Artwork for Smashing Security
Technology

Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

  • 480 episodes
  • Updated Wednesday

Episodes480

  • May 20, 2020 · 1 hr 2 min

    Deepfake Jay-Z, and beer apps spilling your data

    Apps that belch out sensitive military information, what could the world learn from South Korea's digital response to the Coronavirus pandemic, and who has been deepfaking Bill Clinton, Jay-Z, and Donald Trump... and why? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Brian Klaas of the "Power Corrupts" podcast. Plus we have a bonus feature interview with Rachael Stockton from Logmein, the folks behind LastPass, all about their report into the psychology of passwords. Visit https://www.smashingsecurity.com/179 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Brian Klaas and Rachael Stockton. Sponsored By: LastPass: LastPass's "Psychology of Passwords" report surveyed over 3,000 people around the world to highlight the current state of online security behaviors – and the results are alarming. Download it now at smashingsecurity.com/passwordreport Immersive Labs: Immersive Labs gives security professionals practical and gamified content to keep pace with the latest threats. Listeners can signup at immersivelabs.com/smashing to get instant access to more than 24 hours of free labs AND a new lab to try out each week. Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice. Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor Support Smashing Security Links: Military And Intelligence Personnel Can Be Tracked With The Untappd Beer App — Bellingcat. What South Korea's Nightclub Outbreak Can Teach Other Countries — Time. When audio deepfakes put words in Jay-Z’s mouth, did he have a legal case? — Ars Technica. Jay-Z’s Deepfake Hamlet Recital — To Sue, Or Not To Sue — Forbes. Vocal Synthesis — YouTube channel. Doordash and Pizza Arbitrage — Ranjan Roy. Iron Chef Japan episodes — YouTube. Rabbit Hole podcast. The Psychology of Passwords — LastPass. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • May 13, 2020 · 50 min

    Office pranks, meat dresses, and robocop dogs

    Graham shares stories of email storms, Carole describes the steps being taken by firms as they try to coax employees back to the office, and guest Lisa Forte details a hack that has impacted Lady Gaga and other celebrities. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Lisa Forte. Visit https://www.smashingsecurity.com/178 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Lisa Forte. Sponsored By: Immersive Labs: Immersive Labs gives security professionals practical and gamified content to keep pace with the latest threats. Listeners can signup at immersivelabs.com/smashing to get instant access to more than 24 hours of free labs AND a new lab to try out each week. Oracle: Check out the free cloud security reports that Oracle is making available for listeners of "Smashing Security" and learn how organizations can make security an essential part of the culture of their business. Read the free reports at smashingsecurity.com/oraclereport LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Me Too! — Microsoft tells the story of the Bedlam DL3 email storm. Microsoft employees swept up in GitHub reply-all email apocalypse — Business Insider. Microsoft now blocks reply-all email storms to end our inbox nightmares — The Verge. Reply All Storm Protection in Exchange Online — Microsoft Tech Community. The NHS's massive email storm — Graham Cluley. Entertainment Law Firm Hacked in Major Data Breach, Ransomware Attack — Variety. Coronavirus: Commuters told to 'prepare to queue' in new guidance — BBC News. Employers Rush to Adopt Virus Screening. The Tools May Not Help Much — The New York Times. Robot dog enforces social distancing in city park — BBC News. Onkalo spent nuclear fuel repository — Wikipedia. Into Eternity — Wikipedia. Finland buries its nuclear past — BBC News. The plan to protect humans from radioactive waste with color-changing cats — Business Insider. How colour-changing cats might warn future humans of radioactive waste — The Guardian. The Summit trailer — YouTube. No Way Down: Life and Death on K2 — Amazon.com. Jim Lahey's No-Knead Bread Recipe — Leite's Culinaria. No Knead Bread Recipe — YouTube. No-Knead Bread Recipe — New York Times. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • May 6, 2020 · 1 hr

