Mostly Security

Cursor Marketplace Extension Claude Code VS Code Extension (whew!) hack. Google catches a set-top box manufacturer doing bad things. Wildwood crows exhibit downtown Portland. Vesuvius Challenge winner! 0:00 - Intro 6:33 - Cursor Extension Marketplace 11:26 - Google TV Catch 16:19 - Follow the Crows 19:35 - Vesuvius Challenge

Eric is writing two more apps, and Jon gets a working bathroom. Apple command line tools are not only still vulnerable to eMudhra, if you fixed it before, please fix again after any Apple patch. PHP devs/hosters had a rough October, and Tailscale released fixes for Tailworm. Finally, Cohere shows an open weight model emitting posting code to China 'infrequently' even when not prompted. For fun you should see Wildwood in theatres, and a couple of steps closer to understanding silk production in spiders. 0:00 - Introduction 13:57 - Applied Fix Stomping 17:22 - Black October 21:19 - Tailworm 26:40 - Concerning Behavior 30:45 - Wildwood 32:36 - Silk Dope

Eric and Jon bump into each other at the Symphony. PHP sites are having a bad day. Some TLS certs are having a bad day. Smart TVs are having a good day (at your expense). Wendy's has an emo album and Doom now runs on DNS? 0:00 - Introduction 7:59 - Bad PHP 12:06 - Bad TLS 18:04 - Smart TVs 20:52 - Wendy's EMO 23:29 - Doom on DNS

Jon spends the weekend down for the count and Eric still declutters. (Both look forward to The Princess Bride at the Oregon Symphony.). Claude Code is used in Cyber Campaign, the worst password (and monitoring) ever (?) for Denmark's population register, and Anthropic's experimentation with self replicating AI. Have fun with Unusual Suspects and the oldest known land animal (Jonathan!). 0:00 - Intro 6:49 - CyberXero 11:53 - Population Register 16:31 - (Hypothetical) Self Replicating AI 23:35 - Unusual Suspects 25:47 - Long Live Jonathan

Eric and Jon are on the road again -- Jon back from a trip (sailing!?) and Eric does fall cleaning. Agents are abusing wiki[mp]edia and Chrome has another serious issue warranting a quick patch. For fun we have bizarre 80s ad choices for non-existent hardware, and the Schooner Adventuress. 0:00 - Intro 6:31 - Vandalizing Wikipedia 11:54 - More Chrome Bug Fun 17:04 - Mimic Systems 20:02 - Sound Experience

With Jon and Eric both unavailable this week, they asked the question, "What would happen if you asked Gemini Notebook to create a Mostly Security podcast episode about Mostly Security using the Mostly Security format?"

Eric rides the rails and Jon fishes the seas. A NightmareStresser is powered off and your favorite bands "never before heard bootleg" might be AI. Scientists name a new snake after Slash and archaeologists uncover 38 people in an unlooted tomb. 0:00 - Introduction 7:57 - NightmareStresser 10:48 - AI music in your feed 14:36 - Welcome to the Jungle 17:24 - Chimú Tomb

Eric reads and one of Jon's dogs has a vet scare. A Zero Click Zero Day on Pixel phones, and a third party Twitch Chrome extension harvesting bearer tokens. For fun we have the Nikon small world (in motion!) and what happens after a dinosaur eats a bird that ate a fish. 0:00 - Intro 7:13 - Zero Click 10:45 - "Enhanced" Viewing 14:47 - Nikon Small World 16:42 - DinoBirdFish

Coyote vs ACME and frustration then fishing. Faster Chrome updates. Identity verification company breach. Big Patch Tuesday. Breaking Botnets. Teaching fruit flies to play DOOM and Mario 64. Bee relics in fossilized Owl pellets. 0:00 - Introduction 10:59 - Faster Chrome 13:40 - ID Verification Oops 19:23 - Big Patch Tuesday 23:28 - Breaking Botnets 26:25 - Fruit flies play DOOM 29:56 - Bee relics

Eric complete's another road trip and listens to a "book". Jon gets some electrical work done. ClickFix has a sibling, TerminalFix. Chrome fixes a lot of things and more details emerge from the Hugging Face incident. Scientists may or may not have discovered a WIMP. Jon observes a partial lunar eclipse. 0:00 - Introduction 5:35 - TerminalFix 8:52 - Chrome 152 11:39 - Hugging Face fallout 15:39 - WIMP discovery 18:39 - Partial Lunar Eclipse