Episode 0x76

Ready for a surprise thing? Yup. We found spare time and did a thing. Here's the thing. You get to spend a whole lot of time listen to security old farts.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Rogers Outage - the CRTC letter and An analysis on the BGP route withdrawal
  2. Why Bug Bounty Programs are Failing
  3. CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks
• Breaches
• 1. Yeah. You've been Shanghai'd - maybe?
• SCADA / Cyber, cyber... etc
• 1. SCADA market to reach 13+ Billion in 4 years - will any of it be secure?
  2. Uber won't get prosecuted for their 2016 breach, but...
• DERP
• 1. Oldie but goodie - Elon's plane being tracked is a security issue... and Drake tries to make it better and fails so miserably... derp.
• Mailbag
• 1. You guys are not good at segways... or segues https://www.merriam-webster.com/dictionary/segue
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Awesome Security (tools and stuff)
  2. Samsung has a thing that sounds like a backdoor but actually isn't
  3. As Microsoft blocks Office macros, hackers find new attack vectors
• Closing Thoughts
• 1. Seacrest Says: Seacrest says see you at band camp

Creative Commons license: BY-NC-SA

Episode 0x75

10th Anniversary Special

We should have something snappy here, but we're old and out of belt-onions

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Whats changed in infosec since we last talked?
  2. Coinbase highlighting the risk of centralizing a decentralized system
  3. Great podcast from Odd Lots - the ponzinomics of cryptocurrency
  4. New Vulnerability Database Catalogs Cloud Security Issues
  5. Data breach at US ambulance billing service Comstar exposed patients’ healthcare information
• Breaches
• 1.  
  2. In Canada... largest breach settlement
• SCADA / Cyber, cyber... etc
• 1. Wired knows shit.
  2. Deep fake remote IT job applicants
• DERP
• 1.  
• Mailbag
• 1. It's been a rough couple of years. We missed a lot. Some friends departed. How are y'all handling things? ~a long time listener
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. I'm hiring
  2. Me too
  3. Risk Disconnect in the Cloud
  4. Supply chain Levels for Software Artifacts
  5. https://jobs.cisco.com/We're hiring at Cisco
• Closing Thoughts
• 1. Seacrest Says: Dave qualifies for senior AARPdiscounts now

Creative Commons license: BY-NC-SA

Episode 0x74

Quarantine 2020 Edition

All the late shows are doing the "I phoned in from home" why shouldn't we?

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. coronavirus insider trading
  2. fixing vulns at scale
  3. US authorities battle surge in coronavirus scams, from phishing to fake treatments
  4. Coronavirus Sets the Stage for Hacking Mayhem
• Breaches
• 1. Princess Cruises Confirms Data Breach
  2. Rogers had a woopsie
• SCADA / Cyber, cyber... etc
• 1. Hackers Promise 'No More Healthcare Cyber Attacks' During COVID-19 Crisis
• DERP
• 1. Stupid shit that vendors say due to Coronavirus (THIS)
• Mailbag
• 1. So... what about actually doing this podcast a little more often? Signed: The Internet What do you mean our RSS feed didn't update? What do you mean RSS is dead?
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. cyentia 2020 information risk insights study
  2. On Making Work Less Remote: How the Heroku Team Works Together
  3. HBR has some thoughts on newly remote teams too
  4. automated reasoning about AWS security
  5. s3 thinger
  6. https://twitter.com/JSTOR/status/1240306471168028674?s=20Get bent JSTOR
• Closing Thoughts
• 1. Seacrest Says: There's finally a word for what we do... On-nomi

Creative Commons license: BY-NC-SA

Episode 0x73

Surprise! Happy Holidays

Are you having a happy holiday? Listen to us and you'll have a happy holiday.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Comparison of DNS resolvers  Stylish Norton Core Router
  2. Russian wessels messing with underwater internets  Submarine Cable Map
  3. Keeper Security learns about The Striesand Effect
  4. Russian hackers targeted more than 200 journalists globally
• Breaches
• 1. Internet Hijacking
  2. Free Credit Monitoring from Nissan Finance Canada!
• SCADA / Cyber, cyber... etc
• 1. VMWare has bugs. Who knew?
• DERP
• 1. The person that thought we our recent fail panel was unprofessional
  2. Screenshot kernel patch
• Mailbag
• 1. So... what about actually doing this podcast a little more often? Signed: The Internet
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Enpass
  2. Pineapple Fund
  3. Die Hard at the Theatre
  4. Magic Leap is real... ish
  5. Has no link.
• Closing Thoughts
• 1. Seacrest Says: Where the fuck is Matt? Has anyone seen Matt?

Creative Commons license: BY-NC-SA

Episode 0x72

SPECIAL ELECTION EDITION

Vote Dave... please?

Upcoming this week...

1. We yammer about stuff with no real direction or point.

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• SCADA / Cyber, cyber... etc
• 1. ETERNALBLUE was being used before wannacry
• DERP
• 1. Hacking Mar-A-Largo... Kinda? Is this legal?
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. https://securityheaders.io/
  2. https://www.gofundme.com/crunch-medical-fund
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. Advertising - pay the bills...
  2. 1. Thinking about SecTor this November? Be sure to use the code "liquidmatrix2017" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2017expo" will get you in for $0
     1. Seacrest Says: I can't even remember... something about Kelly.
  3. Closing Thoughts

Creative Commons license: BY-NC-SA

Episode 0x71

Um... We're back?

I think it's called falling off the wagon. We did that. We should get back on the wagon. Why is it always a wagon?

Upcoming this week...

1. /dev/random

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• We totally forgot show-notes

Creative Commons license: BY-NC-SA

Samy Kamkar - PoisonTap - https://samy.pl/poisontap/

RCMP want an iphone unlocker - http://www.cbc.ca/news/investigates/police-power-privacy-encryption-1.3856375

Discussion paper - https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/ntnl-scrt-grn-ppr-2016-bckgrndr/index-en.aspx

More Travels With Dave...

Reporting on the infosec implications of Walt Disney World...

https://disneyworld.disney.go.com/ https://www.wired.com/2015/03/disney-magicband/

http://www.nytimes.com/1998/08/20/technology/roller-coasters-take-a-ride-from-wild-to-wired.html http://www.rockwellautomation.com/global/industries/entertainment/overview.page http://dsicontrols.com/amusement.html

Dave is actually alive. We have video proof.

No notes.