    Elon Musk, Roblox, and Love Bug author found

    What can X Æ A-12 Musk teach us about passwords? How did our guest finally hunt down the man behind one of history's biggest virus outbreaks in Manila? And what on earth is a hacker doing breaching Roblox security? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White. Visit https://www.smashingsecurity.com/177 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Geoff White. Sponsored By: DomainTools: Join our friends at DomainTools for a webinar as they walk you through the process of identifying a nefarious domain, mapping connected infrastructure, and reverse-engineering a ransomware attack which used a Coronavirus disguise. Learn more about how DomainTools helps security analysts turn threat data into threat intelligence and watch the webinar at domaintools.com/smashing Oracle: Build, test, and deploy applications on Oracle Cloud - for free. Sign up at smashingsecurity.com/oracle and you'll soon be building, testing and deploying cloud applications securely with Oracle. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Vote for Smashing Security in the EU Security Blogger Awards! Graham Cluley on Earworm Island — Earworm Island podcast. Carole Theriault on Earworm Island — Earworm Island podcast. Elon Musk tweets a photo of his newborn child — Twitter. World Password Day — Days of the year. Grimes explains the baby's name — Twitter. Don’t Make These 5 Password FAILS! (But Do Notch These 2 Password Wins) — ID Agent. Love Bug Virus Creator Comes Clean — Geoff White. Memories of the Melissa virus — Naked Security. Roblox — Wikipedia. What is Roblox? — Digital Trends. Hacker Bribed 'Roblox' Insider to Access User Data — Motherboard. I'm Officially RICHER Than ROBLOX!! (WORLD RECORD BROKEN) — Linkmon99 on YouTube. WM97/Michael-B virus analysis — Sophos. Bookcase Credibility — @BCredibility on Twitter. Five Minutes With: Brian Sewell — YouTube. So you can see how good Graham's impression is. Syncplay. Netflix Party. Whole Chicken in a Can — Ashens on YouTube. Poundland Food Special - All Day Breakfast — Ashens on YouTube. MRE & Ration Reviews — YouTube. A man experiencing and reviewing military rations from 1863-current day. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Apr 29, 2020 · 45 min

    Hacking hacks and university attacks

    Journalists spying on their rivals, the NHS rejects Apple and Google's approach to Coronavirus-tracing, and universities are hit by an old-fashioned sexy lady attack. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Rik Ferguson. Visit https://www.smashingsecurity.com/176 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Rik Ferguson. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Vote for Smashing Security in the EU Security Blogger Awards! Financial Times reporter accessed private calls at Independent and Evening Standard — The Independent. FT suspends journalist accused of listening to rival outlets' Zoom calls — The Guardian. Sky News admits it hacked Canoe Man’s email — Naked Security. Is it ever acceptable for a journalist to hack into somebody else’s email? — Naked Security. NHS rejects Apple-Google coronavirus app plan — BBC News. Threat Actors Repurpose Hupigon in Adult Dating Attacks Targeting US Universities — Proofpoint. Warwick University kept data hack secret from students and staff — Birmingham Live. JustWatch - The Streaming Guide. Just Watch — Apple App Store. Just Watch — Google Play. Fire for Kids Unlimited — Amazon UK. Kindle Limited for Kids — Amazon.com. J! Archive. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Apr 22, 2020 · 49 min

