
Piers Morgan is less than happy after a judgement that there is “no doubt” he knew phone hacking was going on at the Daily Mirror, and a shopper comes a-cropper just before Christmas.
All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.
Warning: This podcast may contain nuts, adult themes, and rude language.
Show full transcript ▼
This transcript was generated automatically, probably contains mistakes, and has not been manually verified.
Phone hacking, Piers Morgan, and Carole's Christmas cock-up with Carole Theriault and Graham Cluley. Hello, hello, and welcome to Smashing Security episode 353.
My name is Graham Cluley.
Now, coming up on today's show, Graham, what do you got?
All this and much more coming up on this episode of Smashing Security.
Chums, chums, my story is all about phone hacking and the celebrated journalist and broadcaster, bon vivant, Piers Morgan.
And of course, his best-selling work was 1994's Take That! On the Road, which I think—
He refused to admit they were faked and said even if they were, it didn't matter because similar abuse was taking place elsewhere in Iraq.
But anyway, now Piers Morgan, he's an interesting fellow because he's sort of somehow embroiled in this whole phone hacking debacle.
And I remember back around 2010, 2011, writing a lot about phone hacking after it really became prominent.
If anyone who didn't live through it or didn't pay attention and loves a huge debacle wants to write a podcast about it, you could do a serial on this.
People did go to jail over the phone hacking, although not some people who you might have expected.
Anyway, originally it was all about that, the Milly Dowler killing, and there was all kinds of hacking of murder victims and celebrities.
And the way in which it worked was that, in fact, this is what an actual Sunday Mirror report— because it stopped being just about the News of the World.
It also was about other newspapers from other newspaper groups, including the Mirror newspaper.
And there was one Sunday Mirror newspaper who told Newsnight back in 2011 how it was done.
He said it was routine practice at his newspaper in the hunt for salacious celebrity gossip.
What would happen is there'd be two journalists, they would ring a celebrity at the same time, and because they were ringing at the same time, it meant one of them would get the voicemail of the celebrity.
You could say silly of them, but they just didn't know, many of them, there was even the ability, I imagine.
And what's happened in just the last few days is this subject of hacking of phone voicemails and the possible involvement of the esteemed, illustrious, honorable Piers Morgan himself.
That has now been brought back into the news because there's been a high-profile court case in London brought by Prince Harry and others.
And they're going to have to pay out some money and things in terms of compensation.
In fact, even I'm afraid to say, Piers Morgan, even while he was editor, I think the readership diminished by about 30%. It's a bit when he had his CNN show or TalkTV.
It does seem to drive people away. Anyway, not that I've got any beef with Morgan. I do have beef with Morgan.
But based upon the evidence presented, Justice Fancourt said that there was unlawful information gathering which was widespread at the Daily Mirror, Sunday Mirror, and the People from 1996 onwards.
Piers Morgan became editor in 1995, and that phone hacking started in 1996 and became widespread and habitual from 1998.
Prince Harry's outrage at media intrusion into the private lives of the royal family is only matched by his own ruthless, greedy, and hypocritical enthusiasm for doing it himself.
He talked today about the appalling behavior of the press, but this is a guy who's repeatedly trashed his family in public for hundreds of millions of dollars even as two of its most senior and respected members were dying—his grandparents.
It's hard to imagine, frankly, more appalling behavior than that.
As for him saying this is a good day for truth, the Duke has been repeatedly exposed in recent years as someone who wouldn't know the truth if it slapped him around his California-tanned face.
Oh, that's mature.
If we go back in our time machine, we can see what Piers Morgan has said about this in the past.
Three months ago, he used the same words, "never hacked a phone, never asked anyone to hack a phone," to the BBC's Laura Kuenssberg.
I do want to ask you if you have ever listened to a voicemail without the consent of one of the participants.
No, I've made it very clear my position on hacking is I have never hacked a phone, I've never told anyone to hack a phone, no one's produced any evidence, including in this case— The paper you were editing benefited and ran stories based on phone hacking.
Did you notice that? She asks him, have you ever listened to a voicemail without the consent of the people on the voicemail? Right. He doesn't answer that.
What he says is he's never hacked a phone and never asked anyone to hack a phone. Yeah. Doesn't say he never heard any recordings. So someone else—
He's never hacked a phone or asked anyone to hack a phone.
