088: PayPal’s Venmo app even makes your drug purchases public
42:55 Share

Websites still using HTTP are marked as "not secure" by Chrome, 85,000 Google employees haven't been phished for a year, and if you're buying drugs via PayPal’s Venmo app you should say goodbye to privacy.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley) and Carole Theriault), joined this week by Scott Helme.

Follow the show on Twitter at @SmashinSecurity), or visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts), or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks.

Special Guest: Scott Helme.

Sponsored By:

• LastPass): [LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.](https://www.lastpass.com/smashing))

Support Smashing Security)

Links:

• Vote for Smashing Security in the podcast awards!)

• Smashing Security 039: Woah - are we talking to a cyborg?)

• Google: Security Keys Neutralized Employee Phishing)

• Yubico)

• Less than 10% of Gmail users have enabled two-factor authentication)

• Google's Advanced Protection Program)

• What is Google’s Advanced Protection Program? - YouTube)

• Two-factor authentication versus two-step verification)

• One small step for a browser, one giant leap for web security!)

• Chrome browser flags Daily Mail and other sites as 'not secure')

• How to change Chrome's settings to be more in-your-face when you visit an unencrypted HTTP site)

• Public by Default - Venmo Stories of 2017)

• Why I Blasted Your “Drug” Deals on Twitter)

• PayPal's Venmo App Exposes Most Transactions via Its API)

• Reporting Trump's First Year: The Fourth Estate - BBC)

• Why No HTTPS? The World's Largest Websites Not Redirecting Insecure Requests to HTTPS)

• Scott Helme tweets about NewsNow's support for both HTTP and HTTPS)

• NewsNow.co.uk)

• Smashing Security merchandise (t-shirts, mugs, stickers and stuff))

  This podcast uses the following third-party services for analysis: OP3 - https://op3.dev/privacy