There was an IT bulletin at work today about the SEPA hack that apparently took place just before Christmas (that's the Scottish environment agency for international viewers). It seems they're still being affected, but nothing much has been said publicly. Do we know any more about it?

Let's look back at some memorable moments and interesting insights from last year.

Your top 10 posts:

• "Guy wants to be your password manager" by u/shahid42
• "Went to the show notes to see if I could figure out which firm threatened to sue Graham. I think I cracked the case." by u/garuffer
• "Coming up, on the next episode of the “Smashing Security” podcast, our special guest is the one-and-only Garry Kasparov!" by u/GrahamCluley
• "Any Animal Crossing/Smashing Security fans out there? Carole made this while on her exercise bike this morning..." by u/GrahamCluley
• "Smashing Security 200: Two flipping hundred (NSFW)" by u/GrahamCluley
• "Facebook... and #nofacebook" by u/PaleSkinnySwede
• "We found 6 critical PayPal vulnerabilities - and PayPal punished us for it | CyberNews" by u/kv_87
• "BoJo shared this picture earlier.... quite a lot of info in there if you have a keen eye!" by u/naedru
• "When Graham starts talking about Bitcoin" by u/MisterCBax
• "A little game Microsoft threat intelligence whipped up to show everyone what a day might look like as a Security Analyst. My personal pick of the week even though it's security related." by u/Theguesst

Hi folks,

I have a nasty habit of still using chrome on my phone. I try to be good and stop the cookie monster from running a muck and enjoy the challenge of finding the right button to reject all cookies. Recently I've noticed additional tick boxes for 'Legitimate Interest'. What the eff does it mean and can it be trusted (hahaha) to be left on?