Network Security Podcast

Short show tonight folks, Rich is under the weather and our guest had to bail at the last minute due to a personal emergency. We’ll work at getting Jeremiah Grossman from White Hat on in the next couple of weeks. In the mean time Rich and I dug up a few news stories to talk about.

Show Notes:

• How LifeLock works – In their own words, they tell you most of what they do can be done by you for free.
• Announcing your social security number on national radio is a bad idea – That’s a no brainer.
• Legal experts wary of MySpace hacking charges
• Adobe Flash zero-day exploit in the wild
• NSS Labs PCI Suitability papers
• Tonight’s Music: With Arms Outstretched by Rilo Kiley

Network Security Podcast, Episode 106, May 27, 2008

Time: 25:47

Today Tenable, the company behind Nessus, announced changes to their licensing program that effects anyone using the Nessus vulnerability scanner. Nessus is one of the most widely used security tools in the industry; in large part because it’s free to download and use for individuals. One downer has been that the vulnerability signature feed for the free version is always a week behind the commercial version. The new license does away with the delay, but changes who can use the free version.

Ron joins Martin and myself to explain the new licensing and talk about the impact to the security community.

NSP Microcast: Ron Gula on the changes to the Nessus licensing model

We’re back, me from being ill, Rich from some alone time with his wife. Nothing really interesting to talk about other than what’s in the show notes, so I’m not going to waste a lot of time writing about it.

Show Notes:

• Hacker splashes data from six million Chileans on Internet
• Three charged in Dave & Busters hacking job
• ZoneAlarm Forcefield
• Captain’s Blog, Supplemental – PCI is dead, long live PCI!
• The (ISC)2 Blog
• Tonight’s music: Sunday Eyes by Amee Chapman and the Velvet Tumbleweeds

Network Security Podcast, Episode 104, May 13, 2008

Time: 33:12

A few weeks ago I had a chance to have lunch with Mike Smith,author of the Guerilla CISO, in Washington, DC. Mike’s area of expertise is FISMA and he’s an experienced educator in the area. Mike feels about FISMA much like I do about PCI: it’s not perfect, but it’s a heck of a lot better than what came before.

NSP Microcast: Mike Smith, Guerilla CISO

Time: 9:00

We’ll be returning to our regularly scheduled podcast next week. I was sick and Rich is preparing for some travel. Until next week.