martin R Albecht, Jorge Blasco, Lenka Marekova, and Rikke Bjerg Jensen of Royal Holloway, University of London. How to Watch The Avengers Movies in Order — Digital Trends. "Thor: Ragnarok" Official Trailer — YouTube. Sounds of the 90s with Fearne Cotton — BBC. Super Sapiens: a card game to help change the world — Etsy. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Aug 19, 2020 · 49 min

    Ritz and robocalls - with Rory Cellan-Jones

    A scam involving restaurant bookings at The Ritz is suitably sophisticated, the second wave of UK coronavirus testing apps, and we take a look at one of the biggest studies ever into the scourge of robocalls. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Rory Cellan-Jones. Visit https://www.smashingsecurity.com/192 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Rory Cellan-Jones. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Tech Tent podcast — BBC World Service. Sir Frederick Barclay releases footage of alleged Ritz bugging — The Guardian. Tea at the Ritz soured by credit card scammers — BBC News. Tweet from The Ritz London. Coronavirus: England's contact-tracing app gets green light for trial — BBC News. Coronavirus: England's contact tracing app trial gets under way — BBC News. A simple telephony honeypot received 1.5 million robocalls across 11 months — ZDNet. Who's Calling? Characterizing Robocalls through Audio and Metadata Analysis — USENIX. Pick of the Week archive — Smashing Security. 13 Minutes to the Moon — BBC World Service. Borrasca — QCODE. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Aug 12, 2020 · 54 min

    We are on the bird

    Can a video game help your company's staff choose stronger passwords? Why might satellite-based internet communications be bad for security? And what are the alternatives to TikTok? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/191 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Passworld: A Serious Game to Promote Password Awareness and Diversity in an Enterprise — USENIX. Whispers Among the Stars: A Practical Look at Perpetrating (and Preventing) Satellite Eavesdropping Attacks — Black Hat USA 2020. Satellite Broadband Security - James Pavur — YouTube. Twitter and TikTok reportedly have had talks about a deal — The Verge. Trump bans US transactions with Chinese-owned TikTok and WeChat — The Guardian. These apps are scrambling to become the next TikTok — Wired. Introducing Instagram Reels — Facebook. Quoridor — Wikipedia. Quoridor — BoardGameGeek. BLACK & DECKER 20V LBX20 Li-Ion Battery USB Power Source Adapter w/DC 12V Port — eBay. The Young Offenders — BBC iPlayer. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Aug 5, 2020 · 48 min

    Twitter hack arrests, email bad behaviour, and Fawkes vs facial recognition

    Special guest Geoff White can't resist using the podcast to promote his new book, "Crime Dot Com", but other than that we also discuss the creepy (and apparently legal) way websites can find out your email and postal address even if you don't give it to them, take a look at how the alleged Twitter hackers were identified, and learn about Fawkes - the technology fighting back at facial recognition. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by "Crime Dot Com" author Geoff White. Visit https://www.smashingsecurity.com/190 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Geoff White. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: A free chapter of Geoff's book, "Crime Dot Com" Start-Up Helps Conservative Websites Like the Daily Caller Store User Names, Postal Addresses of Anonymous Readers — Jezebel. Permission Shmarketing: How does GetEmails work? — YouTube. Some say we're criminals. Many say we're unethical. We think we're geniuses. But we're so, so bad... — YouTube. Three charged in massive Twitter hack, Bitcoin scam — KTVU. Three Individuals Charged For Alleged Roles In Twitter Hack — Department of Justice. Defund Facial Recognition Before It's Too Late — The Atlantic. 'Atlas of Surveillance' now provides searchable, interactive database of police surveillance — VentureBeat. Clearview AI—Yet Another Example of Why We Need A Ban on Law Enforcement Use of Face Recognition Now — Electronic Frontier Foundation. Facial Recognition Map. This Tool Could Protect Your Photos From Facial Recognition — The New York Times. Fawkes - Image "Cloaking" for Personal Privacy. Fawkes: Protecting Personal Privacy against Unauthorized Deep Learning Models (USENIX Security 2020) — YouTube. Rush Hour (puzzle) — Wikipedia. Rush Hour games — ThinkFun. How To Play: Rush Hour - by ThinkFun — YouTube. Unblock Me — iOS App Store. Origins - How the earth shaped human history — Lewis Dartnell. The Umbrella Academy — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jul 29, 2020 · 49 min

