How to hack a prison, and the hidden threat of online checkouts
Smashing Security
Graham Cluley
4.7 • 579 Ratings
🗓️ 22 October 2025
⏱️ 44 minutes
🧾️ Download transcript
Summary
A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates to run wild. Then we head to the checkout aisle to ask why JavaScript on payment pages went feral, and how new PCI DSS rules are finally muzzling Magecart-style skimmers.
Plus: Graham reveals his new-found superpower with Keyboard Maestro, and Scott describes a slick new way to whip up beautiful how-to videos with Screen Studio.
All this and more is discussed in episode 440 of "Smashing Security" podcast with cybersecurity veteran Graham Cluley, and special guest Scott Helme.
EPISODE LINKS:
- What caused the AWS outage - and why did it make the internet fall apart? - BBC News.
- China blames US for cyber break-in, claims America is world's biggest bit burglar - The Register.
- Nintendo allegedly hacked by Crimson Collective hacking group - screenshot shows leaked folders, production assets, developer files, and backups - Tom’s Hardware.
- Romanian inmate hacks into prison IT system, modifies sentences for others - Romania Insider.
- New Version of PCI DSS Designed to Tackle Emerging Payment Threats - Infosecurity Magazine.
- What is Magecart? How this hacker group steals payment card data - CSO.
- Keyboard Maestro.
- Screen Studio.
- Smashing Security merchandise (t-shirts, mugs, stickers and stuff)
SPONSORS:
- ANON - Find, monitor and remove data about yourself online. Manage your digital footprint with ease. Use code SMASHING for a 25% discount.
- Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
- Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.
SUPPORT THE SHOW:
Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.
Become a supporter via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!
FOLLOW THE SHOW:
Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.
THANKS:
Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.
ENJOYED THE SHOW?
Make sure to check out our sister podcast, "The AI Fix".
Privacy & Opt-Out: https://redcircle.com/privacy
Transcript
Click on a timestamp to play from that location
| 0:00.0 | They simply removed all the keyboards. |
| 0:05.0 | Touch screen only for you. |
| 0:06.0 | Yes. |
| 0:07.0 | You can't control or delete anymore. |
| 0:10.0 | Smashing Security, Episode 440, How to Hack a Prison, and the Hidden Threat of Online Checkouts with Graham Cluley. |
| 0:29.5 | Hello, hello, and welcome to Smashing Security episode 440. My name's Graham Cluelly. |
| 0:34.7 | And I am Scott Helm. |
| 0:36.9 | Scott, welcome back to the podcast. |
| 0:39.7 | It's been a little while, hasn't it? |
| 0:41.4 | It has, and I think we've racked up a few of these now, and it must be, I was going to say over the years, just as a turn of phrase, but I actually think it must be over the years. |
| 0:49.8 | Well, the extraordinary thing is, Scott, last time you were on the podcast was seven years ago. |
| 0:56.0 | Can you believe that? |
| 0:57.0 | No way. |
| 0:58.1 | Come November, it will be seven years. |
| 1:00.5 | And I have to ask, what on earth have you been up to all this time? |
| 1:04.6 | Man, seven years. |
| 1:05.8 | I can't actually believe that. |
| 1:07.5 | What's been keeping you away from the podcast? |
| 1:10.1 | Well, do you know, I have to say, |
| 1:12.9 | like the number one thing is just work, actually. It's such a boring thing to say, but kind of, |
| 1:17.5 | because gosh, like seven years ago was right back at the start of kind of security headers and |
| 1:20.8 | report your eye fame. So I've since sold security headers, built that up and grew it into |
... |
Please login to see the full transcript.
Disclaimer: The podcast and artwork embedded on this page are from Graham Cluley, and are the property of its owner and not affiliated with or endorsed by Tapesearch.
Generated transcripts are the property of Graham Cluley and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.
Copyright © Tapesearch 2026.