Podcasts about SN

Sexy Zebras compusieron una canción, hace cosa de dos años, que les parecía podría encajar bien en el repertorio de Rufus T Firefly, así que llamaron a Víctor Cabezuelo, se la enseñaron y decidieron grabarla entre las dos bandas. El resultado es casi mágico y se titula 'El Abismo'. Escuchamos a Dani Dicostas -antes Dani Costas- con 'Yo También me Porto Mal', a Mujeres con 'Si Piensas en Mí' , a Celia Becks con una de las canciones de 'Ve a Terapia', el disco que publica hoy, al inglés Alphie Sharp, a Snõõper, desde Nashville y todo esto... EMPRESS OF ft RINA SAWAYAMA - Kiss Me CELIA BECKS ft JONATHAN PONS - Sálvese Quien Pueda DANI COSTAS – Yo También Me Porto Mal LA LA LOVE YOU & ALLISON - Himno (Para Los Que Están Jodidos) ALFIE SHARP - All Or Nothing JORJA SMITH – Go Go Go FLORENTINO ft SHYGIRL - Pressure SNÕÕPER - Running INTERROGACIÓN DE AMOR – Fortuna SEXY ZEBRAS & RUFUS T. FIREFLY - El Abismo MIKEL ERENTXUN – Si No Es Por Ti THE MOUNTAIN GOATS - Murder at the 18th St. Garage BLACK PUMAS - Mrs. Postman VINTAGE TROUBLE - Holla! JOKER OUT - Sunny Side Of London MUJERES – Si Piensas En Mí JOE CREPÚSCULO - La Mia Industria Di Ballo GRANDE AMORE - Ben Sabe Dios Que O Intentei Escuchar audio

Zeman, Klaus, Paroubek, Hašek. Dinosaury české politiky spojuje jedno - v nadcházejících slovenských volbách se rozhodli otevřeně podpořit šéfa SMERu Roberta Fica.U Miloše Zemana to dává smysl, Fico je přece jen sociální demokrat. Diametrálně se ale rozcházejí v názorech na Rusko a konflikt na Ukrajině. „Ale možná to Zeman až takto do detailu nepromýšlí. A prostě vidí politika, který mu připomíná staré dobré časy,“ myslí si Lucie Stuchlíková.U Václava Klause je Ficova podpora překvapivější, ale jen na první pohled. Exprezidenta a někdejšího předsedu ODS, který dnes volí SPD, s Ficem spojuje sílící nacionalismus, ale i nenávist k médiím.Zatímco čeští bývalí politici se předhánějí s podporou Ficovi, z druhého tábora je ticho - Progresivní Slovensko nikdo otevřeně nepodpořil. „Pouze prezident Petr Pavel nepřímo, když kritizoval Roberta Fica. Na Slovensku to vnímají tak, že vrací Zuzaně Čaputové podporu ve volbách,“ popisuje Václav Dolejší.Českých stop ve slovenských volbách je ale víc: na tour s Marianem Kotlebou vyjel velikán české nacionální scény Tomáš Vandas. A své služby - se střídavými úspěchy - na Slovensku poskytují někdejší marketingové hvězdy Andreje Babiše.S čím na Slovensku narazil guru Mára? Pochopí konečně Česko význam Dělnické strany? A kolik pohlaví mají Slováci? Poslechněte si novou epizodu naší politické talkshow a budete moudřejší!---- Vlevo dole řeší politické kauzy, boje o vliv i šeptandu z kuloárů Sněmovny. Vychází každou středu v poledne. Podcast pro vás připravují Lucie Stuchlíková (@StuchlikovLucie) a Václav Dolejší (@VacDol), reportéři Seznam Zpráv. Další podcasty, ale taky články, komentáře a videa najdete na zpravodajském serveru Seznam Zprávy. Poslouchejte nás na webu Seznam Zpráv, na Podcasty.cz nebo ve své oblíbené podcastové aplikaci.  Své názory, návrhy, otázky, stížnosti nebo pochvaly nám můžete posílat na adresu audio@sz.cz.   Sledujte @SeznamZpravy na sociálních sítích: Twitter // Facebook // Instagram. Seznam Zprávy jsou zdrojem původních informací, nezávislé investigace, originální publicistiky.

Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords. The Signal messaging platform has added a post-quantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantum-resistant CRYSTALS-Kyber system. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a non-HTTPS site. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows. A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication. Listener questions whether all stolen LastPass vaults will eventually be decrypted. Show Notes - https://www.grc.com/sn/SN-941-Notes.pdf Hosts: Steve Gibson and Ant Pruitt Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: joindeleteme.com/twit promo code TWIT GO.ACILEARNING.COM/TWIT Melissa.com/twit

Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords. The Signal messaging platform has added a post-quantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantum-resistant CRYSTALS-Kyber system. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a non-HTTPS site. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows. A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication. Listener questions whether all stolen LastPass vaults will eventually be decrypted. Show Notes - https://www.grc.com/sn/SN-941-Notes.pdf Hosts: Steve Gibson and Ant Pruitt Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: joindeleteme.com/twit promo code TWIT GO.ACILEARNING.COM/TWIT Melissa.com/twit

Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords. The Signal messaging platform has added a post-quantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantum-resistant CRYSTALS-Kyber system. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a non-HTTPS site. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows. A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication. Listener questions whether all stolen LastPass vaults will eventually be decrypted. Show Notes - https://www.grc.com/sn/SN-941-Notes.pdf Hosts: Steve Gibson and Ant Pruitt Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: joindeleteme.com/twit promo code TWIT GO.ACILEARNING.COM/TWIT Melissa.com/twit

Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords. The Signal messaging platform has added a post-quantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantum-resistant CRYSTALS-Kyber system. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a non-HTTPS site. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows. A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication. Listener questions whether all stolen LastPass vaults will eventually be decrypted. Show Notes - https://www.grc.com/sn/SN-941-Notes.pdf Hosts: Steve Gibson and Ant Pruitt Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: joindeleteme.com/twit promo code TWIT GO.ACILEARNING.COM/TWIT Melissa.com/twit

Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords. The Signal messaging platform has added a post-quantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantum-resistant CRYSTALS-Kyber system. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a non-HTTPS site. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows. A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication. Listener questions whether all stolen LastPass vaults will eventually be decrypted. Show Notes - https://www.grc.com/sn/SN-941-Notes.pdf Hosts: Steve Gibson and Ant Pruitt Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: joindeleteme.com/twit promo code TWIT GO.ACILEARNING.COM/TWIT Melissa.com/twit

Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords. The Signal messaging platform has added a post-quantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantum-resistant CRYSTALS-Kyber system. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a non-HTTPS site. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows. A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication. Listener questions whether all stolen LastPass vaults will eventually be decrypted. Show Notes - https://www.grc.com/sn/SN-941-Notes.pdf Hosts: Steve Gibson and Ant Pruitt Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: joindeleteme.com/twit promo code TWIT GO.ACILEARNING.COM/TWIT Melissa.com/twit

Rev. Dhammabodhi and Upasaka Dustin discuss the Nagarasutta where the Buddha describes the 12 links of dependent origination and the Eightfold Path like an ancient path to an ancient city. SN 12:65 Nagarasutta (The City) https://suttacentral.net/sn12.65/en/sujato?lang=en&layout=plain&reference=none¬es=asterisk&highlight=false&script=latin --- Send in a voice message: https://podcasters.spotify.com/pod/show/downwiththedharma/message

- Closing in on 75 wins - Why can't we beat the - Chicago Cubs? - Josh Palacios: Legit? - Carmen Mlodzinski and the young BP arms - DAHN on the Farm: Nick Gonzales and SN heating
up - Should Jared Jones get the call? - Recaps of the games - and more! --- Support this podcast: https://podcasters.spotify.com/pod/show/cannonball-comin/support

Poslanecká sněmovna v pátek zahájí třetí čtení široce diskutovaného konsolidačního balíčku. Jak dlouho jednání potrvá? Jaká bude taktika sněmovní opozice? Které změny balíčku opoziční poslanci navrhují a má některý z jejich návrhů reálnou šanci na schválení? Tomáš Pancíř se ptal člena rozpočtového výboru Sněmovny a místopředsedy hnutí ANO Patrika Nachera.

Poslední demonstrace organizovaná mimoparlamentní stranou Právo, respekt, odbornost Jindřicha Rajchla na Václavském náměstí v Praze přilákala tisíce lidí, ale zůstala daleko za očekáváními organizátorů. Preference PRO zůstávají hluboko pod pěti procenty, která by strana musela překonat, aby se dostala do Sněmovny.

Kdyby se Česko měnilo podle toho, kolik různé vlády sepsaly modernizačních strategií, pak už je země inovačním lídrem Evropy, ne-li celého světa. Jen si vzpomeňme na Babišovu strategii po názvem „Country For The Future“, nebo aktuální Fialův plán nazvaný Restart Česka: hlavní křižovatkou Evropy do deseti let.Všem souvislostem toho, jak nastartovat zaostávající zemi, se věnují političtí reportéři Václav Dolejší a Lucie Stuchlíková v aktuálním podcastu Vlevo dole.„Už jsem viděla a slyšela hodně inovačních strategií plných vět o tom, jak se posuneme do čela žebříčku nejvyspělejších zemí. Jsem skeptická, protože bez změn ve školství to nepůjde - a zrovna o ty nikdo moc nestojí,“ tvrdí Stuchlíková.Zástupci českého byznysu žádají širokou politickou shodu na zásadních reformách v zemi. Chtějí například, aby rozjela masivní investice do nových bytů, elektráren, energetických, dopravních a datových sítí.„Podnikatelé varují, že jinak se staneme skanzenem Evropy. Když vidím, jak je tady složité cokoliv prosadit, říkám si, jestli na vize nevykašlat a raději nevsadit na ten skanzen po vzoru Hoštic. Prostě slunce, seno, montovna. Turisté sem budou ve velkém jezdit, aby si třeba vyzkoušeli placení v hotovosti,“ žertuje Dolejší.Jakou vizi má Vlevo dole? Uspěl by podcast s kombinací jaderného reaktoru a feminismu? A dokáží kritici vlády prodávat lístky na svá vlastní vystoupení digitálně? Poslechněte si celou epizodu politické talkshow!---- Vlevo dole řeší politické kauzy, boje o vliv i šeptandu z kuloárů Sněmovny. Vychází každou středu v poledne. Podcast pro vás připravují Lucie Stuchlíková (@StuchlikovLucie) a Václav Dolejší (@VacDol), reportéři Seznam Zpráv. Další podcasty, ale taky články, komentáře a videa najdete na zpravodajském serveru Seznam Zprávy. Poslouchejte nás na webu Seznam Zpráv, na Podcasty.cz nebo ve své oblíbené podcastové aplikaci.  Své názory, návrhy, otázky, stížnosti nebo pochvaly nám můžete posílat na adresu audio@sz.cz.   Sledujte @SeznamZpravy na sociálních sítích: Twitter // Facebook // Instagram. Seznam Zprávy jsou zdrojem původních informací, nezávislé investigace, originální publicistiky.

