Security Now 586: The BlackNurse Attack

You can help support what we do at TWiT by joining Club TWiT. You'll get ad-free versions of our shows, access to the Club TWiT Discord, chapter markers, in-app transcripts, and custom programming such as Stacy's Book Club, Mikah's Crafting Corner, Off By One with Jeff Atwood, and the AI Users Group.Join today!

This week, we'll be taking a look at the canceled Project Ara, the leaky Blu, the Le Pro 3, the HTC Bolt, the OnePlus 3T, the launch of Daydream View, Google's new Photoscan app, and more! Read our show notes here. Hosts: Jason Howell, Florence Ion, and Ron Richards Guest: Juan Bagnell Subscribe to All About Android at https://twit.tv/shows/all-about-android. Thanks to CacheFly for the bandwidth for this show. Sponsors: FreshBooks.com/aaa QuickenLoans.com/android

Results from our listener's informal CAIDA spoofing testing. LessPass turned out to be even less than it appeared. Steve's day at Yubico. News from PwnFest & Mobile Pwn2Own. The probable elimination of Dark Matter. A new Wi-Fi field disturbance attack. A wacky Kickstarter "fingerprint" glove. The "BlackNurse" reduced-bandwidth DoS attack. We invite you to read our show notes. Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Bandwidth for Security Now is provided by CacheFly. Sponsors: carbonite.com - offer code: SECURITYNOW QuickenLoans.com/securitynow drobostore.com - use code: TWIT100

Microsoft is partnering with Elon Musk, Peter Thiel, and Y Combinator founder Sam Altman, all who run the nonprofit OpenAI. The organization, which was founded earlier this year, is on a mission to protect humanity from our robot overlords by making them be our slaves, and not the other way around. Mark Gurman from Bloomberg says that, behind closed doors, Apple is working on some smart spectacles of their own. Apple's glasses will wirelessly connect to your smartphone, and may not come out until 2018, if at all. Google released a new standalone app for Android and iOS called PhotoScan. The app is designed to help users take those polaroids and printed photos taking up space in the attic, and digitize them with the smartphone camera, while removing things like glare and reflection. Security research firm Kryptowire has discovered pre-installed spyware on 120,000 Android phones that slurps up personally identifiable information, including text messages, contacts, IP addresses, and more. What's worse is that all of that information gets sent to a Chinese company called Adups. Also, Wifi is more important than sex. Mikey Campbell, Senior Editor at Apple Insider, talks about the Phantom 4 Pro and the other newest UAV's from DJI. Katie Benner, Reporter at The New York Times, tells us about Twitter's new harassment tools, and whether they're enough to stem the tide of hate on the social network. Hosts: Megan Morrone and Jason Howell Guests: Mikey Campbell and Katie Benner Download or subscribe to this show at https://twit.tv/shows/tech-news-today. Thanks to CacheFly for the bandwidth for this show. Sponsors: ZipRecruiter.com/twit thetrackr.com promo code: TNT Epson.com/ecotankleo

Rene has his review of the new 13" and 15" MacBook Pro with Touch Bar. Rumors say AirPods might come out this week. Apple is working on Augmented reality - is this the future? Apple's new $300 coffee book focuses on the Jobs-Ive collaboration. Leo's Pick: Touché lets you test drive the TouchBar Rene's Pick: Toms bands for Apple Watch Andy's Pick: Blue Raspberry Microphone Hosts: Leo Laporte, Andy Ihnatko, and Rene Ritchie Download or subscribe to this show at https://twit.tv/shows/macbreak-weekly. Bandwidth for MacBreak Weekly is provided by CacheFly. Sponsors: audible.com/macbreak or text macbreak to 500-500 hover.com opticalcablesbycorning.com

Oh-My-Zsh is an open source, community-driven framework for managing your ZSH configuration. It comes bundled with a ton of helpful functions, helpers, plugins, themes, and a few things that make you shout "Oh My Zsh!" Hosts: Randal Schwartz and Aaron Newcomb Guests: Robby Russell and Marc Cornellà Download or subscribe to this show at https://twit.tv/shows/floss-weekly Thanks to CacheFly for providing the bandwidth for this podcast and Lullabot's Jeff Robbins, web designer and musician, for our theme music. Sponsor: casper.com/floss - promo code: FLOSS

Need to keep yourself distracted in this crazy world? Well, Megan Morrone and Leo Laporte have the perfect apps for you. Games, movies, magazines, Cameras that fit in your Apple Watch band, and an assortment of apps ranging from new ways to play Tetris, Chess, and auto tune your voice! Hosts: Leo Laporte and Megan Morrone Download or subscribe to this show at https://twit.tv/shows/ios-today. You can contribute to iOS Today by leaving us a voicemail at 757-504-4723 or sending an email to [email protected]. Thanks to CacheFly for the bandwidth for this show. Sponsors: texture.com/twit linkedin.com/TWIT

Bryan goes to Third Street Ale Works in Santa Rosa for a behind the scenes look at how a real brewery works, interview on how to get into professional brewing, and taste testing our beer! Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett Guests: Russell Tammany and Kerry Macleod Connect with us! Don't forget to check out our large library of projects at https://twit.tv/shows/know-how. Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3 Sponsors: braintreepayments.com/knowhow thetrackr.com promo code KNOWHOW

Members of Facebook's engineering staff disagree with CEO Mark Zuckerberg's stance that false news on the network did not have an impact on last week's election. They are reportedly forming an unofficial task force within the company, meeting in secret to formalize a list of recommendations to offer up to senior management to improve the situation. The FBI has contracted with data analytics firm Dataminr to get full access to Twitter's firehose. Google is releasing an update to Google Play Music that brings an entirely new look, along with location tracking, to offer up different playlists based on user location, time of day, and previous listening patterns. The new app will also automatically cache music that's listened to for offline listening. The adult dating websites AdultFriendFinder, Cams.com, and Penthouse have been hacked, revealing personal details from the accounts of more than 400 million users. That's the largest known breach of personal data this year. According to LeakedSource.com, the stash of data includes 15 million email addresses connected to deleted accounts. Finally, the Matrix PowerWatch is a fitness tracking smartwatch that's currently up for pre-order on Indiegogo and reportedly uses body heat to charge the battery while the user wears it. Rene Ritchie from MacBreak Weekly tells us who needs the new MacBook Pros, and who does not. Sam Abuelsamid from Navigant Research talks about Samsung's purchase of Harman. Hosts: Megan Morrone and Jason Howell Guests: Rene Ritchie and Sam Abuelsamid Download or subscribe to this show at https://twit.tv/shows/tech-news-today. Thanks to CacheFly for the bandwidth for this show. Sponsors: Epson.com/ecotankleo ZipRecruiter.com/twit BLUEAPRON.COM/TWIT

Dan Ackerman is a tech journalist who writes for CNET. His latest book, The Tetris Effect: The Game That Hypnotized the World, is an exploration of the tumultuous history of the game Tetris. This history is part startup tale, part Cold War thriller, and part courtroom drama. The story of Tetris, its global spread, and its effect on the worlds of culture and science make for a fascinating book. Host: Leo Laporte Guest: Dan Ackerman Download or subscribe to this show at https://twit.tv/shows/triangulation. Thanks to CacheFly for the bandwidth for this show. Sponsors: audible.com/triangulation Basecamp.com/twit curiositystream.com/twit offer code: TWIT