Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Subscribe Listen in podnod RSS feed Show website

480 episodes
Updated Wednesday

Episodes480

Newest first

May 23, 2018 · 51 min
079: Mugshots, mobile mania, and backend gurus
A website which demands money if you want your police mugshot removed, could "sharenting" lead to a rise in fraud and identity theft, and how could the FBI have overcounted encrypted phones so badly? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Vote for Smashing Security! Smashing Security LIVE on Tour! Court documents about Mugshots.com case All of Mugshots.com’s alleged co-owners arrested on extortion charges 'Sharenting' puts young at risk of online fraud Parents ‘oversharing’ family photos online, but lack basic privacy know-how FBI Admits It Inflated Number of Supposedly Unhackable Devices Donald Trump's smartphone security: an inconvenient truth Apple Wants to Make Totally Unhackable iPhones A Very English Scandal (TV series) Jeremy Thorpe affair - Wikipedia Moment – Automatically track your and your family's daily iPhone and iPad use Percentage Calculator Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 16, 2018 · 43 min
078: Hounds hunt hackers, too-human Google AI, and ethnic recognition tech - WTF?
Dogs are trained to sniff out hackers' hard drives, facial recognition takes an ugly turn, and do you trust Google to book your hair appointment? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by investigative journalist Geoff White. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Geoff White. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Vote for Smashing Security in the European Security Blogger Awards! See Smashing Security LIVE! K-9 Helps Concord Cops Nab Student Hacker Who Upped Grades Ferris Bueller's Day Off - hacking the computer -YouTube Police Use Dog To Find Memory And Hard Drives In Search Dog Can Sniff Out Hidden Cellphones, Thumb Drives and More Facial Recognition and “ethnicity” Facial scans to identify bad Elvises at Porthcawl festival Masked Anonymous Protesters Aid Time Warner’s Profits Google Duplex: A.I. Assistant Calls Local Businesses To Make Appointments - YouTube New Siri update - EXCLUSIVE PREVIEW - YouTube Will Robots Take My Job? Algorithms to Live By: The Computer Science of Human Decisions Signal Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 9, 2018 · 39 min
077: Why Paris Hilton doesn’t use iCloud, lottery hacking, and Facebook dating
The tricky-to-pronounce Paytsar Bkhchadzhyan is jailed for hacking Paris Hilton, we hear the story of the man who hacked the lottery and almost got away with $16.5 million, and Facebook thinks it is the perfect partner to find you a date. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by the CyberWire's Dave Bittner. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Dave Bittner. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Paris Hilton's hacker sentenced to 57 months in prison FBI wasn't able to unlock iPhone, even with a 'fingerprint unlock warrant' Paris Hilton Comes Face to Face With Her Hacker in Court - YouTube Tweet by Paris Hilton: "Karma has no menu. You get served what you deserve..." Paris Hilton: Hacked or Not? Two-factor authentication for Apple ID - Apple Support The Man Who Cracked the Lottery Lottery security director accused of hacking random-number generator Iowa Lottery releases surveillance footage of mystery Hot Lotto winner - YouTube Facebook announces dating app focused on 'meaningful relationships' Facebook F8 2018: Facebook is launching a new dating service How will Facebook’s dating service work? 14 years of Mark Zuckerberg saying sorry, not sorry about Facebook Does the Dog Die? Kingdom Rush Sandra Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 2, 2018 · 44 min
076: Spying phones, hacked ski lifts, and World Password Day
