Episode 119 - Andy Who?

<p><strong>This week in InfoSec (09:07)</strong></p><p>With content liberated from the “today in infosec” twitter account and further afield</p><p>30th August 1999: The previously unknown group Hackers Unite claimed responsibility for disclosing a vulnerability in Hotmail that granted access to all of its roughly 50 million users' email accounts.</p><p>13 years later Microsoft rebranded Hotmail, renaming it Outlook.</p><p><a href="https://www.wired.com/1999/08/hotmail-hackers-we-did-it/">Hotmail Hackers: 'We Did It'</a></p><p><a href="https://twitter.com/todayininfosec/status/1300212717656121344">https://twitter.com/todayininfosec/status/1300212717656121344</a></p><p>31st August 2014: A user of the message board 4chan posted leaked photos of actress Jennifer Lawrence and numerous other celebrities.</p><p><a href="https://mashable.com/archive/celebrity-nude-photo-hack">Jennifer Lawrence and Other Celebs Hacked as Nude Photos Circulate on the Web</a></p><p><a href="https://twitter.com/todayininfosec/status/1300537361676283905">https://twitter.com/todayininfosec/status/1300537361676283905</a></p><p> </p><p><strong>Rant of the Week (20:21)</strong></p><p><a href="https://www.theregister.com/2022/09/01/mobile_apps_leaked_biometrics/">Here's how 5 mobile banking apps put 300,000 users' digital fingerprints at risk</a></p><p>Massive amounts of private data – including more than 300,000 biometric digital fingerprints used by five mobile banking apps – have been put at risk of theft due to hard-coded Amazon Web Services credentials, according to security researchers.</p><p>Symantec's Threat Hunter Team said it discovered 1,859 publicly available apps, both Android and iOS, containing baked-in AWS credentials. That means if someone were to look inside the apps, they would have found the credentials in the code, and could potentially have used that to access the apps' backend Amazon-hosted servers and steal users' data. The vast majority (98 percent) were iOS apps.</p><p>In all, 77 percent of these apps contained valid AWS