    DNA cock-up, Garmin hack, and virtual kidnappings

    Why are students faking their own kidnappings? What's the story behind Garmin's ransomware attack? And a genetic genealogy website suffers a hack or two. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ray [REDACTED]. Warning: This podcast may contain nuts, adult themes, and rude language. Links: Tribe of Hackers Podcast. Golden State Killer pleads guilty to 13 murders — BBC News. Joseph James DeAngelo — Wikipedia. Hackers Attacked Two Leading Genetic Genealogy Websites — Buzzfeed News. GEDmatch confirms data breach after users’ DNA profile data made available to police — TechCrunch. Garmin outage caused by confirmed WastedLocker ransomware attack — Bleeping Computer. Charges Announced in Malware Conspiracy — FBI. Garmin staggers back online after ransomware attack — Graham Cluley. Coronavirus: China warns students over 'risks' of studying in Australia — BBC News. Chinese students in Australia targeted in virtual kidnapping scam — BBC News. Chinese students in Australia are being targeted in kidnapping scams, police warn — South China Morning Post. Chinese Students in Australia Are Faking Their Own Kidnappings. Here’s Why — Vice. SecondHandSongs. Doomsday Algorithm — Just in case you didn't understand Ray's explanation... Incredibox. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Sponsored by: Immersive Labs - Giving security professionals practical and gamified content to keep pace with the latest threats. Listeners can get access to more than 24 hours of free labs AND a new lab to try out each week. LastPass - The trusted enterprise password manager of over 33,000 businesses. Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser. Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at @SmashinSecurity, or on Mastodon, on the Smashing Security subreddit, or visit our website for more episodes. Thanks: Theme tune: “Vinyl Memories” by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Privacy & Opt-Out: https://redcircle.com/privacy

  • Jul 22, 2020 · 1 hr 2 min

    Dinner with Elon Musk and Kris Jenner

    Who stopped Twitter's hackers from stealing more money? Why are Covid-19 researchers being told to ramp up their cybersecurity? How can you find out if your smartphone is infected with stalkerware? And who does Graham think he is turning down a celebrity dinner invite? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Lisa Forte. Visit https://www.smashingsecurity.com/188 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Lisa Forte. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: The Twitter mega-hack. What you need to know — Tripwire State of Security. The Twitter hack: Why Elon Musk, Bill Gates, Jeff Bezos and others might have reason to be worried — Graham Cluley. Twitter Hackers Could Have Stolen A Whole Lot More Bitcoin — Forbes. Twitter says hackers downloaded private account data — BBC News. UK condemns Russian Intelligence Services over vaccine cyber attacks — GOV.UK. Britain’s charges of hacking & meddling ‘make no sense’ but Russia is ready to turn the page & work with UK – ambassador — Russia Today. Russian Cyber Espionage Group Targets COVID-19 Vaccine Research and IP — IP Watchdog. Google bans ads for stalkerware apps—with some exceptions — Ars Technica. Google’s ad ban won’t stop stalkerware apps from promoting themselves — Graham Cluley. 1 in 10 Americans uses stalkerware to track partners and exes, poll finds — CNET. Stalkerware: Domestic Abuse Victims Face Invisible Threat — Digital Trends. How to Check Your Devices for Stalkerware — Wired. Find and remove stalkerware and bossware from your phone — Traced. President Trump goes one-on-one with Chris Wallace — YouTube. Montreal Cognitive Assessment (MOCA) — A similar test to that taken by President Donald Trump. Quiz: Could you pass Donald Trump's cognitive test? — BBC News. "How to cognitive" — Sarah Cooper on Twitter. Don't F**k with Cats: Hunting an Internet Killer — IMDB. 60 Versions of Leonard Cohen's 'Hallelujah,' Ranked — Newsweek. Hallelujah (COVER) - Shaun Brown & Jeremy Dunham — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jul 15, 2020 · 1 hr 3 min

