The technology blog and podcast and TSB

Incogni claims that it can remove your personal info. How? We'll talk about it with an article that talked about them and I'll talk about where the JRN first heard of this valuable service. We'll also talk about the news, any notes, we've got corrections to xposedornot.com and the work I'm doing with them as testing is going well, and more. Xposed or not I'm not employed at Xposed, but I found some thing that got fixed. The table as well as tree view of the exposures page not properly giving correct dates, I.E. the table was showing 2023 items while the default view was not quite showing current dated items added to the site. We learn about the news page and its purpose while asking questions. We found a very interesting post about data exposures and their categories. At the time of writing, I don't have a blog post on this yet. Incogni I earlier blogged There are many data brokers, only one company that might help which links to an article titled Your data, their profit: the data brokers you know nothing about goes in to what's going on and who might be able to help. Yes, Incogni might just be the one that might do the job. Step on forward and learn. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone. Internet Radio affiliates airing our program Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello everyone, welcome to program number 187 of the security box. On this program, we're going to talk about our drinking water. No, not the fact that it could taste bad or that it is the best water ever, we'll talk about the security aspect of where our drinking water comes from. Besides that, the news, the notes and the landscape. Remember to contact us with your questions, comments or concerns. If we don't know, we've got people that do, so get those questions in. <hr> <h4> Open forum: A New Service </h4> Recently, the Jared Rimer Network discovered a service in which we are happy to use. While <a href="http://www.haveibeenpwned.com">haveibeenpwned.com </a> is good, I do find some things that don't work well accessibly. While I got the domains to work, and those instructions were easy to follow, I did have issues with the service I'm about to recommend. I got it to work and it is more accessible. Even the exposed breaches may not be that extensive, both services get their breaches through verification. To learn more about the service Exposed or not, please view the latest blog post <a href="https://technology.jaredrimer.net/2024/04/16/we-have-a-new-service-up-accessible-too/">We have a new service up, accessible too </a> for complete details. The service is spelled xposedornot. Drop the E. <hr> <h4> Some of the newsy items </h4> <ul> <li> <a href="https://technology.jaredrimer.net/2024/04/16/unconfirmed-trust-wallet-could-be-at-risk-with-a-zero-day/">Unconfirmed, trust wallet could be at risk with a zero day </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/04/16/bot-attacks-as-a-top-threat-this-year/">Bot attacks as a top threat this year </a> was supposed to be posted earlier but it missed its schedule </li> <li> <a href="https://technology.jaredrimer.net/2024/04/16/sans-news-bites-for-april-16-2024/">Sans News Bites for April 16, 2024 </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/04/11/lawfirms-now-have-ai-generated-lawyers/">Lawfirms now have AI Generated lawyers? </a> </li> </ul> Some may bring these up, but may bring other things as well. We'll have to see. Keep on reading! <hr> <h4> Topic: Our Drinking Water </h4> I've never really liked the taste of water. Especially from our faucets. But this podcast isn't talking about whether we like water, which we're told we should drink to keep ourselves healthy. I know, I know, I'm just as guilty as the rest when it comes to that. But this podcast isn't about whether we like the stuff, its about the security of how it gets to us. We know it goes through pipes, but do we honestly know how it gets to those pipes to how we drink it, cook with it, or use it in our coffee? There's an elaborate system, but is it as secure as it can be? Apparently, hackers can get in to these systems, and this is where we could be in some real trouble. The latest blog post I penned on this subject is titled <a href="https://technology.jaredrimer.net/2024/03/23/hackers-interrupting-critical-drinking-water/">Hackers interrupting critical drinking water </a> which links to the CyberNews article <a href="https://cybernews.com/security/us-officials-warn-hackers-target-drinking-water/">US officials warn of hackers disrupting the “critical lifeline” of drinking water </a> which was an interesting read. If you search for water by itself, you'll find other blogs like: <ul> <li> <a href="https://technology.jaredrimer.net/2024/01/11/cyber-attack-cuts-off-water-for-2-days/">Cyber Attack cuts off Water for 2 days </a> </li> <li> <a href="https://technology.jaredrimer.net/2023/12/05/iran-hits-pennsylvania-water-fascility/">Iran