Network Security Podcast

Well, we'd hoped to avoid the "sleep deprivation" part, but it doesn't look like that's going away any time soon. Regardless, we scrounged together a show this week, discussing "hacking", "anti hacking" (law), and the perils of social networking.

Network Security Podcast, Episode 307, March 26, 2013

Time: 39:40

Show notes:

• Miami's Voter Fraud Is Only the Beginning of Election Hacking
• Draft House Judiciary cybersecurity bill would stiffen anti-hacking law
• South Korea data-wipe malware spread by patching system
• Weak keys in NetBSD
• mongodb – SSJI to RCE
• FireMe!: A Running List of People Tweeting How Much They Hate Their Jobs
• Tonight's Music: Open Our Eyes by amplifico

My second interview at RSAC 2013 was with Bromium CTO and founder, Simon Crosby.  I've been hearing about Bromium as the next big idea in security for a while now from people who should know (Like Rich) and I wanted to hear about it straight from the horses mouth.  The ideas behind Bromium are fundamentally different from many of the anti-malware tools (*cough*AV*cough*) we have available to us today.  Now to see if it'll hold up to the attacks that will be coming against Bromium as it becomes more popular.

BTW, this interview breaks the 'normal' microcast format of 5-10 minutes.  But I think it was worth the extra time.

NSP Microcast, RSAC2013:  Bromium

Time:  17:41

Now both Rich and Martin are M.I.A.! Well, that is to say, Rich just had a new child, and Martin is tearing up Boston with his coworkers. Jack Daniel joins as guest co-host this evening, with Zach running the show (perhaps poorly) -- so, relative chaos ensues. We discuss YAJ0 (Yet Another Java 0-Day), sudo-lolz, and -- of course -- Ridiculous Security Assembly USA 2013. ;)

Network Security Podcast, Episode 305, March 5, 2013

Time: 29:33

Show notes:

• Evernote hack shows that passwords aren't good enough
• Java 0-Day Countdown
• YAJ0: Yet Another Java 0-Day
• Security Alert CVE-2013-1493 Released
• New Java 0-Day Attack Echoes Bit9 Breach
• Security vulnerability in sudo allows privilege escalation
• White House, FCC Chairman Support Legalizing Unlocking of Mobile Phones

Tonight's episode is a bit special and different -- an interview with Alec Empire of Atari Teenage Riot, and Josh Corman, friend of the show and professional peer. Alec recently participated in a panel at RSA Europe, moderated by Josh, titled "Social [Media|Impact|Contracts|Unrest|Activism] in a Hyper-Connected Future". The subjects ranged from social media to unrest and activism, to Anonymous, and beyond.

This episode runs a bit long and was edited only for audio quality (and even then we still hit some hiccups -- sorry), not for content. Be advised.

Network Security Podcast, Episode 293, October 13, 2012

Time:  43:01

Show notes:

• Alec Empire official website
• ATARI TEENAGE RIOT official site
• "Building a Better Anonymous"

Martin set up a new mailing list for his blog and the show, so be sure to sign up at the Network Security Blog. This week we take a moment to remember 9/11 and then move on to a full-staffed show.

Network Security Podcast, Episode 288, September 11, 2012

Time: 31:56

Show notes:

• Preparing for your first breach.
• The real source of the Apple UDID leak. (Hint, it wasn't the FBI).
• GoDaddy outage takes out millions of sites.
• Feds say law enforcement can track phone locations.
• Aurora attackers still on the prowl.
• Tonight's Music: Great Big Sea with The Chemical Worker's Song