Cyberattacks
325 episodes · Page 4 of 14
#4741: Hardware Tokens That Never Leave the Port
Why developers should consider keeping a hardware security token permanently plugged in — and which ones survive the abuse.
#4740: Why FTP Still Exists and SSH Won't Die
FTP from 1985 is still not deprecated. SSH from 1995 keeps evolving. What determines which protocols survive?
#4736: Running Networks Where Failure Means Lives Lost
How military sysadmins run air-gapped networks where mistakes cost lives, not just money.
#4665: The Hidden Auction Where Your Data Gets Sold
How your phone's location, shopping habits, and health searches get auctioned off in milliseconds — and why paying for apps doesn't protect you.
#4649: Why Open Source Heroes Can't Afford Rent
The code running the internet is maintained by people earning a dollar a year. Why does the market fail to reward our digital commons?
#4636: Taming Three DNS Overlays on One Laptop
Commercial VPN, Tailscale, and WARP on one machine — here's how to make them share DNS without leaking a single query.
#4635: Your Phone Is a Firewall Blind Spot — Here's Why
Android ships with no user-facing firewall, and cellular isn't the safe LAN you think. We dig into what's exposed and what actually protects you.
#4602: The Two Manifests: API vs PNR Explained
Passenger manifests aren't one list — they're two distinct data transmissions with different purposes, formats, and legal frameworks.
#4582: Designing a Home MCP Gateway for Conversational AI
How to securely connect ChatGPT to a home-hosted MCP gateway — transport, auth, and the missing pieces.
#4515: Where Extremist Forums Actually Went After Reddit Bans
Reddit bans didn't push extremists to the dark web. They went to Telegram. Here's why.
#4514: Reddit's Strangest Corners: Bread Stapled to Trees and Beyond
Exploring the weirdest subreddits — from bread stapled to trees to bot-only communities — and why they thrive.
#4461: Inside a GLB File: Binary Format, Textures, and PBR
What's actually inside a GLB file? We hex dump one and walk through every byte — JSON chunks, binary buffers, textures, and PBR materials.
#4459: Fixed Egress IP From Anywhere: Is IP Allowlisting Dead?
How to get a static IP from anywhere for admin access — and whether IP allowlisting still makes sense in 2026.
#4450: Intercepting Claude Code: The Proxy Ecosystem
How middleware proxies intercept, reroute, and transform AI tool traffic — and what it means for users.
#4435: How 30 Meal Codes Feed 300 Passengers
The hidden supply chain behind your in-flight meal — from IATA codes to RFID-tracked carts.
#4426: Rooting's Dead End: Phone Control in 2026
Google's Titan M2 chip killed the rooting cat-and-mouse game. What now for power users?
#4425: DNS Blocking That Doesn't Break Everything
How to block ads and trackers at the network level without breaking your spouse's banking app or your kid's game.
#4424: Inside the 3D Secure Redirect: What Happens When Your Card Gets Challenged
That split-second redirect at checkout is 3D Secure 2. Here's how the ACS, risk scoring, and SMS challenges actually work.
#4419: 55M Addresses Leaked: What Suno Users Need to Know
Suno's breach exposed addresses and partial credit cards. What duty of care do companies owe when data becomes a physical threat?
#4417: How to Tell Real Security Tools From Fakes
A friend's question about SSN monitoring reveals how to spot fake security tools designed to steal what you're trying to protect.
#4412: When Hacking Becomes Disclosure: The Suno Breach
A hacker stole Suno's internal training code and handed it to a journalist. Was it a crime or whistleblowing?
#4409: The Port Concession Trap: Dependency vs. Malware
Why letting a foreign state-run your port for 25 years is worse than any Trojan horse.
#4398: The Machine Behind Andrew Tate
How pickup forums, Red Pill ideology, and looksmaxxing created the infrastructure that produced Andrew Tate.
#4375: How to Audit 47 Stale Sessions Without Breaking Everything
A systematic method for identifying and cleaning up forgotten sessions without locking yourself out of critical services.