hits Pennsylvania water fascility </a> </li> <li> <a href="https://technology.jaredrimer.net/2023/07/14/water-treatment-fascility-breached-by-california-man/">Water treatment facility breached by California man </a> and </li> <li> <a href="https://technology.jaredrimer.net/2021/07/16/the-security-box-podcast-52-the-security-of-our-water-supply-news-notes-and-a-very-interesting-robery-story-to-boot/">The Security box, podcast 52: The Security of our Water Supply, news notes and a very interesting robery story to boot </a> </li> </ul> The last item is a podcast where we talked about this before. There may be others including group names that may have water in its name, but the items above are the highlights of what I want to bring about for this discussion. With this knowledge and the article from CyberNews, where are we in this space? I guess we'll find out. <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Welcome to the security box, podcast 185. We have several things in Erata that we'll read, one coming in just before I was supposed to leave although that trip got postponed. While that thing we'll read is a week old, its still valuable. We also put in the Facebook thing I saw prior which might get people to chuckle. Our topic today is one dealing with Russia, and another Wiper Malware. The article we take from is from CyberNews, and we also blogged the thing. We'll have news, notes and more. <hr> <h4> Common Vector Tactics </h4> While I still seem to be a week behind, I'm going to sites on my own to find things of value so I can try to keep up. In my perusal of Mastodon, I found this, and thought it should be posted. <a href="https://technology.jaredrimer.net/2024/04/01/here-are-common-vector-attacks-behind-data-breaches/">Here are common vector attacks behind data breaches </a> is the blog post, where Diva on Breaches takes us through <u> 7 </u> different items in her post. This is also in our show notes and will be read out for those who listen but do not read the blog on a regular. Thanks Devanand for continuing to share the knowledge we can share. We recently read one of her recent posts in a prior podcast. Knowledge is power! <hr> <h4> Our Topic: Acid Rain and Acid Pour </h4> Our blog post <a href="https://technology.jaredrimer.net/2024/03/27/new-malware-acidpour/">New Malware, AcidPour </a> has a link to the Cybernews article. As usual, we'll take some of the paragraphs to aid in the discussion.If you just want the article without going to the blog, no problem. <a href="https://cybernews.com/security/russia-dangerous-wiper-acidpour/">Russia unleashes dangerous new wiper </a> is the article. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Welcome to the Security Box, podcast 184. On this edition of the podcast, we're going to talk about PixPirate. Its an Android application known as a Trojan. It is hard to detect, and its hard to get rid of. Besides this, we'll cover the news, notes and and questions and answers that we may need to take care of. <h4> PixPirate </h4> This time, we're talking about a piece of malware known as a <u> trojan. </u> The article comes from Bleeping Computer and is titled <a href="https://www.bleepingcomputer.com/news/security/pixpirate-android-malware-uses-new-tactic-to-hide-on-phones/">PixPirate Android malware uses new tactic to hide on phones. </a> If you want to read my pick apart on this, <a href="https://technology.jaredrimer.net/2024/03/15/pixpirate-uses-new-tactic-to-hide-on-phone/">this is the blog post that'll let you do that. Its titled: PixPirate uses new tactic to hide on phone. </a> What do you think of the topic? Have you heard of it before? <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

After a week off, we're back with another podcast. We hope you enjoy! Hello everyone, welcome to the Security Box, podcast 183. On this program, we're going to catch you up on the landscape from the last couple of weeks. We've also got an update on what's going on with our favorite topic called Pig Butchering. Of course we'll take your comments as well and of course those questions. Thanks so much for listening! <hr> <h4> Our topic: What's going on with Pig Butchering? </h4> Pig Butchering is not necessarily going anywhere, but there have been some studies and money recovered. The article <a href="https://www.bleepingcomputer.com/news/cryptocurrency/us-moves-to-recover-23-million-from-pig-butchers-on-binance/">US moves to recover $2.3 million from “pig butchers” on Binance </a> is the latest article we've seen on the topic. Of course, we had a topic but seemed to have lost it, but that's what happens some times. This article will be taken apart to help the discussion and of course comments and questions are welcome. As a side note, we can probably tie this in to Phishing as a whole, as the deployment of the beginning of how this works is an email, text, or other platform of communication. What are your thoughts on that? We even talk about it as part of Throwback Saturdaynight for the 16th in our first segment. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to the security box, podcast 182. On this podcast, besides the news and notes of the week, we're going to learn about a new potential threat by a new potential actor called Savvy Seahorse. If you've read the blog, you'll already know, but if you only listen to the podcast, this is going to change the way malware is delivered. Of course we'll see what our participants want to talk about as well. <h4> Our Topic, Savvy Seahorse </h4> The article comes to us by our newest partner, Cybernews. Its titled <a href="https://cybernews.com/news/threat-actor-phishing-facebook-spoofing/">Threat actor uses Facebook to lure victims, sends cash to Russia </a> and covers Savvy Seahorse. This is going to be something we'll need to track, and we'll explain it all. Let's just say that it uses the Cname aspect of domain hosting. Stay tuned! If you want to read our blog post on it, <a href="https://technology.jaredrimer.net/2024/02/28/savvy-seahorse-uses-facebook-for-investment-scams/">Here is that post titled Savvy Seahorse uses facebook for investment scams. </a> <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello everyone, welcome to the Security Box, podcast 181. In Q4 of 2023, Phishlabs is reporting that a record of phishing sites impersonate social media to target victims. Question for the listener, what do you think you should look for when you get communication that talks about social media before you click, tap, double tap or press enter on a keyboard? We'll have the news and landscape as well as your comments and concerns. We hope you enjoy the show! <hr> <h4> News, notes and the landscape </h4> <ul> <li> <a href="https://technology.jaredrimer.net/2024/02/25/you-have-to-be-kidding-me-1-year-later-and-the-dod-is-sending-out-notifications/">You have to be kidding me, 1 year later and the DOD is sending out notifications? </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/02/25/2-5-million-private-plane-owners-breached/">2.5 million private plane owners breached </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/02/24/911-proxy-is-back-new-name-cloud-router-still-dangerous/">911 proxy is back, new name: cloud router: still dangerous </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/02/24/avast-caught-collecting-lots-of-info-selling-it-to-other-companies/">Avast caught collecting lots of info? Selling it to other companies? </a> </li> </ul> There are other smaller news items, but these might be the bigger ones. If yours isn't on this list, what fancies you? <a href="http://www.jaredrimer.net/contact.htm">Contact me through jaredrimer.net </a> and let me know. You can also send things to ponder files which can be played as well. <hr> <h4> Our Topic: Phishing Sites up and impersonating social media </h4> <a href="https://www.phishlabs.com/blog/record-number-phishing-sites-impersonate-social-media-target-victims-q4">Record Number of Phishing Sites Impersonate Social Media to Target Victims in Q4 </a> comes to us from Phishlabs this week. Let us know what you think good, bad or indifferent. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello everyone, welcome to the security box, podcast 180. On this podcast, Phishlabs will guide us through something I don't think we have ever seen. It talks about a service that is a web host service, but it is a completely different type of web host. They didn't classify it as bulletproof hosting, but something called phishing as a service. Two different companies are mentioned. Besides that, we've got news, notes, the landscape and your thoughts. Thanks so much for listening! <h4> Big News of the week, Lockbit </h4> The big news it seems that is coming out this week is talking about Lockbit. Looks like their infrastructure has been taken over by all kinds of law enforcement partners from all around the world. While we don't intend to give you an exhaustive list, here is some of the coverage we know about. <ul> <li> The Cyberwire Daily: February 20, 2024 will talk about this in their news notes for the episode. <a href="http://www.thecyberwire.com">Here's a link to the Cyberwire. </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/02/20/lockbit-your-time-is-up-now-its-time-to-go-find-real-work/">Lockbit, your time is up! Now its time to go find real work </a> is my blog post, leading to <a href="https://cybernews.com/news/lockbit-disrupted-operation-cronos/">LockBit cartel disrupted “at every level” – Europol </a> if you don't want to read mine. I am not offended. I do take this article apart though, so give mine a read if you wish. </li> <li> <a href="https://krebsonsecurity.com/2024/02/feds-seize-lockbit-ransomware-websites-offer-decryption-tools-troll-affiliates/">Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates </a> comes directly from Brian Krebs. At the time of Writeup, the JRN has not read this yet. </li> </ul> <hr> <h4> Our topic: Phishing as a service </h4> This week, we're going to talk about Phishing as a service. It is a new concept, and you can probably say it is similar to Ransomware as a service. This week's article is titled <a href="https://www.phishlabs.com/blog/phishing-service-profile-labhost-threat-actor-group">Phishing-as-a-Service Profile: LabHost Threat Actor Group </a> and it covers two different hosts. This, will get interesting. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to the security box. This is program 179. This time, we'll venture off the path a bit and talk a little bit about romance scams. Instead of using the article as a guide, we'll talk about it in more general terms. Did you know that Valentines Day is one of the biggest times for this type of scam? Besides that, we'll have news, notes and the landscape as we always do. Thanks for listening and make it a great day! <hr> <h4> Our topic: romance scams </h4> With Valentines coming, romance scams are going to be on the rise. <a href="https://technology.jaredrimer.net/2024/02/07/with-valentines-day-coming-its-time-for-the-romance-scams-in-full-force/">With Valentines Day coming, its time for the romance scams in full force </a> is a blog post leading to the article we'll use for this discussion although we won't use it like we normally do. We'll use it as a starting point. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow

Hello everyone! Welcome to the security box, podcast 178. On this podcast, we're going to talk about the landscape, the news, and the crazy. We are also going to talk about the threats of Social Engineering as well. We give you the best blog posts of the week as well. We hope you enjoy the program, and make it a great day! <hr> <h4> Our topic and accompanying true story </h4> Today, Lastpass will lead the discussion with <a href="http://blog.lastpass.com/2024/01/unraveling-the-threats-of-social-engineering/">Unraveling the Threats of Social Engineering </a> which was a great find. I don't know about you guys, but we need to be on guard and ready as much as we can. We can all be phished, scammed and Cory Doctorow's article is linked to <a href="https://technology.jaredrimer.net/2024/02/05/even-the-best-can-be-scammed-check-this-article-out/">Even the Best can be Scammed, check this article out </a> which I wrote in my response to the article. So since we can all be targets, it starts with knowing what to look for by reading Lastpass's article and learning what we could do differently and learning by the other true story. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much! For full show notes including things talked about, please see the blog.

Welcome to podcast 177 of the Security Box. On this podcast, we seem to be on a password discussion, as lots of articles have come out in regards to the subject. Our topic even will include talking about passwords. We'll also have things to ponder, possibly some morons, and a great time as always! These notes are annotated for RSS. Full notes on the blog. <hr> <h4> Our moron(s) </h4> Mercedes, its your turn. Apparently, you had something open on your Github account. The thing is, you're not the first car company to have issues, although you never said that there wasn't a problem, you did fix it with Github assisting as well. <a href="https://technology.jaredrimer.net/2024/01/27/a-password-is-mistakenly-published-source-code-blueprints-and-more-once-at-risk/">A password is mistakenly published, source code, blueprints and more once at risk </a> is the blog post where you can read more about this one. Good job, guys! Microsoft, you aught to be ashamed of yourself. You decided to give a test account admin privelages, then let the account go to legacy status. Then, because its an administrative account, someone finds it and abuses your systems. Great job! Ars Technica has the complete details. <a href="https://arstechnica.com/?p=1999478">In major gaffe, hacked Microsoft test account was assigned admin privileges </a> is the article. <hr> <h4> Password reuse </h4> We haven't blogged this at the time of these notes, but this is a good topic. <a href="http://blog.lastpass.com/2024/01/the-perils-of-employee-password-reuse/">The Perils of Employee Password Reuse </a> comes to us from Lastpass and Amber Steel. Let us know what you think. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to the security box, podcast 176. This podcast is mainly going to be an open forum, but we will have some topics coming. We might have some morons, some things to ponder, and whatever is on the minds of those that come on live. <h4> Things that might be talked about </h4> This is not meant to be exhaustive, but the following blog posts may be talked about in no particular order. Some may be talked about but not listed here, so check the blog for complete details. <ul title="things that might be talked about"> <li> <a href="https://technology.jaredrimer.net/2024/01/23/16-6-million-people-affected-no-info-on-what-was-taken/">16.6 million people affected, no info on what was taken </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/22/breach-forums-maintainer-gets-time-served-never-spent-time-in-jail-lots-of-restrictions-placed-on-him/">Breach forums maintainer gets time served, never spent time in jail, lots of restrictions placed on him </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/21/trezor-gets-owned-for-a-second-time/">Trezor gets owned for a second time </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/20/15-million-trello-users-apparently-breached/">15 million Trello users apparently breached </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/20/ta866-is-back-to-sending-out-email/">TA866 is back to sending out email </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/19/new-sets-of-data-including-have-i-been-pwned-data-out-in-the-wild/">New sets of data, including have I been pwned data out in the wild </a> (naz.api breach) </li> <li> <a href="https://technology.jaredrimer.net/2024/01/23/sans-news-bites-for-january-19-2024/">Sans news bites for January 19, 2024 </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/17/three-are-three-domains-that-i-wouldnt-buy/">Three are three domains that I wouldn’t buy </a> </li> <li> <a href="https://technology.jaredrimer.net/2024/01/24/sans-news-bites-for-january-23-2024/">Sans news bites for January 23, 2024 </a> </li> </ul> <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to the security box, podcast 175. I've been out sick, and now we're back to bring you what we wanted to bring you this past week. We've got news, notes, the landscape, two morons, things to ponder and a topic dealing with dark web threats targeting the airline industry. Thanks so much for listening and make it a great day! <hr> <h4> Our Morons </h4> We have to start with the moron who thought it would be a good idea that a database be left wide open for people to peruse the data. This database is a Mongo DB database, its similar to SQL where data is held and can be gotten at when needed. While this is a real estate app, this was definitely not done with security in mind. <blockquote> <a href="https://technology.jaredrimer.net/2024/01/11/mongo-db-database-open-everyone-using-app-affected/">blog post </a> </blockquote> <hr> If we've not had enough with Chat GPT, this aught to stand your hair right up. This data breaches article talks about how Chat GPT was made to give out ransomware software and now 4 are arrested. This aught to get more interesting. <blockquote> <a href="https://www.databreaches.net/chatgpt-aided-ransomware-in-china-results-in-four-arrests-as-ai-raises-cybersecurity-concerns/">ChatGPT-aided ransomware in China results in four arrests as AI raises cybersecurity concerns </a> </blockquote> <hr> <h4> Things to ponder </h4> Carrying over some items that we just will run as part of this week's program, we've got some doozies. We'll blog anything we didn't yack about as I continue to recover. <ul> <li> 23 and me must be wanting to play the blame game. They claim that their incident is our fault, and they then are going to fix whatever security holes were caused by whathappened? Yes, we are at fault with reusable passwords, but you don't have two-factor on any accounts, so its a double whammy and part of it is yours. Here's <a href="https://technology.jaredrimer.net/2023/12/09/weve-got-an-update-on-23-and-me-and-its-still-not-great-over-there/">my blog post from 2023 </a> about this particular problem. I don't think its gotten any better there and they haven't really been better. </li> <li> Sans News Bites is back, and I still need to blog some others. My goal was to get two done, but I have the one from the 5th of January. As we move forward from my illness, we'll record them as we get them. Check the blog for ones not covered in audio. <a href="https://technology.jaredrimer.net/2024/01/06/sans-news-bites-for-january-5-2024/">Here's my blog post for Jan 5th </a> for those who want to find it easily. </li> <li> We're interested in audio dealing with predictions and Trend Micro has one for their predictions. This comes from their trend talks threats podcast series on their youtube channel. </li> <li> We also have top breaches that I found from Have I been Poned that I recorded before my illness took over. This list changes, and we'll bring this to you each week. </li> </ul> Find something that you want to talk about? Use a file sharing service to get us the audio and you'll be featured. <hr> <h4> Our topic </h4> Our topic this week comes to us from Phishlabs. <a href="https://www.phishlabs.com/blog/dark-web-threats-targeting-the-airline-industry/">Dark Web Threats Targeting the Airline Industry </a> is the article and we'll step through this one. Hope you'll find it of interest as everyone travels.

