The Host Unknown Podcast Episode 44 - Fly My Pretties, Fly!
This week in Infosec
Liberated from the “today in infosec” twitter account:
25th February 1989: Knight Lightning published an Enhanced 911 technical doc (it had been stolen from a BellSouth computer) to Phrack under the pseudonym "The Eavesdropper".
http://phrack.org/issues/24/5.html#article
https://en.wikipedia.org/wiki/United_States_v._Riggs
On This Day: Feb. 25, 2005, authorities arrested Dennis Rader, a municipal employee and church leader, for the so-called BTK (blind, torture, kill) serial killings that terrorized Wichita, Kan. Rader was convicted and sentenced to 10 consecutive life terms.
Between 1974 and 1991, he murdered at least 10 people in Wichita, Kansas. He apparently got away with it for over a decade.
In 2004 an article was published suggesting that nobody remembered him.
Desperate for notoriety, he began to write to the police and media gloating and showboating.
In 2005 he sent a floppy disk with some bragging. When police examined the disk, they found metadata of an old word document on it which revealed the name of the Church where he worked and his surname.
https://www.abajournal.com/magazine/article/how_the_cops_caught_btk
Bill Big Balls of the Week
I use an email tracker to spy on people I work with. This is why
https://www.independent.co.uk/life-style/email-trackers-how-to-work-b1806723.html
Rant of the Week
Apple has long held its position on iCloud backups. It has focused on usability rather than total security. If a user changes iPhone and wants all their old iMessages, the easiest way to retrieve them is by getting Apple to store and send them from the iCloud to the new device. It’s the same for other messaging apps like WhatsApp, which offers backups.
But Apple has reportedly considered making iClouds much more difficult for police to access.
A Reuters report last year suggested that Apple did have plans to fully encrypt iCloud accounts too, so only users had the key, but backed down. Though the report claimed the decision was made after the FBI asked for iClouds to remain accessible, Reuters found no evidence of Apple’s motivation for ditching the plans.
Industry News
Internet Registry RIPE NCC Warns of Credential Stuffing Attack
Concern as Attacker “Breakout” Time Halves in 2020
US Retailer Kroger Admits Accellion Breach
Aircraft-Maker Bombardier Breached by Accellion FTA Hackers
Legal Firm Leaks 15,000 Cases Via the Cloud
Aston Martin Partners with SentinelOne
CrowdStrike Slams Microsoft Over SolarWinds Hack
Educational Adaptation Required to Close the Cyber-Skills Gap
Javvad’s Weekly Stories
6000 vmware vcentre devices vulnerable to remote attacks
Is Clubhouse safe, and should CISOs stop its use?
Google Alerts used to launch fake Adobe Flash Player updater
Hackers are using Google Alerts to help spread malware
Javvad wins 2021 Cybersecurity Professional Awards – Winners
Tweet of the Week (not aired)
https://twitter.com/HackingDave/status/1364945642599182344?s=20
The Little People
Yousef Syed and security architects
Come on! Like and bloody well subscribe!