An Information Security Place Podcast

We have a little bit of innuendo humor on this episode, and we all break into some hysterics (it’s all in the geek toys section, so fast forward if you want to hear all that). Around that is some information and opinion on InfoSec stuff. We figured we would throw that in there because of the name of the podcast, but whatever…

Show Notes:

InfoSec News Update -

• HouSecCon 2011 Call for Papers – Link Here
• Busting DLP Myths or Playing with Hype? Link Here
• Google collecting kid’s info (including last 4 of SSN) for Doodling contest – Link Here
• Smartphone security threats overdramatized – Link Here
• 7 Deadly Sins – Link Here
• Another certification debate – Link Here
• Abusing HTTP Status Codes to Expose Private Information – Link Here

Geek Toys –

• Dream Plug PC – Link Here
• ATI 5970 for the GPU Win – Link Here for Specs / Link to Hashcat Forums

Discussion Topic – Saying No to Bad Patents – Link 1 / Link 2 / Link 3

Music Notes:

Special Thanks to the guys at RivetHead for use of their tracks – http://www.rivetheadonline.com/

Tour dates:

• Feb 26th – in Carlsbad NM
• March 19 – The American Airlines Center at the Dallas Stars Hockey Game

Intro – RivetHead – “Stirring It Up Again”
News Bed – RivetHead – “Beautiful Disaster”
Discussion Bed – RivetHead - “Difference”
Outro – RivetHead – “Zero Gravity”

Link to file

Thomas Jefferson said, “Delay is preferable to error.” Martin Luther said, “Who waits until circumstances completely favor his undertaking will never accomplish anything.” So depending on which quote you like, we either took a long time to record a new episode so we would do it right, or we are just a bunch of slackers. I prefer the former, but I am biased…

In either case, we’re back, and in the immortal words of Rivethead, we’re “Stirring It Up Again” (you’ll read about Riverthead below and hear about them in the podcast).  Jim, Dan, and I got together on a cold and stormy night (at least in Houston and Denver) to talk about all things InfoSec.  Show notes are below.  Oh, and yes, we are going with a new theme for numbering our episodes.  I think it takes away the pressure a little myself since I don’t have to worry about huge numbers for episodes.  Of course, I’ll have to count now, which sucks (thanks Jim).

Show Notes:

InfoSec News Update -

• Study shows non-compliance more expensive than compliance (study was sponsored by Tripwire) – Article Link / Report Link
• Security Fail – When Trusted IT members go bad!! – Link Here

“It’s a CIO’s worst nightmare: You get a call from the Business Software Alliance (BSA), saying that some of the Microsoft software your company uses might be pirated.

You investigate and find that not only is your software illegal, it was sold to you by a company secretly owned and operated by none other than your own IT systems administrator,
a trusted employee for seven years. When you start digging into the admin’s activities, you find a for-pay porn Web site he’s been running on one of your corporate servers.
Then you find that he’s downloaded 400 customer credit card numbers from your e-commerce server.

And here’s the worst part: He’s the only one with the administrative passwords.”

• Looking back at old security news – have we made progress?? – Link Here (Registration required for full article)
• A SLOW Death! – Link Here
• Egypt gets Internet connection back – Link Here
• Ever Cookie’s Anyone? – Link Here

Discussion Topic #1 – CSRF and Clickjacking – Link Here

Music Notes:

Special Thanks to the guys at RivetHead for use of their tracks – http://www.rivetheadonline.com/

Tour dates:

Link to MP3

All three of us are on this time. Some good talk about disclosure and web app firewalls, and Google, and some other stuff. Enjoy!

Show Notes:

InfoSec News Update -

• Web App Firewall Discussion Continues – Link 1 / Link 2 / Link 3 / Link 4
• Good Ole’ Firmware Hack – Link Here
• Small and MidSize Businesses are Getting Serious About Security – Link Here
• Looking for the Next Generation of Security Folks -Link Here
• “POET” Released – Link Here
• Fingerprinting the Bad Guys – Link Here
• Careful Where You Sext! – Link Here
• Encouraging Everyone to Participate in the Survey -Link Here

Discussion Topic #1 – Google Is Watching Your Wifi, But do You Really Care?

Discussion Topic #2 - Ye’ Old “Disclosure” Debate…Again?!? Link 1 / Link 2

Music Notes –

• Intro / Outro – Digital Breaks – “Therapy”
• Segway #1 – Building Rome – “Bored”
• Segway #2 – This is Fiction – “Breathe”
• Segway #3 – Patent Pending – “Los Angeles”

Link to MP3