Welcome to podcast 174. On this podcast, we're just traversing the landscape and some of our longer posts and things that caught our attention. In most ways, this isn't complete, but just some. Terry, Nick and I take you along for the ride. Enjoy! <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to podcast 173. This is going to be the last podcast of the year as it comes to live programming. Don't worry, we'll continue to blog things of importance, and I'll look through our podcast notations for some good things and put out a final podcast of the year. Our next live program will be on January 3, 2024. On this edition of the program, we'll have our news and notes segments, the moron, two things to ponder which are extended versions and of course our topic dealing with the HHS and their fine on an agency who got breached. <h4> Our Things to Ponder </h4> We have two things to ponder segments and both are extended versions and information packed. The first one is being cross posted through this podcast and our Security Hour which may air it any time it wishes. The segment talks about 1 in 4 people falling for scams and getting in to trouble. Besides falling for scams, there is one thing most people don't do and it'll shock you. <a href="https://technology.jaredrimer.net/2023/12/07/1-in-4-fall-for-scams/">Read More on the tech blog with the blog post titled 1 in 4 fall for scams </a> to learn what is going on and what is recommended. The second talks about a very interesting email I got and how it could actually fool someone. At recording time, the domain was unreachable, although the group was given a different file which could not be resurrected for airplay here. <a href="https://technology.jaredrimer.net/2023/12/11/did-you-think-you-were-going-to-get-me-youve-got-to-try-harder/">Here is the blog post titled Did you think you were going to get me? You’ve got to try harder </a> if you wish to read it. It too, will be crossposted, but I didn't mention that here. <hr> <h4> This is a complete set of morons </h4> Our set of morons are completely interesting. They thought they'd steal a car, taking everything from one person, but yet doing something that they weren't expecting. These guys were expecting an Iphone, found an Android and handed it back. They still took the car and possibly other items. <a href="https://technology.jaredrimer.net/2023/12/08/thieves-steal-android-hand-it-back/">Read the blog post </a> with the accompanying article. You won't believe this one. Or will you? <hr> <h4> Our Topic: HHS settles with ransomware case </h4> You must be kidding me, right? Lots of breaches, ransomware cases and the like yet the HHS doesn't do much to enforce anything in my opinion. We have several articles on the HHS settling in certain cases like the Ransomware we're talking about today, or the HIPPA violations in another case, but most of the time its unchecked. This week, <a href="https://technology.jaredrimer.net/2023/11/09/hhs-announces-settlement-on-ransomware-case/">HHS announces settlement on ransomware case </a> is our article. It is a good start, but as we've said, there have been a lot more. Let us know what you think. <hr> <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone.

Hello folks, welcome to the Security Box, podcast 172. On this podcast, we've got two different morons, a look at the landscape, a few things to ponder and our topic dealing with the Q3 report on the landscape which includes QBot and other variants out there causing havoc. For things to ponder, check <a href="http://technology.jaredrimer.net">the blog. </a> <hr> <h4> Our Morons </h4> These are the morons of the podcast. <ul title="Morons"> <li> Montana, you have got to be kidding me. We talked about this in May of this year, and now, it seems you lose. Seems like your law is unconstitutional and it questions what you're trying to do. While we support you, you've really got to prove why Montana should be allowed to ban the app as just banning it doesn't fix the overall problem. As we've asked, how are you going to enforce it? <a href="https://technology.jaredrimer.net/2023/12/02/montana-loses-battle-to-block-tiktok-for-now-still-thinks-they-have-a-case/">Here is the blog post titled Montana Loses battle to block Tiktok for now … still thinks they have a case </a> which links to prior coverage and arguments. Have fun with this one. </li> <li> We have two Ukraine stories in recent posts, but one of these is our moron. <a href="https://technology.jaredrimer.net/2023/12/02/ukrainian-gets-8-years/">Ukrainian gets 8 years </a> argues that 8 years is still not enough for stealing and selling personally identifiable information on the darkweb and profiting from it. At least this suspect got caught, and we can celebrate just a little bit. The JRN did not copy his name. </li> </ul> <hr> <h4> Topic: The Q3 Payload report </h4> On this week's program, the Q3 Payload report is going to be the topic. Looks like QBot is still at the top, even though they were dismantled. This was quite interesting. There are two different Rats that are part of the problem now, and these aren't rodants. These are Trojans. In this terminology, Rat stands for Remote Access Trojan. Phishlabs has this article and its titled <a href="https://www.phishlabs.com/blog/q3-payload-report/">Q3 Payload Report </a> and you should read it in full if you wish to do so. You'll thank us later. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Welcome to the Security box, podcast 171. We hope that each and every one of you have had a happy Thanksgiving and have recharged your batteries. On this edition, we're making it official and am bringing back the things to ponder. We'll explain what we're going to do and we put it in practice last podcast. If these things to ponder have blog posts, we'll link them from right within the program's show notes so you can read what we're talking about. We'll also have news, notes, any moron of the podcast and our topic talking about URL shorteners and a recent trend with them. We hope you enjoy the show as much as we have bringing the show for you! For full notations, please see <a href="http://www.jaredtech.help">The Blog </a> as we'll link to other things we don't have room here to cover. <hr> <h4> The top level domain that harbors a malicious shortener is ... </h4> According to a recent article from Brian Krebs, the most prolific domain now that has a URL shortening service that pumps out scams, phishing and just all around bad is the TLD that belongs to the United States. Read my thoughts and find a link to the article right here. <a href="https://technology.jaredrimer.net/2023/11/04/the-top-level-domain-for-the-united-states-now-harbors-malicious-url-shortening-service/">The Top level domain for the United States now harbors malicious URL shortening service </a> is the article title, and I hope you give it a gander. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to the podcast. We're talking about password managers in a big way today. Links to the major managers are given. Its not a complete list, and there may be others I'm not aware of that may be trusted or we don't know much about. We bring back things to ponder in a different way and you'll get a taste of this in this podcast. I hope you enjoy the program as much as we have bringing it together for you. Happy holidays from all of us at the JRN! <hr> <h4> Things to ponder </h4> Today, we've got two for you and they're both blog posts. <ul> <li> <a href="https://technology.jaredrimer.net/2023/11/20/how-much-does-social-media-cost-underground/">How much does social media cost underground? </a> </li> <li> <a href="https://technology.jaredrimer.net/2023/11/20/cleanup-on-isle-1-really-experian-you-still-can-sign-up-and-take-ones-account-over/">Cleanup on Isle 1! Really Experian? You still can sign up and take one’s account over? </a> </li> </ul> Want your opinion known in this segment? Send an audio file! <hr> <h4> Password managers </h4> Below, please find the list of managers we talked about. Again, this isn't a complete list. Make sure you listen to the first segment which explains why we decided to put this podcast together. <ul> <li> <a href="http://www.1password.com">1password </a> </li> <li> <a href="http://www.lastpass.com">Lastpass </a> </li> <li> <a href="https://keepass.com/">Keepass </a> </li> </ul> <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

Hello folks, welcome to TSB podcast 169. On this program, we're going to talk about Generation Z and an article I found that delbt with their privacy concerns. We may also have a moron, news, notes and more. <hr> <h4> Our Moron </h4> <a href="https://technology.jaredrimer.net/2023/11/12/temu-is-now-getting-sued-kim-komando-called-this-one/">Temu is now getting sued, Kim Komando called this one </a> is the blog post leading to our moron. We even have an up-to-date minute on Temu too. <hr> <h4> Our topic </h4> Our topic this week comes from the Malwarebytes blog. My blog post <a href="https://technology.jaredrimer.net/2023/11/07/what-does-generation-z-think-about-privacy/">What does Generation Z think about privacy? </a> has thoughts and leads directly to the article by David. Let's see what you think. <hr> <h4> Supporting the podcast </h4> If you'd like to support our efforts on what this podcast is doing, you can feel free to <a href="http://www.jaredrimer.net/donations.html">donate to the network, </a> <a href="https://www.986themix.com/mailman/listinfo/thesecuritybox_986themix.com">subscribing to the security box discussion list </a> or sending us a note through contact information throughout the podcast. You can also find contact details on our <a href="https://technology.jaredrimer.net/contact-admins/">blog page found here. </a> Thanks so much for listening, reading and learning! We can't do this alone. <hr> <h4> Internet Radio affiliates airing our program </h4> Our Internet Radio stations that carry us include <a href="http://bluestreakradio.com">Blue Streak Radio </a> and <a href="http://internationalfriendsnetwork.godaddysites.com">International Friends Radio Network. </a> The program is also carried live through <a href="http://magnatune.jaredrimer.net">the Independent Channel </a> which is part of <a href="http://www.986themix.com">98.6 the mix, KKMX, International. </a> If you want to carry us, please use <a href="http://www.jaredrimer.net">the Jared Rimer Network site </a> to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!