How to lose friends and DDoS people
From Smashing Security by Graham Cluley
February 26, 2026 · 49 min · Episode 456
About this episode
This episode discusses a DDoS attack involving an internet archiving service and the implications for trust and credibility online.
When the mysterious operator of an internet archiving-service decided to silence a curious Finnish blogger, they didn’t just send a stroppy email - they allegedly weaponised their own CAPTCHA page to launch a DDoS attack, threatened to invent an entirely new genre of AI porn, and tampered with parts of their own archive to smear the blogger's name. In this episode, we unravel how a website designed to preserve history may have trashed its own credibility - and how Wikipedia responded when trust went out the window. Plus a ransomware gang shoots itself in the foot with a classic case of buffoonery, accidentally corrupting the very keys victims would need to decrypt their data. When even the criminals can’t unlock your files, what happens next? All this, a surprisingly zen Pick of the Week, and a gloriously splenetic rant against web forms, on episode 456 of the award-winning "Smashing Security" podcast, with cybersecurity veteran Graham Cluley and special guest Paul Ducklin. EPISODE LINKS: This App Will Detect People Wearing Smart Glasses Near You - Lifehacker. Patients listed as dead after major NZ health app MediMap hacked - 1News. Why fake AI videos of UK urban decline are…
People in this episode
Host: Graham Cluley
Guest: Paul Ducklin
Topics covered
- DDoS attacks
- internet archiving
- AI
- ransomware
- cybersecurity
- trust and credibility
- web forms
Keywords
- DDoS
- CAPTCHA
- AI porn
- ransomware
- cybersecurity
- internet archiving
- Wikipedia
- trust
- credibility
- web forms
Mentioned in this episode
Organizations: Wikipedia, Archive.is, Archive.today, FBI, Lifehacker, 1News, BBC News, Ars Technica, Gyrovague
More episodes of Smashing Security
- This AI worm just rewrote its own rules · June 10, 2026 · 46 min
- This AI security flaw might be impossible to fix · June 3, 2026 · 58 min
- What your Oura ring won't tell you · May 27, 2026 · 53 min
- High-speed train hacks and homicidal lawnmowers · May 20, 2026 · 56 min
- How ShinyHunters hacked the world's biggest universities · May 13, 2026 · 1h 4m
- Meta sees everything, Copy Fail, and a deepfake gets hired · May 6, 2026 · 1h 3m
Explore listener stats, chart rankings, contacts and more on the Smashing Security podcast page.