    Huawei ban, MGM hack, and a contact-tracing cock-up

    Login chaos for England's contact tracing service, our drill-down on the Britain's Huawei 5G ban, MGM's blockbuster breach, and how to pronounce "Gigabyte." All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Plus we have a bonus featured interview with Scott Petry, the co-founder of Authentic8, all about how you can browse the internet safely, securely, and anonymously when conducting research, collecting sensitive evidence, and analyzing data. Visit https://www.smashingsecurity.com/187 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Maria Varmazis and Scott Petry. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Authentic8: Silo for Research (Toolbox) from Authentic8 is a secure and anonymous web browsing solution that enables threat intelligence, security, and public safety professionals to conduct research, collect evidence, and analyze data across the open, deep and dark web. To learn how Silo for Research enables teams to timely and efficiently investigate, while ensuring maximum security and oversight to ensure compliance - including GDPR - go to smashingsecurity.com/authentic8 Support Smashing Security Links: Coronavirus: Contact tracers in England 'locked out of accounts' — Sky News. TalkTalk’s ex-CEO Dido Harding heads up the UK’s Coronavirus tracing app… — Graham Cluley. Apparently Coronavirus-tracing scammers won’t sound professional… (Yeah, right!) — Graham Cluley. Huawei 5G kit must be removed from UK by 2027 — BBC News. US sanctions make Huawei more of a security risk, says leaked UK report — The Verge. A different future for telecoms in the UK — NCSC. Commerce Addresses Huawei’s Efforts to Undermine Entity List, Restricts Products Designed and Produced with U.S. Technologies — U.S. Department of Commerce. A hacker is selling details of 142 million MGM hotel guests on the dark web — ZDNet. WindowSwap. How do you pronounce "Gigawatt"? — Waldo Jaquith on Twitter. Metric (SI) Prefixes — NIST. No podcast. In the No Part 1 — Radiolab. 21 OSINT Tools for Cyber Threat Intelligence — Authentic8. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jul 8, 2020 · 49 min

    This one's for all the Karens!

    A high-rolling Hushpuppi gets extradited to the United States, Carole details her problems with clipboards and Disposophobia, and our guest becomes the subject of fake news during the Senegalese election. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by investigative journalist Michelle Madsen (or is it Michelle Damsen? Hmm...). Visit https://www.smashingsecurity.com/186 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Michelle Madsen. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Authentic8: Silo for Research (Toolbox) from Authentic8 is a secure and anonymous web browsing solution that enables threat intelligence, security, and public safety professionals to conduct research, collect evidence, and analyze data across the open, deep and dark web. To learn how Silo for Research enables teams to timely and efficiently investigate, while ensuring maximum security and oversight to ensure compliance - including GDPR - go to smashingsecurity.com/authentic8 Support Smashing Security Links: Ray Hushpuppi's Instagram account. Your 2.3m Instagram fans won't stop the FBI... Web star accused of plotting to launder millions from cyber-crime — The Register. Hushpuppi and Mr. Woodbery, BEC scammers: Welcome to Chicago! — CyberCrime & Doing Time. Dubai Police operation Fox Hunt 2 against Hushpuppi. — Vimeo. Cosmic Lynx Threat Dossier — Agari. Domain Message Authentication Reporting & Conformance — DMARC. How to Combat Fake Emails — Australian Cyber Security Centre. My fake news whodunnit: Caught up in a Senegal fake news scam — BBC News. The Documentary: My fake news whodunnit — BBC World Service. TikTok grabbing the contents of an iPhone clipboard every 1-3 keystrokes — Twitter. Popular iPhone and iPad Apps Snooping on the Pasteboard — Mysk. The Life and Times of David Lloyd George (with Ennio Morricone theme tune) — YouTube. Dogmatix chasing a Roman legionary, to the tune of Ennio Morricone's Chi Mai. — YouTube. A Tribute to Ennio Morricone. — Tableau. An Abridged Micro List — Malaika Kegode on Facebook. Karen (slang) — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jul 1, 2020 · 47 min

    Bieber fever, Roblox, and ransomware

    Who's been dressing Robox players up in red baseball caps? Which ransomware victim's negotations got spied on by the media? And should Jason Bieber think twice before touching his hat? Oh, and we need to talk about squirrels... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes. Visit https://www.smashingsecurity.com/185 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: John Hawes. Sponsored By: Authentic8: Silo for Research (Toolbox) from Authentic8 is a secure and anonymous web browsing solution that enables threat intelligence, security, and public safety professionals to conduct research, collect evidence, and analyze data across the open, deep and dark web. To learn how Silo for Research enables teams to timely and efficiently investigate, while ensuring maximum security and oversight to ensure compliance - including GDPR - go to smashingsecurity.com/authentic8 LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Roblox accounts being hacked in support of Trump re-election — Bleeping Computer. Add 2-Step Verification to Your Roblox Account — Roblox. Ransomware Groups Promise Not to Hit Hospitals Amid Pandemic — Wired. NetWalker Ransomware - What You Need to Know — Tripwire. Update on IT Security Incident at UCSF — UC San Francisco. How hackers extorted $1.14m from University of California, San Francisco — BBC News. Pizzagate conspiracy theory — Wikipedia. A TikTok Twist on ‘PizzaGate’ — The New York Times. ‘PizzaGate’ Conspiracy Theory Thrives Anew in the TikTok Era — The New York Times. TikTok Teens Are Obsessed With Pizzagate — The Daily Beast. Building the Perfect Squirrel Proof Bird Feeder — YouTube. DARK Season 1 Trailer — YouTube. DARK - The Official Guide — Netflix. Conan Doyle estate sues Netflix for giving Sherlock Holmes too many feelings — The Verge. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jun 24, 2020 · 51 min

