This podcast is made possible by the generous support of Recorded Future.

Recorded Future are a real-time threat intel firm whose machine learning technology analyzes the open and dark web to give you great insight into emerging threats.

Sign up for their Cyber Daily newsletter and get their latest insights at recorded future.com slash intel.

Smashing Security, Episode 17, data breaches, zero-day exploits, and tonal clippings with Carol Terrio and Graham Cluley.

Hello and welcome to Smashing Security episode 17 for the 20th of April 2017. And

great to have everybody here. I'm joined as always by Coral Terrio. Hello, Carol.

Hello, Graham. And we've also got our good chum from Sophos, Paul Ducklin,

joining us as our special guest today. Hi, Duck, how are you doing?

I am doing superbly, thank you.

Oh, Duck is almost a regular. I am. And I won't say I've dined out on Graham's joke about

tweeting ducks, but it has come up, well, I won't say it's come up often, or even that

it's come up twice, but it did come up once, and the person who brought it up thought it was quite amusing. So, you know, I'm very happy for that of the last podcast. So there's one person other than ourselves who listened to the podcast. That's fantastic. And not me, not me myself. It wasn't like self-tweeting duck. We've succeeded, guys. We're there. We've made it. That's fantastic. Well, as always, we're looking back over the last seven days, some of the things which we can go on in on the world of computer security, some of the stories you may have missed, and some of the things which have caught our eye and just generally been interesting to us. And I'm going to kick off today because I'm going to talk to you about hotel hacking.

Now, chaps, how would you feel if a company has an advisory for you?

And they begin the advisory say, we value the relationship we have with our guests,

and we understand the importance of protecting payment card data.

I'd say they missed out the bit that says, comma, but only now. What a pity we didn't do it last week, last month, last year.

But they never put that bit in.

I can't think why.

No, they don't.

And quite often they don't include words like sorry or apologize or anything like that as well,

which their legal team think may get them into a spot of bother.

No.

...