Network Security Podcast

Rich and I are both a little short on time today, so it's a good thing I recorded an interview with Gregory Conti, West Point professor and security author last week.  We have a couple of stories we go over briefly and no lack of opinions to go with them.  In other words, pretty much the same as every week.

Network Security Podcast, Episode 164
Time:  41:01

Show Notes:

• Hacker ring tied to major breaches just the tip of the iceberg - Oh goody, there's more coming down the pipeline that we haven't heard of yet!
• Breaking News:  Mac OS X Snow Leopard built-in AV? - Does anyone care?  But it does give Rich a few minutes to gush about the security updates in 10.6.
• Greg Conti - Author of Googling Security and Security Data Visualization.  But not the guy you want designing your next web site.
• Tonight's Music:  Swampcandy with Devil in her Suitcase
  

Martin is back this week as we discuss some of the most fascinating drama to come out of the security world in quite some time. As the initial indictments for the Hannaford and Heartland breaches go public, all sorts of fascinating tidbits emerge. There are double crossing informants, Russian connections, and secret breaches that haven't hit the public yet. We also finally learn exactly how most of these breaches occured. Heck, it's almost interesting enough for a TV movie!

Network Security Podcast, Episode 163
Time: 38:44

Show Notes:

• Rich writes a letter to the CEO of Heartland. He is not expecting a Christmas card.
• Rich covers all the drama of the Heartland and Hannaford breach indictment.
• ATM skimming ring hits Chicago. And the banks didn't bother to warn anyone.
• Hackers reverse-hack the police that busted them in Australia.
• DNA evidence can be fabricated.
• Tonight's Music:  Coffee Man by Calvin Owens
  

To get $300 off Hacker Halted 2009 in Miami, Florida from September 23-25, click on the banner below, select VIP Pass under Conference Pass and and enter code "HHUSA-MM-AP999"

Martin is out of town, so I'm joined this week by persistent-guest-host Zach Lanier of N0where.org and the Liquidmatrix Security Digest. I'm pretty amazed Zach agreed to join us again after all the abuse at Black Hat and DefCon.

We play it straight this week as we roll through a string of security news and stories, cramming as much security goodness as possible into our 30 minutes of fame.

Network Security Podcast, Episode 162
Time: 32:00

Show Notes:

• Dino Dai Zovi releases his OS X rootkit tools.


• Sandia National Labs builds a botnet... on a SUPERCOMPUTER!!!


• Mike Bailey on the Wordpress admin password reset flaw.


• Bunches of vulnerabilities in XML libraries (that you probably use).


• Citi and BofA data breaches in Massachusetts via a merchant. Odds are more notifications are on the way.


• Twitter DDoS still. But mostly we rant about the idiocy of the mainstream press.


• Think you are blocking cookies? What about those Flash cookies?

This week we wrap up our coverage of Defcon and Chris Hoff to provide his psychic reviews. That’s right, Chris couldn’t make the even but he was there with us in spirit, and on tonight’s show he proves it. Chris also debuts his first single, “I Want to be a Security Rock Star”. Your ears will never be the same.

Network Security Podcast, Episode 161
Time: 41:22

Show Notes:

• Chris Hoff’s Psychic Review
• Fake ATM discovered at DefCon.
• Korean intelligence operatives pretending to be journalists at Black Hat?
• Tonight’s Music: I Want to be a Security Rock Star