290: Uber, Rockstar, and crystal balls

Researchers reveal how your eyeglasses could be leaking secrets when you're on video conferencing calls, we take a look at the recent data breaches involving Uber and Grand Theft Auto 6, and we cast an eye at what threats may be around the corner... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and https://www.smashingsecurity.com/hosts/carole-theriault (Carole Theriault), joined this week by The Register's Iain Thomson. Plus - don't miss our featured interview with Sal Aurigemma, the faculty director of the Master of Science in Cyber Security program at the University of Tulsa. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: https://twitter.com/iainthomson/status/1252286893263183872 (“Iain Exotic”, Iain Thomson’s dress-up homage to Joe Exotic, the Tiger King) - Twitter. https://arxiv.org/abs/2205.03971 (“Private Eye: On the Limits of Textual Screen Peeking via Eyeglass Reflections in Video Conferencing”) - Research paper by Yan Long, Chen Yan, Shilin Xiao, Shivan Prasad, Wenyuan Xu, and Kevin Fu. https://www.twitch.tv/p/en/about/ (“We saved you a seat in chat”) - Rather large text on the Twitch website. https://grahamcluley.com/stalker-zoomed-in-on-japanese-idols-eyes-to-find-out-where-she-lived/ (Stalker zoomed in on Japanese idol’s eyes to find out where she lived) - Graham Cluley. https://twitter.com/iainthomson/status/1571868350262947840 (Uber is looking for more security staff) - Twitter. https://www.theregister.com/2022/09/19/uber_admits_breach/ (Uber explains how it was pwned this month, points finger at Lapsus$ gang) - The Register. https://grahamcluley.com/ubers-hacker-irritated-his-way-into-its-network-stole-internal-documents/ (Uber’s hacker *irritated* his way into its network, stole internal documents) - Graham Cluley. https://www.uber.com/newsroom/security-update (Security update) - Uber. https://www.theregister.com/2022/09/19/grand_theft_auto_6_hacked/ (Grand Theft Auto 6 maker confirms source code, vids stolen in cyber-heist) - The Register. https://www.cisa.gov/cybersecurity-awareness-month (Cybersecurity Awareness Month )- CISA.  https://www.zdnet.com/article/the-scary-future-of-the-internet-how-the-tech-of-tomorrow-will-pose-even-bigger-cybersecurity-threats/ (The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats )- ZDNet. https://thehackernews.com/2022/08/us-government-spending-billions-on.html (U.S. Government Spending Billions on Cybersecurity) - Hacker News. https://www.youtube.com/watch?v=_ak5dFt8Ar0 (The Mitchells vs The Machines trailer) - YouTube. https://www.netflix.com/gb/title/81399614 (The Mitchells vs The Machines) - Netflix. https://www.newscientist.com/article/2338657-nasa-is-ready-to-knock-an-asteroid-off-course-with-its-dart-spacecraft/ (NASA is ready to knock an asteroid off course with its DART spacecraft) - New Scientist. https://www.nasa.gov/feature/dart-s-small-satellite-companion-takes-flight-ahead-of-impact (DART’s Small Satellite Companion Takes Flight Ahead of Impact) - NASA. https://www.heartsafe.org.uk/aed-locations/ (Search and find UK Defibrillator Locations near you now) - HeartSafe. https://www.bhf.org.uk/how-you-can-help/how-to-save-a-life/defibrillators/apply-for-a-public-access-defibrillator (Apply for a part funded Public Access Defibrillator) - British Heart Foundation. https://www.sja.org.uk/get-advice/i-need-to-know/defibrillator-guide-for-first-time-buyers/ (Defibrillator guide for first time buyers) - St John’s Ambulance.  https://www.gov.uk/government/news/every-school-will-have-a-life-saving-defibrillator-by-2223 (Every school will have a life-saving defibrillator by 22/23) - Gov.UK. https://www.smashingsecurity.com/store/ (Smashing Security merchandise (t-shirts, mugs, stickers and stuff))