Apparently iTunes took the PDF to be the podcast, not the mp3, so this is a second attempt to publish the podcast. It’s been my experience that changing anything in iTunes is nearly impossible, this is probably the ony way I’ll get the podcast properly posted.
Network Security Podcast, Episode 117
Time: 30:34
While Rich is off on a well deserved vacation with his wife, I’m
joined by Mike Rothman, analyst, consultant, blogger, podcaster and
friend. Mike and I recorded Monday night since I should be in a hotel
somewhere in Southern California when this goes live.
Show Notes:
Network Security Podcast, Episode 117
Time: 30:34
A bit of a different episode this week. Since Martin is traveling, rather than a guest host this week we’re posting the last of the interviews recorded at DefCon- but this one is a doozy. David Mortman, Dave Maynor, Chris Hoff, Robert “Rsnake” Hanson, and Larry Pesce join us immediately after we all finished our DefCon panel. Martin, as the sober one, interviews us as we record what is our first clearly explicit podcast. Yes folks, we hit all 7 dirty words plus a few bonuses. Not to worry, we do include some content as we discuss what we covered in the panel and whatever other topics flew into our adult-beverage-addled brains. We had a heck of a lot of fun putting the DefCon back into DefCon, and we hope you enjoy this little slice of the unfiltered.
Yes, this really is an explicit episode, so consider yourselves warned.
Network Security Podcast, Episode 116
Length: 24:00 (or so)
David and Eric are releasing a new application scanning tool, Grendel-Scan. David promises this tool will be something even the average security manager, or QSA, could use to do app scanning. One of the nicest features of this new tool is that it is extensible and can have capabilities added to it as needed. In the nature of full disclosure, I should also point out that David is a co-worker and one of the best pen testers I’ve ever known.
I’ll add a direct link to Grendel-Scan as soon as I have it. Edit: David provided the link almost immediately
Defcon Microcast 11: David Byrne and Eric Duprey
Rich and I are both back from a week at Black Hat/Defcon and thankful to be home in one piece. While the event is a ton of fun and educational, it’s also physically and emotionally exhausting. Tonight we talk about some of the talks we attended, what we learned, both in and out of the talks. Dan Kaminsky’s talk on DNS was probably the biggest talk at both events, but there was still a ton of other talks worth attending.
There’s still a couple more microcasts to come out of the events. Please let us know how you like those and if there’s anything we can do to make them better in the future.
Show Notes:
Network Security Podcast, Episode 115, August 12, 2008
Time: 25:38
Mike Murray and Lee Kushner have a lot of experience in helping people direct their careers in the security field and shared this experience at Defcon this year. They’d like your help by having you take an anonymous survey about your own career. The survey can be found at http://infosecleaders.com/survey.
I chased down Johnny Long to his booth at Defcon and learned about his new project, Hackers for Charity. If you’ve got ‘l33t skillz’ and want to put them to use for a good cause while also getting some good references for your future job hunts, think about joining the Hackers for Charity organization. Or if you’ve got some skills that aren’t ‘hacker’ related and want to get into the security sphere, take a look at the site and see if you can contribute to Johnny’s efforts. Oh yeah, Johnny’s written a few books you might want to take a look at as well.
Raffael Marty and I sat down in a quiet corridor at Defcon to talk for a few minutes about his new book, Applied Security Visualization.
Rich caught up with Nate and Rob right after their talk at Black Hat on client side exploitation.
Rich and I took a break from the action near the end of Black Hat to sit and talk about the events of the day. Black Hat is now over and Defcon is about to begin in earnest.