And then somebody pointed out, well, you can only know the first two things for sure. Yeah, all I can talk to is what I know about my own involvement. I never hacked a phone.
I wouldn't even know how. Let's just state some facts for some people that don't know the detail and haven't been open. And he said the same on Twitter in 2015, The Guardian in 2014.
In fact, as Archie Bland of The Guardian wrote this week, he said, if you ask Piers Morgan what his favorite biscuit is at any point in the last 15 years, he will tell you that he's never hacked a phone and never told anyone else to either.
But if we go further back, we find a slightly different story. Because in 2006, he wrote an article for the Daily Mail. It's still online.
I will link to it in the show notes, where he admits that he played somebody a tape of a message Paul McCartney left for his fiancée, Heather Mills, on the mobile phone.
There'd been some bust-up. Paul McCartney apparently sang, "We will work it out. We will work it." He sang that to her down the phone.
Now Heather Mills says that she was called by a Mirror journalist in 2001, quoted parts of the message that McCartney had left for her on her phone after an argument.
And you don't mess with Heather Mills, right? You never get on the wrong side of her. And she said to him, you obviously hacked my phone.
If you do anything with this story, I'm going to go to the police. Morgan told the Leveson Inquiry into phone hacking that he couldn't discuss how that tape was made or who made it.
McCartney wouldn't have done it because it didn't show him in a good light. Heather Mills said Piers Morgan would have relished telling the inquiry if I had played him a voicemail.
Of course he would have! Right?
There's even a video which Hugh Grant shared back from 2003 with Piers Morgan telling singer Charlotte Church she should change her PIN code on her phone to stop reporters from accessing her voicemail.
There was a spate of stories that came out because of mobile phones.
When they first came out, mobile phones, journalists found out that if the celebrity hadn't changed their PIN code.
If they know they can ring up Charlotte Church's mobile phone, listen to all her messages, right?
Now, all you have to do— and I know it's hard because somebody's done doing anything for themselves— is actually change your security.
All I can talk to is what I know about my own involvement. I never hacked a phone. I wouldn't even know how. I wouldn't even know how. Hmm, interesting.
So somewhere along the line, round about 2011, for years Piers Morgan was gleefully telling people in the public eye how easy it was to hack into their voicemails.
There's GQ interviews, all sorts of things. But then he starts changing his tack and he says, well, I've never told anyone to do it, and I've not done it myself.
I mean, we can have a bit of a laugh about this, but this hacking of people's voicemails— Oh, it's fucking awful. Did real harm. Yeah.
And in the past, Mirror lawyers have argued that although the hacking was unlawful and wrong, it didn't result in permanent harm because they're trying to reduce the damages.
Now, if you speak to people like Paul Gascoigne, Paul Gascoigne was a British soccer player. Football. Yeah. Who was troubled, shall we say. He liked to drink.
And he's had mental health issues. He says that he was scared to speak to anybody when news stories about himself and his loved ones, his parents, his family, his kids, it got out.
He says, and people can't understand why I became an alcoholic. He says it was huge damage which was done to him and his family. 100%.
You would get burner. We'd be teasing you thinking you're a bit crazy, Clue. It would not be good for your mental health of anybody, I don't think.
Sometimes it's people who simply came into the public eye by accident as a consequence of some other news story.
Suddenly they are in the press and the journalists trying to get the dirt on these individuals have dug around and found this stuff. So it's really, really unpleasant stuff.
It's been so long since I've had a new phone, I can't actually remember how it works.
It'll serve a useful purpose for you.
I don't know who that might be, and maybe we'll never get quite the full scoop on this one unless these claims are properly investigated.
But I think after this latest revelation and the opinions of the court, which has upset Piers Morgan so much, maybe we do need— because apparently the phone hacking carried on even during the Leveson inquiry into phone hacking.
So this has been an ongoing problem for many years. Graham, you know what?
And then anytime he tells a fib, have a little Pinocchio nose come out and lengthen the Pinocchio nose as you feel he fibs his way along and see how long it gets.
She's been hammering it at work, and she can't wait because she's way behind on all the things. Are you ahead of Christmas this year? Behind on Christmas?