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: bitwarden.com/twit joindeleteme.com/twit promo code TWIT drata.com/twit

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Last week's news about evidence of LastPass vault decryption targeting cryptocurrency keys, and the UK's backing down on its encryption monitoring legislation. How hardware security modules (HSMs) allow cryptographic operations like code signing without exposing private keys. Browser identity segregation using multiple profiles rather than separate browsers. Requirements and best practices for securely wiping data from modern solid state drives. A countdown clock for the 32-bit UNIX time rollover in the year 2038. Steve's plan to move off Twitter and onto email lists for Security Now communication. A deep dive into cryptographic hash collisions, using fewer hash bits, and balancing anonymity with statistical meaning. Show Notes - https://www.grc.com/sn/SN-940-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Every year, the monastic community (Monks and nuns) go on a three month retreat called the “Rains Retreat” from mid July to mid October. During this period, they do not visit our centres for teachings as it's a time for deepening their own practice. While the monks and nuns are away, we will have some interesting guest speakers coming in to give the Friday Night talk. TURNING POINTS 2023 Sutta References for this talk: (A) Meditation 1. Body Scan - Kāyagatāsati sutta (Mindfulness of the Body) MN 119 2. Two essential factors for Meditation: Well purified ethics & correct view – Bhikkhu Sutta (A Monk) SN 47:3 3. Dvedhāvitakka Sutta (Two Kinds of Thoughts) MN 19 4. Vitakkasaṇṭhāna Sutta (Stopping/Calming of Thoughts) MN 20 (B) First Part of the Talk: Turning Points 1. Buddha's Autobiography - Ariyapariyesanā Sutta (Noble Search) MN 26 2. First Dhamma Discourse – Dhammacakkappavattana Sutta (Rolling Forth the Wheel of Dhamma) SN 56:11 3. Establishment of Bhikkhuni Order – Gotamī Sutta (With Gotamī) AN 8:51 (C) Second Part of the Talk: Dhamma Bonus Points for our Welfare & Happiness 1. Five Aggregates a. Maha Punnamā Sutta (The greater Discourse on the Full-Moon Night) MN 109 b. Dutiyagaddulabaddha Sutta (A leash) SN 22:100 2. Five Hindrances a. Maha Assapura Sutta (The greater Discourse at Assapura) MN39 b. Saṅgārava sutta (With Saṅgārava) SN 46:55 3. Five Precepts / Purification of Ethics a. Pañcaverabhaya Sutta (Dangers and Threats) SN12:41 - https://suttacentral.net/search?query=sn12.41 b. Velāma Sutta (About Velāma) AN 9:20 c. Lonakapalla Sutta (A Lump of Salt) AN 3:100 d. Sappurisa Sutta (A True Person) AN 5:42 e. Dhammapada Verse 173 4. Five Benefits of Offering Food / Generosity a. Bhojana Sutta (Food) AN 5:37 b. Dānānisaṁsa Sutta (The benefits of Giving) AN 5:35 c. Dhammapada Verse 118 5. Five Practice Factors for planning for a Favourable Rebirth Saṅkhārupapatti Sutta (Rebirth by Aspiration) MN 120 Notes: MN= Majjhima Nikāya; AN= Anguttara Nikāya; SN= Samyutta Nikāya To find and download more Guided Meditations on Podcast, visit the BSWA teachings page: https://bswa.org/teachings/, choose the meditation you want and then type the date into the Podcast search box e.g. 01-09-2018 or try 1 September 2018. Please support the BSWA in making teachings available for free online via Patreon.

SN 12:38 Cetanasutta (Discourse on Intention) https://suttacentral.net/sn12.38/en/sujato?lang=en&layout=linebyline&reference=none¬es=asterisk&highlight=false&script=latin SN 12:43 Dukkhasutta (Discourse on Suffering) https://suttacentral.net/sn12.43/en/sujato?lang=en&layout=linebyline&reference=none¬es=asterisk&highlight=false&script=latin --- Send in a voice message: https://podcasters.spotify.com/pod/show/downwiththedharma/message

Složitá a zdlouhavá dohadování o státním rozpočtu na rok 2024 se dostala do fáze, kdy to skřípe mezi stranami vládní koalice. Piráti a Starostové se cítí podvedeni partnery ze Spolu kvůli tomu, že nejvíc se škrtá na jejich ministerstvech.Obviňují hlavně ODS, která nejvíc mluvila o snadných úsporách ve vládních výdajích, že nakonec její premiér a ministr financí svůj slib plní na „cizích účtech“. Možnými dopady konfliktu ve vládě se zabývají političtí reportéři Václav Dolejší a Lucie Stuchlíková v aktuálním podcastu Vlevo dole.„Vládu kvůli tomu bořit nebudou, ale docela se rozčilují, že celý slavný konsolidační proces financují pirátské a starostovské resorty. Nejvíc místní rozvoj a školství, což odmítají s tím, že jde o jejich zásadní priority,“ vysvětluje Stuchlíková.Rozdíly ve škrtech na jednotlivých ministerstvech jsou zkresleny i tím, že povinně rostou mandatorní výdaje na obranu, kterou řídí Jana Černochová z ODS, a důchody, za něž je zodpovědný Marian Jurečka z KDU-ČSL.„Nejmíň pochopitelné jsou škrty ve školství, které řídí ministr Mikuláš Bek z hnutí STAN. Vláda vlastně porušuje svůj vlastní slib, že učitelům dá 130 procent průměrné mzdy v ekonomice, když se teď vymlouvá, že není jasné, k jakému roku se to vztahuje,“ diví se Dolejší.Dokáže Jana Černochová smysluplně utratit miliardy navíc, nebo bude muset pro armádu koupit ponorky? Mohou obce jako zřizovatelé škol přidat učitelům a vylepšit jim platy ze svého? A chodí častěji k soudu Donald Trump, nebo Andrej Babiš? Poslechněte si čerstvou epizodu Vlevo dole!---- Vlevo dole řeší politické kauzy, boje o vliv i šeptandu z kuloárů Sněmovny. Vychází každou středu v poledne. Podcast pro vás připravují Lucie Stuchlíková (@StuchlikovLucie) a Václav Dolejší (@VacDol), reportéři Seznam Zpráv. Další podcasty, ale taky články, komentáře a videa najdete na zpravodajském serveru Seznam Zprávy. Poslouchejte nás na webu Seznam Zpráv, na Podcasty.cz nebo ve své oblíbené podcastové aplikaci.  Své názory, návrhy, otázky, stížnosti nebo pochvaly nám můžete posílat na adresu audio@sz.cz.   Sledujte @SeznamZpravy na sociálních sítích: Twitter // Facebook // Instagram. Seznam Zprávy jsou zdrojem původních informací, nezávislé investigace, originální publicistiky.

Na vládě se obnovuje spojenectví STANU a Pirátů, naopak ve SPOLU rezonuje debata, jak postupovat do eurovoleb. Poslední hlasování na grémiu ODS říká, že samostatně. Zůstane to tak? Opustí konečně vládní koalice téma antiBabiš? I když Sněmovna schválila 130 % průměrných platů pro učitele, v plánovaném rozpočtu na školství je oproti minulému roku škrt 11,5 miliard a poněkud překvapený ministr Bek. Je školství priorita a jak funguje sestavování rozpočtu? Dnes jsme se vešli do hodiny, odpověděli jsme i na Vaše otázky.

