Mostly Security Podcast
@mostlysecurity.com
Mostly Security is a podcast about security (mostly). We chat about what's going on around us, things we find interesting, and other random stuff.
Episode 416: Ant Honey
Mostly Security: 416: Ant Honey
Eric and Jon prep for Thanksgiving. Will blue and green bubbles coexist in peace and harmony? Will the airlines stop sharing flight data with the IRS? And is monitoring every car, everywhere, at all times 'unreasonable search'? ¯\_(ツ)_/¯ Have some Ozone and a Honey chaser. 0:00 - Intro 8:11 - 12:14 - 18:34 - 25:16 - 32:40 -
podcast.mostlysecurity.com
November 29, 2025 at 5:26 PM
Episode 416: Ant Honey
5th Smallest (is good?)
NASA, NOAA Rank 2025 Ozone Hole as 5th Smallest Since 1992 - NASA Science
The ozone hole over the Antarctic was small in 2025 compared to previous years and remains on track to recover later this century. The hole this year was the fifth smallest since 1992, the year a landmark international agreement to phase out ozone-depleting chemicals began to take effect.
science.nasa.gov
November 29, 2025 at 5:26 PM
5th Smallest (is good?)
'Suspicious' Travel Patterns
Border Patrol is monitoring US drivers and detaining those with 'suspicious' travel patterns
The U.S. Border Patrol is monitoring millions of American drivers nationwide in a secretive program to identify and detain people whose travel patterns it deems suspicious.
apnews.com
November 29, 2025 at 5:26 PM
'Suspicious' Travel Patterns
Travel Intelligence Program
Airline data broker to stop selling individuals’ travel records to government agencies
News that the Airlines Reporting Corporation (ARC) will shut down its controversial Travel Intelligence Program (TIP) surfaced in a letter ARC CEO Lauri Reishus sent to a bipartisan group of lawmakers on Tuesday.
therecord.media
November 29, 2025 at 5:26 PM
Travel Intelligence Program
QuickShare + AirDrop
Google enables Pixel-to-iPhone file sharing via Quick Share, AirDrop
Google has added interoperability support between Android Quick Share and Apple AirDrop, to let users share files between Pixel devices and iPhones.
www.bleepingcomputer.com
November 29, 2025 at 5:26 PM
QuickShare + AirDrop
Episode 414: Fig Wasp Redux
Mostly Security: 414: Fig Wasp Redux
Eric goes to Nateland and Jon goes flying. Another javascript worm, and automatic license plate reader records declared public in Washington. For fun we have a repo of annual security reports and Jon suffering memory loss and search ineptitude, but fig wasps are still cool. 0:00 - Intro 17:20 - 21:50 - 28:55 - 29:26 - 30:43 -
podcast.mostlysecurity.com
November 15, 2025 at 4:54 PM
Episode 414: Fig Wasp Redux
Shy figs
Are There Dead Wasps in Figs? Are There?
If we love figs, we must learn to love the fig wasp.
www.bonappetit.com
November 15, 2025 at 4:54 PM
Shy figs
Annual Security Repo(rts)
GitHub - jacobdjwilson/awesome-annual-security-reports: A curated list of annual cyber security reports
A curated list of annual cyber security reports. Contribute to jacobdjwilson/awesome-annual-security-reports development by creating an account on GitHub.
github.com
November 15, 2025 at 4:54 PM
Annual Security Repo(rts)
Nate Bargatze - https://nateland.com/
November 15, 2025 at 4:53 PM
Nate Bargatze - https://nateland.com/
Conclusions of Law - https://www.404media.co/judge-rules-flock-surveillance-images-are-public-records-that-can-be-requested-by-anyone/
November 15, 2025 at 4:53 PM
Glassworm
How GlassWorm wormed its way back into developers’ code — and what it says about open source security
Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode and blockchain C2 tricks.
www.csoonline.com
November 15, 2025 at 4:53 PM
Glassworm
Episode 412: Precondition Failed
Mostly Security: 412: Precondition Failed
Remote Eric Assist and Jon enjoys ... hockey(??). More prompt injections, the most damaging UK cyber event (so far), and residential proxy use for fun and training data. Will Agentic AI bring back micropayments, and how is Costco's pumpkin pie so good? 0:00 - Intro 10:47 - 16:56 - 19:32 - 24:34 - 29:49 -
podcast.mostlysecurity.com
November 1, 2025 at 3:52 PM
Episode 412: Precondition Failed
Six Million Pies
The Secret to Costco's Best-Selling Pumpkin Pie
In the book "The Joy of Costco: A Treasure Hunt from A to Z" authors David and Susan Schwartz reveal the secret to Costco's delicious, top-selling pumpkin pie: Dickinson pumpkins. Here's what sets the gourd apart.
www.allrecipes.com
November 1, 2025 at 3:52 PM
Six Million Pies
Original Sin (??)
HTTP 402’s Modern Makeover | Pantera
panteracapital.com
November 1, 2025 at 3:52 PM
Original Sin (??)
Economically Damaging
JLR hack 'is costliest cyber attack in UK history', experts say
The cyber attack on Jaguar Land Rover is estimated to cost £2.1bn, the Cyber Monitoring Centre says.
www.bbc.com
November 1, 2025 at 3:52 PM
Economically Damaging
Death, Taxes, and Prompt Injections
AI browsers wide open to attack via prompt injection
Feature: Agentic features open the door to data exfiltration or worse
www.theregister.com
November 1, 2025 at 3:52 PM
Death, Taxes, and Prompt Injections
Episode 408: Request Timeout
Mostly Security: 408: Request Timeout
Eric is traveling and Jon is repairing. Coordinated arrests of scammers across Africa, the world's first malicious MCP server (is super simple), the release of the Sony CD player 43 years ago, and CRISPR modified yeast to create pollen substitute for the bees. 0:00 - Intro 10:27 - 17:13 - 23:02 - 27:02 -
podcast.mostlysecurity.com
October 4, 2025 at 4:26 PM
Episode 408: Request Timeout
Y. Lipolytica Sterols - https://www.ox.ac.uk/news/2025-08-20-saving-bees-superfoods-new-engineered-supplement-found-boost-colony-reproduction
October 4, 2025 at 4:26 PM
October 4, 2025 at 4:26 PM
Operation Contender 3.0
Interpol operation disrupts romance scam and sextortion networks in Africa
Authorities said the cybercrime rings impacted almost 1,500 victims, resulting in about $2.8 million in combined losses.
cyberscoop.com
October 4, 2025 at 4:26 PM
Operation Contender 3.0
Episode 406: Triple Square
Mostly Security: 406: Triple Square
Eric paints and Jon does something I'm sure. Void proxy tackles the complexity of breaking MFA, and Bitcoin ATMs for Scammers. How about a bit of neuromodulation on Pythagorean Triple Square Day. 0:00 - Intro 13:19 - 16:54 - 21:24 - 24:33 -
podcast.mostlysecurity.com
September 20, 2025 at 4:03 PM
Episode 406: Triple Square