Do you have all your gifts bought, wrapped, sorted, and the people you need to see and all that stuff?
You know how you get just a few sweets or something you may just put in, or a little bit of fruit. So I may do that in the run-up to the final countdown.
Well, for me anyway, personally, you have pantos, the cities and towns are decked out with little twinkles, right?
I was actually in London a few weeks ago, and I was all gaga looking at Carnaby Street this year's decorations. It's all space and stars. It's really beautiful on Carnaby Street.
You go to stores and you run around the stores and it's just too much. Right? There's stuff everywhere. There's Christmas music in every single shop.
There's people everywhere bumping in and grumpy and grabbing the last stuff. And Charlotte, she's "I'm just wasting precious hours here trawling the streets." So she's bummed out.
She gets home. She's wasted a whole afternoon. And she's scrolling Instagram to calm down. Right? And lo and behold, there's a closing down sale in her feed.
A closing down sale of a Danish brand that Charlotte has always kind of loved.
There's comments everywhere. There's "453 people are currently looking at this item," and "75,000 people are looking at this item." And not 75,000, but 75.
This is a Danish company. Danish people are buying it everywhere. And Charlotte's not surprised. Too good to be true. Prices are great. So she trawls through.
She accumulates a very nice, sizable shopping basket full of trinkets. And then she goes to pay for it all and stuff.
And she gets there and she puts in her name and she goes and searches for certain things, but the search function doesn't work at all. It just kind of barfs, right? Completely barfs.
And she's like, oh, you know, they're closing down. They're not going to put any time in that, you know? So she enters her email address, right? Charlotte blah blah.
And a line comes up when she's registered saying you have 2 minutes and blah blah seconds to complete the purchase. And, but don't worry, we've added an additional discount. Right?
Because the total, you know, she's thinking the total would have been about this, but they're adding in now it's a mere £75 for a dozen.
Fills in all the info, happy because she wants to get there before all the stuff disappears. And boom, things complete. She breathes out. She's like, I'm done. Christmas is sorted.
But she gets this nagging feeling, like, "Was the stuff just a bit too cheap? Like, really? Was it just a bit too cheap? And was the site really legit?
Did she do any checking at all?" And the question is, Graham, what should Charlotte do now? Because I'm Charlotte, Graham. I'm Charlotte. Oh my God!
The first thing is this is acting like a shop that would be representing many types of brands, like a distributor. But on the website, there is only this one brand's items.
And this site was registered, so it was created for the first time on the 10th of December. Yep. So it's only been live for now 8 days.
Do a WHOIS lookup, okay? Yeah. So you go to whois.com, put in the URL, and that's it. It'll tell you when it was registered. Good. What next, Graham? Keep looking, 'cause it gets worse.
You make me do this live, so I'm not— Okay, now I've got some pictures and things. So closing sales up to 90% off. Right.
So, see, it seems unlikely that they'd have a closing sale and they've only set up the website just over a week ago. You think? So you paid with your credit card, did you?
Tick, green tick, green tick." And you just think, "Well, that's worthless." That's just a thing saying that you've got HTTPS, but that doesn't cost you anything.
Well, oh, it's got a Twitter link. Have you gone to the Twitter link?
They've just basically taken a template and haven't filled in the blanks.
Oh, they're on NASDAQ Helsinki, they claim. Have you looked on the NASDAQ in Helsinki?
I have a newfound respect for— It's so stupid. It was the time limit that did it for me. It was so stupid. There were people in my house.
There were people in my house that I could have gone, "Hey, what do you think of this?" I'm just looking at the prices.
I contacted my credit card company and I say, "What do I do now?" And they said, "Actually, we thank you for calling, but we can't do anything for 5 days because it's now pending, it's not processed." But if the payment does get processed, even though you have requested, so it's important that I get in touch with the merchant and say, "I want this revoked," right?
So I have emailed the dodgy support address that they provided to say, "I want to cancel this order," da da da da da da da.
And I need that kind of evidence for my credit card company. Carole? Yes?
That was the rabbit hole that I went through via that route. And I'm not au fait with the Instagrams of this world.
They really were. And they basically— I'm going to call— we'll see what happens. And I will report in the new year. That's good.
The other tip I could give people is you could have a different credit card number for online purchases, which may have a limit as to how much can be spent on it.
