Network Security Podcast

So funny story about the show. Zach and I (Rich) were prepping to record when a work thing hit. Since Zach was on a tight timeline due to his own work obligations we announced we were skipping the show.

About an hour later a black SUV with a maple leaf sticker on the bumper pulled up in front of my house. A group of heavily armed agents secured a perimeter, rang the doorbell, and left a cooler on my doorstep. Inside was dry ice and a USB drive in the shape of an audio cassette.

I haven’t listed to this, but based on the label it seems our friends from Liquidmatrix recorded tonight’s episode.

May the deity of your choice have mercy on your soul/shakra/karma/whatever if you listen to this.

The Network Security Podcast, Episode 277.

Time: 15:04

Links:

1/ Free Byron - http://www.liquidmatrix.org/blog/2012/05/15/freebyron-is-no-more-long-live-byronisfree/
2/ DNS Changer - http://www.dhs.gov/nccic and http://www.dns-ok.ca
3/ Facebook IPO -http://www.forbes.com/sites/steveschaefer/2012/05/15/facebooks-ipo-wont-take-the-heat-off-jpmorgan-or-solve-europes-debt-crisis-video/

Tonight’s show notes will be short, but the show itself ran a little long at about 45 minutes. This week we dedicated the entire episode to mobile security- from platform security up through carrier security issues.

We are joined this week by Nick Selby, a good friend, part-time police officer (in Texas, which is a tad scary), and well known (former) industry analyst and (current) incident responder and risk consultant.

Tonight’s show was Nick’s idea, and it aligned really well with Zach’s history of mobile platform research. And, for once, I (Rich) didn’t screw up the recording.

Much.

The Network Security Podcast, Episode 276 

By the grace of FSM, schedules synced up this week so we could all get together (despite Martin’s perpetual jet lag). Narrowly avoiding a discussion of CISPA (we’ll save that for later), the gang touches on some vulnerability disclosure gaffes, an “attack back” proposal (what year is this?), and more.

Network Security Podcast, Episode 275, May 1, 2012

Time:  34:21

Show notes:

• RuggedCom Owes its Customers an Explanation
• Oracle scrambles to contain 0-day SNAFU
• The history of a -probably- 13 years old Oracle bug: TNS Poison
• ‘Stand Your Cyberground’ Law: A Novel Proposal for Digital Security
• Big Data’s Big Problem: Little Talent
• British ISPs Ordered to Block The Pirate Bay
• Tonight’s Music: Jet Lag Gemini with Run this City

The gang is scattered to the wind.  Rich is off at some random Margaritaville and Zach is pretending he has a real life and a new job or something.  So Martin called out the cavalry and is joined tonight by none other than Dave Lewis, aka Gattaca on twitter (I bet many of you didn’t realize he had a ‘normal’ name).  We talk a lot about privacy (go figure), the TSA (big surprise) and the difference between Canadian and Amercian veiwpoints on a few things.  A good time was had by all.  Or at least by Martin, which is what really matters.  And let’s not forget BSides Chicago coming up soon!

Network Security Podcast, Episode 274, April 17, 2012

Time:  30:00 (Exactly, which may be a first)

Show notes:

• Internet Service Provider to put our privacy first
• CISPA is getting better, but still has a long way to go
• Kip Hawley finally admits the TSA is broken… and offers suggestions to fix it
• War games with China
• Tonight’s Music: Big Sandy with Big Fat Trouble

Zach is off settling in to the new job and prepping for Source Boston, but Rich and Martin managed to get together to discuss travel, the latest security news, and Rich’s rant on the whole Mac malware thing.  And Martin apologizes to listeners for the mixup with episode 272.

…

Network Security Podcast, Episode 273, April 10, 2012

Time:  40:20

Show Notes:

• When the cops subpoena your Facebook information, here’s what Facebook sends the cops
• Hotel’s Free Wi-Fi Comes With Hidden Extras
• Executives Abroad May Get Owned Before They’re Off The Tarmac
• After killing SOPA, Internet activists take aim at a new House cybersecurity bill
• Mac malware thingy

As a follow up to last week’s episode, Martin was joined last week by Josh Corman to talk to Wade Baker about the 2012 Verizon Data Breach Investigation Report.  Wade talks to us about how the information for the report was gathered, some of the strengths and weaknesses of the analysis and finally how the amazing puzzle that is the front cover was concieved.  The episode is a little longer than normal, but worth the time.

Network Security Podcast, Episode 272, April 3, 2012

Time:  40:37

It’s a good thing we’ve started double-checking Rich’s work, because he hasn’t been that reliable as of late.  Luckily Martin is recording this week, so the audio quality is back to it’s normal levels, but that means the content is back to normal levels as well.  Which actually turns out to be a good thing, since we all seemed to be firing on most cylinders this week.

Network Security Podcast, Episode  270, March 13, 2012

Time:  36:51

Show Notes:

• SECore doing a great job with PR training, media contacts, and CFP consolidation.
• Speaking of PR training, the TSA shows how not to respond to criticism. Grow up.
• Honeynet project in the Bay Area.
• The SPDY train.
• th3j35t3r with an interesting QR code attack. Maybe, maybe not. The BS level is really high on this one.
• Mr. Market says security is winning! (Similar perspective from Chris Hoff).
• Music: Hans York with Bored out of my Mind