Cheap Android smartphones sold on Amazon have been sending customers' full text messages to a Chinese server, ski lifts are found to be the latest devices left open to abuse by hackers, and we remind you why password managers are a good idea on World Password Day. Oh, and our guest serenades us with a hit from the 1980s! All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by journalist and broadcaster David McClelland. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: David McClelland. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: See Smashing Security LIVE! Mobile Phone Maker BLU Reaches Settlement with FTC over Deceptive Privacy and Data Security Claims Phone maker settles charges it let partner collect customers’ text messages Backdoor in some Android phones caught secretly sending data to China UK bank advises against password managers - Twitter Santander Locks Horns with Security Pros, NCSC Over Password Managers Passwords - a Smashing Security splinter episode Terrifying Ski Lift Malfunction Caught On Camera - YouTube Ski Lift in Austria Left Control Panel Open on the Internet Control of Tyrolean cable car open in the network accessible BBC Sound Effects Chess - English National Opera Murray Head - One Night In Bangkok "From CHESS" - YouTube Elaine Paige, Barbara Dickson - I Know Him So Well "From CHESS" - YouTube World Community Grid - Research Overview Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 25, 2018 · 28 min
075: Quitting Facebook
Should you quit Facebook? How do you delete your Facebook account? What do you need to consider before leaving Facebook for good? And what's the easiest way to successfully go cold turkey on Facebook? Find out in this special splinter episode of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: How do I download a copy of my information on Facebook? Facebook retracted Zuckerberg’s messages from recipients’ inboxes How do I turn off Facebook's integration with apps, games and websites? How to use "Turn Platform Off" on Facebook for privacy How do I deactivate my Facebook account? How to deactivate Facebook Messenger Ask Facebook to delete your account Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 18, 2018 · 48 min
074: Smashing Security isn't bullsh*t
Crime forums on Facebook, fraudsters pose as anti-fraud hotlines, and how big advertising companies are in bed with the rampant data collection of internet giants. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest B J Mendelson, author of "Social media is bullsh*t." Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: B J Mendelson. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Oh look "security expert" Rudy Giuliani shows you how to do a special "dark web scan", courtesy of Experian... Nobody seems to know what Rudy Giuliani's cybersecurity firm actually does Deleted Facebook Cybercrime Groups Had 300,000 Members How to Report Abuse on Facebook Martin Sorrell Resigns as Chief of WPP Advertising Agency Airbnb co-founder Nathan Blecharczyk spam pioneer says book An Apology for the Internet — From the People Who Built It Automated Action Fraud Tech Support scam calls Crime in England and Wales from Office for National Statistics TuneIn Santa Clarita Diet on Netflix Devolo dLAN® 550 WiFi Starter Kit - Powerline WiFi Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 11, 2018 · 39 min
073: Rick Astley: Never gonna hack you up...
Politician admits to hacking a rival's website, T-Mobile Austria ends up in a Twitter security storm, and siren systems are hit by a Rick Astley attack. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Spoof blogger attacks Harman site Harman hack horror has blog backing Boris Harriet Harman resigns! Boris Johnson left hanging on zip wire during Olympic event How to Hack Harriet Harman Top Conservative MP tipped as a future Prime Minister admits hacking into Labour MP's website Bafflement over Tory MP's admission she hacked Harriet Harman's website Harriet Harman accepts Tory MP Kemi Badenoch's hacking apology The lax computer security of British MPs - as detailed in their own tweets T-Mobile Austria thread on Twitter T-Mobile Stores Part of Customers' Passwords In Plaintext, Says It Has 'Amazingly Good' Security SirenJack Emergency alert systems used across the US can be easily hijacked Researchers Rickrolled Emergency Alert Sirens in Proof-of-Concept Hack Bertram Fiddle - A Victorian point and click adventure game Adventures of Bertram Fiddle: Episode 1 for iOS Adventures of Bertram Fiddle: Episode 1 for Android Adventures of Bertram Fiddle: Episode 1 on Steam security.txt - A proposed standard which allows websites to define security policies Wild Wild Country HROOME Modern Cute Dog Lamp Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 4, 2018 · 33 min
072: Why are firms so cr*p with our private data?
