Whopper Hackers, and AI Whoppers

Whopper Hackers, and AI Whoppers

Ever wondered what would happen if Burger King left the keys to the kingdom lying around for anyone to use? Ethical hackers did - and uncovered drive-thru recordings, hard-coded passwords, and even the power to open a Whopper outlet on the moon.

Meanwhile, over in Silicon Valley, one AI wunderkind managed to turn a $7 million payday into a career-ending lawsuit by allegedly walking trade secrets straight out the door as he jumped ship for a rival.

All this and much more is discussed in episode 434 of the award-winning “Smashing Security” podcast with computer security veteran Graham Cluley, joined this week by special guest Lianne Potter. Hear them they chew over catastrophic fast-food security, insider threats with extra fries, and why even the biggest brains in AI can't stop themselves from doing something utterly stupid.


EPISODE LINKS:



SPONSORED BY:

  • Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
  • Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.
  • Vanta - Expand the scope of your security program with market-leading compliance automation... while saving time and money. Smashing Security listeners get $1000 off!


SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!


FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.


THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.


ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".



Privacy & Opt-Out: https://redcircle.com/privacy

Episoder(437)

Ransoms, scandals, and glitter bombs

Ransoms, scandals, and glitter bombs

PC manufacturer Acer might have received a $50 million ransom demand, a warning spreads on Facebook about a trick being used by hackers, and why are the City of London's police not happy about Sci Hub?All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Alex Eckelberry.Visit https://www.smashingsecurity.com/220 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Alex Eckelberry.Sponsored By:1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.Support Smashing SecurityLinks:Hackers cannot post Facebook comments on your behalf without you seeing it — AFP Fact Check.Does a Facebook Hack 'Hurt and Offend' Friends? — Snopes.Stop sending mail you later regret — Gmail blog.April Fools Check: Did Google Really Release Mail Goggles? — TechCrunch.When was blinking invented?Computer giant Acer hit by $50 million ransomware attack — Bleeping Computer.Ransomware gang says it targets firms who have cyber insurance. And what’s more, it will hack insurance firms to identify them… — Graham Cluley.Is the staggeringly profitable business of scientific publishing bad for science? — The Guardian.Police warn students and universities of accessing an illegal website to download published scientific papers — City of London Police.Meet the pirate queen making academic papers free online — The Verge.Sci-Hub: How Does it Work? — The Scholarly Kitchen.Glitterbomb Trap Catches Phone Scammer (who gets arrested) — YouTube.After Life — Netflix.The One — Netflix.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

24 Mar 202147min

Cheerleaders, dating apps, and crisis PR

Cheerleaders, dating apps, and crisis PR

How are cheerleaders being creeped out by deepfakes? What might Tinder tell potential dates about your murky past? And how should companies respond to the press when a security breach occurs?All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Yvonne Eskenzi.Visit https://www.smashingsecurity.com/219 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Yvonne Eskenzi.Sponsored By:CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael.Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more.Support Smashing SecurityLinks:Chris Farley makes an energetic entrance to the David Letterman show — YouTube.Cheer — Netflix.Bucks County woman created ‘deepfake’ videos to harass rivals on her daughter’s cheerleading squad, DA says — Philadelphia Inquirer.Cheerleader, 17, who appeared in 'deepfake' vaping video 'made by rival's mom' tells how she broke down in tears — The Sun.Oliver Reed on being deadly — YouTube.Deep Tom Cruise — TikTok.Deep Tom Cruise pretends to be a snapping turtle — TikTok.Deep Tom Cruise demonstrates his golf swing — TikTok.A Guide to Crisis Communications for Incident Response — Eskenzi PR.Tinder to introduce in-app background checks — BBC News.Garbo - A new kind of online background check.Match Group Partners with Garbo to Make Groundbreaking Background Check Technology Accessible To Users, Starting with Tinder — Press release.Notificationsounds.comBlinkist — Summaries of over 3,000 bestselling non-fiction books.Acriflex — Antiseptic burns cream.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

17 Mar 202155min

Microsoft, McAfee, and mayhem

Microsoft, McAfee, and mayhem

Is it the end of the road for John McAfee? Is PornHub more legitimate than Facebook? And do you know as much as you think you do about the Microsoft Exchange Server mega-hack?All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.Visit https://www.smashingsecurity.com/218 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Dave Bittner.Sponsored By:Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael.Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more.Support Smashing SecurityLinks:John McAfee 'disguised as Guatemalan street hawker with a limp' — The Telegraph.John McAfee Wanted for Murder — Gizmodo.John McAfee says he infected laptops with malware, spied and stole passwords from Belize officials — Naked Security.John McAfee is running for president — Graham Cluley.Good luck John McAfee, socially engineering a corpse… — Graham Cluley.How To Uninstall McAfee Antivirus — YouTube.John David McAfee And Executive Adviser Of His Cryptocurrency Team Indicted In Manhattan Federal Court For Fraud And Money Laundering Conspiracy Crimes — US Department of Justice.IsLegitSite — Check if a website is legitimate or not.Microsoft Exchange Server Market Share and Competitor Report — Datanyze.Four new hacking groups have joined an ongoing offensive against Microsoft’s email servers — MIT Technology Review.A Basic Timeline of the Exchange Mass-Hack — Krebs on Security.New nation-state cyberattacks — Microsoft.The Kilobyte’s Gambit — A 1k chess game.The Repair Shop — Netflix.The Repair Shop — BBC One.Sideways — BBC Radio 4.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

10 Mar 202149min

Would you cuddle this revolting robot? - with Robert Llewellyn

Would you cuddle this revolting robot? - with Robert Llewellyn

Actor, presenter and writer Robert Llewellyn, famous for playing the part of Kryten in the science-fiction comedy "Red Dwarf," joins us as we discuss robots gone rogue, electric vehicle nightmares, and creepy companions.All this and much much more can be found in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Robert Llewellyn - famous for "Fully Charged," "Scrapheap Challenge," and as Kryten on "Red Dwarf."Visit https://www.smashingsecurity.com/217 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Robert Llewellyn.Sponsored By:1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it. Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household.For more details visit www.1password.com/switch50Support Smashing SecurityLinks:'Drunk' robot vacuums spark complaints from owners — BBC News.Roomba S9+ weird behaviour on version 3.10.8 — Reddit.Time lapse video of i7+ attempting to return to clean base after 3.12.8 update — Reddit.Robot vacuum cleaners can eavesdrop on your conversations, researchers reveal — Bitdefender BOX blog.The Hidden Cyber Risks of Electric Vehicles — Upstream.Mindfulness, laughter and robot dogs may relieve lockdown loneliness – study — The Guardian.Charlie — YouTube.Aibo — YouTube.Lovot — YouTube.Petit Qoobo — YouTube.Flatcat — YouTube.For All Mankind trailer — YouTube.For All Mankind — Apple TV."Diary of an MP's Wife: Inside and Outside Power" by Sasha Swire. — Amazon."I Care A Lot" trailer — YouTube.I Care A Lot — IMDB.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

3 Mar 202154min

Playboy, prison, and digital ploys - with Garry Kasparov

Playboy, prison, and digital ploys - with Garry Kasparov

World-chess-champion-turned-activist Garry Kasparov returns to the show as we discuss a romance scammer with plenty of time on his hands, the surge in sextortion, and how social media is being swamped with claims of fake snow.All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Garry Kasparov.Visit https://www.smashingsecurity.com/216 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Garry Kasparov.Sponsored By:1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it. Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household.For more details visit www.1password.com/switch50Support Smashing SecurityLinks:Dating apps scam committed by criminal from inside prison — BBC News.File on 4 - The Dangers of Dating Apps — BBC Sounds.Playboy Magazine, November 1989 — Including Garry Kasparov's interview and sexy photo shoot.Sextortion email scams — Avast.Has Fake Snow Been Falling on the US? — Snopes.TikTok Users Are Trying (and Failing) to Prove the Snow in Texas Is Fake — Daily Beast.TikTok Users Are Burning Snowballs in Viral Videos to 'Prove' the Snow is Fake — Gizmodo.Griddy: Why a Texas electricity company is under fire for astronomical bills during winter storm — The Independent.Ted Cruz Mariachi Band Performed at a Discount — TMZ.Slow TV Map.The Queen's Gambit — Golden Globes.Soulmates (TV series) — Wikipedia.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

24 Feb 202155min

Sexy cows banned on Facebook

Sexy cows banned on Facebook

The FBI is hoping that its hunt for Capitol rioters will go viral, a cryptocurrency con lets its perpetrator live the high life... for a while, and just what does Facebook have against cows and a team of cricketers?All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Zoe Kleinman.Visit https://www.smashingsecurity.com/215 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Zoe Kleinman.Sponsored By:1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligenceThey share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversariesWhether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry expertsSupport Smashing SecurityLinks:The FBI Wants You To Make These Photos Of Capitol Insurrectionists Go Viral — Huffington Post.Capitol Violence — FBI.Sedition Hunters.Boston Bombing: The Anatomy of a Misinformation Disaster — The Atlantic.Iced Earth’s singer and bassist quit band "in response to recent events and circumstances" — NME.Capitol Insurrection: More Than 230 People Charged And What We Know About Them — NPR.'Overtly sexual' cow blocked as Facebook ad — BBC News.What is Stefan Qin’s edge in crypto? Fraud, says the SEC — Digital Finance.Founder Of $90 Million Cryptocurrency Hedge Fund Charged With Securities Fraud And Pleads Guilty In Federal Court — Department of Justice.A crypto kid had a $23,000-a-month condo. Then the feds came — Fortune.Radio Garden — Explore live radio by rotating the globe.Dodow.On Her Majesty's Secret Service mind control scene — YouTube.Mark Kermode's Secrets of Cinema — BBC.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

17 Feb 202147min

Lockdown love scams, SolarWinds, and a data deletion bungle

Lockdown love scams, SolarWinds, and a data deletion bungle

Fingerprints and DNA records have been deleted from the UK's police database, the SolarWinds hack continues to wreak havoc and raise questions, and we have some advice for how to fall in love safely under lockdown...All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Professor Alan Woodward.Visit https://www.smashingsecurity.com/214 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Alan Woodward.Sponsored By:1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.Support Smashing SecurityLinks:Police probes compromised after computer records deleted — BBC News.Home Office admits 15,000 people deleted from police records — The Guardian.Home Office admits 'coding error' wiped 15,000 police records — IT Pro.Boris Johnson adviser quits after being overruled on Priti Patel bullying report — The Guardian.UK's families put on fraud alert — BBC News.Security Advisory — SolarWinds.Suspected Chinese hackers used SolarWinds bug to spy on U.S. payroll agency – sources — Reuters.A Second SolarWinds Hack Deepens Third-Party Software Fears — Wired.Microsoft: No Evidence SolarWinds Was Hacked Via Office 365 — CRN.What You Need to Know About Romance Scams — FTC.Interpol warns of romance scam artists using dating apps to promote fake investments — ZDNet.Man lost £38,000 to scammers posing as single women on Match.com — Metro.Romance scams rank number one on total reported losses — FTC.This romance scam tricks victims in laundering federal funds — Better Business Bureau.Lexulous.Scrabble fans slam 'sparkly abomination' new app — BBC News.‎Best Bubble Breaker — Apple App Store.Jawbreaker (Windows Mobile game) — The original BubbleBreaker?IKEA Klippan, 2 Seater sofa cover — Bemz.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

10 Feb 202148min

No security smarts at Mensa, long-term identity theft, and GameStop's share frenzy

No security smarts at Mensa, long-term identity theft, and GameStop's share frenzy

Mensa - the social club for people with high IQs - is accused of not being so smart about security, an Indian TV journalist gets an unbelievable job offer from Harvard, and we take a look at what's being going on with GameStop short selling.All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.Visit https://www.smashingsecurity.com/213 to check out this episode’s show notes and episode links.Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!Warning: This podcast may contain nuts, adult themes, and rude language.Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Special Guest: Mark Stockley.Sponsored By:Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligenceThey share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversariesWhether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry expertsCrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.Support Smashing SecurityLinks:Two British Mensa directors quit over cyber security concerns — Financial Times.Mensa Website Hacked After Britain’s Smartest Folk Failed To Secure Passwords — Forbes.Poor password security at the British branch of Mensa? — Graham Cluley.I Am Nidhi Razdan, Not A Harvard Professor, But... — NDTV.GameStop stock price — MarketWatch.GameStop: What is it and why is it trending? — BBC News.An uprising against Wall Street? Hardly. GameStop was about the absurdity of the stock market — The Guardian.GameStop short squeeze fuels new stock-market services tracking Reddit messages — MarketWatch.The Basics of Shorting Stock — The Balance.The Rise of the Murdoch Dynasty — BBC iPlayer.SketchUp.The Office ASMR — A Podcast to Sleep To.Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

3 Feb 20211h 1min

Populært innen Politikk og nyheter

giver-og-gjengen-vg
aftenpodden
aftenpodden-usa
popradet
bt-dokumentar-2
forklart
stopp-verden
nokon-ma-ga
det-store-bildet
dine-penger-pengeradet
fotballpodden-2
aftenbla-bla
frokostshowet-pa-p5
rss-dannet-uten-piano
e24-podden
rss-penger-polser-og-politikk
rss-ness
rss-fredrik-og-zahid-loser-ingenting
rss-borsmorgen-okonominyhetene
unitedno