Wired Security Spoken Edition

You probably get robocalls all the time. Some pretend to be from the IRS, others come from a phone number very similar to yours. And then there's the rash of free airline tickets/problem with your credit card/complete this short survey intrusions. If it feels like they're cropping up more than ever, you're right. The blocking service YouMail estimates that 2.49 billion robocalls were placed to US consumers last month, marking a 4.1 percent increase over September. This translates to 80. Learn about your ad choices: dovetail.prx.org/ad-choices

As many as a million spectators turn out for the Macy's Thanksgiving Day Parade. Another 200,000 show up the night before to watch the enormous balloons inflate. Keeping New York City safe on an ordinary day is challenging enough; locking down a massive parade route is all the more so. But the New York Police Department has recently deployed a new secret weapon to counter body-worn bombs: A team of Labrador retrievers who have graduated from patent-pending "Vapor Wake" security training. Learn about your ad choices: dovetail.prx.org/ad-choices

By now, the name Uber has become practically synonymous with scandal. But this time the company has outdone itself, building a Jenga-style tower of scandals on top of scandals that has only now come crashing down. Not only did the ridesharing service lose control of 57 million people's private information, it also hid that massive breach for more than a year, a cover-up that potentially defied data breach disclosure laws. Learn about your ad choices: dovetail.prx.org/ad-choices

Well, it’s been a wild and wooly week for security, especially for Face ID, which a group of hackers at a Vietnamese security firm convincingly claim to have broken just a week after the iPhone X release. They’re joined by a 10-year-old boy, who managed to break into his mother’s iPhone X thanks to a little trick known as genetics. Learn about your ad choices: dovetail.prx.org/ad-choices

Four months ago, HBO faced a punishing series of leaks of unreleased episodes, scripts, and even celebrities' contact information. On Tuesday, the Department of Justice named the alleged culprit behind that extortion campaign: An Iranian hacker named Behzad Mesri. By indicting Mesri, prosecutors have sent a message that even anonymous cybercriminals in countries as distant as Iran can be tracked down and unmasked. Learn about your ad choices: dovetail.prx.org/ad-choices

We get it. Presidential campaigns are a blur. One day you're kissing babies in an Iowa cornfield, the next you're working the spin room at a Las Vegas debate. Who among us can remember every hand shaken, every appointment kept, every 30-year-old underling plotting a backroom conversation with Vladimir Putin to acquire dirt on a political opponent? Certainly not Attorney General Jeff Sessions. Learn about your ad choices: dovetail.prx.org/ad-choices

WikiLeaks has been sliding into Donald Trump Jr.’s DMs. The mostly one-sided conversation, surfaced by The Atlantic, lasted at least from September 2016 to July 2017. Throughout that stretch, WikiLeaks sent Donald Trump Jr. direct messages through Twitter, asking him for his father's tax returns, suggesting Trump Senior reject election results if Hillary Clinton won, and even oh-so-casually floating the idea that Julian Assange might make a good Australian ambassador. Trump Jr. Learn about your ad choices: dovetail.prx.org/ad-choices

Five years ago, Benjamin Delpy walked into his room at the President Hotel in Moscow, and found a man dressed in a dark suit with his hands on Delpy's laptop. Just a few minutes earlier, the then 25-year-old French programmer had made a quick trip to the front desk to complain about the room's internet connection. He had arrived two days ahead of a talk he was scheduled to give at a nearby security conference and found that there was no Wi-Fi, and the ethernet jack wasn't working. Learn about your ad choices: dovetail.prx.org/ad-choices

The United States government doesn't get along with hackers. That's just how it is. Hacking protected systems, even to reveal their weaknesses, is illegal under the Computer Fraud and Abuse Act, and the Department of Justice has repeatedly made it clear that it will enforce the law. In the last 18 months, though, a new Department of Defense project called "Hack the Pentagon" has offered real glimmers of hope that these prejudices could change. Learn about your ad choices: dovetail.prx.org/ad-choices

The first time the police arrived on her doorstep, in March of 2015, Courtney Allen was elated. She rushed to the door alongside her dogs, a pair of eager Norwegian elkhounds, to greet them. “Is this about our case?” she asked. The police looked at her in confusion. They didn’t know what case she was talking about. Courtney felt her hope give way to a familiar dread. Learn about your ad choices: dovetail.prx.org/ad-choices

When Apple released the iPhone X on November 3, it touched off an immediate race among hackers around the world to be the first to fool the company's futuristic new form of authentication. A week later, hackers on the actual other side of the world claim to have successfully duplicated someone's face to unlock his iPhone X—with what looks like a simpler technique than some security researchers believed possible. Learn about your ad choices: dovetail.prx.org/ad-choices

It was 10 am on a hot, humid Tuesday in August when I decided I could finally relax. After a frantic weekend of finishing a big story—and typing so much that my forearms tingled—I needed to decompress. I placed my phone on do not disturb, turned on my air conditioner, and blissfully spent an hour contorting myself into various poses on the yoga mat next to my bed. Learn about your ad choices: dovetail.prx.org/ad-choices

You've been there: browsing on a slightly backwater website, crossing your fingers as you click what looks like a video's play button. Instead of the TV show you had queued up, a million pop-ups spew out. The page you were on morphs into a Caribbean timeshare ad. It's the sort of misdirection that Google aptly calls an "unwanted behavior." And on Wednesday, the company's Chrome browser team announced a series of fixes that attempt to block these sketchy shenanigans. Learn about your ad choices: dovetail.prx.org/ad-choices

The email hits your inbox with an urgent warning: Your Netflix account has been suspended, due to a problem with your billing information. It offers a link, which takes you to what looks very much like a Netflix landing page. It's not. Instead, it's a phishing scam that collects extensive personal data on victims. Learn about your ad choices: dovetail.prx.org/ad-choices

Owning cryptocurrency isn't quite the Wild West experience it was at the beginning of the decade, but investors still face plenty of instability and risk. The threats aren't just abstract or theoretical; new scams crop up, and old ones resurge, all the time. Whether it's a fake wallet set up to trick users, a phishing attempt to steal private cryptographic keys, or even fake cryptocurrency schemes, there’s something to watch out for at every turn. Learn about your ad choices: dovetail.prx.org/ad-choices

“We reject: kings, presidents, and voting. We believe in: rough consensus and running code.” So declared MIT professorDavid D. Clarkin 1992. Twenty-five years later, this sentiment mirrors the global zeitgeist more than ever. TheAmerican public distrusts governmentin record numbers. Other nation-states disdain the USto world-historical degrees. Learn about your ad choices: dovetail.prx.org/ad-choices

For the last two years, America's cybersecurity relationship with China has been held up as a triumph of digital diplomacy: Since the two countries signed an agreement not to hack each others' private sector companies for commercial gain in late 2015, that pact has come to represent one of the most effective demonstrations in history of government negotiation to curtail state-sponsored cyberspying. Learn about your ad choices: dovetail.prx.org/ad-choices

This week, some old security threats came back to haunt the internet, a fitting horror trope this close to Halloween. Remember the Mirai botnet that took out the internet for a big chunk of the East Coast and beyond last year? It’s back, sort of. More specifically, a new botnet called Reaper is steadily growing, based on Mirai but with an added trick. It doesn’t just seek out IoT devices with poor password protections; it can actively take advantage of known vulnerabilities. Learn about your ad choices: dovetail.prx.org/ad-choices

Angst over a potential electromagnetic pulse attack bubbles up every few months, and it’s easy to understand why. The EMP impact envisioned by people who have studied it closely would be downright apocalyptic: a decimated US power grid, and up to 90 percent of Americans dead within a year. It doesn’t help, either, that North Korea recently invoked the specter of an EMP attack, and seems increasingly like it would have the wherewithal to pull one off. Learn about your ad choices: dovetail.prx.org/ad-choices

Monday morning, just hours after pundits had settled into dissecting what everyone assumed to be the day’s big revelation—the indictment of former Trump campaign chairman Paul Manafort, and his former business associate Rick Gates, on a slew of charges related to an alleged money laundering scheme—came an even bigger revelation: George Papadopoulos, foreign policy advisor to the Trump campaign, had struck a plea agreement with Robert Mueller’s special counsel office. Learn about your ad choices: dovetail.prx.org/ad-choices