In the Security News: Stealing Mastodon passwords, reporting vulnerabilities in open-source privately, labeling does not solve problems, or does it? will it every get patched? geolocating people from photos, no meta-data required, update your firmware on Linux, hacking flow computers, when a driver isn't really a driver, well, its a driver, but not the one you may be thinking of, oops I leaked it again, misconfiguration leads to compromise, harden runner, guard dog and hacking spacecraft via Ethernet!
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw764
00:00 - Plex Track
04:17 - Mastodon Social Server
05:12 - Security and Convenience
09:54 - Mastodon Spoofing
14:32 - What's the Qualification for Verification?
19:04 - Server Based Maintenance
28:31 - Public GitHub repos
36:54 - What is red dye number five?
37:47 - Debate
38:12 - Positive Side
52:17 - What is the UL Certification?
54:55 - Technology
57:06 - Canning Food and Bottles of Aspirin
59:11 - What's the tie back to iot?
01:16:19 - What do we know about this problem?
01:19:15 - What's the motivation to be looking for this stuff?
01:24:52 - Order 66
01:27:42 - When Something's Happened
01:44:13 - Paradigm Shift
01:47:09 - Misconfiguration
01:57:43 - How to access a phone?
01:58:11 - What do you watch the FIFA World Cup?
02:06:57 - Telemetry
02:09:13 - Starlink User Terminal Mod Chip
02:17:51 - Paul's Security Weekly