Liquidmatrix Security Digest Podcast – Episode 26

Episode 0x26 — The First Rule…

Ministry of Information Bulletin: Liquidmatrix is a weekly podcast.

While we’d like to be able to say that the Ministry of Information is always correct, that would not necessarily be the case. The past few weeks of Infosec have certainly been interesting. The echo chamber is at an all time echo stratosphere and the daily slog of infosec professionals remains at an all time crappiness. Anyone want to join our “Infosec Anonymous” program? Perhaps we should go with a different name: searching “infosec anonymous” gives me about 210,000 results.

1. Upcoming this week…
2. Lots of News
3. SCADA / Cyber, cyber… etc.
4. finishing it off with DERPs/Mailbag and
5. THE DEEP DIVE
6. Our new weekly Briefs – no arguing or discussion allowed

And if you’ve got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. To hack back or to not hack back
   The Grugg on Opsec for Hackers (how not get p0wned while p0wning)
2. The dDoS to end all dDosssses
   that almost broke the ENTIRE internet,
   then again maybe not,
   but maybe sorta it did
3. Uptime = 16 years = AWESOME. Feature parity with Netware 16 years later = STILL CAN’T HAVE IT.
4. FBI Pursuing Real-Time Gmail Spying Powers as “Top Priority” for 2013
• SCADA / Cyber, cyber… etc
1. DHS Warns of ‘TDos’ Extortion Attacks on Public Emergency Networks
2. FERC U MAD BRO ???? (PDF)
3. Cyber Divers take Egypt offline
   (except it might have been a ship’s anchor)
4. First time that it looks like actual details were stolen
5. The Reality of Attribution about Cyber Attacks
6. Cyber Security: The Digital Arms Trade
7. Cyber RFI for the Space Race
8. Fukushima Cooling Knocked Offline By…
   a Rat… that ended badly
• DERP
1. Security hole allows anyone to reset an Apple ID with email and DOB
• Mailbag / Bizarro Land

1. My official statement of begging for getting onto the Vegas party list. Thank you for your consideration.

   Kris

2. Hello!

   Any chance I can get a couple of tickets to the party? I’m an infosec “professional” from Vancouver BC. I’ve met some of you guys at various cons, Hope, Defcon, Derbycon.

   thanks! Kevin

• The Deep Dive – Security Awareness Training
1. Is Bruce ALWAYS right?
• Briefly – NO ARGUING OR DISCUSSION ALLOWED
1. Is OwnCloud Good Enough?
2. Monitoring for humans
3. Pimp myself – Top 10 Web Hacks
4. Attempted child abduction thwarted when girl asks stranger for code word
• Liquidmatrix Staff Projects
1. The Liquidmatrix Vegas Party- We threatened more news. There will be passes distributed. You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
2. The BSidesLV Ticket Give-away-

   Three tickets up for grabs:

   • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
   • best rap song about a major breach
   • best poem describing a vendor DERP

   Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I’d suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

3. The Security Conference Library
4. Contribute to the Strategic Defense Execution Standard (#SDES) and you’ll be Doing Infosec Right in no time.
5. If you’re interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, BSidesRochester and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
• In Closing
1. Movie Review: Wargames
2. everyday is CTF! go set up a team
3. Signing up for a SANS course? Be sure to use the code “Liquidmatrix_150” and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
4. Seacrest Says: “I kinda really wanted to jump in and slam him!”

Download the MP3

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA