428: Free Chocolate & HACKZ

Making It · 2 Feb 2024 · 1h 08m

What this episode covers

Jimmy Diresta, Bob Clagett, and David Picciuto discuss recent projects, including Diresta's custom whiskey boxes for Bulleit Bourbon and Picciuto's record player stand, before diving into a detailed discussion on cybersecurity. The hosts share personal experiences with phishing scams, explain how hackers bypass two-factor authentication via malicious PDFs, and recommend tools like One Password and physical security keys to protect accounts. They also cover the hack of YouTuber Matthias from Woodgears and offer advice on verifying online transactions to avoid fraud.

Mentioned

Companies
Bulleit Bourbon, Proof Media
Tools
One Password
Also
Woodgears, Whistling Diesel, Justin Hawkins Rides Again, Otto Baum, Patrick Hicks

Other shows on the same ground, closest first.

  • Hackaday Podcast · 58m

    Ep 193: Found Computers, Internet Over WhatsApp, Two-Factor C64, Shifting Cars, and Self-Shooting Fighter Planes

    Editors Elliot Williams and Dan Maloney review a week of hacks, including tunneling IP over WhatsApp, generating 2FA codes on a Commodore 64, and emulating ISA cards with an FPGA. They discuss the security of a Zap Tech EV charger, the prevalence of Linux in scavenged smart TVs, and repurposing 3D printers for lab automation. The episode concludes with a discussion on the F-11 Tiger's self-shooting incident and the importance of physical modeling in engineering.

  • Unnamed Reverse Engineering Podcast · 1h 14m

    028 - Everyone Has a Bag of Tricks

    Johnny Xmas (@J0hnnyXm4s), a security architect and reverse engineer, discusses his career path from pharmacy to infosec and details the community effort to reverse engineer TSA master keys. He explains how the keys were leaked via a vendor catalog and Instagram, and how the community used 3D printing and lock disassembly to create working copies, highlighting the security implications for luggage and encryption. Xmas also describes his work at Kasada, a company that defends web infrastructure against automated abuse by detecting client-side automation rather than relying on traditional Web Application Firewalls (WAFs).

  • Manufacturing Happy Hour · 34m

    Common Cybersecurity Threats and What to Do about Them with Dana Mantilia

    Dana Mantilia, founder of Identity Protection Planning, explains that 85% of cybersecurity failures stem from non-technical employees clicking malicious links or sharing credentials, rather than technical firewall breaches. She outlines immediate steps for manufacturers, including creating digital asset inventories and enforcing basic cyber hygiene, to prepare for the Department of Defense's CMMC certification requirements. Mantilia also details her content strategy of using humor and props in short videos to simplify complex security topics for small businesses.

  • Embedded.fm · 1h 10m

    205: Questions about Dumplings

    Addie and Whisker of Toymakers discuss their CypherCon conference badge, a cube-shaped device featuring a text adventure game, a custom time-sharing operating system, and IR-based hacking mechanics. They explain how they designed the hardware to withstand physical tampering by hackers and created multiple tiers of engagement, from simple LED patterns to complex privilege escalation puzzles. The conversation also covers their Tindie store, highlighting best-selling kits like the Amplify Me amplifier and the Protosynth Midi synthesizer, and their philosophy on making accessible, complete products for learners.

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Making It. The episode itself belongs to its publisher.