420: Two Goats

Eric and Jon are both fully prepped for the holiday. Flock leaves (many) cameras including control panels open and exposed to the open internet, what if more malicious npm packages worked as advertised, and Microsoft is finally disabling rc4 by default in Active Directory. For fun we have two movies for holiday watching: F1: The Movie, and Howl's Moving Castle. Enjoy! • 0:00 - Introduction • 11:38 - Open Flock Livestreams (https://www.404media.co/flock-exposed-its-ai-powered-cameras-to-the-internet-we-tracked-ourselves/) • 18:09 - WhatsApp Stealer (https://www.koi.ai/blog/npm-package-with-56k-downloads-malware-stealing-whatsapp-messages) • 23:39 - Obsolete Cipher (https://arstechnica.com/security/2025/12/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc/) • 30:38 - F1: The Movie (https://www.imdb.com/title/tt16311594/) • 33:04 - Howl's Moving Castle (https://en.wikipedia.org/wiki/Howl%27s_Moving_Castle_(film))