Network Security Podcast

I'm jealous.  Rich is already in Vegas, our guest host Zach Lanier should be there soon, while I'm still in California and have to get up at 4am tomorrow morning to catch my flight.  On the other hand, nothing's really happening until I get there in any case, but I'd rather be there sooner than later.  There's already been a little drama with the Matasano site being hacked over the weekend and Dan Kaminsky's site getting hacked today.  Rich says Dan got his site back pretty fast, but it's still annoying.  And then there's the out of cycle Microsoft patch that was released today, which is bound to get a little attention.  Oh yeah, Rich also released a little paper on patching that was sponsored by Microsoft. 

No real show notes tonight, I have to go pack.  Starting tomorrow, we'll be coming at you fast and furious with a series of near live 'microcasts', the 5-20 minute interviews we do as often as we can corner people in the hallways.  Should be interesting.

Network Security podcast, Episode 160, July 28, 2009
Time:  23:27

Tonight's Music:  Let's go to Vegas by Fabulous Hats

Did we mention Black Hat? That's right, this is our last episode before Rich and I are on site in Vegas for the big event. We cover a few of this week's news items before moving to Martin's interview with Jibran Ilyas of the Trustwave SpiderLabs team, who will be presenting the Malware Freakshow at Defcon on Saturday.

Network Security Podcast, Episode 159
Time:  39:22

Show Notes:

• Medical data breach reports streaming out of California


• Election results found on a voting machine in Honduras, but the election hasn't happened yet (It's possible this is a political stunt, considering the recent coup).


• Are those Pwnies in the air?


• Don't forget to RSVP for the Securosis/Threatpost recovery breakfast.






• Tonight's Music:  Don't let it go to your head by Art Linton

I can't entirely promise tonight's episode makes a lot of sense. Martin is back from Kyoto, and seriously jetlagged, and I don't think I was a whole lot better. Sure, we cover the usual collection of security news, but the episode is filled with non-sequitors and other dissociated transitions. On the other hand, we do stick fairly closely to security related topics. In other words, listen at your own risk.

[Martin]It made perfect sense before I said it out loud.  Afterward, not so much.[/Martin]

Network Security Podcast, Episode 157
Time:  25:08

Show Notes:

• Microsoft 0day being exploited in the wild.


• China is as scared of us as we are of them. See? Your mom was right.


• iPhones are vulnerable over SMS. I highly doubt the iPhone is the only phone with this problem.


• A "security guard" hacks a hospitals HVAC system. Then goes to jail for additional stupidity. Good thing most bad guys are dumb, or we'd *really* be in trouble.


• More nails in the coffin that holds your Social Security Number.

Martin is off in Japan this week, so I'm joined by our good friend Amrit Williams from BigFix and the Techbuddha blog. Amrit and I start off by talking about the rolling blackouts in California and disaster preparedness, before jumping into the week's security news.

Network Security Podcast, Episode 156
Time:  41:28

Show Notes:

• The New York Times and Wikipedia censor reports of a captured reporter to protect him.


• Dave Shackleford on 10 things your auditor doesn't want you to know.


• Trojan steals FTP credentials


• Juniper pulls ATM hacking talk from Black Hat


• Most systems have unpatched software. Is anyone surprised?


• Tonight's Music:  Since i haven't figured out how to get the podcasting rights to Jimmy Buffett's entire collection, there's no music for tonight's close.