Liquidmatrix Security Digest Podcast – Episode 27

Episode 0x27 — Wednesday is the new Monday

It’s the podcast that never ends

We’ve collected up something like 4 times more stories than we can use. We need to find a sponsor who will pay us to do this twice a week. Anyone got some money they’re not using?

1. Upcoming this week…
2. Lots of News
3. Breaches
4. SCADA / Cyber, cyber… etc.
5. finishing it off with DERPs/Mailbag and
6. There will be no DEEP DIVE — our SCUBA gear is in the shop
7. But there are weekly Briefs – no arguing or discussion allowed

And if you’ve got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Kim Jong Un needs a snickers!!!
2. Linksys Routers Screwed
3. Bitcoin dDoS destroy world economy… nah (also bitcoin social engineering) (and skype bitcoin mining malware bot)
4. Security BSides – Rochester
5. Windows XP Security Updates ending in one year IE6 Countdown Windows XP still maintains 39% overall market share.
6. Secrets of FBI Smartphone Surveillance Tool Revealed in Court Fight.
7. DEA Accused Of Leaking Misleading Info Falsely Implying That It Can’t Read Apple iMessages
• Breaches
1. Vudu resets user passwords after hard drives lost in office burglary
• SCADA / Cyber, cyber… etc
1. NIST CyberSecurity Framework Recordings
2. Anonymous hacks DPRNK Twitter and Flickr
3. Anonymous launches massive cyber assault on Israel Israel says: “Anonymous doesn’t have the skills to damage the country’s vital infrastructure” And fixes things up so that Anonymous’ C&C plays “Hatikvah”
4. USAF designates some of their software as CYBERWEAPONS
5. Apparently there are CYBER-WEAPONS in the Korean Conflict
6. Fast-Talking Computer Hacker Just Has To Break Through Encryption Shield Before Uploading Nano-Virus
• DERP
1. Papa, m’entends tu?
2. French Government discovers Streisand Effect on Wikipedia (without actually looking up) The Streisand Effect
3. Interesting to note: The Wikipedia article on The Streisand Effect DOES link to the communication from WIkimedia Foundation.
4. IRS Doesn’t Deny Snooping Emails Without A Warrant
5. Dongle-gate – this makes it so much clearer
• Mailbag / Bizarro Land

1. Subject: OMG, Arlen was right…

   I thought Jamie was just whining about how bad Blackboard is, but now that I have to use it… IT SUUUUUUCKS. It feels like an application that was rather forward thinking for its time, assuming it was built in 1997!

   I take it back. Anything coded in 1997 would be faster than Blackboard is today.

   Would it be wrong of me to try to find flaws in this thing, to try to get them to make it less… suck?

   Thanks,
   -Jim

• Briefly – NO ARGUING OR DISCUSSION ALLOWED
1. Deutsche Telecom SOC big board
2. Ingress – check it out
3. Non-SSL active content on SSL pages is blocked by default in FireFox 18
4. Montreal police arrest a 20 year old woman after she posts a photo of graffiti to her instagram feed
5. The ATF Wants ‘Massive’ Online Database to Find Out Who Your Friends Are
• Liquidmatrix Staff Projects
1. The Liquidmatrix Vegas Party- You’ve asked when and where – that’d be “We don’t know yet” and “The week of Blackhat/BSides/DEFCON”. You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
2. The BSidesLV Ticket Give-away-

   Three tickets up for grabs:

   • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
   • best rap song about a major breach
   • best poem describing a vendor DERP

   Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I’d suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

3. The Security Conference Library 
4. Contribute to the Strategic Defense Execution Standard (#SDES) and you’ll be Doing Infosec Right in no time.
5. If you’re interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe (including European Security Bloggers Meetup), Black Hat, DEF CON, Secure Asia. Matt speaking at Adelphi University Cyber Security Educational Panel.
• In Closing
1. Movie Review Die Hard 4 – It’s a blast. Seriously. Quick, there’s a fire sale.
2. everyday is CTF! go set up a team
3. Signing up for a SANS course? Be sure to use the code “Liquidmatrix_150” and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
4. Seacrest Says: I have no mouth with which to scream

Download the MP3

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA