Cyberattacks
339 episodes · Page 2 of 15
#6123: OAuth or a Personal Access Token for Your MCP Server?
GitHub CLI login hands your agent one long-lived token with access to everything. Fine-grained PATs can't. Which should your MCP server use?
#6095: How to Prove Your Photo Is Real
Deepfakes made faking easy. Now the harder problem: proving your real photos and video are real. A field guide.
#6044: One Door for Every AI: Cloudflare MCP Portals
Cloudflare's MCP Portals put every on-prem MCP server behind one authenticated endpoint — and why service tokens can't work for ChatGPT.
#6015: How Banks Move a Million vs a Billion Dollars
A million and a billion are the same number to a computer. The difference is liquidity, netting, and where the payment actually settles.
#5973: MCP Security: Tool Poisoning and Agent Identity
MCP servers trust their own tool descriptions. That design choice creates a whole new class of attack — and a new observability problem.
#5967: How UEFI, Secure Boot, and the Boot Chain Actually Work
Twenty years of Linux and nobody explains the firmware. Here's the boot chain, the keys, and what's changing in 2026.
#5954: Layered Safeguards and the Math Behind Them
Three safeguards at 90% each seems bulletproof—until shared failure modes collapse the math.
#5952: Inside Malmab: Israel's Most Secretive Security Body
Israel's classified defense security body and what its extreme information practices teach about protecting secrets.
#5947: Who Actually Trades on Polymarket?
Three percent of wallets drive 90% of Polymarket's volume — and most retail accounts quietly lose money. Here's who's really on the other side.
#5916: Grey Rocking Meets OPSEC: A Family Firewall
Grey rocking has no clinical trials—just a 2012 blog post. What happens when you rebuild it on need-to-know and OPSEC?
#5910: Revit MCP in a VM: What Actually Works
Autodesk's official Revit MCP server is locked down and reliable-ish. The community ones execute arbitrary code on an open port. Neither runs unatt...
#5906: Running a Company Like a Spy Agency
What if an ordinary company ran on intelligence-style need-to-know? Oak Ridge and a 1977 CIA self-audit already ran the experiment.
#5905: Bare Linux Routing vs OPNsense: What Actually Wins?
You can build a router on plain Debian or Ubuntu. The question is whether you should — and what it costs you over ten years.
#5869: Scraping AliExpress Specs: Selectors, Agents, or Neither?
Daniel wants to snapshot AliExpress spec sheets into his inventory system. The selector approach is already dead — here's what actually works.
#5861: Inside Cloudflare's Bot Check: TLS, JA4, and the Sand-Timer
What actually happens during those two seconds of "Checking your browser"? The verdict is made before a single byte of JavaScript runs.
#5848: The Libraries Nobody Thinks About
zlib, SQLite, OpenSSL, and the xz backdoor — the tiny pieces of code running everywhere, and the volunteers keeping them alive.
#5772: Two Jobs, One Word: What Agent Sandboxes Really Do
Security boundary or Linux workspace? The word "sandbox" quietly split in two — and the split explains where agents actually run now.
#5715: No Phone, No Panic: Safety Without Surveillance
A parent takes a kid out for hours, phone-free. When does check-in become care, and when does it become control?
#5669: Flydubai 1073: When the Threat Is in the Cockpit
A first officer stabbed his captain mid-flight. What happened next — and why aviation's security model has no answer for it.
#5629: Keyloggers, Stingrays, and the Library Laptop Grab
Tor, Signal, full-disk encryption — and a chip on the motherboard that none of them can see.
#5607: BYO Modem, But Only If We Approve It
Bezeq lets you bring your own modem — if it's on the list and you hand over its serial number. Is that security, or provisioning in a costume?
#5532: What Your Browser Isn't Telling You
DevTools quietly omits what privacy researchers need most. Here's how to actually tap browser traffic — and what shows up when you do.
#5528: What Your eSIM Manager Is Actually Doing
Those log lines during eSIM setup aren't noise — they're the GSMA provisioning spec running in the open.
#5523: Where Does the Coding Agent Actually Live?
The agent process is moving off your laptop. Local appliance, SaaS workspace, or your own VPS — three answers, no consensus.