Liquidmatrix Security Digest Podcast – Episode 3D

Episode 0x3D

My Heart Bleeds for Windows XP

Well this is certainly an exciting week around these here parts. I reckon we’ve not seen this much marketeering since the APT1 days of ought 13. Goodness gracious I’m not a huge fan of this crap.

Do not listen to this podcast at more than 1.5x speed while operating a motor vehicle or heavy equipment. Your face may melt according to some studies conducted by a Murican we know.

Upcoming this week…

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber… etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs – no arguing or discussion allowed

And if you’ve got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Classified NSA Work Mucked Up Security For Early TCP/IP
2. EU court acts like a government of the people
3. Trey Ford talks sense around XP EOL/EOSupport
• Breaches
1. Heart Bleed!!!
   and some demo
   and a PoC!!!!
   With an awesome quote by Mr. Fancy Pants
   And donate some money to the cause you lazy bitches
   Also, update your Tor nodes and relays…
   and while you’re updating your OpenSSL
2. Bad CRA
3. How I hacked your router
• SCADA / Cyber, cyber… etc
1. GoGo helps the feds
• DERP
1. US Pushes Canada to Weaken Privacy Legislation
2. The Brits love them some XP good
3. bank drops out of Trustwave lawsuit
• Mailbag
1. Hi
   Are we now cool with Cyber?
   Not Jamie
• Briefly — NO ARGUING OR DISCUSSION ALLOWED
1. Plug and play in/with your Tesla…
2. Yeah. So, not really interested in Dropbox anymore.
3. Evilgrade
• Liquidmatrix Staff Projects — gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you’ll be Doing Infosec Right in no time.
3. If you’re interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
• Upcoming Appearances:  — more gratuitous self-promotion
1. Dave: – Star Alliance Hostage
2. James: – Wait what?
3. Ben: – Suit.
4. Matt: – Beard.
5. Wil: – Actor. and cleaning up his laundry
6. Other LSD Writers: – Blogging? (WTF IS BLOGGING????)
• Advertising – pay the bills…
1. Signing up for a SANS course? Be sure to use the code “Liquidmatrix_150” and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with “Liquidmatrix_5”
• Closing Thoughts
1. Seacrest Says: Aviator is already configured to check for revoked certificates. Nyahhhhhhhh.

Download the MP3

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA