Mostly Security
From commentary on current events to random musings, they chat (mostly) about security and technology topics. However, life is more than just the day job, there's always something fun to wrap up the show.
Episodes
Jon has bee disappointments and Eric geeks out over the Artemis II mission. AI Agents are the attack surface. The ClickFix macOS abuse evolves. Anthropic's new AI Model is apparently pretty smart. Sandstorm found on Mars. Finally, mapping neuron connections using RNA barcodes?
- 0:00 - Introduction
- 8:24 - Artemis II
- 13:32 - AI Agent Dangers
- 19:33 - ClickFix Evolution
- 24:31 - Anthropic's New Model
- 29:04 - Sandstorm on Mars
- 32:04 ...
Eric releases updated apps, and Jon's back from vacation. Autonomous jailbreaks, a malicious release of a popular npm package, and Anthropic accidentally releases source maps for claude code. The Artemis II launched successfully, and an opportunistic visit to bronze age burial cairns.
- 0:00 - Intro
- 17:18 - AI, Attack Thy Brethren
- 22:04 - Malicious Axios Package
- 26:58 - Claude Code Leak
- 35:21 - To The Moon!
- 37:40 - Clava Cairns ...
Spring Break! Jon shares a couple fun notes before heading out and Eric pulls a few favorites from the archives. Enjoy Something Fun!
- 0:00 - Spring Break!
- 0:29 - Hidden Water Beneath Mars
- 2:36 - Chickpeas Grown in Simulated Moon Soil
- 4:43 - Episode 403: Commodore 64
- 8:51 - Episode 403: Really Old Honey
- 12:48 - Episode 378: Woolly Mammoth Mouse
- 16:15 - Episode 378: Greenland Sharks
- 21:48 - Episode 397: Aardwolfs and Numbats
Eric enjoys Mozart's Requiem and Antigravity. Jon goes fishing. Amazon Kuiper is now Leo. Claude vulnerabilities are chained to do bad things. Google releases the H1 2026 Cloud Threat Horizons Report. Ravens are smart. Spiral Galaxies are cool.
- 0:00 - Introduction
- 8:13 - Amazon Leo
- 10:46 - Claudy Day
- 15:27 - Google Cloud Threat Report
- 21:31 - Wolf-Predicting Ravens
- 23:10 - Spiral Galaxy
Eric updates Squares! after a 15 years hiatus and Jon decides to become an Apple Developer. The FBI issues a scam alert on planning and zoning permits. Google buys security company Wiz. Stryker Medical hit by wiper malware. NASA has cool eyes and we're now modeling every biological molecule.
- 0:00 - Introduction
- 11:10 - FBI Alert
- 14:12 - Google buys Wiz
- 17:03 - Cyber Destruction
- 20:05 - NASA Eyes
- 22:28 - Modeling Biology
Eric goes hiking and Jon gets his Eufy. AI assisted breaches faster than ever, and Anthropic struggles to expand server capacity. Fun playing with materials in a web Sandbox (sandvox?) and an image of 3I that took a while to download.
- 0:00 - Introduction
- 11:28 - 27 Second Breach
- 16:40 - Claud's Week
- 23:51 - Sandboxels
- 27:23 - 3I Image
Jon goes behind the scenes at the symphony while Eric gets back to normal. Steganography used to conceal malicious code. University of Mississippi Medical Center ransomware attack. AI-Assisted Threats continue to evolve. Eric clicks mindlessly in townscaper (not townscraper) and Jon finds AI helpful in finding rare earth metals.
- 0:00 - Introduction
- 12:12 - Steganographic Code
- 15:49 - Medical Center Ransomware
- 18:38 - AI-Assist...
More AI coding, only Peter can go to [OpenAI], Human Rentals, Backup Persistence, and Really Old Vulnerabilities. Have fun on the Useless Web and why not release genetically engineered biophages? What could go wrong.
- 0:00 - Intro
- 12:19 - Peter Goes To OpenAI
- 12:52 - Openclaw Infostealer
- 16:22 - Rent-a-Human
- 19:20 - Backup Persistence
- 21:37 - 18 Year Old Vuln
- 24:40 - The Useless Web
- 26:48 - CRISPR for Antibiotic Resistance
More fun with AI Agents and Mason Bees. OpenClaw is all the rage and as insecure as it readily admits. Squatting 7Zip ia a Proxy Node? Eric marvels over the largest tree and Jon talks about AI building compilers. AI is going to college.
- 0:00 - Introduction
- 10:41 - OpenClaw Insecurity
- 17:33 - 7Zip Squatting
- 21:13 - Pando Tree
- 24:22 - AI Compiler Developer
Jon copes with flat tires and Eric continues AI coding adventures. Much ado about crustaceans, apple working towards ending carrier tracking, and abusing Microsoft to send scams. Weavesilk.com is fun to play with, and Google deepmind is attempting to understand dolphins.
- 0:00 - Intro
- 8:38 - Openclaw Renaming
- 11:09 - Closing the Carrier Loophole
- 17:04 - Power BI Abuse
- 22:57 - Weave Silk
- 24:58 - Dolphin Gemma
Eric does more AI coding and avoids water problems. Jon makes some AI coding discoveries and we're not talking about automobile water problems. Everybody uses a browser at work. Python RATs discovered in spell checkers. Eric looks through windows around the world and Jon introduces us to Gladys West.
- 0:00 - Introduction
- 8:42 - Browsers Everywhere
- 13:17 - Spell Checker RATs
- 17:23 - Windows around the World
- 19:22 - Gladys West a...
Eric codes and Jon harvests cocoons on the three day weekend. Path traversal bugs in Anthropic's git MCP server, and why LLMs continue to fall for prompt injection attacks. Drive and listen to local radio in cities around the world, and does a disconnected brain hemisphere dream?
- 0:00 - Intro
- 7:17 - Anthropic Git MCP
- 10:14 - Context and Judgement
- 19:04 - Drive and Listen
- 21:14 - Brain in a Vat
Jon and Eric are in Texas. Again. Eric continues his AI Coding journey porting old Mac Apps to SwiftUI. Jon may or may not have a fixed vehicle when he returns. China fights scam compounds for China. ClickFix continues to challenge consumers. Eric finds fun ways to say "No" while Jon discovers the Great Daylight Fireball.
- 0:00 - Introduction
- 3:42 - Do Not Buy This
- 9:32 - China Fights Scam Compounds
- 13:06 - ClickFix Continues
- 2...
Eric makes an app, and Jon semi-celebrates the new year. For topics we have robocall registration penalties, reverse engineering a scooter's protocol, and the current saga of Mongo Bleed. And for fun we have a captcha game, training a doodle model, and a personal filament extruder. Happy New Year!
- 0:00 - Intro
- 10:52 - Robocall Deepfake Followup
- 17:06 - Reverse Engineered e-Scooter Protocol
- 22:17 - Mongo Bleed
- 29:13 - Not a Rob...
Eric goes out to eat, Jon gets powertools. Arrests at Coinbase outsourcing firm. Six Cybersecurity predictions for 2026. Eric finds a personally nostalgic TV show and Jon looks back on the scientific discoveries of 2025.
- 0:00 - Introduction
- 10:46 - Inside Job at Coinbase
- 13:59 - Cybersecurity Forecast
- 19:56 - Untamed
- 22:31 - Significant Scientific Stuff of 2025
Eric and Jon are both fully prepped for the holiday. Flock leaves (many) cameras including control panels open and exposed to the open internet, what if more malicious npm packages worked as advertised, and Microsoft is finally disabling rc4 by default in Active Directory. For fun we have two movies for holiday watching: F1: The Movie, and Howl's Moving Castle. Enjoy!
- 0:00 - Introduction
- 11:38 - Open Flock Livestreams
- 18:09 - ...
Jon's car may or may not be fixed. Eric didn't go to Disneyland. Android is making in-call scam protection better. AI is creating a Blessing of Unicorns. Parked Domains keep scammers alive. Space is getting crowded. Word of the Year - Slop.
- 0:00 - Introduction
- 6:38 - In Call Scam Protection
- 10:21 - A Blessing of Unicorns
- 13:15 - Parked Domains are Evil
- 17:55 - House of Satellite Cards
- 24:10 - Slop
Christmas in full swing at both Eric and Jon's places. Less secure certificate validation mechanisms being deprecated, and SEO of AI chats to deploy ClickFix style lures for Stealer installation. For fun we have a shockingly good way to avoid motion sickness in VR, and a promising Leukemia treatment using gene therapy.
- 0:00 - Intro
- 9:28 - Weak Validation
- 14:45 - No Red Flags
- 21:34 - Stimbox
- 27:42 - BE-CAR7
Eric tracks hack attempts and Jon trades blood for pinball. Shai-Hulud is back, Calendly invite scam, Rust for good and evil. Giving Machines for the holiday season and Spores in Space!
- 0:00 - Introduction
- 13:48 - Shai-Hulud is back
- 16:59 - Calendly Invite Scam
- 19:11 - Rust for Good and Evil
- 24:33 - Giving Machines
- 28:00 - Spores in Space
Eric and Jon prep for Thanksgiving. Will blue and green bubbles coexist in peace and harmony? Will the airlines stop sharing flight data with the IRS? And is monitoring every car, everywhere, at all times 'unreasonable search'? ¯\_(ツ)_/¯ Have some Ozone and a Honey chaser.
- 0:00 - Intro
- 8:11 - QuickShare + AirDrop
- 12:14 - Travel Intelligence Program
- 18:34 - 'Suspicious' Travel Patterns
- 25:16 - 5th Smallest (is good?)
- 32:40 - Ho...
Popular Podcasts
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Does hearing about a true crime case always leave you scouring the internet for the truth behind the story? Dive into your next mystery with Crime Junkie. Every Monday, join your host Ashley Flowers as she unravels all the details of infamous and underreported true crime cases with her best friend Brit Prawat. From cold cases to missing persons and heroes in our community who seek justice, Crime Junkie is your destination for theories and stories you won’t hear anywhere else. Whether you're a seasoned true crime enthusiast or new to the genre, you'll find yourself on the edge of your seat awaiting a new episode every Monday. If you can never get enough true crime... Congratulations, you’ve found your people. Follow to join a community of Crime Junkies! Crime Junkie is presented by Audiochuck Media Company.
Saskia Inwood woke up one morning, knowing her life would never be the same. The night before, she learned the unimaginable – that the husband she knew in the light of day was a different person after dark. This season unpacks Saskia’s discovery of her husband’s secret life and her fight to bring him to justice. Along the way, we expose a crime that is just coming to light. This is also a story about the myth of the “perfect victim:” who gets believed, who gets doubted, and why. We follow Saskia as she works to reclaim her body, her voice, and her life. If you would like to reach out to the Betrayal Team, email us at betrayalpod@gmail.com. Follow us on Instagram @betrayalpod and @glasspodcasts. Please join our Substack for additional exclusive content, curated book recommendations, and community discussions. Sign up FREE by clicking this link Beyond Betrayal Substack. Join our community dedicated to truth, resilience, and healing. Your voice matters! Be a part of our Betrayal journey on Substack.
The World's Most Dangerous Morning Show, The Breakfast Club, With DJ Envy, Jess Hilarious, And Charlamagne Tha God!
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com