Episode 46 - The Insult free Episode

The Host Unknown Podcast

This week in Infosec

(Liberated from the “today in infosec” twitter account):

6th March 1992: For the second year in a row the Michelangelo virus activated on this date. However, the lead up to March 6th, 1992 was the first instance of mass hysteria about a virus, though the hysteria was overblown.

https://en.wikipedia.org/wiki/Michelangelo_(computer_virus)

https://nakedsecurity.sophos.com/2012/03/05/michelangelo-virus/

https://twitter.com/todayininfosec/status/1368258690143371264

https://nakedsecurity.sophos.com/2010/04/08/fame-bbc-newsround/

5th March 2003: A Sendmail remote buffer overflow vulnerability was made public. Discovered by ISS 2 months prior, exploit code was published within 24 hours.

https://www.techrepublic.com/article/watch-out-for-critical-buffer-overflow-vulnerability-in-sendmail/

https://twitter.com/todayininfosec/status/1235425049923862529

Rant of the Week

Nike’s Resell Scandal and VP Ann Hebert’s Resignation, Explained

https://www.complex.com/sneakers/nike-ann-hebert-son-sneaker-resale-scandal-explained/how-was-joe-hebert-getting-shoes

• 19-year-old entrepreneur from Portland, Oregon. Known as “West Coast Joe” and runs the @west.coast.streetwear account on Instagram, along with its affiliates.
• Starting his business in high school, Joe begins selling limited-edition drops, “Deadstock”, and establishes Discord channels to share his unique knowledge of Nike sale schedules, sale locations, and more.
• His success caught the eye of Joshua Hunt, who sought to write a piece for Bloomberg.
• Fame and fortune got to Joe’s head when he sends through an American Express statement to demonstrate the company’s revenue. The name on the card? It wasn’t Joe. It was Ann Hebert, VP and GM of Nike’s North American market. Joe's mom.
• Hunt reaches out to Joe to discuss the relationship.
• Joe begs Hunt to not disclose this information in the article and ceases communication with Bloomberg entirely.
• Ann Hebert resigns just days after the publication of Hunt’s article outlining the story.

Billy Big Balls of the Week

STURGIS, Mich. – A virtual preliminary examination in Michigan was interrupted last week after the defendant was found to be at the same home as an alleged victim of assault while the hearing took place.

Coby James Harris, 21, had gone before St. Joseph County District Court on March 2, accused of assault with intent to commit bodily harm less than murder, stemming from an incident Feb. 9 in Sturgis, Michigan.

About seven minutes into the proceeding, Deborah Davis, assistant to the prosecuting attorney and representing Lindsey, said she believed Lindsey and Harris were in close proximity during the livestream, based on Lindsey’s answers and body language.

“Your Honor … I have reason to believe that the defendant is in the same apartment as the complaining witness right now, and I am extremely scared for her safety,” Davis said. “The fact that she’s looking off to the side and he’s moving around, I want some confirmation that she is safe before we continue."

Middleton asked Lindsey where she was at that moment.

“Um, I’m at a house,” Lindsey said, with hesitation, giving a Hatch Street address in Sturgis.

Middleton then asked Harris to divulge the address where he was. Harris gave a house number on East Lafayette Street.

Middleton told Harris to go outside with his cell-phone and take a photograph of the house number. Harris declined, saying he was limited by low phone battery and that his device was connected to a charger.

A few moments later, Davis said the police were at the door of Lindsey’s confirmed location to check on her. Lindsey was instructed to go to the door to speak to police.

“We may need to adjourn this, your Honor,” Davis said to Middleton.

Lindsey's connection to the court proceeding went offline after it showed her speaking to

police outside the home. Moments later, Lindsey’s livestream came back online, showing Harris inside on Lindsey's phone and in the custody of police. Davis briefly “face-palmed” upon the reveal that Harris was at the same location as Lindsey.

https://eu.sturgisjournal.com/story/news/crime/2021/03/05/court-hearing-postponed-after-accused-found-same-house-witness/4587600001/

(start at 06:30.)

Rollerblading Karachi cops https://youtu.be/Q0jED85uwbw

Our source on probation over at the Infosec PA newswire has been very busy bringing us the latest and greatest security news from around the globe!

Industry news

SITA Supply Chain Breach Hits Multiple Airlines

Docker Hub and Bitbucket Resources Hijacked for Crypto-Mining

McAfee Faces Decades Behind Bars After Fraud Indictment

NCSC: Don’t Fall for Mother’s Day Scams This Week

Microsoft Expands Coverage of Exchange Server Patches

Most Threat Analysts Banned from Sharing Intel with Peers

Third of Office Workers Warned After Sharing Data Via Unofficial Apps

Superstar K-Pop Band’s TikTok Hacked

School Boss Resigns After Porn Found on Computer

Javvad’s Weekly Stories

Industry Leaders Javvad Malik and Wendy Nather to Headline Infosecurity Magazine Online Summit - industry pioneers Javvad Malik, security awareness advocate at KnowBe4, and Wendy Nather, head of advisory CISOs at Duo Security (Cisco), will be headlining the upcoming Infosecurity Magazine Online Summit, taking place on March 23 and 24.

Tweet of the Week

Dr Jen Golbeck reminding us how creepy Facebook and other advertisers (but mostly Facebook) are:

• Accelerometer Vibrations to Speech — How your phone’s accelerometer can snoop on your calls (popular press)
• La Liga Soccer App Spying Scandal — Without telling users, Spain’s soccer app used GPS and microphone access to fine bars who hadn’t paid licensing fees
• Sonitor’s Lyra system uses your phone’s microphone to track your position — an example of the ultrasonic beacons mentioned in one of my videos
• Location tracking through WiFi signals — Your location can be tracked even if you turn off location services
• Facebook Shadow Profiles — Even if you haven’t set up a Facebook account, the company likely maintains a “shadow profile” of you.
• Target Knows You’re Pregnant before you tell anyone else — here’s how

https://www.tiktok.com/@jengolbeck?

https://gizmodo.com/facebook-knows-how-to-track-you-using-the-dust-on-your-1821030620

https://twitter.com/jengolbeck/status/1368991334309257216?s=20

Come on! Like and bloody well subscribe!