Network Security Podcast

This is Martin, and while I know we said we weren't going to do another podcast this year, I got started talking to Martin Fisher over at the Southern Fried Podcast and we decided, "What the heck, let's do one more this year and thank all our listeners for supporting us!"  It was supposed to just be the two of us, but Rich happened to be available.  It was also only supposed to be a few minutes, but when you get the three of us going, it obviously has the potential for going long. 

All three of us are very greatful to our audiences, and I think I can say the same on behalf of our co-hosts.  The year has had its ups and downs, but I believe we're ending it on a high note.  I hope your life is doing the same and that you have a good ChrisHanaKanzamas or whatever you celebrate this time of year.  At least celebrate a few days off, if nothing else.

Souther Fried Network Security Podcast Christmas Special

Time:  25:29

A discombobulated Martin and a sleep-deprived Zach get together for the final episode of 2011 (and Rich isn't around to join us -- tsk tsk). This week's stories seem to be more of the same -- surveillance, leaks, and dumb legislation. Here's to hoping for a brighter 2012.

Network Security Podcast, Episode 262, December 13, 2011
Time: 30:00

Show Notes:

• DNS Hijacks Now Being Used to Serve Black Hole Exploit Kit
• Who Knows What Youhavedownloaded.com?
• Carrier IQ: Bug made some keypresses, message data accessible
• The Infosec Naughty List & The Twelve Charlatan’s of Christmas
• Kaspersky Lab Quits Business Software Alliance to Protest SOPA
• Senator Wants Answers from DHS Over Domain Name Seizures
• Tonight's Music:  Dog Days by Amy Speace

When Rich isn't around to take up most of the time, Zach can actually be pulled out of his shell to talk for a little while.  Or maybe it's just when there are two hosts on the podcast there's more time to talk.  In any case, Martin and Zach went a little long this week as well as deep into paranoia land.  And there's so much in the news right now to push us there.  It's kind of scary when you start to realize that as much communication as modern technologies allow, they also allow a lot of very deep surveillance.  Which we as a society seem to be okay with.

Network Security Podcast, Episode 261, December 6, 2011
Time: 42:13

Show Notes:

• India asks Google, Facebook to screen user content
• Carrier IQ:  The Real Story
• 9 Reasons Wired readers should wear their tinfoil hats
• The impact of cloud computing on IT jobs
• C|Net Download.com is now bundling Nmap with malware!
• RIM issues statement about the Playbook Dingleberry root
• Top 25 security influencers you should be following
• Tonight's music:  Echoes and Falls by Senor Happy (in honor of the echo chamber)

Believe it or not, all three of us managed to get together for a nice post-holiday show. After a brief discussion of pepper spray for holiday shopping, we jump into a nice menagerie of stories.

Network Security Podcast Episode 260
Time: 35:16

Show Notes:

• Security researchers claim they can set your printer on smoke. Sorta. 
• Facebook privacy under EU scrutiny.
• What Facebook keeps on one user.
• Self service lanes in 20 stores fitted with card skimmer.
• Four hacking suspects tied to terrorism.
• Thanksgiving night shopping bigger than Cyber Monday?
• Tonight's Music:  Pouring by scarlet/blonde

Rich and Martin are together for the first time in about 6 weeks thanks to all our overlapping travel. We are joined by Marisa Fagan who tells us about BayThreat- one of the only actual security conferences in the Bay Area (and a really good one). Then Marisa leaves and Rich and Martin jump into the security news.

Network Security Podcast Episode 259
Time: 39:43

Show Notes:

• BayThreat
• Government certificate used to sign malware.
• Massive clickfraud ring broken up in Estonia (you were probably their victim).
• Researchers find OS X sandbox security hole.

We're still scattered to the wind and getting together for a podcast is proving to be nearly impossible.  Luckily Martin was able to get a couple of podcasts from BSides DFW this weekend, so there's a podcast, short as it is.  It's almost enough to make you wonder if having a successful helps make you so successful you can't have a podcast. 

Michelle Klinger and Joseph Sokoly were the motivating forces behind making BSidesDFW happen again this year.  Thanks to their efforts a over 180 people were able to get together to see and here some great speakers.  Jayson Street was one of them, though he got the short straw and had one of the first slots of the day.  Pepsi Zero helped him through it however.

Network Security Podcast, Episode 258

Time: 16:28

Tonight's music:  Five Feet from Paradise by Eleanor Fye

Tonight Martin is speaking to Josh Corman, Akamai co-worker, and HD Moore, creator of Metasploit and Rapid7 CTO.  Josh came up with the idea of HD Moore's Lawa couple of months ago, the idea that the strength of the casual attacker is roughly equivalent to what Metasploit is capable of.  If your corporation isn't capable of defending yourself against Metasploit, you're not going to be able to defend against these casual attacker and you're going to be wide open to more sophisticated attackers.  Josh explains the concept and what it means to security and HD talks about the fact that Metasploit helps give security teams a measuring stick for their security. Zach, Rich and Martin are all incredibly busy and are trying to figure out how to fit the podcast into the constraints of our schedules.  We may have to skip a number more weeks between now and the end of the year, but we're trying desperately to get our lives under control. Network Security Podcast, Episode 257 Time:  30:09 Show Notes:

• HD Moore's Law - Josh's blog post
• Metasploit project

Rich and Martin are around this week and managed to pull off a show despite oggling the new iPhone (okay, maybe that was just one of us). We talk about the big announcement from Securosis before jumping into the week's security news. High drama, low comedy, and you know the rest...

Network Security Podcast, Episode 255, September 27, 2011
Time: 44:54

Show Notes:

    Securosis launches the Nexus. Rich turns into a marketing creep.
    Electronic voting machines easy to hack. Still.
    Governments love chewing on the juicy data you leave with Google and other service providers.
    More details from the security leaders survey. Really worth reading.
    Martin managed to watch live congressional cybersecurity hearing. Foolish.
    Rich and Martin discuss certificate pinning.
    Tonight's music:  Gold Rush by The Crazy Majority

We're back!  Not that we actually left, but we've all been so tied up in each of our own lives that we've let the podcast slip the last month or so.  We're working on a more permanent arrangement and some of the issues that have cropped up lately are getting solved, but we will probably miss a few more before the end of the year.  In the mean time, Martin got a chance to sit down with Schuyler Towne and discuss lock picking at the at the United Security Summit at San Francisco recently.
Enjoy

Network Security Podcast, Episode 254, September 27, 2011
Time: 44:54

Show Notes:

• Schuyler Towne, Lockpicks by Open Locksport Kickstarter
• Tonight's music:  Slidewater Cajun by Gerry Joe Weise