    Zoom deepfakes, Zardoz, and 'Rona tracing

    Will deepfake disguises hit a video conference near you, can Coronavirus-tracing apps be trusted, and should Facebook shut down anti-quarantine events? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/175 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice. Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor Support Smashing Security Links: Iain Thomson in fancy dress on Zoom. — Twitter. Smashing Security 134: Sextortion, silicone face masks, and a DDoS doofus. Avatarify: Avatars for Zoom and Skype — GitHub. "Elon Musk joined our Zoom call" — YouTube. Avatarify demo — YouTube. This Open-Source Program Deepfakes You During Zoom Meetings, in Real Time — Vice. Trailer for Zardoz (1974) — YouTube. Coronavirus: Governors ask Trump to call off lockdown protests — BBC News. Facebook sort-of blocks anti-quarantine events – how many folks are actually behind these 'massive' protests online? — The Register. COVID-19 apps — Wikipedia. Would You Give Up Health or Location Data to Return to Work? — The New York Times. European scientists and researchers raise privacy concerns over coronavirus contact tracing apps — VentureBeat. European experts ready smartphone technology to help stop coronavirus — Reuters. 2 billion phones cannot use Google and Apple contact-tracing tech — Ars Technica. Contact Tracing in the Real World — Light Blue Touchpaper. Tracking the Global Response to COVID-19 — Privacy International. Apple and Google Respond to Covid-19 Contact Tracing Concerns — Wired. Sketchplanations - A weekly explanation in a sketch. Make These Projects to Fight COVID-19 Right Now — Make. 3D Print This Simple Tool Now, To Help Local Sewists Make More Masks for Covid-19 — Make. Fix The Mask. Turn a T-shirt into a face mask — Ronit Bose Roy on Twitter. Educational Documentaries on Netflix — YouTube. Remote Tourism. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Apr 15, 2020 · 46 min

    Animal Crossing with Garry Kasparov

    World-chess-champion-turned-activist Garry Kasparov joins us as we discuss celebrity lookalikes, smartphone fleeceware, the impact Coronavirus is having on security, and how a popular new video game is being used for political ends. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Garry Kasparov. Yes, the Garry Kasparov. Graham was pretty excited too. Visit https://www.smashingsecurity.com/174 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Garry Kasparov. Sponsored By: Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice. Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor Support Smashing Security Links: Don’t let fleeceware sneak into your iPhone — Sophos. Fleeceware apps persist on the Play Store — Sophos. Fleeceware apps discovered on the iOS App Store — ZDNet. How to see or cancel subscriptions on your iPhone, iPad or iPod touch — Apple Support. How to cancel, pause, or change a subscription on Google Play — Google Play Help. Global Move to Telecommute Work Increases Security Risks — Voice of America. Cybercriminals impersonate World Health Organization to distribute fake coronavirus e-book — Malwarebytes. Animal Crossing. The Vegan Guide to 'Animal Crossing: New Horizons' — PETA Kids. Chinese gamers decorate Animal Crossing with propaganda and Covid-19 references — Abacus. Nintendo game pulled from Chinese platforms after Hong Kong protest — Reuters. Animal Crossing removed from sale in China amid Hong Kong protests — BBC News. Animal Crossing game removed from sale in China over Hong Kong democracy messages — The Guardian. Retirement day fighter jet ride ends in chaos after OAP pulls ejector seat lever — Daily Star. Extraordinary Times: A COVID-19 Visual Journal — Maria Photinakis. French air investigation report. Coronavirus: 20 suspected phone mast attacks over Easter — BBC News. Coronavirus: Scientists brand 5G claims 'complete rubbish' — BBC News. The Weirdly Enduring Appeal of Weird Al Yankovic — The New York Times. ‎The Daily: The Sunday Read: Weird Al Yankovic’s Weirdly Enduring Appeal — Apple Podcasts. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Apr 8, 2020 · 1 hr 3 min

    5G fiascos, Zoom gloom, and butt biometrics

    We take a look at the stinky backside of surveillance, gas about the latest video-conferencing threats, and jump into the murky world of 5G conspiracy theories. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology broadcaster David McClelland and featuring an interview with LastPass's Barry McMahon. Visit https://www.smashingsecurity.com/173 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Barry McMahon and David McClelland. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Engineers unleash car-seat identifier that reads your rear end — Phys.org. Identifying personal microbiomes using metagenomic codes — PNAS. A mountable toilet system for personalized health monitoring via the analysis of excreta — Nature. 'Magic toilet' could monitor users' health, say researchers — The Guardian. Toilet hackers could snoop on your poop, steal data of a “personal nature” — Graham Cluley. Zoomed In: A Look into a Coinminer Bundled with Zoom Installer — Trend Micro. PSA: Fake Zoom installers being used to distribute malware — Bleeping Computer. Was a 5G Tower Torn Down in China To Stop COVID-19? — Snopes. Coronavirus 5G Conspiracy Theory: UK Cell Towers Burned Over Claims It Causes COVID-19 — International Business Times. Coronavirus 5G conspiracy theory spreads as cellphone towers attacked — USA Today. 5G is not accelerating the spread of the new coronavirus — Full Fact. Influencers among 'key distributors' of coronavirus misinformation — The Guardian. How the 5G coronavirus conspiracy theory tore through the internet — Wired. Call for social media platforms to act on 5G mast conspiracy theory — The Guardian. Totally Reliable Delivery Service - The Game About Terrible Delivery Drivers. Totally Reliable Delivery Service - Launch Trailer — YouTube. LET'S GO LIVE with Maddie & Greg — YouTube. Power Corrupts Podcast. The godfather of fake news — BBC News. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Apr 1, 2020 · 51 min

