Episode 83 - The Super Spreader Amateur Hour

<p><strong>This Week in InfoSec (11:00)</strong></p><p>With content liberated from the “today in infosec” Twitter account</p><p>23rd November 2011: It was reported that Apple took over 3 years to fix the iTunes installer vulnerability which the FinFisher remote spying Trojan exploited.</p><p><a href="https://krebsonsecurity.com/2011/11/apple-took-3-years-to-fix-finfisher-trojan-hole/">Apple Took 3+ Years to Fix FinFisher Trojan Hole</a></p><p><a href="https://twitter.com/todayininfosec/status/1331028461612392448">https://twitter.com/todayininfosec/status/1331028461612392448</a></p><p>20th November 2000: eBay cancelled a listing for Kevin Mitnick's Bureau of Prisons inmate ID card due to uncertainty about his right to sell it. This was after an initial claim it was a prohibition from committing a "violent felony" and profiting from it.</p><p><a href="https://www.theregister.com/2000/11/23/ebay_pulls_kevin_mitnick_trinkets/">eBay pulls Kevin Mitnick trinkets: Taking a firm stand against "violent felons"</a></p><p><a href="https://twitter.com/todayininfosec/status/1329940298399703042">https://twitter.com/todayininfosec/status/1329940298399703042</a></p><p> </p><p><strong>Rant of the Week (18:50)</strong></p><p><a href="https://www.theregister.com/2021/11/22/godaddy_managed_wordpress_ssl_keys/">SSL keys, sFTP passwords and more exposed after someone broke into GoDaddy Managed WordPress using 'compromised password'</a></p><p>GoDaddy has admitted to America's financial watchdog that one or more miscreants broke into its systems and potentially accessed a huge amount of customer data, from email addresses to SSL private keys.</p><p>In a filing on Monday to the SEC, the internet giant said that on November 17 it discovered an "unauthorized third-party" had been roaming around part of its Managed WordPress service, which essentially stores and hosts people's websites.</p><p>GoDaddy’s chief information security officer Demetrius Comes said his company "immediately began an investigation with the help of an IT forensics fir