4 hours ago
Episode 278 - PHP Phail, Phished Rings, Fake Encryption, Wedding Crashers
Welcome to this week's episode of the PEBCAK Podcast! We’ve got four amazing stories this week so sit back, relax, and keep being awesome! Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
Please share this podcast with someone you know! It helps us grow the podcast and we really appreciate it!
Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
Phished Rings, Fake Encryption & Wedding Crashers A researcher chained PHP out-of-memory crashes into cookie-leaked pointers and full RCE to win the "Steal My Bitcoin" challenge, only to find the recovered key didn't match the prize wallet.
-https://github.com/KillaBoi/StealMyBitcoin-PoC
-https://x.com/jamespavur/status/2114501212313653696?s=46
The Knicks' parent company MSG phish-tested staff with a fake "free championship ring" email, then admitted the lure was a mistake and announced $3.7M in real rings.
-https://x.com/sulloreport/status/2113457529267380575?s=46
Lenovo's "AES-256 encrypted" ThinkPlus fingerprint USB stick was a plain, unencrypted SD card inside, and AI-assisted reversing cracked four more "secure" drive brands in minutes.
-https://hackingpassion.com/lenovo-thinkplus-encrypted-usb-sd-card/
-https://x.com/intcyberdigest/status/2115898968597012674?s=46
A new site lets total strangers pay $25 to $160 for a seat at someone else's wedding, with ID-plus-selfie checks and couple approval required.
Dad Joke of the Week (DJOW)
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Brian - https://www.linkedin.com/in/briandeitch-sase/
No comments yet. Be the first to say something!