    UncleF***Face - with Mikko Hyppönen

    Carole details how companies are spying on their stay-at-home workers, Mikko Hyppönen discusses the trustworthiness of video chat apps, and Graham gets embarrassed when he admits he's bought a Facebook Portal for his in-laws. All this and much much more is discussed in the latest edition of the award-winning "Smashing Security" podcast with Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/172 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mikko Hyppönen. Sponsored By: DomainTools: DomainTools helps security analysts turn threat data into threat intelligence. Its solutions give organizations the ability to use and create a forensic map of criminal activity, assess threats and prevent future attacks. Learn more about their products at domaintools.com, or visit domaintools.com/smashing to enter their Capture The Flag competition and be in with a chance to win a $100 gift card. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Herrasmieshakkerit — Mikko's security podcast (in Finnish) with Tomi Tuominen. Video trailer for Herrasmieshakkerit — YouTube. Has Houseparty really been hacked? $1 million reward offered to unearth who is behind widespread claims — Graham Cluley. Houseparty declares that all accounts are safe — Twitter. Houseparty announces $1,000,000 bounty — Twitter. Zoom Meetings Do Not Support End-to-End Encryption — The Intercept. The most popular smartphones in 2019 — DeviceAtlas. The Zoom IPO (with Santi Subotovsky) — Acquired podcast. Cyber Volunteers – Protecting and Responding for our healthcare services! — CV19. Bosses Panic-Buy Spy Software to Keep Tabs on Remote Workers — Bloomberg. Your Bosses Are Trying To Spy On You Now More Than Ever — Futurism. Companies are using webcams to monitor employees working from home — Business Insider. Something Rhymes with Purple — Acast. Susie Dent on Twitter. Virtual choir from Finland: "Song of the Fearless" — YouTube. Someone's built the entire Earth in Minecraft - to scale — Eurogamer. The Earth in Minecraft, 1:1 scale ...for the first time — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Mar 25, 2020 · 45 min

    WhatsApp hoaxes, Zoombombs, and 8-bit love

    Blackmailers are threatening to infect your family with Coronavirus, trolls are making Zoom an unsafe place for those of a sensitive disposition, and what is the mysterious Dr Negrin audio message spreading on WhatsApp? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White. Visit https://www.smashingsecurity.com/171 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Geoff White. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: "Stay home and help flatten the curve!" — Tweet by Pornhub. ‘Dirty little secret’ extortion email threatens to give your family coronavirus — Naked Security. Google Assistant calling the hairdresser for an appointment — YouTube. Geoff White tweets about the "Dr Negrin" audio message. — Twitter. Priest in Italy live streams mass, activates filters by mistake — Reddit. Beware of ‘ZoomBombing:’ screensharing filth to video calls — TechCrunch. ‘Zoombombing’: When Video Conferences Go Wrong — The New York Times. How to prevent your Zoom meetings being Zoom-bombed (gate-crashed) by trolls — ZDNet. Students Are Targeting Zoom and Classroom With Bad Reviews To End Homework During Coronavirus Outbreak — Newsweek. MS-DOS Games you can play in your browser — The Internet Archive. Humbug by Graham Cluley — The Internet Archive. A New Map of Wonders: A Journey in Search of Modern Marvels — Amazon.com. Revolution [8 Bit Tribute to The Beatles] — YouTube. 8 Bit Universe — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Mar 18, 2020 · 47 min