Grindr, MyFitnessPal, and Panera Bread. They've all had data breach scares of varying degrees this week. Some handled the security breaches well, some didn't. We took a look at how well different firms are respecting your data privacy. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who don't have a special guest this week. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Grindr Is Letting Other Companies See User HIV Status And Location Data Grindr Will Now Remind You To Get Tested For HIV Grindr to stop sharing HIV status with third parties Hackers steal data of 150 million MyFitnessPal app users MyFitnessPal Security Issue FAQ Smashing Security: Passwords - a Smashing Security splinter Panerabread.com Leaks Millions of Customer Records No, Panera Bread Doesn’t Take Security Seriously Don't blame Panera Bread's security guy just because he used to work at Equifax Viking seafarers may have navigated with legendary crystals BBC Fooled By Brexit Emoji April Fools Prank On Air Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 28, 2018 · 41 min
071: Pony-tailed pundit ponders privacy problems - with Mikko Hyppönen
Endangering your friends online, the fibs told by VPN vendors, developments from the world of cryptomining, and Carole shares an animated GIF with Mikko and Graham. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen from F-Secure. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Mikko Hyppönen. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Mikko's adventure game "Paha Juttu" at the Finnish Game Museum Download the Paha Juttu Commodore 64 floppy image file (d64) Commodore 64 online emulator (load a d64 file into this) Mat Johnson's tweet about Facebook logging his phone calls and texts Fact Check: Your Call and SMS History Who and What Is Coinhive? 100+ VPNs & Their Logging Policy (What Logs Are Kept by Who?) Which VPN Services Keep You Anonymous in 2018? ‘Lone DNC Hacker’ Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer HideMyAss defends role in LulzSec hack arrest TLDRLegal - Software Licenses Explained in Plain English Some Very Entertaining Plastic, Emulated at the Archive Handheld History This is what the Internet Archive's building looks like CERT-EU News Monitor You've never seen anyone climb a wall like this before... Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 21, 2018 · 40 min
070: Facebook and Cambridge Diabolica
It’s not fair to describe what happened at Facebook and Cambridge Analytica as a data breach - it’s much worse than that. An autonomous Uber vehicle kills a pedestrian. And sextortion continues to be a serious problem. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by researcher Scott Helme. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Scott Helme. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach Revealed: Trump’s election consultants filmed saying they use bribes and sex workers to entrap politicians Cambridge Analytica's grab of 50 million Facebook users' data Cambridge Analytica controversy: Was there a Facebook data breach? Martijn Grooten's GDPR joke How To Change Your Facebook Settings To Opt Out of Platform API Sharing Uber Halts Autonomous Car Tests After Fatal Crash in Arizona Warning from police: scammers solicit nude photos for blackmail Warning 'sextortion' on the rise as models used in online blackmail scams West Australians targeted on social media in ‘sextortion’ scam StartPage Web Search Introducing Cloudflare Workers The brand new Security Headers Cloudflare Worker PGN Piano on YouTube Move Forward Guitar on YouTube Fretjam on YouTube Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 14, 2018 · 42 min
069: Cryptomining, China, and Bob Ross
How come Apple's Mac App Store authorised a buggy app that mined for cryptocurrency in the background? How can a Mosquito attack steal data from an air-gapped computer? And is China keeping score on its social media-loving citizens? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest John Hawes. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: John Hawes. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: There’s a currency miner in the Mac App Store, and Apple seems OK with it A Surreptitious Cryptocurrency Miner in the Mac App Store? MOSQUITO Attack Allows Air-Gapped Computers to Covertly Exchange Data MOSQUITO earbuds: Jumping air-gaps via speaker-to-speaker communication - YouTube Would you choose a partner based on their 'citizen score'? China eyes 'black tech' to boost security as parliament meets Big data meets Big Brother as China moves to rate its citizens How WeChat came to rule China The Rubik's Contraption 0.38 Second Rubik's Cube Solve - YouTube Statista - The Statistics Portal for Market Data, Market Research and Market Studies Bob Ross - Wikipedia Is there a way to stop certain video suggestions on Youtube? I watched like 3 flat earth videos so I could have a good laugh, and now 90% of the recommended videos are from flattards Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 7, 2018 · 44 min
068: Malware from outer space!
If aliens did contact us would it be safe to open the email? Why would MoviePass track film lovers after they leave the cinema? Would you know how to get around Malaysia when your car rental website lets you down? And will Graham please stop talking about text adventure games? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by journalist (and possible spy) James Thomson. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: James Thomson. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Eurozine discusses disinformation and democracy Malware from Space Interstellar communication. IX. Message contamination is impossible (PDF) MoviePass CEO proudly says the app tracks your location before and after movies CEO Mitch Lowe Says MoviePass Will Reach 5 Million Subs by End of Year MoviePass Privacy Policy GET LAMP: The text adventure documentary Leather Goddesses of Phobos GET LAMP: The Text Adventure Documentary - YouTube Infocom: The Documentary - YouTube Jacaranda Jim - retro text adventure game by Graham Humbug - retro text adventure game for MS-DOS by Graham Warrington Cycle Campaign Cycle Facility of the Month July 2017 #WeThePeople LIVE podcast Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 1, 2018 · 35 min
