Network Security Podcast

This weeks podcast is going up a bit early so I can run off to San Francisco to meet Chuck and Kreg from Technorama.  Rich was nice enough to take some time out of his morning to record the podcast, though I'm beginning to think that recording at 8:00 am is just a bit too early for either of us.  Rich and I spend some time today talking about our personal home networks as well as Rich's stray cat problems. 

Show notes:

• Rich's blog entry on TD Ameritrade
• Hacking Sermo.com, the social network for doctors parts 1 & 2
• Brian Krebs:  Is Cyber crime really the FBI's #3 priority?
• PCI Extends its reach to application security
• Tonight's music:  Dragons by The Switch

Network Security Podcast, Episode 78


Time:  53:01

Well, Rich and I ramble a little in this episode, but it's for a good reason.  We got side tracked talking about the wonders of airline security and some of the tools you can use to protect yourself while ordering stuff online.  One of the things I mentioned in the podcast is a tool my credit card company offers; it creates a valid, temporary credit card number on the fly that's valid for a relatively short period of time, say 30 days.  I doubt this would save anyone from a compromise such as what's happened to TD Ameritrade, but if you're making a one-time purchase, it's a very good tool to use.  Here's an older article that lists about half a dozen of the different temporary number generators.

Show Notes:

• Loren's review of last week's podcast - We answered a question from Loren in the podcast, which Rich answered on the blog but I accidentally deleted.  Honest.
• Rich's TD Ameritrade poll -  What do you think the real culprit for the compromise was?
• Analysing the TD Ameritrade Disclosure
• TD Ameritrade's 6 million customers hit with security breach
• Introducing Security Mike's Guide to Internet Security - Good news, Mike Rothman doesn't look at all like the guy on the cover of this book.  More good news, this is an idea I think will benefit a lot of people
• The Ghost in My FileVault
  
• Tor madness reloaded
• My interview with Shava Nerad, the Executive Director of the Tor Project - Anyone interested in hearing an update from Shava?  I'm sure she'd be willing to come on the show again.
• Tell-All PCs and Phones Transforming Divorce - Sorry if this is behind a NYT paywall, even though they've stated they're going to tear it down soon.
• Tonight's music:  Got to have a Job by Little Charlie and the Nightcats

Network Security Podcast, Episode 77


Time:  51:37

By popular demand, Rich is back this week and will be the continuing co-host for the Network Security Podcast.  Truthfully, we've received nothing but positive feedback for bringing Rich on board.  Rich starts a new segment, Talking to the Suits, his wit and wisdom on dealing with the folks who are making the decisions and signing the checks.  I guess I'll have to come up with a segment of my own again.

Show Notes:

• Fight Viruses with your USB Flash Drive:  Both of us like the idea of keeping these tools in your pocket.  Keeping a LiveCD designed for cleaning up infected machines, like the Trinity Rescue Kit is a good idea too.
• Cybercriminals employ toolkits in rising numbers to steal data:  Not really news.
• CustomizeGoogle:  This is worth looking at just to force Gmail to use SSL at all times.
• Indian government forcing cybercafes to install keyloggers:  Another example of using a tool that doesn't really meet the stated goals.  Massive monitoring has been shown to be very poor at catching thieves or terrorists.
• Rich announces a new series of blog posts on Data Loss (or Leak) Prevention
• The first Talking to the Suits segment: ROI
• Tonight's music:  Refrigerator Blues by 77 South
• You can find Rich's blog at www.securosis.com, and mine at www.mckeay.net

Network Security Podcast, Episode 76


09-11-07 Host:  Martin McKeay, Co-host:  Rich Mogull

Rich Mogull from Securosis.com did me the personal favor of co-hosting the show tonight.  Rich brings seven years of experience as a Gartner analyst to the table, as well as being one of the smartest security professionals I know.  Rich will bring his knowledge of dealing with some of the biggest user bases and the biggest security vendors in the world. 

We're flying by the seat of our pants as far as organizing the podcast, so let us know what you like about the new format.  I think that having a co-host will bring a lot greater depth the to the podcast and allow us to look at more than one viewpoint each episode.  If there was something about this weeks show you especially liked, let us know.

Show Notes:

• Point of Sales Vulnerability
  
• Does the CISSP exam fulfill it's purpose?
• Information Security:  Comparing the CISSP and GSEC certifications
  
• Repeat after me, "The CISSP is not a technical certificate, it's a management certificate"
• Why I'm not a CISSP
• What about the CISSP?
• Winn Schwartau and InfowarCon 2007
  
• Tonight's music:  The Children's Machine (OLPC) by DualCore

Network Security Podcast, Episode 75


Time:  55:20