Network Security Podcast

Wow- this episode number is the same as the combination on my luggage. What a strange coincidence!

For the first time in a while it is just Martin and myself, which likely explains why we went over 30 minutes. We even had about 7 live listeners tonight, out of our regular audience of 2000 or so per episode. I kind of like knowing there are real people out there and Martin and I are exploring how to make it a better experience in the future. We talked about a lot tonight, ranging from the tragedy of electronic voting to the just-released clickjacking details.

As a reminder, keep an eye on our Twitter feed for our recording times if you want to listen live- usually Monday or Tuesday evenings.

 Network Security Podcast, Episode 123, October 7, 2008

Show Notes:

• China snooping on Skype text chats.
• Judge puts a gag order on electronic voting machine vulnerability disclosure. Yeah, like that ever works.
• Forever21 had scads of credit card date laying around, in violation of PCI (despite being certified).
• NSA release an example application developed with secure coding practices.
• Rsnake reveals clickjacking details after they are independently discovered.

I have to say, this is definitely one of our better episodes. We’re joined this week by Robert “Rsnake” Hansen of SecTheory and Jeremiah Grossman of WhiteHat Security as they discuss their new clickjacking exploit. Robert and Jeremiah kind of stumbled onto a serious browser issue, the details of which started leaking before they really knew what they had. They responsibly decided to hold back the details as some of the worst parts of this are fixed, but were able to share some generalities, the story of how this all happened, and what you can expect when the details are finally exposed.

Before delving into clickjacking, we also spend some time on electronic voting and the top 10 ways to tell if you’ve been exploited (number 11 is if you’ve ever visited ha.ckers.org). Jeremiah and Robert are good friends, so there’s plenty of us having fun at each others expense.

 Network Security Podcast, Episode 122. September 30, 2008

Show Notes:

• Open Source Electronic Voting
• Top 10 ways to know you’ve been exploited.
• Clickjacking, clickjacking, and more clickjacking.
• Tonight’s music:  The Hollyfelds, Stars at Night