069: Cryptomining, China, and Bob Ross

How come Apple's Mac App Store authorised a buggy app that mined for cryptocurrency in the background? How can a Mosquito attack steal data from an air-gapped computer? And is China keeping score on its social media-loving citizens? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest John Hawes. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language.Special Guest: John Hawes.Sponsored By:LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.Support Smashing SecurityLinks:There’s a currency miner in the Mac App Store, and Apple seems OK with itA Surreptitious Cryptocurrency Miner in the Mac App Store?MOSQUITO Attack Allows Air-Gapped Computers to Covertly Exchange DataMOSQUITO earbuds: Jumping air-gaps via speaker-to-speaker communication - YouTubeWould you choose a partner based on their 'citizen score'?China eyes 'black tech' to boost security as parliament meetsBig data meets Big Brother as China moves to rate its citizensHow WeChat came to rule China