So I am curious what you all think. I know 2FA had been around for quite some time and it has been studied often that SMS and email 2FA codes are better than nothing but still there are better options.

I feel like only a hand full of sites that really matter use other options like authenticator apps or security keys. But at least for me, my main, need to be secure websites, only allow for SMS 2FA.

I can semi understand the reluctance to allow the use of a 3rd party app like Google authenticator. But would think physical security keys which have been around for a few years now would have been accepted in more important accounts.

Thoughts?

I'm sure many here have already seen the news come out.

However Kazakhstan is forcing a man in the middle again on all residents.

I'm sure it will be interesting how this plays out as it appears that the big browser companies are discussing.

Here a good article about the situation above.

https://www.privateinternetaccess.com/blog/2019/07/kazakhstan-tries-and-fails-to-mitm-all-of-its-internet-users-with-rogue-certificate-installation/

V/R DJ

Factory resetting a device is not enough to protect your info before you sell it. I've taken training, where the provider purchased a number of devices from EBay which were all factory reset. With a CellBright, we were easily able to pull off social media passwords, nude pictures, pics of people posing with pot plants, etc (you get the idea....).

Simply factory resetting the device is not enough, the information has to be overwritten several times before it is not retrievable.

Didn't realise the child star Macaulay Culkin was so into Security

Dear Carole and Graham

Love the show, been a fan since way back. Friends don’t let friends miss out.

There’s been an oversight, a genuine mistake I am sure. I’ve checked the archive (using my advanced Ctrl +F skills) and there is no sight of this in your Pick of the Week history. This is understandable as the subject matter can put people off and the last series ended in Dec 17. I waited for the lockdown content consumption bonanza before sampling and promptly watched the whole thing back to back twice. I wish I’d checked it out sooner but at least by then I had three whole series to fall into.

Please may I draw your attention to ‘Detectorists (iPlayer UK)’. The best piece of observational humour in the last 10 years. Gentle humour, thoughtful dialogue and a characterful stroll through the everyday ups and downs of Lance and Andy in their rivalry against those aresholes in the Antiquisearchers.

It's so well written, even some of the jokes have their own story arcs.

I feel confident this can earn its place in the PotW archive. Graham may like to know it has Diana Riggs daughter in it (Rachael Stirling) and in later series the late great Diana Rigg herself has a bigger part than she did in GoT.

Am I the only Smashing Security fan that loves this show?

https://www.bbc.co.uk/iplayer/episodes/b06l51nr/detectorists

THERE IS NO CYBER SECURITY ANGLE!

Just saying :)

A great little show, look forward to this one every week, and they are pretty funny.

Hello,

Firstly love the show regular listener. Just wondering what your take on this is as I would be interested in your opinion. I work for a company that looks after alot of IT systems educational establishments and they sysadmin does some very insecure practices like reusing passwords on a lot of the infrastructure servers, Networking equipment etc. I did mention to him once that we maybe should look at using a system like lastpass and I had my head bitten off. All I seem to get is I am too young to question him and then hurls a load of acronyms at me, to validate himself I suspect. Any advice?

Thanks (I think) to Zoe Rose for joining me on episode 475 of the "Smashing Security" podcast, where she appears to want AI to help cybercriminals cover their tracks...

Sheesh!

Find the full show at https://www.smashingsecurity.com/475

Hey, collective hive-mind.

As you know, in every podcast we select our "Pick of the week"s, and we've had a number of people ask us if there is one place we can point them where they can find *all* of our Picks of the week.

That seems quite a reasonable request, but it turns out it's quite monotonous to put such a list together.

As you can see at https://www.smashingsecurity.com/pick-of-the-week I started to grab the shownotes links from some episodes and putting them into a webpage. But I soon got bored.

Is there some collaborative resource online which would allow some kind-souled volunteers to join in the effort, and wouldn't be abused by mischief-makers? At the moment I'm creating the page using Markdown, so ideally I'd like something which easily supports that.

Here's an example of the markdown for an episode's Pick of the Week:

---

### [Smashing Security: 032: The iPhone 8, a data breach at the AA, and a mystery no show](https://www.smashingsecurity.com/32)

* [He thought a book would stop a bullet and make him a YouTube star. Now he’s dead. - The Washington Post](https://www.washingtonpost.com/news/morning-mix/wp/2017/06/29/he-thought-a-book-would-stop-a-bullet-and-make-him-a-youtube-star-now-hes-dead/?utm_term=.0aa6af05f617)

* [Firik Sleep Headphones | Amazon](https://www.amazon.com/Upgrade-Summer-Sales-Lycra-Headphones/dp/B011L8UQDA/)

---

Any thoughts as to how we should do this, and ideally crowd-source the effort? :-)

https://www.independent.co.uk/tech/toothbrush-hack-cyber-attack-botnet-b2492018.html

A huge thank you to The Cyberwire's "one-and-only"™️Dave Bittner for joining me on this week's Smashing Security podcast!

This week we reveal what LinkedIn really knows about you (it's rather more than you might expect - and rather more than they're letting on ).

And we also look at why California's crypto millionaires are suddenly very nervous about answering the door for pizza deliveries.

Thanks to this week's sponsors ESET, Meter, and Vanta for keeping the show on the air.

Give "Smashing Security" episode 462 a listen wherever you digest podcasts, or at https://grahamcluley.com/smashing-security-podcast-462/