    PornHub, Coronavirus apps, and remote working

    It's a self-isolated Coronavirus special as we discuss with our quarantined special guest how COVID-19 is making itself felt in the world of cybersecurity, and we offer tips on how to better protect yourself if you're unexpectedly working from home. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Malicious Life's Ran Levi from his attic. Visit https://www.smashingsecurity.com/170 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Ran Levi. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. DomainTools: DomainTools helps security analysts turn threat data into threat intelligence. Its solutions give organizations the ability to use and create a forensic map of criminal activity, assess threats and prevent future attacks. Learn more about their products at domaintools.com, or visit domaintools.com/smashing to enter their Capture The Flag competition and be in with a chance to win a $100 gift card. Support Smashing Security Links: CovidLock: Mobile Coronavirus Tracking App Coughs Up Ransomware — DomainTools. CovidLock Update: Deeper Analysis of Coronavirus Android Ransomware — DomainTools. Israel to use anti-terror tech to counter coronavirus 'invisible enemy' — Reuters. Coronavirus: Sophie Trudeau had event with Idris Elba, Lewis Hamilton — Business Insider. Porn Sets Asked to Stop Production to Help Slow the Spread of Coronavirus — VICE. People who work from home earn more than those who commute—here's why — CNBC. Twitter orders all employees worldwide to work from home — The Verge. NASA chief urges space agency employees work from home amid coronavirus outbreak — Space. JPMorgan tells employees around the world to work from home — CNBC. Pornhub handing out free premium subs to help Italy fight coronavirus — The Next Web. Tweet from ProtonVPN. PornHub Insights. Coronavirus insights — PornHub Insights. A global map of wind, weather, and ocean conditions. Cold podcast — Wondery. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Mar 11, 2020 · 51 min

    Burglaries, breaches, and bidets

    How one guy's exercise routine made him a burglary suspect, how multi-factor authentication can cause headaches as well as stop hacks, and how Virgin Media got itself in a pickle over its sloppy data security. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/169 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Leave Smashing Security a voicemail! Google tracked his bike ride past a burglarized home. That made him a suspect. — NBC News. Smashing Security episode 144: "Google helps the FBI, Twitter Jack’s hijack, and car data woes." Breaking Password Dependencies: Challenges in the Final Mile at Microsoft — YouTube. FYI: When Virgin Media said it leaked 'limited contact info', it meant p0rno filter requests, IP addresses, IMEIs as well as names, addresses and more — The Register. Data Breach Information FAQ — Virgin Media. Virgin Media Disclosure Statement — TurgenSec. Virgin Media breach 'linked customers to porn' — BBC News. Ultimate Chicken Horse — Clever Endeavour Games. Ultimate Chicken Horse - Trailer - Nintendo Switch — YouTube. Coronavirus prevention: 10 songs for hand washing — Los Angeles Times. New currency circulation in Australia — Reddit. Lisa Forte reports on loo roll stocks in the Abu Dhabi Waitrose — Twitter. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Mar 4, 2020 · 52 min

    The Bitcoin fraud factory

    Fraudsters steal millions from those hoping to jump on the Bitcoin bandwagon, Twitter verifies a fake US politician, and it's another face palm for facial recognition. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/168 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. DomainTools: DomainTools turns threat data into threat intelligence, giving organizations the ability to use and create a forensic map of criminal activity, assess threats and prevent future attacks. Read a free report into how automation is changing IT security, and specifically the staffing of IT departments. Support Smashing Security Links: Inside the Kiev fraud factory stealing senior citizens’ savings — Dagens Nyheter. Revealed: fake 'traders' allegedly prey on victims in global investment scam — The Guardian. Inside the Kiev Bitcoin fraud factory — YouTube. A high school student created a fake 2020 candidate. Twitter verified it — CNN. Verified account FAQs — Twitter. London's Dazzle Club uses makeup to protest police use of facial recognition technology — WKSU. CV Dazzle: Camouflage from Face Detection. Clearview AI's Facial Recognition Tech Is Being Used By The Justice Department, ICE, And The FBI — BuzzFeed. Amazon Dating: The Future of Dating — Not the real Amazon. Carole's ideal date — Amazon Dating. My Word! — BBC. My Word recording from early 1960s — YouTube. Solve podcast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 26, 2020 · 56 min