    Vanity Bitcoin wallets, BlueLeaks, and a Coronavirus app conspiracy

    A conspiracy spreads on social media about Coronavirus tracing apps, US police find decades' worth of sensitive data leaked online, and is there a Bitcoin bonanza to be had from watching Elon Musk YouTube videos? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology reporter Zoe Kleinman. Visit https://www.smashingsecurity.com/184 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Zoe Kleinman. Sponsored By: MetaCompliance: Create a more security-conscious workforce with MetaCompliance's Cyber Security Awareness for Dummies book. Download it for free at smashingsecurity.com/cyberaware LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: How photographs are airbrushed — A 2010 BBC News article, starring Zoe Kleinman. Elon Musk Bitcoin vanity addresses used to scam users out of $2 million — ZDNet. Kate Winslet responds to Bitcoin scam faking her endorsement — Decrypt. Bitcoin scam uses Prince Harry, Meghan Markle to dupe would-be investors — Decrypt. Covid-19 tracing tool on smartphones is 'not app' — BBC News. ‘BlueLeaks’ Exposes Files from Hundreds of Police Departments — Krebs on Security. Koko Analytics — A privacy-friendly analytics plugin for WordPress. Fathom — Fast, simple and privacy-focused website analytics. Upload trailer — YouTube. Backspace and beyond — Audioboom. The Magnus Archives — Horror podcast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jun 17, 2020 · 46 min

    MAMILs, gameshows, and a surprise from eBay

    A TV gameshow with cash prizes if you're obeying Coronavirus lockdown rules, ex-Ebay staff charged in crazy cyberstalking case, and when the wrong cyclist was accused by the internet bearing pitchforks. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/183 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: MetaCompliance: Create a more security-conscious workforce with MetaCompliance's Cyber Security Awareness for Dummies book. Download it for free at smashingsecurity.com/cyberaware LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Mr Blobby — Wikipedia. Noel's House Party — Wikipedia. A man is surprised at home by Noel's House Party — YouTube. Bahrain, Kuwait and Norway contact tracing apps among most dangerous for privacy — Amnesty International. Coronavirus: Alarm over 'invasive' Kuwait and Bahrain contact-tracing apps — BBC News. ‘Are You At Home?’ Winner Selection Rules — Bahrain's Information & eGovernment Authority. Bahrain BeAware — iOS App Store. Bahrain BeAware — Google Play Store. Six Former eBay Employees Charged with Aggressive Cyberstalking Campaign Targeting Natick Couple — Department of Justice. Ex-EBay CEO's 'Inappropriate' Messages Played Role in Ouster — TheStreet. MAMIL throws a tantrum — Twitter. Maryland cyclist arrested for assaulting 3 people posting Black Lives Matter flyers — CNN. Smashing Security episode 063: Carole's back! — In which we discuss privacy issues involving fitness trackers. What It’s Like to Get Doxed for Taking a Bike Ride — New York magazine. Staged — BBC iPlayer. The Mars Challenge by Alison Wilgus — Macmillan. Mars trip to use astronaut poo as radiation shield — New Scientist. Culture quiz: from Bob Holness 007 to the Daily Mail's feast of filth — The Guardian. Quizzes — The Guardian. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jun 10, 2020 · 1 hr 1 min

