Liquidmatrix Security Digest Podcast - Episode 38

Episode 0x38 Dreidel Turkey Dreidel Peter Mackay!!! Can't do HTML, can't follow the instructions on how to write an introductory paragraph welcoming our listeners to the show notes that no one reads. Gotta love the stunt team. Upcoming this week... Lots of News Breaches, anti-derps!! It's Chanukah!!! and many turkeys are now dead And there are weekly Briefs - no arguing or discussion allowed And if you've got commentary, please sent it to [email protected] for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: News and Commentary Someone's been MiTMing the internets... Bruce Schnier thinks Ars Technica had an okay write up about it... And more reporting on Renesys's original research on it. (and a little more) Japan is awesome, told NSA no thanks because it believed the request was illegal Canada's Bill C-13 is a Trojan Horse (and Michael Geist weighs in too) (and the Ontario privacy commissioner does comment on it) Breaches Health Canada doesn't understand privacy (and the bad things start happen) Clearport Mercantile exchange (and the 450,000 daily contracts they process) got p0wned EU is not good with the Wifi Anti-derps Anti-DERP - Diffie is awesome! so is newegg (but sadly the lost - which sucks) Anti-DERP - konami button press sequence is not a hack (it's a metaphor) Anti-DERP - Mom takes on revenge porn site, a creepy hacker and Anonymous to the rescue Mailbag Hi Guys: 0x37 was good -- thanks! During recording the podcast one of youse (Ben?) wanted to determine the version of Silverlight installed on a browser. I make Rapid7's browserscan the home page for all of my browsers. It displays a nice list of the plugins currently installed & enabled in your browser. The list includes the plugin's installed version, the currently available version and -- when appropriate -- a Red Download Button in case you want to download the latest version. cheers, Mark Rapid 7's Browserscan Qualys Briefly -- NO ARGUING OR DISCUSSION ALLOWED Amber Baldet's DefCon 21 talk on Suicide Risk Assesment and Intervention Tactics. Dan Geer speaks more wisdom... go read it now Awesome hack - private LCD BIPS suffers Bitcoin heist Liquidmatrix Staff Projects -- gratuitous self-promotion The Security Conference Library Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time. If you're interested in helping out with openCERT.ca, drop a line to [email protected] Upcoming Appearances:  -- more gratuitous self-promotion Dave: - Attending Bluehat and Hushcon to close out the year. James: - Chicago, we think Ben: - nowhere in particular Matt: - Turkey coma Wil: - On location. He's looking for representation so get him while he's still cute... Other LSD Writers: - MIA Advertising - pay the bills... Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course Seacrest Says: Tell Peter Mackay everything Creative Commons license: BY-NC-SA