    Coronavirus scams and an exaggerated lion

    Scammers from Africa are preying on US businesses, a drug dealer makes a mistake when hiding his Bitcoin fortune, and the Coronavirus pandemic is causing scams to soar and raising questions about facial recognition. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Anna Brading. Visit https://www.smashingsecurity.com/167 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Anna Brading. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Business Email Compromise (BEC) and G Suite: How the Exaggerated Lion Cybercrime Group Cashes Out — Agari. A weed dealer’s $59M lesson: Don’t hide Bitcoin keys with a fishing rod — Ars Technica. Chance encounter with gardaí unmasked bitcoin millionaire drug dealer — Irish Times. Man who ‘threw away’ bitcoin haul now worth over $80m wants to dig up landfill site — The Independent. Novel Coronavirus Update — RSA Conference. The Coronavirus Is Swiftly Breaching Defenses Across The World — Peak Prosperity. Scores of Hongkongers hit by mask scam on Facebook, hundreds more could be fraud victims since coronavirus outbreak — South China Morning Post. How Big of a Scam Are 'Coronavirus Protection Kits?' — Vice. Wearing a mask won’t stop facial recognition anymore — Abacus News. Coronavirus phishing scam targets victims with false information — Business Insider. This Cat Does Not Exist. These Cats Do Not Exist. Intelligence — Sky. This Country — BBC Three. Farkle — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 19, 2020 · 42 min

    What the Dickens! Ad ban thank you scam

    How to stop dick pics on Twitter, and a new way bad guys are extorting money from websites earning cash from Google ads. All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/166 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. DomainTools: DomainTools turns threat data into threat intelligence, giving organizations the ability to use and create a forensic map of criminal activity, assess threats and prevent future attacks. Read a free report into how automation is changing IT security, and specifically the staffing of IT departments. Support Smashing Security Links: Tweet from Kelsey Bressler. safeDM – Making the Internet Safer. @showYoDiq — Twitter. This Dick Pic Filter For Your Inbox Does Block Most Pictures Of Dicks, And Some Dick-Like Things — Buzzfeed. Smashing Security 034: The pen is mightier than the password — With special guest David McClelland. Pay Up, Or We’ll Make Google Ban Your Ads — Krebs on Security. The Personal History of David Copperfield (Trailer) — YouTube. The Personal History of David Copperfield — Wikipedia. Hunted — Endeavor Audio. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 12, 2020 · 48 min

    Cheapfakes, deepfakes, and Ashley Madison

    Wi-Fi hopping malware, the return of Ashley Madison extortion scams, and should social media be doing anything about cheapfakes? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker. Visit https://www.smashingsecurity.com/165 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Jessica Barker. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Smashing Security #162: Robocalls, health hacks, and facial recognition fears — Carole talks about the activities of Clearview AI. ‎The Daily: The End of Privacy as We Know It? — Apple Podcasts. Emotet Malware Advisory — US Department of Homeland Security. Emotet Wishes You a Merry Christmas from Greta Thunberg — Proofpoint. Coronavirus - hackers exploit fear of infection to spread malware — Graham Cluley. Emotet evolves with new Wi-Fi spreader — Binary Defense. Dear Ashley Madison user, I know everything about you. Pay up or else — Ars Technica. Here's what an Ashley Madison blackmail letter looks like — Graham Cluley. Nancy Pelosi rips up Trump's speech after divisive State of the Union address — The Guardian. Tweet by Dan Scavino Jr. Video of Pelosi brings renewed attention to 'cheapfakes' — AP News. Tool to Help Journalists Spot Doctored Images Is Unveiled by Jigsaw — The New York Times. Smashing Security #143: Hacking from outer space, Ukrainian cryptomining, and deepfaked Canadians. First survey of its kind for 50 years finds most Americans still think they have above average intelligence — Research Digest. Grumpy Website. The Courage to Be Disliked: The Japanese Phenomenon That Shows You How to Change Your Life and Achieve Real Happiness — Amazon. Sophie's World: A Novel About the History of Philosophy — Amazon.com. Fake Heiress – The woman who scammed New York — BBC Radio Four. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 5, 2020 · 34 min