UK government appears to back down on demands to break encryption in Online Safety Bill Microsoft reveals how China-based hackers acquired secret key used to breach Outlook accounts Multiple flaws allowed key to improperly leave highly secure environment Mozilla research finds all major auto brands fail on privacy protection Evidence suggests LastPass encrypted vault data is being decrypted Researchers tie $35M in crypto thefts to compromised LastPass accounts Brute force feasible on old low iteration count passwords Show Notes - https://www.grc.com/sn/SN-939-Notes.pdf Hosts: Steve Gibson and Jason Howell Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: cs.co/twit GO.ACILEARNING.COM/TWIT panoptica.app

UK government appears to back down on demands to break encryption in Online Safety Bill Microsoft reveals how China-based hackers acquired secret key used to breach Outlook accounts Multiple flaws allowed key to improperly leave highly secure environment Mozilla research finds all major auto brands fail on privacy protection Evidence suggests LastPass encrypted vault data is being decrypted Researchers tie $35M in crypto thefts to compromised LastPass accounts Brute force feasible on old low iteration count passwords Show Notes - https://www.grc.com/sn/SN-939-Notes.pdf Hosts: Steve Gibson and Jason Howell Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

„Můžete si tady ,žvanit‘ o vaší demokracii, ale jste nová totalita,“ řekl ve Sněmovně šéf ANO Andrej Babiš při svém šestihodinového vystoupení při jednání o konsolidačnímu balíčku. A bylo toho mnohem víc. „Taková slova jsou hodně za hranou,“ myslí si politolog a filozof Daniel Kroupa. „Je to s prominutím hnus a bída,“ přidává komentátor Českého rozhlasu Petr Nováček. „Co ale jiného má opozice dělat,“ doplňuje otázku ředitel výzkumné agentury Přemysl Čech.

Finále Horkých hlav je tady! Letní speciál podcastu Vlevo dole skončil (čirou náhodou) patem, takže je potřeba to konečně rozseknout. A aby to mělo pořádné grády, Václav Dolejší a Lucie Stuchlíková se střetli naživo, na setkání s fanoušky na pražském Čapadle. Poslechněte si záznam živé show!Tentokrát se podcasteři pohádali o to, jaká byla nejlepší politická přezdívka. Podle Václava Dolejšího to je Lord Voldemort, alias pražského lobbisty Romana Janouška.„Když chcete ty miliardy, ehm, mít svoje - všímej si, že nepoužívám slovo ukrást - a u toho se s Pavlem Bémem bavíte tím dětským jazykem, kdy si říkáte Kolibříku, Mazánku, Kapitáne… A přitom ostatní se před vámi třesou a říkají vám Lord Voldemort, to je přece dokonalé,“ tvrdí Václav Dolejší.Podle Lucie Stuchlíková je to Mlha a Vodník - tedy přezdívky Miloše Zemana a jeho spolupracovníka Miroslava Šloufa.„Václave, magistrátní historky jsou dobré, ale přece jen je to magistrát. Já mám rovnou premiéra, kterému přezdívku nedal nikdo jiný než mafiánský boss František Mrázek,“ kontruje Lucie Stuchlíková.Na Čapadle vyhrál v živém hlasování publika Václav, což mu přineslo speciální bonus - k webovému hlasování dostane 10 procent navrch. Jak dopadne prázdninový debatní seriál, rozhodněte tady!---- Vlevo dole řeší politické kauzy, boje o vliv i šeptandu z kuloárů Sněmovny. Vychází každou středu v poledne. Podcast pro vás připravují Lucie Stuchlíková (@StuchlikovLucie) a Václav Dolejší (@VacDol), reportéři Seznam Zpráv. Další podcasty, ale taky články, komentáře a videa najdete na zpravodajském serveru Seznam Zprávy. Poslouchejte nás na webu Seznam Zpráv, na Podcasty.cz nebo ve své oblíbené podcastové aplikaci.  Své názory, návrhy, otázky, stížnosti nebo pochvaly nám můžete posílat na adresu audio@sz.cz.   Sledujte @SeznamZpravy na sociálních sítích: Twitter // Facebook // Instagram. Seznam Zprávy jsou zdrojem původních informací, nezávislé investigace, originální publicistiky.

UK government appears to back down on demands to break encryption in Online Safety Bill Microsoft reveals how China-based hackers acquired secret key used to breach Outlook accounts Multiple flaws allowed key to improperly leave highly secure environment Mozilla research finds all major auto brands fail on privacy protection Evidence suggests LastPass encrypted vault data is being decrypted Researchers tie $35M in crypto thefts to compromised LastPass accounts Brute force feasible on old low iteration count passwords Show Notes - https://www.grc.com/sn/SN-939-Notes.pdf Hosts: Steve Gibson and Jason Howell Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

UK government appears to back down on demands to break encryption in Online Safety Bill Microsoft reveals how China-based hackers acquired secret key used to breach Outlook accounts Multiple flaws allowed key to improperly leave highly secure environment Mozilla research finds all major auto brands fail on privacy protection Evidence suggests LastPass encrypted vault data is being decrypted Researchers tie $35M in crypto thefts to compromised LastPass accounts Brute force feasible on old low iteration count passwords Show Notes - https://www.grc.com/sn/SN-939-Notes.pdf Hosts: Steve Gibson and Jason Howell Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

UK government appears to back down on demands to break encryption in Online Safety Bill Microsoft reveals how China-based hackers acquired secret key used to breach Outlook accounts Multiple flaws allowed key to improperly leave highly secure environment Mozilla research finds all major auto brands fail on privacy protection Evidence suggests LastPass encrypted vault data is being decrypted Researchers tie $35M in crypto thefts to compromised LastPass accounts Brute force feasible on old low iteration count passwords Show Notes - https://www.grc.com/sn/SN-939-Notes.pdf Hosts: Steve Gibson and Jason Howell Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

UK government appears to back down on demands to break encryption in Online Safety Bill Microsoft reveals how China-based hackers acquired secret key used to breach Outlook accounts Multiple flaws allowed key to improperly leave highly secure environment Mozilla research finds all major auto brands fail on privacy protection Evidence suggests LastPass encrypted vault data is being decrypted Researchers tie $35M in crypto thefts to compromised LastPass accounts Brute force feasible on old low iteration count passwords Show Notes - https://www.grc.com/sn/SN-939-Notes.pdf Hosts: Steve Gibson and Jason Howell Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Nula, parazit, debil anebo zm*d. I tak se mluví ve Sněmovně. Je to za hranou? Potřebují poslanci etický kodex? Nebo jim navlékne zbytečný náhubek? Téma pro komentátorku Deníku Kateřinu Perknerovou.

Nula, parazit, debil anebo zm*d. I tak se mluví ve Sněmovně. Je to za hranou? Potřebují poslanci etický kodex? Nebo jim navlékne zbytečný náhubek? Téma pro komentátorku Deníku Kateřinu Perknerovou.Všechny díly podcastu Vinohradská 12 můžete pohodlně poslouchat v mobilní aplikaci mujRozhlas pro Android a iOS nebo na webu mujRozhlas.cz.

Vládní konsolidační balíček míří i přes kritiku ze strany opozice do závěrečného schvalování ve Sněmovně. „Od hnutí ANO nezazněl žádný realistický ucelený návrh co s tím, když nám chybí stovky miliard, které potřebujeme k udržení sociálních služeb, školství a zdravotnictví na dnešní úrovni,“ upozorňuje Olga Richterová, místopředsedkyně Poslanecké sněmovny z Pirátské strany.

Čeká nás hledání a shánění? U kterých léků hrozí nedostatek? Velkou roli v současném nedostatku některých léků hraje podle MZ panika. Léků je prý dost, ale nejsou ve všech lékárnách. Ministr zdravotnictví Válek doporučuje, aby pacienti využívali rezervační systémy, které mají například fakultní nemocnice nebo řetězcové lékárny. Zlepšení situace má podle něj přinést novela zákona o léčivech, kterou projednává Sněmovna. Měla by dát pacientům možnost zajistit si zásobu léku v konkrétní lékárně a lékárnám uložit povinnost objednávat jen množství léčiv, které obvykle spotřebují. https://www.ceskatelevize.cz/porady/11412378947-90-ct24/223411058130911/

