Liquidmatrix Security Digest Podcast - Episode 20

Episode 0x20 -- Can Dave count to 20?

Special Bonus Episode!

Since Dave (and a few select others) have problems with actually showing up to recordings, you'll be getting this episode about one day after the much maligned and completely screwed up Episode 0x1F. We are attempting to get back on track and do things the way they should be done. Or something like that. Also, Shmoocon!

1. Upcoming this week...
2. Lots of News
3. Breaches
4. SCADA / Cyber, cyber... etc.
5. finishing it off with DERPs/Mailbag and
6. THE DEEP DIVE
7. Our new weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary

1. Password Dump stats for January 2013 and December for those curious
2. LA Post serving Black Holes
3. WaPo - ‘Fragmentation’ leaves Android phones vulnerable to hackers (some info on malware p0wnage)
4. NIST 800-53 Rev4 is in Draft read it, comment on it.
5. DHS declares 100 mile "4th Amendment Free" zone adjacent to US border
6. Kaspersky update hoses Internet access for Windows XP users.
7. Canadian Business Groups Lobby For Right To Install Spyware on Your Computer.
8. The Everyday Agony of the Password
9. Audacious Hack Exposes Bush Family Pix, E-Mail

1. Bit9h got hacked!!!!

1. Cyber Lobbists
2. SCADA for the home players - turn the Belkin Wemo into a deathtrap

1. Hi LSD crew...just finished 0x1E again and again, well done! Many thanks. I am missing a bit the "central topic" what you had in earlier ones. What I mean is like in episode 0x14 about "Hardcore – Recovering from the Disaster you didn’t plan for" or "hiring". This was really interesting and gave some good insight. I understand quite a number of things are "common sense", but still, unfortunately quite a number (of the other?) things are not "common practice" and I think these need to be communicated. Cheers guysThomas

1. Because Thomas is a good guy, and he actually sent us an entire book of ideas, we're going to use one of them. Keeping up with new technical developments such as RFC 6797 HSTS and how to manage that along with everything else you're supposed to be doing as an information security professional. (Cue Dave talking about the value of CPEs in 3... 2... 1...)

1. If you permit USB keyboards or mice, you're permitting exfiltration
2. Log stash book!!!