This past weekend, Eric was forgetfully productive. Meanwhile, Jon moved a child into the dorms and battled some radiator problems. On other fronts, AI agents got duped, and self-replicating worms made their way through NPM. Good news: Entra ID tenants dodged a major security event. For a bit of nostalgia, Eric whipped up some lemon bars, and Jon chowed down on pizza.

• 0:00 - Introduction
• 9:05 - AI Agents FTW
• 13:56 - Shai-Hulud!
• 18:01 - One Token to Rule them All
• 22:55 - Lemon Bars
• 25:10 - HTTPizza

Eric paints and Jon does something I'm sure. Void proxy tackles the complexity of breaking MFA, and Bitcoin ATMs for Scammers. How about a bit of neuromodulation on Pythagorean Triple Square Day.

• 0:00 - Intro
• 13:19 - Void Proxy
• 16:54 - 93% Scams
• 21:24 - Neuromodulation (?)
• 24:33 - Pythagorean Triple Square Day

Eric updates the mostlysecurity.com vibe. Jon jars honey. Plex asks users to change their passwords. iPhone 17 has new security features. Not to be outdone numerically, 18 Javascript packages were compromised. Eric plays with epoxy and glitter, while Jon reminisces of Perl.

• 0:00 - Introduction
• 15:33 - Plex Passwords
• 20:09 - iPhone 17 Security
• 25:58 - 18 Javascript Packages
• 30:04 - Epoxy and Glitter
• 33:04 - Perl

Eric returns and Jon has a flat tire. Kuiper achieves a gigabit, Google releases fixes for 84 vulns in android, and prompt injection in Comet, Perplexity's AI browser. The Pixel 10 has a crazy good camera, and the third interstellar object ever discovered.

• 0:00 - Intro
• 10:02 - Followup
• 13:13 - Limited Targeted Exploitation
• 16:00 - Comet Injection
• 25:57 - Smartest Camera
• 33:04 - Interstellar Object 3I

Eric plays with epoxy resin, Jon has a new calf. Cybersabotage on your ex-employer will get you 4 years. There are 1200 fewer robocallers thanks to the FCC. Password manager plugins for web browsers can be fooled. The Commodore 64 is back and really old honey is discovered in Italy.

• 0:00 - Introduction
• 8:53 - Four Years
• 10:22 - Robocall Roundup
• 12:57 - Password Manager Hijack
• 18:39 - Commodore 64
• 22:47 - Really Old Honey

Eric prints and Jon fixes washer. The Noodlophile stealer propagates via legal infringement claims, and portal auth issues allow control of connected cars. For fun we have book four of the Lady Astronaut series, and using generative AI to create targeted antibiotics for drug resistant diseases.

• 0:00 - Intro
• 12:32 - Noodlophile
• 16:51 - Automotive Authentication Antics
• 23:39 - The Martian Contingency
• 27:33 - AI Antibiotics

Eric makes it home from vacation, Jon goes fishing. Tough time to be graduating in Computer Science. DrawAFish.com security incident. AOL discontinues down dial up service. Mendenhall Glacier makes the local news.

• 0:00 - Introduction
• 8:24 - Tough Times in Tech
• 14:34 - Draw A Fish
• 21:48 - AOL Dial Up
• 25:06 - Mendenhall Glacier

Eric's on vacation and Jon wrangles cows. Cloudflare accuses perplexity of stealth scraping tactics, Google tweaks their disclosure policy, Microsoft studies AI impact on jobs, and OpenAI shared chats disclose a little (lot) too much. For fun, how about a hike in the Tetons, and Potatoes from Tomatoes.

• 0:00 - Intro
• 11:55 - Stealth Bots
• 16:24 - Disclosure Policy
• 20:29 - Occupational Implications
• 29:49 - ChatGPT Confessions
• 39:42 - Jenny Lake
• 41:56 - Potato, Tomato