Smashing Security Jail after VPN fail, criminal messaging apps, and wolf-crying watches
Feb 8, 2023
01:05:30
Ubiquiti Insider Breach
- Nicholas Sharp, a Ubiquiti cloud team employee, exploited his access to steal gigabytes of company data.
- His use of a VPN failed, leading to his identification and eventual guilty plea facing 35 years in prison.
VPN Tips for Cybercriminals
- Criminals must always use a VPN to protect their identity.
- Avoid enabling kill switches on VPNs and link PayPal accounts to anonymous emails.
Police Undermine Encryption Myths
- Police and criminals both help expose vulnerabilities in encrypted messaging apps.
- Dutch police decrypted millions of criminal communications, undermining claims about encrypted messaging's invulnerability.
Get the Snipd Podcast app to discover more snips from this episode
Get the app 1 chevron_right 2 chevron_right 3 chevron_right 4 chevron_right 5 chevron_right 6 chevron_right 7 chevron_right 8 chevron_right 9 chevron_right 10 chevron_right 11 chevron_right 12 chevron_right 13 chevron_right 14 chevron_right 15 chevron_right 16 chevron_right 17 chevron_right 18 chevron_right 19 chevron_right 20 chevron_right 21 chevron_right 22 chevron_right 23 chevron_right 24 chevron_right 25 chevron_right 26 chevron_right 27 chevron_right 28 chevron_right 29 chevron_right 30 chevron_right 31 chevron_right 32 chevron_right 33 chevron_right 34 chevron_right 35 chevron_right 36 chevron_right
Introduction
00:00 • 2min
What Are You Doing Now, Mark?
01:36 • 2min
Wi-Fi Hotspots - Ubiquiti?
03:16 • 2min
The Internal Whistleblower Hotline
04:53 • 2min
Ubiquity Reacted to Brian Krebs's Claim for Cover-Up
06:59 • 2min
Is There a New Character in the Cloud?
08:37 • 2min
No Way Out With Kevin Costner and Gene Hackman
10:24 • 2min
I'm a Whistleblower Inside the Ubiquity
12:13 • 2min
Cyber Criminals - Use a User VPN.
14:07 • 2min
Is Encryption Stopping the Police?
15:52 • 2min
Is Encryption Back Kills?
17:47 • 2min
Encrypted Messages on Blackberry Phones
19:37 • 2min
Encrypted Emails - Phantom Secure?
21:33 • 2min
Encrypted Messages and Noms
23:08 • 2min
Is He Grim?
25:07 • 2min
Is There Any Criminals Left?
26:41 • 2min
Watches - What's Your Advice Mark?
28:32 • 2min
Apple Watches
30:18 • 2min
Apple Watch Series Eight, iPhone 14 - Improved Crash Detection
31:50 • 2min
Is the Police Creating Encrypted Messaging Systems?
33:23 • 2min
Do You Mind Just Turning Off Life Saving When You're Skiing?
35:10 • 2min
Do We Really Need This?
37:00 • 2min
Secure Envoy - The Best Multi Factor Authentication Solution for Your Business
38:33 • 2min
Last Pass Pass Password Manager - Bitwarden Slash Privacy
40:35 • 2min
I Know Reader Is Awesome!
42:15 • 1min
I Know Reader Is Really Cool
43:44 • 2min
What's Your Pick of the Week?
45:18 • 2min
Is This a Good Book for Children?
46:57 • 2min
What's Your Pick of the Week?
48:28 • 2min
Chris Martin, Head of Solution Architecture at Secure Envoy
50:09 • 2min
Secure Envoy
51:50 • 2min
Multi-Factor Authentication - The Best Strategies for Companies
53:29 • 2min
Is MFA a Threat?
55:51 • 2min
Mfa
57:47 • 2min
Identifying the Gaps in MFA and Multi-Factor Use
59:35 • 3min
Smashing Security Podcast - Chris Martin at Secure Envoy
01:02:53 • 2min
When Ubiquiti suffered a hack the world assumed it was just a regular security breach, but the truth was much stranger... why are police happy that criminals keep using end-to-end encrypted messaging systems... and why is the Apple Watch being accused of crying wolf?
All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.
Plus don't miss our featured interview with SecurEnvoy's Chris Martin.
Warning: This podcast may contain nuts, adult themes, and rude language.
Sponsored by:
- Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
- NordLayer – NordLayer safeguards your company’s network, securing and protecting remote workforces as well as business data. It can even help you ensure security compliance. Get your first month free.
- SecurEnvoy - With growing cyber security threats everyone in your organisation needs authentication tailored to their specific access needs and the risk profile of their role. Check out SecurEnvoy's free guide now.
Episode links:
- Ubiquiti tells customers to change passwords after security breach - ZD Net.
- “No way out” trailer - YouTube.
- Ubiquiti sues journalist, alleging defamation in coverage of data breach - Ars Technica.
- Man charged with Ubiquiti data breach and extortion was employee assigned to investigate hack - Bitdefender.
- Final Thoughts on Ubiquiti - Krebs on Security.
- Former Employee Of Technology Company Pleads Guilty To Stealing Confidential Data And Extorting Company For Ransom - Department of Justice.
- Dutch Police Read Messages of Encrypted Messenger 'Exclu' - Vice.
- Shock and applause for Apple Watch's chilling real-life emergency call ad - Campaign Live.
- 911 call made from Apple Watch of Washington woman buried alive released - Yahoo! News.
- Apple Watch 8 series save yet another life - Live Mint.
- Some first responders are asking iPhone users to disable Emergency SOS and crash detection due to influx of false positives - 9to5mac.
- Emergency SOS via satellite available today on the iPhone 14 lineup in the US and Canada - Apple.
- Inoreader.
- ”The Social Life of Animals” by Ashley Ward - Amazon.
- Black Butterflies - Netflix.
- Smashing Security merchandise (t-shirts, mugs, stickers and stuff)
Support the show:
Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.
Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!
Follow us:
Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.
Thanks:
Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.