067: Cyber stalking and gun control
Incognito mode on your browser not as private as you think, consumer spyware companies get hacked, Graham is accused of "multitasking" in his hotel room, and Carole champions the students of Parkland, Florida. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who recorded without a special guest this week. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: How to go 'Incognito' on your web browser, and what it means Your private browsing isn’t as incognito as you want it to be Veil is private browsing for the ultra-paranoid Hacker Strikes ‘Stalkerware’ Companies, Stealing Alleged Texts and GPS Locations of Customers Spy on Your Valentine Using Spy Software How stalking has been made easier by the internet and social networks Trailer Nite Florida student to NRA and Trump: 'We call BS' - YouTube March for our lives Emma González on Twitter Florida Student Who Gave Emotional Gun Control Speech Now Has More Followers Than NRA Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Feb 21, 2018 · 39 min
066: Passwords, pirates, and postcards
Flight simulators packed with password-grabbing malware, Facebook fighting Russian trolls, and how vulnerability researchers fear being sued. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest The CyberWire's Dave Bittner. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Dave Bittner. Sponsored By: Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: FSLabs' A320 installer seems to include a Chrome password extraction tool Flight Simulator Add-On Tried to Catch Pirates By Installing Password-Stealing Malware on Their Computers A320-X DRM clarification - Flight Sim Labs Forums FlightSimLabs Alleged Malware Analysis – Luke Gorman A320-X DRM - what happened - Flight Sim Labs Forums Lawsuits threaten infosec research - just when we need it most Facebook plans to use U.S. mail to verify IDs of election ad buyers Facebook’s secret weapon in the fight against foreign meddling? Postcards Fact-Checking a Facebook Executive’s Comments on Russian Interference Punycode - Wikipedia IDN Safe for Chrome IDN Safe for Firefox IDN Safe for Opera Firefox users - Spot phishing URL's more easily by enabling Show Punycode Privacy.com — (Dave's recommendation, not ours) How to remove your credit card information from your iPhone Change or remove your Apple ID payment information - Apple Support Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Feb 15, 2018 · 49 min
065: Cryptominomania, Poppy, and your Amazon Alexa
Cryptomining goes nuclear, YouTube for Kids gets scary, and TV ads have been given the green light to mess with your Amazon Alexa. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr Support Smashing Security Links: Government websites hijacked by cryptomining plugin Russian nuclear scientists arrested for allegedly hijacking supercomputer to mine Bitcoins Now that's taking the p... Sewage plant 'hacked' to craft crypto-coins Salon website gives you a choice: turn off your ad blocker or let us mine cryptocurrencies Coinhive review: Embeddable JavaScript Crypto Miner - 3 days in Smashing Security 059: An intro to Bitcoin and Blockchain YouTube Kids app still showing disturbing videos Something is wrong on the internet – James Bridle Amazon Echo Dot ad cleared over cat food order Broadcast Code - ASA Sarah Huckabee Sanders warns Twitter about Amazon Echo after 2-year-old orders $80 Batman toy Cat Food (Amazon Echo Commercial) - YouTube Dinosaur Chess The Furby Organ, A Musical Instrument Made From Furbies - YouTube Wintergatan - Marble Machine (music instrument using 2000 marbles) - YouTube Poppy introduces a plant - YouTube Poppy is a disturbing internet meme seen by millions. Can she become a pop sensation? Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Feb 7, 2018 · 43 min
064: So just a "teeny tiny" security issue then?
A Namecheap vulnerability allows strangers to make subdomains for your website, Troy Hunt examines password length, and ex-Google and Facebook employees are fighting to protect kids from social media addiction. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest HaveIBeenPwned's Troy Hunt. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Troy Hunt. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr Support Smashing Security Links: Namecheap Name Server Vulnerability Allows Unauthorized Users to Create Sub-Domains That’s not how security works, security is not obscurity Update on Recent Hosting Breach - Namecheap Blog Have I been pwned? Pwned Passwords How Long is Long Enough? Minimum Password Lengths by the World's Top Sites Center for Humane Technology Adam Alter: Why our screens make us less happy Ex Facebook, Google Employees Launch Anti-Tech Campaign Social Networking Sites and Addiction: Ten Lessons Learned 'Fiction is outperforming reality': how YouTube's algorithm distorts truth AlphaGo movie In Two Moves, AlphaGo and Lee Sedol Redefined the Future Ubiquiti Networks Basic Crepe Batter Recipe Gateau de crepes Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Feb 1, 2018 · 45 min
063: Carole's back!
Fitness trackers breaching your privacy, how anyone can create convincing celebrity porn, and how ransomware authors are getting ripped off by scammers. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Maria Varmazis. Sponsored By: Chess CyberSecurity: Chess CyberSecurity is taking the pulse of the IT nation. Complete their three-minute quiz and you could win amazing prizes - including limited edition t-shirts, wireless headphones, an iPad Pro and a Sony PS4. Support Smashing Security Links: Strava's Global Heatmap Nathan Ruser tweets about Strava's global heatmap Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online Thar she blows: Strava heat map shows folk on shipwreck packed with 1,500 tonnes of bombs Advanced Deanonymization through Strava Fake celebrity porn is blowing up on Reddit, thanks to artificial intelligence Reddit User Outperforms Disney with AI-Generated Princess Leia Fake News Is About to Get Even Scarier than You Ever Dreamed Josh Turner of The Other Favorites - YouTube The Levee by The Other Favorites - YouTube Blood on the Tracks by Bob Dylan United denies woman's attempt to bring peacock onto flight Dexter The Peacock on Instagram Reforestation Drones Can Plant 100K Trees In An Hour Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jan 24, 2018 · 44 min
062: Tinder spying, Amazon shoplifting, and petrol pump malware
Your Tinder swipes can be spied upon, Amazon is opening high street stores that don't require any staff, and Russian fuel pumps are being infected with malware in an elaborate scheme to make large amounts of money. With Carole on a top secret special assignment, it's left to security veteran Graham Cluley to discuss all this and much much more with special guests David McClelland and Vanja Švajcer. Follow the "Smashing Security" podcast on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guests: David McClelland and Vanja Švajcer. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private. Support Smashing Security Links: Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes Tinder drift demo - YouTube Using public Wi-Fi - a Smashing Security splinter Watchdog Wednesday: WiFi hackers - BBC Apple drops requirement for apps to use HTTPS by 2017 Amazon Go debuts, and its prying cameras foil our shoplifting attempts Hacker Infects Gas Pumps with Code to Cheat Customers Making Blake's Seven 101 - YouTube Jon Alpert Speaks On His Film, "Cuba and the Cameraman" - YouTube Review: ‘Cuba and the Cameraman’ Lavishes Love on a Country … and Castro CARROT Weather on the iOS App Store Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jan 17, 2018 · 50 min
061: Fallout over Hawaii missile false alarm
User interfaces and poor procedures lead to pandemonium in Hawaii, hackers are attempting to trick victims into opening cryptocurrency-related email attachments, and yet more pox-ridden apps are found in Android's Google Play store. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul Ducklin. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Paul Ducklin. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private. Support Smashing Security Links: Hawaii's ballistic missile false alarm and a user interface failure Hawaii missile alert: How one employee ‘pushed the wrong button’ and caused a wave of panic What Hawaii Was Like After the False Nuclear Alarm Cryptocurrency as the lure, an ISO as the attachment – why not open it? Malware Displaying Porn Ads Discovered in Game Apps on Google Play Games with pornographic ads sneak into the Play Store, get 3 million downloads Fake WhatsApp app tricked over a million users @ruanyf on Twitter's picture of a visual display for a Chinese lavatory Police give out infected USBs as prizes in cybersecurity quiz IBM distributes USB malware cocktail at AusCERT security conference IBM has been shipping malware-infected USB sticks Olympus Stylus Tough camera carries malware infection Google Arts and Culture app: How to find which famous painting you look like – and why people don't want to Google Arts & Culture Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jan 10, 2018 · 40 min
060: Meltdown, Spectre, and personal devices in the White House
The chips are down, as tech companies struggle to protect against the Meltdown and Spectre flaws. The White House is getting tough on leakers by banning personal devices from the West Wing. And someone has been embedding a Bitcoin wallet into their hand... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: David McClelland. Sponsored By: CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private. Support Smashing Security Links: Apple fixes the Meltdown and Spectre flaws in Macs, iPhones, and iPads Spectre? Meltdown? F*CKWIT? Calm down and make yourself some tea Until your anti-virus adds this Registry key, you aren't getting any more Windows security updates Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you Ouch! Microsoft's Meltdown and Spectre security update bricks some AMD-powered PCs Ripple soars, becomes second-biggest cryptocurrency by market cap BICHIP Would you store Ripple and Bitcoin in 'mark of the beast' microchip? Biohacker Summit 2017 – Uniting Technology & Nature Meet the first humans to sense where north is White House bans use of personal devices from West Wing “Fire and Fury” Is a Book All Too Worthy of the President Portal Knights - The award-winning sandbox action-RPG adventure game Portal Knights trailer for Nintendo Switch - YouTube Focus - Productivity Timer on the App Store Casefile: True Crime Podcast Smashing Security on Facebook Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy