S3 Ep14: Money scams, HTTPS by default, and hardcoded passwords [Podcast]