    A bitter pill to swallow

    A gallery is tricked into giving millions to a fraudster, software tells doctors to push opioids onto patients, and an artist finds a novel way to trick Google Maps into thinking there's a traffic jam. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who ended up recording without a guest this week. Visit https://www.smashingsecurity.com/164 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Fraudsters Posing as Art Dealer Got Gallery to Pay Millions — Bloomberg. ‘Hampstead Heath, Harrow in the Distance’, John Constable, David Lucas, published 1855 — Tate. Electronic Health Records Vendor to Pay $145 Million to Resolve Criminal and Civil Investigations — Department of Justice. In secret deal with drugmaker, health-records tool pushed opioids — Los Angeles Times. Practice Management Software — Practice Fusion. Opioid epidemic in the United States — Wikipedia. Exclusive: OxyContin maker Purdue is 'Pharma Co X' in U.S. opioid kickback probe - sources — Reuters. Smashing Security 122: The big fat con at Office Depot. Google Maps hacks — Simon Weckert. Google Maps Hacks by Simon Weckert — YouTube. Telling Lies launch trailer — YouTube. ‎Telling Lies — iOS App Store. Telling Lies — Steam. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 29, 2020 · 58 min

    Russian heists and Ring wrongs

    Should possessing malware be illegal in itself? How did a Russian cryptocurrency exchange millionaire lose his fortune? And what on earth are Amazon Ring doorbell cams up to now? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Lisa Forte. And don't miss our special featured interview with Adrian Sanabria, all about Thinkst Canary. Visit https://www.smashingsecurity.com/163 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Adrian Sanabria and Lisa Forte. Sponsored By: Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents... Listeners who mail in referencing Smashing Security get a 10% discount on their order! LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Senate Bill 30 (PDF) Maryland: Make malware possession a crime! Yes, yes, researchers get a free pass — The Register. The City Of Baltimore Blew Off A $76,000 Ransomware Demand Only To Find Out A Bunch Of Its Data Had Never Been Backed Up — Techdirt. Smashing Security 151: Frankly, sometimes paying the ransom is a good idea. Maryland Computer Crimes Laws — FindLaw. Maryland Cookies TV advert — YouTube. Hunting the missing millions from collapsed cryptocurrency — BBC News. Inside the hellish workday of an Amazon warehouse employee — New York Post. Ring Doorbell App Packed with Third-Party Trackers — Electronic Frontier Foundation. Nicholas Parsons: 'Broadcasting legend' dies at 96 after short illness — BBC News. Just a Minute — Wikipedia. Nicholas Parsons interviewed by Richard Herring — YouTube. Her Story - A Video Game About a Woman Talking to the Police. Her Story trailer — YouTube. Her Story follow-up takes place on a stolen NSA hard drive — Polygon. Bezos learns the harsh lesson of texting a crown prince fond of crucifixions — Marina Hyde, writing in The Guardian. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 22, 2020 · 52 min