    Space Force, credit card fraud, and beep-ti-beep

    Graham finds himself in hot water with a security firm after a data breach, Carole discusses credit card fraud, and we have a pleasant surprise for Thom Langford, who appears to have mostly agreed to be a guest to promote his own podcast. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford. And don't miss our featured interview with Robbie O'Brien of MetaCompliance, all about the new book he's written - Cyber Security Awareness for Dummies. Visit https://www.smashingsecurity.com/182 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Robert O'Brien and Thom Langford. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. MetaCompliance: Create a more security-conscious workforce with MetaCompliance's Cyber Security Awareness for Dummies book. Download it for free at smashingsecurity.com/cyberaware Support Smashing Security Links: Security firm leaves more than five billion records exposed on unsecured database — Graham Cluley. "Following a legal threat from ███████ ████ I have removed their name from this article on my site..." — Graham Cluley on Twitter. Keepnet Labs confirms contractor exposed 'data breach database' of 5 billion records — Verdict. Public Statement in Relation to Data Briefly Exposed on an ElasticSearch Database — Keepnet Labs. After threatening me with legal action, Keepnet Labs finally issues statement over data breach — Graham Cluley. Goodbye Naked Security? — Graham Cluley. US Military Could Lose Space Force Trademark to Netflix Series — CBR. Space Force review: astonishingly bad show — The Verge. The number of credit card scams continues to soar during the pandemic — Verdict. Pandemic Brings Huge Increases In Card Fraud And Mobile Banking — Forbes. Credit Card Fraud During the Pandemic — Consumer Reports. Credit Card Fraud — Advice from the FBI. How to Reduce Credit Card Fraud — The New York Times. Ian's Shoelace Site – Introduction Magnet – Window manager for Mac. The Host Unknown Podcast. DEVS — BBC iPlayer. Cyber Security Awareness for Dummies — A free book for listeners from MetaCompliance. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jun 3, 2020 · 52 min

    Anti-cybercrime ads, tricky tracing, and a 5G Bioshield

    Police are hoping to stop kids becoming cybercriminals by bombarding them with Google Ads, phishers rub their hands in glee at the NHS track and trace service, and just how does a nano-layer of quantum holographic catalyzer technology make a USB stick cost hundreds of pounds? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Visit https://www.smashingsecurity.com/181 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: Deep Instinct: Most people agree that the most effective way to reduce the cost of an attack is to prevent it from happening in the first place! Deep Instinct strives to prevent all known and unknown threats using deep learning, making detection and response automated, fast and effective for any threat that cannot be prevented. Check out a report by the Ponemon Institute, which studied the cost savings of adopting an efficient prevention model. Go grab it at smashingsecurity.com/deepinstinct LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Immersive Labs: Immersive Labs gives security professionals practical and gamified content to keep pace with the latest threats. Listeners can signup at immersivelabs.com/smashing to get instant access to more than 24 hours of free labs AND a new lab to try out each week. Support Smashing Security Links: Cheating in online games — Wikipedia. UK Ad Campaign Seeks to Deter Cybercrime — Brian Krebs. DDoS attacks are illegal — National Crime Agency (NCA). Google doesn’t seem to believe booters are illegal — Light Blue Touchpaper. Google ad policies. NHS Test and Trace — Yes, the legitimate website. Phishing danger is just a hyphen away — The AntiSocial Engineer. Apparently Coronavirus-tracing scammers won't sound professional... (Yeah, right!) — Graham Cluley. This is how you can verify you are actually being contacted by the government’s Test and Trace service — Full Fact. Glastonbury calls for 5G inquiry — Glastonbury Town Council. Trading Standards squad targets anti-5G USB stick — BBC News. Reverse Engineering a 5g 'Bioshield' — Pen Test Partners. Glastonbury 5G report 'hijacked by conspiracy theorists' — BBC News. Tweet by the BBC's Rory Cellan-Jones. 5GBioShield. Swopper chair — Stuhl. The Swopper by Aeris — YouTube. The Knowledge: How to Rebuild our World from Scratch — Book by Lewis Dartnell. Men hired for sexual fantasy break into wrong house — BBC News. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • May 27, 2020 · 46 min

    Taking care of Clare

    On this special splinter episode of the podcast, we're joined by actor and comedian Clare Blackwood in the hope of convincing her that cybersecurity is no laughing matter. Hear what happens in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Carole's cousin (!) Clare Blackwood. Visit https://www.smashingsecurity.com/180 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Clare Blackwood. Sponsored By: Immersive Labs: Immersive Labs gives security professionals practical and gamified content to keep pace with the latest threats. Listeners can signup at immersivelabs.com/smashing to get instant access to more than 24 hours of free labs AND a new lab to try out each week. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: All ages dance on TikTok during coronavirus quarantine — Los Angeles Times. Fugitive John McAfee’s location revealed by photo meta-data screw-up — Naked Security. Have I Been Pwned: Check if your email has been compromised in a data breach. Clare Blackwood's TikTok dance. The Miracle Sudoku — YouTube. Cracking The Cryptic YouTube channel. Puzzled man solving 'miracle' sudoku becomes YouTube sensation — The Guardian. Dumb-Dumbs and Dice. Into the Night — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy