What do a sleazy nightclub carpet, Google’s gaping privacy hole, and an international student conned by fake ICE agents have in common? This week’s episode of the "Smashing Security" podcast obviously.

Graham explains how a Singaporean bug-hunter cracked Google’s defences and could brute-force your full phone number. Meanwhile, Carole dives into a chilling scam where ICE impersonators used fear, spoofed numbers, and... Apple gift cards to extort terrified migrants.

Plus: Nazis, door safety, and the age-old struggle of telling Ralph Fiennes from Liam Neeson.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Bruteforcing the phone number of any Google user - Brutecat.
Leaking the phone number of any Google user - YouTube.
Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account - The Hacker News.
Google fixes flaw that could unmask YouTube users' email addresses - Bleeping Computer.
ICE Scammers Are On The Rise: What To Do - Newsweek.
Student visa holder tricked by fake ICE agent scam, loses thousands - Newsweek.
Conspiracy - IMDB.
Schindler’s List - IMDB.
Dutch Reach car door opening method - The AA.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
Flare - Uncover the latest threats across the dark web and Telegram. Start your free trial today.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:

OP3 - https://op3.dev/privacy

Toothpick flirts, Google leaks, and ICE ICE scammers 35:54 Share

Smashing Security

Shownotes Transcript

Toothpick flirts, Google leaks, and ICE ICE scammers