    Robocalls, health hacks, and facial recognition fears

    A hospital gets hacked because of an ex-employee's grudge, robocalls are on the rise, and we share a scary story about the future of facial recognition. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Michael Hucks. Visit https://www.smashingsecurity.com/162 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Michael Hucks. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. DomainTools: DomainTools helps security analysts turn threat data into threat intelligence. Its solutions give organizations the ability to use and create a forensic map of criminal activity, assess threats and prevent future attacks. Learn more about their products at domaintools.com, or visit domaintools.com/smashing to enter their Capture The Flag competition and be in with a chance to win a $100 gift card. Support Smashing Security Links: YOU Season 2 Trailer — YouTube. Hospital administrator sacked for using NHS computer to download over 10,000 records is spared jail — Daily Mail. Robocalls: Americans got 58.5 billion in 2019, up 22% from last year — USA Today. Microsoft and Google just can't agree on proposed ban on facial recognition — ZDNet. Clearview - Technology to help solve the hardest crimes. The Secretive Company That Might End Privacy as We Know It — New York Times. Clearview FAQ (PDF). Episode review: Columbo Double Shock — Graham got it wrong. It was Martin Landau, not Leonard Nimoy, who played the twins. And they weren't surgeons (but Nimoy did play an evil surgeon in a different Columbo episode that season) Eunoia: Words that Don't Translate. Dog wagging her tail every time she sees her owner — YouTube. She Said: Breaking the Sexual Harassment Story That Helped Ignite a Movement — Amazon.com. Harvey Weinstein Paid Off Sexual Harassment Accusers for Decades — New York Times. ‘She Said’ Recounts How Two Times Reporters Broke the Harvey Weinstein Story — New York Times. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 15, 2020 · 42 min

    Love, lucky dips, and 23andMe

    The man who hacked the UK National Lottery didn't end up a winner, Japanese Love hotel booking tool suffers a data breach, and just what is 23andMe planning to do with your DNA? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford. Visit https://www.smashingsecurity.com/161 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Thom Langford. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Cyber criminal jailed over National Lottery hack — National Crime Agency. Man who hacked National Lottery for just £5 is jailed for nine months — Hot for Security. Booking data stolen from Japanese short-time love hotel booking service HappyHotel — SiliconANGLE. 23andMe Licenses Drug Compound to Spanish Drugmaker Almirall — Bloomberg. Big Data and the End of Painful, Invasive Medical Procedures — Wired. How 23andMe Won Back the Right to Foretell Your Diseases — Wired. Privacy policy — 23andMe. Turbo Boost Switcher for macOS. Embarrassed patients can now send photos of genitals to doc for STI checks — The Sun. Messiah trailer — YouTube. Messiah — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 8, 2020 · 53 min

    SNAFUs! MS Word, Amazon Ring, and TikTok

    We discuss how Microsoft Word helped trap a multi-million dollar fraudster, how Amazon Ring may be recording more than you're comfortable with, and how teens are flocking to TikTok (and why that might be a problem). All this and much much more is covered in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/160 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Senior Manager Of Global Internet Company Pleads Guilty To Wire Fraud — Department of Justice. IT exec sets up fake biz, uses it to bill his bosses $6m for phantom gear, gets caught by Microsoft Word metadata — The Register. We Tested Ring’s Security. It’s Awful — Motherboard. Amazon Ring isn’t even good at pretending to care about your privacy and safety — Fight for the Future Amazon’s Ring to let customers opt out of receiving police video requests — GeekWire. Letter to Amazon's Jeff Bezos from Senator Ron Wyden and others (PDF). House panel asks Apple, Google if app makers must reveal foreign ties — Engadget. U.S. Military Bans TikTok Over Ties to China — Wall Street Journal. The Growing Popularity of Chinese Social Media Outside China Poses New Risks in the West — PIIE. TikTok Privacy Policy. Statement on TikTok's content moderation and data security practices — TikTok. Revealed: how TikTok censors videos that do not please Beijing — The Guardian. Parents warned to check kids' phones for 15 popular apps used by paedos and bullies to target youngsters — The Sun. Dracula — BBC iPlayer. Dracula — Netflix. Obsessed With... - Dracula - Episode 1: The Rules of the Beast feat. Mark Gatiss and Steven Moffat — BBC Sounds. Dracula TV series — Wikipedia. The Witcher — Netflix. The Witcher Soundtrack - Toss A Coin To Your Witcher Lyrics — YouTube. Ricky Gervais 2020 Golden Globe Monologue — Reddit. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy