Liquidmatrix Security Digest Podcast - Episode 31

Episode 0x31 Tinfoil Hats for EVERYONE Short paragraph containing introductory material and a thanks to listeners (if reasonable) Upcoming this week... Lots of News Paranoia / NSA SCADA / Cyber, cyber... etc. finishing it off with DERPs/Mailbag (or Deep Dive) And there are weekly Briefs - no arguing or discussion allowed And if you've got commentary, please sent it to [email protected] for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: News and Commentary Fingerprints as passwords: New iPhone Touch ID Skipping Ben's turn because he's really impressed about upcoming stories. Certification WTF: Payment Card Industry Professional (PCIP) WordPress Paranoia / NSA -- AKA "The BIG Breech of 2013" The NSA is a customer of VUPEN NIST says maybe don't use the ECC random bit thingie Wireless firms agree to give Ottawa ability to monitor calls, phone data No telco ever challenged NSA data collection New NSA Leak Shows MITM Attacks Against Major Internet Services EZpass is tracking you NSA Hacks Belgium NSA slurped bank records and credit card data Canada handed over control of crypto standard setting to the NSA NSA phone program is all legit FISA courts joining the FOIA party late SCADA / Cyber, cyber... etc Today Cyber means War but back in the 1990s... Hacker Group in China linked to big cyber-attacks Brazil and Argentina make a cyber pinkie pact DERP Anonymous Cop Pens Bizarre Editorial Calling for 'End of Anonymity on the Internet,' Says All Internet Posters Should be Forced to Register with the Government for 'Public Safety' Twitter does link scraping PERMANENT DERP AWARD: At this point, the award goes to all of us chumps who continue to let the people we elected stay elected. They have violated our trust. Mailbag and/or Deep Dive Hey LSD-P I hope that you remember to check your dead-drop and got this coded message. I need to know what I should do to ensure that the winners of popularity contests do not have too much insight into my private life. It's not that I have anything to hide, just that they do not need any more access than a judge would permit them. Nervously,Your Friend Briefly -- NO ARGUING OR DISCUSSION ALLOWED Crypthook ShmooCon CFP - Pay attention to the Proceedings Binary Risk Assessment FreedomBox The First Few Months of Penetration Testing: What they don't teach you in School - Alex Fernandez-Gatti MOV is turing complete Meredith Patterson at 28c3 - The language of insecurity SimpleRisk: Enterprise Risk Management Simplified Browser fuzzing: introducing bamboo.js Liquidmatrix Staff Projects -- gratuitous self-promotion The Security Conference Library Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time. If you're interested in helping out with openCERT.ca, drop a line to [email protected] Upcoming Appearances -- more gratuitous self-promotion Dave: - Attending Security Congress in Chicago, Derbycon, HITB Malaysia, Deepsec in Austria, and bsidesTO. Panelist at SecTor. And finally speaking at Hackfest in Quebec City. James: - Speaking at Derbycon, bSidesTO, SecTor and Hackfest, Panelist at SecTor (twice) Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel Matt: - Still on his honeymoon... And will be speaking at SecTor Wil: - Getting playa out of his areas... But will be at SecTor Other LSD Writers: - Chris Sistrunk speaking at EnergySec right now. Advertising - pay the bills... Hackfest registration is open BSides Toronto!!!! SecTor 2013 Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value). Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course Seacrest Says: oh jeremiah!!! Creative Commons license: BY-NC-SA