Smashing Security

157: A biometric knuckle duster

December 5th, 2019  |  1 hr 5 mins

biometrics, disney+, fingerprint, hacking, kaspersky, nordvpn, vpn

What is Kaspersky's ugly ring for? Is there something suspicious about how NordVPN lets you stream Disney+? And why did a hacker impersonate a music producer?

Plus we have a bonus feature interview with Rachael Stockton from Logmein, the folks behind LastPass, all about behavioral biometrics!

156: Better safe than Sony

November 27th, 2019  |  22 mins 31 secs

data breach, hacking, north korea, sony, the interview

In this clip from a special bonus episode produced for our Patreon supporters, Graham Cluley and Carole Theriault discuss the 2014 hack of Sony Pictures - reportedly carried out by North Korea for the very oddest of reasons...

155: Juice jacking, YouTube hacking, password slacking

November 21st, 2019  |  50 mins 38 secs

aberfan, banking, dolly parton, juice jacking, malware, password, privacy, the crown, usb, youtube

A bank has some of the worst password advice ever, travellers are told to be wary when USB charging their smartphones and laptops, and a gamer has his YouTube account hacked.

154: A buttock of biometrics

November 14th, 2019  |  50 mins 2 secs

apple, credit card, ddos, fitness, google, health data, labour, monopoly

The UK's Labour Party kicks off its election campaign with claims that it has suffered a sophisticated cyber-attack, Apple's credit card is accused of being sexist, and what is Google up to with Project Nightingale?

153: Cybercrime doesn’t pay (but Uber does)

November 7th, 2019  |  49 mins 50 secs

blackmail, cctv, data breach, insider trading, iot, ransomware, uber, washington dc

The cybercrime lovebirds who hijacked Washington DC's CCTV cameras in the run-up to Donald Trump's inauguration, the truffle-snuffling bankers at the centre of an insider-trading scandal, and the hackers that Uber paid hush money to hide a security breach.

152: Cats, hoodies, and rent

October 31st, 2019  |  54 mins 22 secs

art, cats, dogs, edward snowden, hoodies, iot, pet feeders, rent, vulnerability

What's the problem with IoT-enabled pet feeders? Can hacking ever be illustrated without a hoodie? And just how are landlords using smart home technology to snoop upon their residents?

151: Frankly, sometimes paying the ransom is a good idea

October 24th, 2019  |  55 mins 49 secs

alexa, amazon, backups, baltimore, digital assistants, google, google home, passwords, phishing, privacy, ransomware, smart speakers

Remember how the City of Baltimore was badly hit by ransomware earlier this year? Turns out that wasn't the end of their problems. Also, Carole takes a look at how smart speakers can be hacked to trick you into giving criminals your passwords or even credit card details. And we discuss the findings of the LastPass global password security report.

150: Liverpool WAGs, Facebook politics, and a selfie stalker

October 17th, 2019  |  51 mins 22 secs

elizabeth warren, facebook, football, instagram, liverpool, privacy, selfie, stalker

Footballers' wives go to war over Instagram leaks, it turns out fake news is fine on Facebook (just so long as it's in a political ad), and things take a horrific turn in Japan, as a stalker uses a scary technique to find out where his pop idol lives.

149: Falling in love with fraudsters

October 10th, 2019  |  46 mins 24 secs

dating, gps, hacking, insider threat, mafia, tracking, yahoo

We take a trip to Staten Island, New York, to hear how a case of cyberstalking resulted in the arrest of 20 alleged mobsters, learn about the nude photo-loving insider threat at Yahoo, and discover how fraudsters might be boosting Match.com's profits.

148: Billboard boobs, face forensics, and Alexa gets way too personal

October 3rd, 2019  |  50 mins 23 secs

alexa, amazon, billboard, deepfake, hacking, porn, privacy

Drivers are distracted by a hacked billboard, Maria takes a deeper look at how the deepfake problem has... uh... deepened, and Carole is less than happy about Amazon's announcement about new Alexa integrations.

147: Don't Snapchat and drive

September 26th, 2019  |  49 mins 59 secs

data breach, driving, milton keynes, mobile, privacy, recruitment, skills gap

How is private medical data leaking onto the streets of Milton Keynes, what is widening the cybersecurity skills gap, and how is Australia controversially tackling the problem of drivers using their mobile phones?

146: Password secrets and baking brownies

September 19th, 2019  |  38 mins 56 secs

password

In the latest edition of the "Smashing Security" podcast, hosted by computer security veterans Graham Cluley and Carole Theriault, Carole has suffered an injury, we journey back in time to one of our earliest episodes to discuss the perils of passwords, and Rachael Stockton from LastPass drops by for a chat.

145: Apple and Google willy wave while home assistants spy - DoH!

September 12th, 2019  |  44 mins 21 secs

alexa, android, apple, dns, doh, google, home assistant, https, ios, malware, nintendo wii, siri

Apple is furious with Google over iPhone hacking attacks against Uyghur Muslims in China, DNS-over-HTTPS is good for privacy but makes ISPs angry, and concern over digital assistants listening to our private moments continues to rise.

144: Google helps the FBI, Twitter Jack’s hijack, and car data woes

September 5th, 2019  |  51 mins 34 secs

android, car, doctor who, fbi, google, jack dorsey, location services, privacy, terrance dicks, twitter

Should Google really be helping the FBI with a bank robbery? What's the story behind the Twitter CEO claiming there's a bomb in their offices? And how much does your car really know about you?

And we mourn the loss of Doctor Who legend Terrance Dicks...

143: Hacking from outer space, Ukrainian cryptomining, and deepfaked Canadians

August 29th, 2019  |  43 mins 34 secs

astronaut, cryptomining, deepfake, jordan peterson, nasa, online banking, power plant, space, ukraine

Was a cybercrime committed on the International Space Station? What on earth were Ukrainian scientists thinking when they plugged a nuclear power station into the internet? And someone has cloned Canadian clinical psychologist Jordan Peterson's voice...

142: Mercedes secret sensors, smart cities, and ransomware runs riot

August 22nd, 2019  |  49 mins 30 secs

car, facebook, malware, mercedes, privacy, ransomware, smart cities, tracking

Darknet Diaries host Jack Rhysider joins us to discuss how cities in Texas are being hit by a wave of ransomware, how Mercedes Benz has installed a tracker in your car (but not for the reason you think), the security threats impacting smart cities, and a new feature coming to your Facebook app.