Liquidmatrix Security Digest Podcast – Episode 8

Episode 8 — Bikini Troubles

So we find ourselves again Mattless. What is it with security professionals and Hawaii? Good stuff in here, sorry about botching last week’s episode link – this one should work better, also, go back and download last weeks.

Notes etc. to mailbag@liquidmatrix.org — we love to hear from you!

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News
1. Madhi, more middle eastern spyware
2. good bye grum
3. crazy guy hacks ISP both online and with an axe – (Dave can relate)
4. Project 2020 launched ISCPA to help predict infosec trend spotting project
5. blackhole keeps getting “better”
6. elections Ontario can’t keep their data in their pants
• Breaches
1. Check out the Summer of Breaches “Scorecard”
2. Maplesoft
3. ITWallstreet.com – 50,000 accounts
4. Elections Ontario – 2.4 million records but 4 million affected
5. Pinterest – scrambling to figure out the breach
6. Yale – 1,200 usernames with password
• Commentary
1. Errata
• Oracle won’t patch critical hole in Database (because it’s hard)
2. Foot In The Door
• safe computing at Defcon (or any hostile network like the internet)
• don’t use the wifi
• use a VPN
• patch, patch, patch
• shut down everything
3. Hardcore
• get p0wn3d on an untrusted network ((happens to lots of people, even smart ones, during their presentations – don’t take anything you can’t afford to lose))
• firesheep ((used to be the wall of sheep was a special thing, now it’s a browser extension… use encrypted protocols over an encrypted session))
• the mac store ((Quoting Prez Reagan: Trust but verify — and there’s something wrong with the Apple purchasing/signing trust path right now — in-app purchases in iOS have been MiTM’d))
• hotels ((Inverse correlation between cost of hotel room and quality of internet — also, costs a freaking arm and a leg — pay-as-you-go 3G data is cheaper.))
• Mailbag

1. Howdy Fellas

   Do you think online voting can be done safely? Also, what about you Canadian boys losing all those voter records?

   regards
   

   Al from big sky country

• In Closing
1. Bsides/BlackHat/DEF CON — all but Ben / The Intern shall be there.
2. There are parties in Vegas
3. DEF CON is still cancelled – check status here
4. Hacker Pyramid!
5. Canadian CERT volunteers, email mailbag@liquidmatrix.org
6. Get thee to Securosis and get educated!
7. The Seacrest has landed. That’s one small p0wn for hackers, one giant p0wn for hackerkind

Download the MP3 I FIXED IT!

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA