420: Two Goats
Mostly Security
Eric and Jon are both fully prepped for the holiday. Flock leaves (many) cameras including control panels open and exposed to the open internet, what if more malicious npm packages worked as advertised, and Microsoft is finally disabling rc4 by default in Active Directory. For fun we have two movies for holiday watching: F1: The Movie, and Howl's Moving Castle. Enjoy! 0:00 - Introduction 11:38 - 18:09 - 23:39 - 30:38 - 33:04 -
info_outline
419: Go Slop the Pigs
Mostly Security
Jon's car may or may not be fixed. Eric didn't go to Disneyland. Android is making in-call scam protection better. AI is creating a Blessing of Unicorns. Parked Domains keep scammers alive. Space is getting crowded. Word of the Year - Slop. 0:00 - Introduction 6:38 - 10:21 - 13:15 - 17:55 - 24:10 -
info_outline
418: Pernicious
Mostly Security
Christmas in full swing at both Eric and Jon's places. Less secure certificate validation mechanisms being deprecated, and SEO of AI chats to deploy ClickFix style lures for Stealer installation. For fun we have a shockingly good way to avoid motion sickness in VR, and a promising Leukemia treatment using gene therapy. 0:00 - Intro 9:28 - 14:45 - 21:34 - 27:42 -
info_outline
417: Security Boffins
Mostly Security
Eric tracks hack attempts and Jon trades blood for pinball. Shai-Hulud is back, Calendly invite scam, Rust for good and evil. Giving Machines for the holiday season and Spores in Space! 0:00 - Introduction 13:48 - 16:59 - 19:11 - 24:33 - 28:00 -
info_outline
416: Ant Honey
Mostly Security
Eric and Jon prep for Thanksgiving. Will blue and green bubbles coexist in peace and harmony? Will the airlines stop sharing flight data with the IRS? And is monitoring every car, everywhere, at all times 'unreasonable search'? ¯\_(ツ)_/¯ Have some Ozone and a Honey chaser. 0:00 - Intro 8:11 - 12:14 - 18:34 - 25:16 - 32:40 -
info_outline
415: Crab Pots
Mostly Security
This week's roundup features a mix of personal updates, major tech news, and scientific intrigue. Eric is super late to the Minecraft party while Jon gets his bushes trimmed. In tech, a massive WhatsApp security flaw exposed data for up to 3.5 billion users, while Google announced the release of Gemini 3 Pro and the new "Deep Think" reasoning mode. Cybersecurity concerns also rose with the global spread of the TamperedChef malware, delivered via malvertising and fake software installers. On the innovation front, MIT researchers developed a new lipid nanoparticle that dramatically enhances the...
info_outline
414: Fig Wasp Redux
Mostly Security
Eric goes to Nateland and Jon goes flying. Another javascript worm, and automatic license plate reader records declared public in Washington. For fun we have a repo of annual security reports and Jon suffering memory loss and search ineptitude, but fig wasps are still cool. 0:00 - Intro 17:20 - 21:50 - 28:55 - 29:26 - 30:43 -
info_outline
413: Sidekick, not Primarykick
Mostly Security
Eric drills a door and Jon disagrees and commits to an electrical fix. Aisuru makes the Cloudflare Top 10. The Louvre had a bad week, while furniture trucks had a good one. Gemini used to write malware. Rivers in Alaska are orange. 0:00 - Introduction 14:11 - 16:25 - 20:03 - 24:12 - 26:45 - 28:26 -
info_outline
412: Precondition Failed
Mostly Security
Remote Eric Assist and Jon enjoys ... hockey(??). More prompt injections, the most damaging UK cyber event (so far), and residential proxy use for fun and training data. Will Agentic AI bring back micropayments, and how is Costco's pumpkin pie so good? 0:00 - Intro 10:47 - 16:56 - 19:32 - 24:34 - 29:49 -
info_outline
411: Fantastic Turn Of Phrase
Mostly Security
Travel Adventures, AI Advancements (and Challenges), Satellite Security Concerns, Machine Learning Insights, and De-Extinction Efforts for the Giant Moa. 0:00 - Introduction 4:49 - 9:15 - 14:41 - 20:02 -
info_outlineEric updates the mostlysecurity.com vibe. Jon jars honey. Plex asks users to change their passwords. iPhone 17 has new security features. Not to be outdone numerically, 18 Javascript packages were compromised. Eric plays with epoxy and glitter, while Jon reminisces of Perl.
- 0:00 - Introduction
- 15:33 - Plex Passwords
- 20:09 - iPhone 17 Security
- 25:58 - 18 Javascript Packages
- 30:04 - Epoxy and Glitter
- 33:04 - Perl