Smashing Security podcast #314: Photo cropping bombshell, TikTok debates, and real estate scams

It could be a case of aCropalypse now for Google Pixel users, there’s a warning for house buyers, and just why is TikTok being singled out for privacy concerns?

All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

Hosts:

Graham Cluley – @gcluley
Carole Theriault – @caroletheriault

Guest:

Thom Langford – @thomlangford

Episode links:

• Stop pixelating! New tool reveals the secrets of “redacted” documents – Hot for Security.
• Google Pixel exploit reverses edited parts of screenshots – The Verge.
• Tweet by researcher Simon Aarons – Twitter.
• aCropalypse demo.
• Samsung ‘Fake’ Moon Shots Controversy Puts Computational Photography in the Spotlight – MacRumors.
• Android phones can be hacked just by someone knowing your phone number – Graham Cluley.
• BBC advises staff to delete TikTok from work phones – BBC News.
• TikTok: UK ministers banned from using Chinese-owned app on government phones – BBC News.
• TikTok banned from official Welsh government phones – BBC News.
• Danish public broadcaster advises staff against using TikTok – BBC News.
• Canada bans TikTok on government devices – BBC News.
• European Commission bans TikTok on staff devices – BBC News.
• New bill would ban TikTok in the US but it faces long odds – BBC News.
• A Retired Teacher and Her Daughter Were Scammed Out of $200,000 Over Email: ‘I’m 69 Years Old and Now I’m Broke and Homeless’ – Entrepreneur.
• Retired Colorado teacher left homeless and broke after scammers hijack house sale – MSN.
• Homebuyers scammed out of nearly $200,000 – YouTube.
• Stolen life savings Vickie and Sarah Ragle – Go Fund Me.
• The Play That Goes Wrong.
• The Goes Wrong Show 90 Degrees clip – YouTube.
• The Goes Wrong Show Series One – Amazon Prime.
• Poo Pays.
• MiniPresso NS2 – Wacaco.
• Restart Podcast – BBC.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
• Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: “Vinyl Memories” by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Found this article interesting? Follow Graham Cluley on Twitter, Mastodon, or Threads to read more of the exclusive content we post.

Graham Cluley •   @gcluley

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.