New York governor Kathy Hochul signed landmark climate legislation into law last week, showing how states can keep holding polluters accountable even when President-elect Donald Trump rolls back environmental protections.
Technology
Spotify playlists are being hijacked to promote pirated software and scams
Many of us use Spotify every day, whether to listen to songs, podcasts or audiobooks. Some of us create playlists of our favorite songs, while others save playlists made by others.
In case you didn’t know, Spotify allows you to create public playlists that anyone can save and listen to. You’d think this is a harmless feature, but spammers have found a way to misuse it.
They’re using Spotify playlists and podcasts to push pirated software, game cheat codes, spam links and malware sites. I’ll discuss the details of this emerging online scam and share tips on how to stay safe.
5 DAYS LEFT! I’M GIVING AWAY A $500 GIFT CARD FOR THE HOLIDAYS (ends 12/2/24 12 pm PT)
How the Spotify scam works
As reported by BleepingComputer, this scam works by misusing Spotify’s popularity and trustworthiness. Scammers exploit Spotify playlists by injecting targeted keywords, such as “free download,” “crack” or “warez,” into titles and descriptions.
These keywords are designed to align with popular search terms. Since Spotify’s web player pages are indexed by search engines like Google, these spammy results appear in user searches, driving traffic to their links. For example, a Spotify playlist titled “Sony Vegas Pro 13 Crack…” was found promoting “free” software sites in its title and description, directing users to questionable external links.
The scam isn’t limited to playlists. It extends to podcasts as well. Scammers create podcasts with multiple short episodes, typically under 20 seconds, using synthesized speech to direct listeners to click links in the description for free content. These podcasts often target users searching for pirated ebooks, audiobooks or game cheats. While the content may appear legitimate at first glance, clicking on the links often results in being redirected to unsafe pages that further exploit users.
4.3 MILLION AMERICANS EXPOSED IN MASSIVE HEALTH SAVINGS ACCOUNT DATA BREACH
The end goal
The main goal of this scam is to use Spotify’s trusted reputation and search engine visibility to get people to click on shady links and visit sketchy websites. Scammers make money through fake ad clicks, bogus surveys and affiliate links, while also spreading malware by tricking users into downloading harmful software or extensions.
They also try to steal personal info through fake sign-up forms or phishing pages, which can lead to identity theft or be sold to others. By using Spotify’s indexed pages, they boost the search rankings of their spam sites, reaching more people. Some of these sites even run extra scams like fake crypto giveaways or phishing attempts to grab even more money or data from unsuspecting users.
MASSIVE SECURITY FLAW PUTS MOST POPULAR BROWSERS AT RISK ON MAC
7 ways to stay safe from Spotify scams
1. Avoid clicking on suspicious links: Be cautious when you come across playlists or podcasts with titles like “Sony Vegas Pro 13 Crack” or other promises of free software, audiobooks or game cheats. These often include links in the description that redirect to unsafe sites hosting malware, adware or phishing pages.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.
2. Stick to official sources: Always download software, eBooks or other digital content from trusted official websites or reputable platforms. If you see a Spotify playlist or podcast offering “free” versions of paid content, it’s likely a scam. Cross-check the legitimacy of the content through known channels instead of relying on unverified links.
3. Use strong, unique passwords: Create complex and unique passwords for your Spotify account and avoid using personal information like birthdays or pet names. Consider using a password manager to generate and store complex passwords.
4. Be skeptical of synthesized speech and short episodes: Many scam podcasts feature short episodes (10-20 seconds) with synthesized speech directing you to click on a link in the description. These are a common tactic used to trick users into visiting unsafe pages. If the content feels automated, vague or overly promotional, it’s best to avoid it.
5. Verify curator credentials: Check the credentials of playlist curators. Legitimate curators usually have a verifiable online presence. If you can’t find any information about them, it’s best to avoid engaging with them.
6. Recognize phishing attempts: Be cautious of emails claiming to be from Spotify that ask you to confirm account details or click on suspicious links. These are often phishing attempts designed to steal your credentials.
7. Report and block suspicious content: If you come across playlists or podcasts that seem fraudulent or inappropriate, report them directly to Spotify. Use Spotify’s reporting tools to flag content that violates its platform rules. Blocking suspicious accounts or playlists also ensures you won’t accidentally interact with them in the future, and reporting helps Spotify improve its filtering and moderation systems.
HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET
Kurt’s key takeaway
Scammers will use any means possible to trick you. In the past, we’ve seen bad actors weaponize Google search results with malicious websites that install malware when links are clicked on. There have also been plenty of SEO scams targeting users. Companies like Spotify need to implement measures to prevent their platforms from being misused by scammers. Google also has a responsibility to ensure the quality of its search results. Just because a webpage comes from a well-known organization doesn’t mean it deserves to rank highly on the search results pages.
Do you think platforms like Spotify and Google are doing enough to prevent scams, or could they improve? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions:
New from Kurt:
Try CyberGuy’s new games (crosswords, word searches, trivia and more!)
Enter CyberGuy’s $500 Holiday Gift Card Sweepstakes
KURT’S HOLIDAY GIFT GUIDES
Deals: Unbeatable Best Black Friday deals | Laptops | Desktops | Printers
Best gifts for Men | Women | Kids | Teens | Pet lovers
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
New York state is defying Trump’s plans to roll back climate action
New York’s Climate Change Superfund Act will require the biggest multinational oil and gas companies to contribute to a fund that’ll be used for infrastructure projects meant to protect New York residents from increasingly dangerous climate disasters like storms and sea level rise.
“New York has fired a shot that will be heard round the world”
Trump will soon step back into office and is expected to dismantle existing climate policies and gut the Environmental Protection Agency (EPA), having openly disparaged clean energy and federal environmental regulations on the campaign trail. So for the next four years at least, Americans will have to rely on local and state efforts like this to deal with the pollution from fossil fuels that’s causing climate change.
“New York has fired a shot that will be heard round the world: the companies most responsible for the climate crisis will be held accountable,” State Senator Liz Krueger said in a statement after Hochul signed the Climate Change Superfund Act into law.
Krueger’s office expects the law to generate $75 billion over the next 25 years. But in the immediate future, the New York State Department of Environmental Conservation (DEC) will first have to propose guidelines for how the fund works. That includes rules for who has to pay into the fund, how the state collects the money, and what kinds of infrastructure projects the fund will support. The law will apply to fossil fuel companies historically responsible for more than 1 billion tons of greenhouse gas emissions. And at least 35 percent of the benefits of the fund are supposed to reach “disadvantaged” communities.
The plan is loosely modeled after state and federal laws that have been in place for decades to hold companies responsible for toxic waste sites they leave behind. But instead of directing funds to cleaning up hazardous substances at old industrial sites, New York’s new law would fund resiliency projects such as upgrading storm water drainage systems.
“New York taxpayers were 100 percent on the financial hook for climate costs. Now Big Oil will pay for much of the damages that they helped cause,” New York Public Interest Research Group (NYPIRG) Executive Director Blair Horner said in a press release.
The Climate Change Superfund Act is supposed to reduce New Yorkers’ future tax burden by $3 billion each year, according to NYPIRG. Extreme weather events exacerbated by climate change are expected to cost half a trillion dollars in preparation and recovery efforts in New York by 2050, Kreuger’s office says.
Joe Biden set a goal of slashing US greenhouse gas emissions by at least 50 percent by 2030 compared to 2005 pollutions levels as part the country’s commitment to the Paris climate accord. He also signed the Inflation Reduction Act into law, a massive spending package that set aside $369 billion for climate action and clean energy technologies.
Trump, on the other hand, says he’ll take the US out of the Paris agreement again (which he briefly did during his first term before Biden recommitted the US to the accord). The President-elect has also said that he’ll rescind any unspent funds from the Inflation Reduction Act. He rolled back more than 100 environmental regulations when he was last president, and says that his pick for the Environmental Protection Agency this time around will ensure “swift deregulatory decisions” at the agency once again.
Still, state laws can make up for some of the ground lost in the fight against climate change. New York’s Climate Superfund Act will have to survive any legal challenges, of course. But this isn’t the first time the state has made ambitious environmental plans while facing hostility toward climate action from Trump. In 2019, New York state passed its Climate Leadership and Community Protection Act. That put the state on a path to slashing its greenhouse gas emissions by 40 percent by 2030, although progress has been slow since then.
New York’s latest answer to the environmental deregulation looming on the horizon is just one part of a larger trend that marked the first Trump presidency, and is poised to be part of the second. Earlier this year, Vermont passed its own Climate Superfund law. Similar legislation has also been introduced in California, Maryland, Massachusetts, New Jersey, and in Congress, according to the nonprofit Food & Water Watch.
Technology
Revealed: The 10 most popular and worst passwords of 2024
Let’s be honest: How many times have you used something like “123456” or “123123” as your password? With so many online accounts to juggle, it’s tempting to go for simple passwords, even though we know they’re weak. Unfortunately, a report from NordPass shows we’re still making the same mistakes when it comes to keeping our accounts secure.
GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE
2024’s most popular (and insecure) passwords
NordPass has released its compilation of the top 200 most popular passwords used for personal and business purposes. Collaborating with threat management company NordStellar, NordPass analyzed a massive 2.5TB database of global passwords, including those sourced from the dark web. Spoiler alert: They’re still shockingly insecure.
TIRED OF GETTING THOSE MYSTERIOUS PASSWORD RESET EMAILS? HERE’S WHAT TO DO ABOUT IT
The password hall of shame
We’re all guilty of using weak passwords at some point, but the extent of this digital negligence is truly staggering. For the sixth consecutive year, “123456” claims the dubious honor of being the most common password used by over 3 million people.
It’s followed closely by its slightly more “complex” cousins: “123456789” and “12345678.” But wait, it gets worse. The password “password” still ranks high on the list, used by nearly 700,000 people. It’s as if we’re collectively daring hackers to break into our accounts.
THIS SNEAKY MALWARE IS AFTER YOUR PASSWORDS AND PERSONAL DATA
Top 10 most common passwords
Here are the top 10 most common passwords of 2024, according to NordPass:
1) 123456
2) 123456789
3) 12345678
4) password
5) qwerty123
6) qwerty1
7) 111111
8) 12345
9) secret
10) 123123
Corporate carelessness
You might think that in professional settings, where sensitive data is at stake, people would be more cautious. Think again. The corporate world mirrors personal password habits alarmingly closely. The same weak passwords dominate business accounts, with “123456” leading the pack, used in over 1.2 million instances.
DATA BROKER BLUNDERS AS MILLIONS ARE EXPOSED WITH PUBLIC PASSWORDS
The consequences of weak passwords
Using such easily guessable passwords is like leaving your front door wide open in a neighborhood full of burglars. These passwords can be cracked in less than a second, potentially leading to account compromise, identity theft and a host of other digital nightmares.
Strengthening your digital defenses
So, how can we break this cycle of password mediocrity?
1) Go long: Aim for passwords that are at least 20 characters long.
2) Mix it up: Use a combination of uppercase and lowercase letters, numbers and special symbols.
3) Unique is key: Never reuse passwords across multiple accounts.
4) Regular reviews: Periodically assess and update your passwords.
5) Consider using a password manager: A password manager will securely store and generate complex passwords. It will also help you to create unique and difficult-to-crack passwords that a hacker could never guess. In addition, it keeps track of all your passwords in one place and fills passwords in for you when you’re logging into an account so that you never have to remember them yourself. The fewer passwords you remember, the less likely you will be to reuse them for your accounts.
What qualities should I look for in a password manager?
When it comes to choosing the best password manager for you, here are some of my top tips:
- Deploys secure
- Works seamlessly across all of your devices
- Creates unique complicated passwords that are different for every account
- Automatically populates login and password fields for apps and sites you revisit
- Has a browser extension for all browsers you use to automatically insert passwords for you
- Allows a fail-safe in case the primary password is ever lost or forgotten
- Checks that your existing passwords remain safe and alerts you if ever compromised
- Uses two-factor authentication security
Get more details about my best expert-reviewed password managers of 2024 here.
6) Start using passkeys: Passkeys are designed to replace traditional passwords and are steadily gaining traction, particularly among major companies and websites. Far more secure and reliable than conventional passwords, passkeys enable automatic sign-ins to websites and apps using facial recognition, fingerprint authentication or a physical security key.
SUBSCRIBE TO KURT’S YOUTUBE CHANNEL FOR QUICK VIDEO TIPS ON HOW TO WORK ALL OF YOUR TECH DEVICES
Kurt’s key takeaways
It’s clear that we need to step up our password game. Using weak passwords like “123456” is a gamble we can’t afford to take, especially with so much of our lives online. By taking simple steps, like creating longer, more complex passwords and using a password manager, we can better protect ourselves from cyber threats. Let’s make 2025 the year we prioritize our digital security and leave those outdated passwords behind.
What’s the worst password you’ve ever used, and did anything bad happen because of it? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover. Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions:
New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
2024: a year in art on The Verge
The Verge art team was busy this year, creating illustrations, photographs, and interactive designs to match stories about underwater sea cables, competitive Excel, parental anxiety, AI companions, and so much more. Here’s a look back at 20 of our favorite projects from 2024, with comments from those of us who worked on the project.
2004 was the first year of the future
In a special issue on the year 2004, The Verge looked 20 years back to examine how 2004 was “the year of the future,” setting in motion the internet as we know and use it today. Cath Virginia absolutely crushed the hub design (with three skins! Remember skins?), Graham MacAree built the smoothest pages, and Amelia Holowaty Krales took the early aughts photos of my dreams. This package is both a love letter to a time we all saw ourselves for the first time online and a capsule of what we hope it can become again: a place for play, creativity, and connection. – Kristen Radtke, creative director
Photography by Go Takayama
For Josh Dzieza’s feature on the hundreds of thousands of miles of internet cables at the bottom of the world’s oceans — and the people who fix and tend to them — we created an immersive electric blue world of maps and schematics. It’s great to have an opportunity to mash up data visualizations and maps along with stunning original photography, and Go Takayama’s intimate photos of these seafaring men give a face to an essential but otherwise invisible job. – Kristen Radtke, creative director
Photography by Stormy Pyeatte
The visuals for these pieces are one of my proudest Verge projects. Stormy Pyeatte’s ethereal style of floral photography and projection mapping makes for a rhythmic and mesmerizing feature design — it almost makes you want to fall in love. – Cath Virginia, senior designer
We started this story trying to figure out how on earth a bunch of Excel nerds ended up on ESPN. We ended up discovering exactly how powerful, versatile, and important spreadsheets really are and the power they confer when you can reduce the world to rows and columns. In the process, our brilliant design team found yet another way to build a spreadsheet: to use rows and columns to tell the story, and depict its characters, in their natural habitat. – David Pierce, editor-at-large
Photography by Amelia Holowaty Krales
Every once in a while, we go bananas on a special-edition print project, and for our subscription launch this year, we somehow convinced our colleagues to pose in 1980s office wear for our Content Goblins magazine. It’s an issue about the enshitification of the internet, so I basically lobbed as much goop and slime on top of the design as possible. Our A/V producer Andrew Marino was the real MVP of this project for letting us turn him into a literal goblin. – Kristen Radtke, creative director
Today’s smart homes: the hopes and the realities
The occupant of a home filled with “smart” technology — speakers, lights, a robovac — sits by the window and ignores the tech in favor of gazing at the trees and clouds outside. Adrián Astorgano’s vibrant art gives us a moving (both figuratively and literally) picture of how today’s smart homes are useful and even preferable, but not an end in themselves. –Barbara Krasnoff, reviews editor
Getting Kristen Radtke’s beautiful comic up on the site was an interesting challenge: how do we preserve the artwork and animation without compromising on performance? I think the amount of work done to optimize the piece ultimately paid off in the user experience. It’s our smoothest comic yet. – Graham MacAree, senior engineer
I love everything that Samar Haddad makes, especially how she breaks down complex topics step by step in clever visual ways. For this short series on AI in sports, she created a massive suite of graphics in a cool retro vibe. I hate sports, and I love this series. – Kristen Radtke, creative director
Photography by Amelia Holowaty Krales; design by Maeve Sheridan and Cath Virginia
Creating the lede images for our gift guides is a big job each year. We source all the products, create distinct sets for each guide, and try to keep things fresh for the whole suite. I love the joyful scenes photographer Amelia Holowaty Krales created this year with prop stylist Maeve Sheridan, with bold, poppy wrapping papers designed by our senior designer Cath Virginia. You can even buy your own custom Verge wrapping paper from our merch store. – Kristen Radtke, creative director
Searching for color at Pantone’s all-brown party
Photography by Amelia Holowaty Krales
I was so excited to head to a party with Verge senior photographer Amelia Holowaty Krales: one, because it meant we were both off the hook for bedtime with our respective kids, and two, because she can communicate a vibe so sharply through her lens. Her photos from the Pantone Color of the Year party are visual arguments in themselves, and her use of double exposures throughout perfectly communicates the branded extravaganza of the evening. – Kristen Radtke, creative director
Art by Cath Virginia with photos from Getty Images
There’s a lot to call out in this great, cohesive collection of images that helped bring our physical media issue to life. But I have to put a spotlight on the floppy disk turned turntable, which is as clever as it is mesmerizing. – Andrew Webster, senior editor, entertainment
Art by Cath Virginia, assets from TurboSquid
The most recognizable part of Pitchfork — besides its logo — is its 10-point rating scale. How do you convey the diminishment of an august music publication? You just turn the volume down. – Elizabeth Lopatto, senior reporter
Photography by Amelia Holowaty Krales
Wearables — especially smart rings — tend to be small gadgets. So when it comes to art, it’s really important to think about how to make them pop on the page while also differentiating them from each other. (Let’s be real, watches and rings start to look an awful lot alike after a while.) Cue fun, colorful props and sparkly nails! – Victoria Song, senior reviewer
The Verge’s guide to the 2024 presidential election
Design by Mr.Nelson with photos from Getty Images
In one of the most depressing election cycles of all time, Wouter Tjeenk Willink, aka Mr.Nelson, did an apt job with these uncomfortably chaotic collages. – Cath Virginia, senior designer
Alexa, thank you for the music
When people grow old, they don’t stop being individuals capable of joy. Mojo Wang’s imaginative drawing of an older woman in celebration of her favorite music beautifully illustrates an article that explains how the writer’s mother used a smart speaker to enhance the final chapters of her life. – Barbara Krasnoff, reviews editor
Google is further cracking down on sites publishing ‘parasite SEO’ content
Art by Cath Virginia with photos from Getty Images
I’ve spent the last few years writing about all the ways search engine optimization infiltrates Google, making for a frustrating experience for both users and website operators. This image perhaps perfectly encapsulates SEO at its worst: insidious, corrosive, and just plain gross. – Mia Sato, platforms and communities reporter
OpenAI searches for an answer to its copyright problems
Art by Cath Virginia with photos from Getty Images
Basically my favorite part of the story process is finding out what madness our art team has cooked up this time. In this case, I think I told Cath Virginia that I felt like the “it’s all Ohio” meme as I was reporting the story — it’s all copyright law and always has been. And she went galaxy brain with it. – Elizabeth Lopatto, senior reporter
How the Stream Deck rose from the ashes of a legendary keyboard
Richard Parry’s playful 3D animations perfectly express the cult status of the infamous Optimus Maximus keyboard. – Cath Virginia, senior designer
Vice was never as big and solid as Shane Smith made it seem, and the story had a cartoonish surrealness to it that was captured perfectly in Hunter French’s illustrations — whether that was the Buster Keaton-inspired lead art or Smith hawking the brand in secretive deals. Sure, there are a bunch of complicated financial details, but the art really gets to the heart of the thing, doesn’t it? – Elizabeth Lopatto, senior reporter
Photography by Liam James Doyle and Montinique Monroe
Mia Sato’s piece about a lawsuit involving two Amazon influencers is amazing, and the photographs of these two individuals are a perfect pairing. The portraits that Montinique Monroe and Liam James Doyle took in Austin, Texas, and Minneapolis, Minnesota, respectively, were individually fantastic and worked so well together, it was really hard to choose which to use. – Amelia Holowaty Krales, senior photographer
-
Technology1 week ago
There’s a reason Metaphor: ReFantanzio’s battle music sounds as cool as it does
-
News1 week ago
France’s new premier selects Eric Lombard as finance minister
-
Business7 days ago
On a quest for global domination, Chinese EV makers are upending Thailand's auto industry
-
Health3 days ago
New Year life lessons from country star: 'Never forget where you came from'
-
Technology3 days ago
Meta’s ‘software update issue’ has been breaking Quest headsets for weeks
-
World1 week ago
Passenger plane crashes in Kazakhstan: Emergencies ministry
-
Politics1 week ago
It's official: Biden signs new law, designates bald eagle as 'national bird'
-
Politics5 days ago
'Politics is bad for business.' Why Disney's Bob Iger is trying to avoid hot buttons