SN 12:11 Āhārasutta (Fuel) SN 12:13 Samaṇabrāhmaṇasutta (Ascetics and Brahmins) --- Send in a voice message: https://podcasters.spotify.com/pod/show/downwiththedharma/message

Co se to děje v prezidentské kanceláři, že tam o funkce přicházejí lidé, kteří v kampani pomáhali Petru Pavlovi? Několikaměsíční spory mezi dvěma skupinami, jejichž výsledkem byla nefunkčnost úřadu, nakonec po dlouhém váhání musel rozseknout sám prezident. Žhavé témata pro dnešní Reaktor.O co jde? Především dvojice žen - kancléřka Jana Vohralíková a šéfka kabinetu prezidenta Linda Jozwiak Kopecká - se přetahovaly o to, která hlavy státu tráví víc času, bude má větší vliv. A kdo bude rozhodovat o tom, koho k němu pustí, na jak dlouho a koho naopak ne.„Není to nic zas tak neobvyklého. Na Pražském hradě každý propadne své důležitosti a celé to prostředí trochu připomíná královský dvůr, kde o přízeň vládce a vliv na něj soupeří jeho okolí. Bylo to tak za Havla, Klause i Zemana,“ míní Václav Dolejší.Prezident Pavel o napětí mezi klíčovými úřednicemi ve své prezidentské kanceláři dlouho věděl, ale kvůli své nekonfliktní povaze se dlouho vyhýbal řešení. Nakonec jednat musel, protože ho rozlítily dva momenty.První, když se ministr financí Zbyněk Stanjura kvůli sporům v prezidentském týmu ani nedostal na Hrad na již domluvenou schůzku s Petrem Pavlem. A druhý, když se prezident nechal protichůdnými doporučeními svých lidí vmanévrovat do hloupé role nerozhodného politika, který neví, co si má myslet - zda má penzijní reformu podepsat, nepodepsat, nebo vetovat.„V tu chvíli už v něm buchly saze a musel učinit asi bolestivé rozhodnutí. Zbavil funkce ty lidi, jimž vděčí za úspěšnou kampaň - zmíněnou Lindu Kopeckou, šéfku komunikace Markétu Řehákovou a také šéfporadce Tomáše Richtera, který sháněl peníze na kampaň,“ říká Lucie Stuchlíková.---- Vlevo dole řeší politické kauzy, boje o vliv i šeptandu z kuloárů Sněmovny. Vychází každou středu v poledne. Podcast pro vás připravují Lucie Stuchlíková (@StuchlikovLucie) a Václav Dolejší (@VacDol), reportéři Seznam Zpráv. Další podcasty, ale taky články, komentáře a videa najdete na zpravodajském serveru Seznam Zprávy. Poslouchejte nás na webu Seznam Zpráv, na Podcasty.cz nebo ve své oblíbené podcastové aplikaci.  Své názory, návrhy, otázky, stížnosti nebo pochvaly nám můžete posílat na adresu audio@sz.cz.   Sledujte @SeznamZpravy na sociálních sítích: Twitter // Facebook // Instagram. Seznam Zprávy jsou zdrojem původních informací, nezávislé investigace, originální publicistiky.

Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives. There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage. Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security. Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected. Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks. Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so. Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: drata.com/twit panoptica.app canary.tools/twit - use code: TWIT

Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives. There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage. Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security. Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected. Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks. Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so. Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: drata.com/twit panoptica.app canary.tools/twit - use code: TWIT

Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives. There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage. Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security. Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected. Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks. Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so. Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: drata.com/twit panoptica.app canary.tools/twit - use code: TWIT

Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives. There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage. Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security. Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected. Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks. Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so. Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: drata.com/twit panoptica.app canary.tools/twit - use code: TWIT

Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives. There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage. Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security. Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected. Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks. Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so. Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: drata.com/twit panoptica.app canary.tools/twit - use code: TWIT