Some people have cards— I don't have one of these actually. Maybe you have one of these, which can create virtual card numbers.
I'm so embarrassed and also pissed off with myself.
But at the same time, I think the one thing that I took away from it is it's amazing how sometimes you can get yourself in a psychological state for whatever reason, and you will— it leads you, and you just got to take a breath.
And I fell for hook, line, and sinker, even though I know all about this shit. And it's mortifying, but it happened to me.
There's something about them where you just kind of think, oh, that looks so cool.
Expand the scope of your security program with Vanta's market-leading compliance automation.
Vanta's 5,000+ global customers report saving over 300 hours in manual work and up to 85% of cost for SOC 2, ISO 27001, HIPAA, GDPR, custom frameworks, and more.
And with Vanta's 200+ integrations, you can easily monitor and secure the tools your business relies on.
From the most in-demand frameworks to third-party risk management and security questionnaires, Vanta gives SaaS businesses of all sizes one place to manage risk and improve security in real time.
As a special bonus, Smashing Security listeners get a whopping 20% off Vanta. Just go to vanta.com/smashing. That's vanta.com/smashing.
If you work in security or IT and your company has Okta, this message is for you.
For the past few years, the majority of data breaches and hacks you read about have something in common. It's employees.
Hackers absolutely love exploiting vulnerable employee devices and credentials. But imagine a world where only secure devices can access your cloud apps.
Here, credentials are useless to hackers, and you can manage every OS—even Linux—from a single dashboard.
Best of all, you can get employees to fix their own device security issues without creating more work for IT. The good news is you don't have to imagine this world.
You can just start using Kolide.
Kolide is a device trust solution for companies with Okta, and it makes sure that if a device is not trusted or secure, it can't log in to your cloud apps.
Visit collide.com/smashing to watch a demo and see how it works. That's collide.com/smashing.
Could be a funny story, a book that they've read, a TV show, a movie, a record, a podcast, a website, or an app, whatever they wish.
It doesn't have to be security-related necessarily. Better not be. Well, my pick of the week this week is actually a podcast, Carole. Oh! Or an audio documentary.
It wasn't a podcast until I saw the creator of this audio documentary post about it on Twitter.
And I said, "Oh, it'd be lovely if you had this as a podcast." And he said, "All right," and he shoved it up on my podcast host. Oh, cool! Yeah, it's very good of him.
His name is Lucas Testreau. Okay. And he has made a documentary in 3 parts about the life and work of Donald Cotton. Now—
You know, when I choose a Pick of the Week, I quite often think I'm in a dilemma.
Do I choose something that I really like, or do I choose something that I think listeners will actually like?
In this case, I suspect only a very niche number of our listeners will enjoy this because the biggest audience probably for this is a Doctor Who fan audience, but not just a fan of Doctor Who generally, but a real kind of in deep fan.
Corral, and The Mythmakers, which was all about the Siege of Troy and things like that. And I've never actually seen The Mythmakers because it was destroyed by the BBC.
I have seen bits of The Gunfighters, but as a young lad, I loved reading those two particular novelizations. So, Doctor Who stories were novelized.
These two were novelized by Donald Cotton himself, and they are two of the funniest books I have ever read.
It's called Mythmaker: The Lost Legacy of Donald Cotton, and you find out about his life.
This very witty chap who had a bit of a sad life, a difficult life, a lot of lady action, but at the same time, it seems that he was unfulfilled both as an actor and a lyricist.
TV, he felt, was beneath him. He wanted to be into the stage, and it's quite moving. And I really enjoyed this podcast.
I suspect there are about 3 people who may enjoy it who are listening as well.
It's a great tale about somebody's life and the impact they had, and it's extremely well put together by Lucas Testreau. So I really wanted more people to hear it.
He interviews people, he manages to get in touch with Donald Cotton's family, his estranged son, other people who used to be married to him.
He used a lot of sort of open source intelligence to reach out and get in touch with people. It's absolutely fascinating how he did it, and it's a great little documentary.
I really enjoyed it.
So if you're into Doctor Who or if you just hear about stories about people's lives— I certainly love to hear stories of people's lives— then I can recommend Mythmaker: The Lost Legacy of Donald Cotton.
And if you manage to get hold of a copy of The Gunfighters book or The Mythmakers, you'll really enjoy those as well. Are you looking for first editions, Clue?
No, I think I've probably got first edition. Actually, no, I— oh, I gave away all my Doctor Who books to a charity shop before my son was born.
I thought, I'm never going to have kids. I'll give these all away. And then of course I had a kid. I've got them as PDFs. Great. Not really the same though. Hey ho.
Anyway, that is my pick of the week. Carole, what's your pick of the week?
Some of you also may have people you wish you were with, but can't be because you're travelling or you're in a different country, different part, you know, it's too expensive, all that stuff.
So how do you connect? Well, of course, there's the video call, right? Yes. But they can be quite difficult.
I don't know if you've done— we all have done family-wide ones, especially during the pando, where you're sitting there and everyone's— you know, my other half's parents would sit there and they— I think their screen was smudged with some kind of grossness.
So they looked they were in a sepia, 1920s screen. It's just so weird.
Anyway, so you have these situations and everyone I know it's kind of awkward on these calls and stuff, but maybe, maybe you could do some good old Christmas games, those that people play around the fireplace.
Ah! Virtually. Okay. So I found a list, which I'll share in the show notes. Oh, this is brilliant. There's a number of different ones, and I'm gonna share my favourites here, okay?
So there's virtual karaoke Christmas, where you would download an online karaoke player or just share your screen. Yep.
And everyone has a chance to join in screaming from your houses, right?
There's the virtual scavenger hunt where one person puts together a list of crazy items that may or may not be in the house.
And it could be things like batteries, family photograph, you know, condom wrapper, whatever.
And those that are guilty of it have to keep their cameras on and those that aren't turn them off. Right? So you turn off your screen and then the only person left is the— Yeah.
You have two truths, one lie. We all know that game. Oh, that's good fun.
Well, I know that one's true because you've tricked me into eating durian fruit and it's absolutely disgusting. So that's two truths and a lie. So it's either you've water skied.
Or—
2023, goodbye. We are going on a little break. It's been a wonderful year, hasn't it? 2023. So marvelous. I'm sure 2024 will be so much better.
In the meantime, you can follow us on Twitter @SmashingSecurity. And we're also on Mastodon as well. And we also have a Smashing Security subreddit.
And don't forget to ensure you don't miss our episode when we come back in January.
Follow Smashing Security in your favorite podcast apps, such as Spotify, Overcast, and Apple Podcasts.
For episode show notes, sponsorship info, guest list, and the entire back catalog of more than 352 episodes, how can you be bored? Check out smashingsecurity.com.
There's not a lot of that. There's not a lot of that. All right. But I then ended up in Christian rap Christmas albums.
Hosts:
Graham Cluley:
Carole Theriault:
Episode links:
- Piers Morgan denies knowing of phone hacking after judge rules he did – The Guardian.
- I’ve never told anyone to hack a phone – Piers Morgan tells Laura Kuenssberg – BBC News.
- Piers Morgan interviewed by BBC’s Amol Rajan about phone hacking at Daily Mirror – BBC News.
- Piers Morgan will find many ways to deny phone hacking – but how long before his number is up? – Archie Bland’s article in The Guardian.
- Piers Morgan tells Charlotte Church how to stop her mobile phone from being hacked – YouTube.
- I’m sorry, Macca, for introducing you to this monster – Piers Morgan describes in the Daily Mail a voicemail he heard between Paul McCartney and Heather Mills.
- The human cost of phone hacking – Graham Cluley.
- Eudesignhouse.shop Review – Unmasking the Store Closing Scam – MyAntiSpyware.
- Whois Domain Lookup.
- Myth Maker: The Lost Legacy of Donald Cotton – SoundCloud.
- 15 virtual Christmas party games to play this festive season – Country Living.
- 21 Virtual Christmas Games To Play On Zoom With Adults – Team Building.
- Smashing Security merchandise (t-shirts, mugs, stickers and stuff)
Sponsored by:
- Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
- Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Support the show:
You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.
Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!
Follow us:
Follow the show on Bluesky at @smashingsecurity.com, or on Mastodon, on the Smashing Security subreddit, or visit our website for more episodes.
Thanks:
Theme tune: “Vinyl Memories” by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.


