Liquidmatrix Security Digest Podcast – Episode 38

Episode 0x38

Dreidel Turkey Dreidel Peter Mackay!!!

Can’t do HTML, can’t follow the instructions on how to write an introductory paragraph welcoming our listeners to the show notes that no one reads. Gotta love the stunt team.

Upcoming this week…

1. Lots of News
2. Breaches, anti-derps!!
3. It’s Chanukah!!!
4. and many turkeys are now dead
5. And there are weekly Briefs – no arguing or discussion allowed

And if you’ve got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Someone’s been MiTMing the internets… Bruce Schnier thinks Ars Technica had an okay write up about it… And more reporting on Renesys’s original research on it. (and a little more)
2. Japan is awesome, told NSA no thanks because it believed the request was illegal
3. Canada’s Bill C-13 is a Trojan Horse (and Michael Geist weighs in too) (and the Ontario privacy commissioner does comment on it)
• Breaches
1. Health Canada doesn’t understand privacy (and the bad things start happen)
2. Clearport Mercantile exchange (and the 450,000 daily contracts they process) got p0wned
3. EU is not good with the Wifi

• Anti-derps
1. Anti-DERP – Diffie is awesome! so is newegg (but sadly the lost – which sucks)
2. Anti-DERP – konami button press sequence is not a hack (it’s a metaphor)
3. Anti-DERP – Mom takes on revenge porn site, a creepy hacker and Anonymous to the rescue
• Mailbag
1. Hi Guys:
   0x37 was good — thanks!
   

   During recording the podcast one of youse (Ben?) wanted to determine the version of Silverlight installed on a browser. I make Rapid7’s browserscan the home page for all of my browsers. It displays a nice list of the plugins currently installed & enabled in your browser. The list includes the plugin’s installed version, the currently available version and — when appropriate — a Red Download Button in case you want to download the latest version.

   cheers,
   Mark

   1. Rapid 7’s Browserscan
   2. Qualys
• Briefly — NO ARGUING OR DISCUSSION ALLOWED
1. Amber Baldet’s DefCon 21 talk on Suicide Risk Assesment and Intervention Tactics.
2. Dan Geer speaks more wisdom… go read it now
3. Awesome hack – private LCD
4. BIPS suffers Bitcoin heist
• Liquidmatrix Staff Projects — gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you’ll be Doing Infosec Right in no time.
3. If you’re interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
• Upcoming Appearances:  — more gratuitous self-promotion
1. Dave: – Attending Bluehat and Hushcon to close out the year.
2. James: – Chicago, we think
3. Ben: – nowhere in particular
4. Matt: – Turkey coma
5. Wil: – On location. He’s looking for representation so get him while he’s still cute…
6. Other LSD Writers: – MIA
• Advertising – pay the bills…
1. Signing up for a SANS course? Be sure to use the code “Liquidmatrix_150” and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
2. Seacrest Says: Tell Peter Mackay everything

Download the MP3

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA