Security, Spoken

Walking the enormous exhibition halls at the recent RSA security conference in San Francisco, you could have easily gotten the impression that digital defense was a solved problem. Amidst branded t-shirts and water bottles, each booth hawked software and hardware that promised impenetrable defenses and peace of mind. Learn more about your ad choices. Visit podcastchoices.com/adchoices

WIRED tackled the big questions in security this week, starting with maybe the biggest: Why do so many people use "dragon" as their password? The answer actually says a lot about the psychology of passwords, and how those popular password lists are made in the first place. And there's a whole lot more. Another surprising discovery? Why it makes at least some sense that Atlanta paid $2.6 million to...

This week, MSNBC host Joy Reid has found herself embroiled in a familiar controversy. Twitter user @Jamie_Maz—for the second time—surfaced a number of homophobic posts, from the early aughts, on Reid's now defunct blog, the Reid Report. In response, Reid has turned to a recognizable scapegoat: hackers. Reid isn't the first public figure to blame hackers for her alleged misdeeds online. Learn more...

In February, the ACLU of Massachusetts released a damning report detailing prejudice in social media surveillance efforts by the Boston Police Department (BPD). The report revealed that between 2014 and 2016, the BPD had tracked keywords on Facebook and Twitter in an effort to identify potential terrorist threats. Learn more about your ad choices. Visit podcastchoices.com/adchoices

If you haven't read this month's WIRED cover story about teen hackers who went too deep into Microsoft Xbox's systems, make that your first stop. In more current news, the White House sent mixed messages on cybersecurity policy this week, calling out Russian hackers for compromising popular routers and firewalls—a problematic, but unsurprising and even popular type of attack. Meanwhile, the White...

It's important not to overstate the security risks of the Amazon Echo and other so-called smart speakers. They're useful, fun, and generally have well thought-out privacy protections. Then again, putting a mic in your home naturally invites questions over whether it can be used for eavesdropping—which is why researchers at the security firm Checkmarx started fiddling with Alexa, to see if they cou...

In 2003, Finnish security researcher Tomi Tuominen was attending a security conference in Berlin when a friend's laptop, containing sensitive data, was stolen from his hotel room. The theft was a mystery: The staff of the upscale Alexanderplatz Radisson had no clues to offer, the door showed no signs of forced entry, and the electronic log of the door's keycard lock—a common RFID card reader sold...

On December 2, 2015, a man named Syed Rizwan Farook and his wife, Tashfeen Malik, opened fire on employees of the Department of Public Health in San Bernardino, California, killing 14 people and injuring 22 during what was supposed to be a staff meeting and holiday celebration. The shooters were tracked down and killed later in the day, and FBI agents wasted no time trying to understand the motiva...

The City of Atlanta spent more than $2.6 million on emergency efforts to respond to a ransomware attack that destabilized municipal operations last month. Attackers, who infected the city's systems with the pernicious SamSam malware, asked for a ransom of roughly $50,000 worth of bitcoin. (The exact value has fluctuated due to bitcoin's volatility. Learn more about your ad choices. Visit podcastch...

On Tuesday, about 250 people gathered in the event space of Cloudflare's San Francisco headquarters for an unusual security conference—or, perhaps more accurately, one that aimed to modernize the longstanding tradition in security of creating alternative, transgressive gatherings. Learn more about your ad choices. Visit podcastchoices.com/adchoices

The Democratic National Committee Friday filed a lawsuit against a broad slate of people and entities allegedly responsible for the 2016 hack of its email, phone calls, and more. But while the suit claims involvement from a host of headliners—Wikileaks, Julian Assange, Donald Trump, Jr., and Russia among them—its immediate importance lies in the previously unreported timeline it lays out. Learn mo...

Each year since 2011, the security firm SplashData has released a list of the most commonly used passwords, based on caches of leaked account credentials. The annual list, intended as a reminder of humanity’s poor password practices, always includes predictable entries like “abc123,” “123456,” and “letmein.” But one entry, finishing in the top 20 every year, has stood out since the beginning: "dra...

Facebook profiles have become the de-facto identities of people across the internet. This is thanks, in large part, to Login With Facebook, the social network's universal login API, which allows users to carry their profile information to other apps and websites. You've probably used it to log in to services like Spotify, Airbnb, and Tinder. Learn more about your ad choices. Visit podcastchoices.c...

Less than an hour into a Tinder date in a Moscow restaurant last year, Patrick Wardle began to wonder about the laptop he'd left in his hotel room. Wardle had come to the city for a security conference; as a former NSA staffer who'd worked on the elite hacking unit known as Tailored Access Operations, he was paranoid enough to bring only a "burner" PC on his trip, carefully stripped of any sensiti...

For its first year in office, the Trump administration seemed soft on Russia's hyper-aggressive hackers, reluctant even to point out they'd brazenly meddled in the US election. Then, just two months ago, the White House suddenly came out swinging, calling out Russia for its massively disruptive NotPetya malware and intrusions into the US power grid, and imposing new sanctions in response. Learn mo...

In September, security researchers at Cisco Talos and Morphisec made a worst nightmare-type disclosure: the ubiquitous computer cleanup tool CCleaner had been compromised by hackers for more than a month. The software updates users were downloading from CCleaner owner Avast—a security company itself—had been tainted with a malware backdoor. Learn more about your ad choices. Visit podcastchoices.co...

Have you used a friend's laptop to charge your iPhone and gotten a prompt that says, "Trust This Computer?" Say yes, and the computer will be able to access your phone settings and data while they're connected. And while it doesn't feel like your answer really matters—your phone will charge either way—researchers from Symantec warn that this seemingly minor decision has much higher stakes than you...

The bulk of major corporate hacks follow time-tested strategies, like phishing emails that trick employees into giving up their credentials, or hackers exploiting a bug in a web portal. While effective, these strategies also open an attacker to early detection. So increasingly, hackers have taken the scenic route—through the Internet of Things. Learn more about your ad choices. Visit podcastchoice...

The adult website Pornhub has of late taken pride in being something of a pioneer. A year ago, it implemented HTTPS encryption, making it safer for users to click without being snooped on. Last fall, it introduced a suite of accessibility features for its blind and visually impaired users. And Tuesday, it began accepting Verge, a privacy-focused cryptocurrency Pornhub is not by any stretch the fir...

Today, the White House confirmed that cybersecurity coordinator Rob Joyce will head back to the National Security Agency, where he previously ran the nation’s top hacking team. His departure comes just a week after Tom Bossert, Trump’s cybersecurity czar and Joyce’s boss, was forced out—and leaves the administration without two trusted voices on one of the most important challenges the US faces go...

When Young Mie Kim began studying political ads on Facebook in August of 2016—while Hillary Clinton was still leading the polls— few people had ever heard of the Russian propaganda group, Internet Research Agency. Not even Facebook itself understood how the group was manipulating the platform's users to influence the election. Learn more about your ad choices. Visit podcastchoices.com/adchoices

It was the week of Zuck. As Facebook founder and CEO Mark Zuckerberg slogged through more than 10 hours of testimony in front of two different Congressional committees, privacy and security advocates were listening for anything they could glean about how Facebook manages data, implements privacy protections, and helps users make informed choices—or doesn't. Learn more about your ad choices. Visit...

The internet infrastructure company Cloudflare is adding an Internet of Things security service to its already long list of offerings. And though it that may seem unrelated to the free DDoS mitigation or expanded web browsing protections the company already provides, it's another incremental step that helps reveal a clearer picture of the company's overall approach to security. Learn more about yo...

The data consulting firm Cambridge Analytica, which harvested as many as 87 million Facebook users' personal data, also could have accessed the private inbox messages of some of those affected. Facebook slipped this previously undisclosed detail into the notifications that began appearing at the top of News Feeds on Monday. Learn more about your ad choices. Visit podcastchoices.com/adchoices

Over the last two days, Facebook CEO Mark Zuckerberg was questioned for more than 10 hours by two different Congressional committees. There was granular focus on privacy definitions and data collection, and quick footwork by Zuckerberg—backed by a phalanx of lawyers, consultants, and coaches—to craft a narrative that users “control” their data. (They don’t. Learn more about your ad choices. Visit...