Liquidmatrix Security Digest Podcast – Episode 39

Episode 0x39

Auld Lang Syne

The Syrian Liberation Army would like to thank Liquidmatrix for their use of Skype.

Upcoming this week…

1. Lots of News
2. Breaches
3. finishing it off with DERPs/Mailbag (or Deep Dive)
4. And there are weekly Briefs – no arguing or discussion allowed

And if you’ve got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Unencrypted Windows Error Crash Reports a Treasure for NSA
2. RSA gave it (Dual EC DRBG) up to the NSA (also turns out Dual EC DRBG was always key escrow)
3. Cash machines robbed with infected USB sticks
• Breaches
1. Target get’s p0wnied …and so do their customers
2. The Doctor Who website (also known as the BeeBeeCee) was allegedly hacked
3. Snapchat infoleak
4. WaPo gets hacked… again (and the last was again)
5. Skype social media presence get’s hacked
6. OpenSSL defaced
• DERP
1. The Danes aren’t nice to hackers
2. RSA’s lame denial of their NSA involvement
• Mailbag

1. Happy new year LM crew!

   Did you watch the 30c3 keynote by Jacob Applebaum or read the piece in Der Spiegel? I’m honestly not sure how to reconcile this with my view of how I thought the infosec world worked. Should I start drinking?

   Turns out I’m not paranoid guy

• Briefly — NO ARGUING OR DISCUSSION ALLOWED
1. Seiki 39″ 3840×2160 (@30Hz) JUST DO IT.
2. GitHub implements Forward Secrecy
3. How to block Java payloads properly
4. Flash Proxies for TOR
• Liquidmatrix Staff Projects — gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you’ll be Doing Infosec Right in no time.
3. If you’re interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
• Upcoming Appearances:  — more gratuitous self-promotion
1. Dave: – Hiding from the Ice Storm
2. James: – Shmoocon, RSA, not sure past that…
3. Ben: – Hiding from Dave
4. Matt: – Texas. ‘Nuff said. AppSec California, RSA
5. Wil: – Texas North. (aka Calgary)
6. Other LSD Writers: – New Orleans.
• Advertising – pay the bills…
1. Signing up for a SANS course? Be sure to use the code “Liquidmatrix_150” and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
2. Seacrest Says: Happy birthday Alex Hutton, we hope your unicorn birthday wishes come true

Download the MP3

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA