Episode 0x16-- One Time, At Security Camp...

There's too much news. We need to do MORE podcasts!

Also, it's time to say goodbye Mitt!!! Can't say as we're sorry to see you go, but yaknow.

Upcoming over the next hour...

And if you've got commentary, please sent it [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

ENGAGE TINFOIL HATS EVERYONE...

Hi,

thanks for your video with Dave, I really enjoyed that.

I am wondering and I think you mentioned something like that - but I would find it interesting if all of you guys could be on video like that... (hehe... enjoying it here, sitting in the first row...)

What about some questions from your audience? Not that I have some ready now, but I am sure I could make up some (not embarassing ones of course - ha!).

Just some thoughts - but keep up the good work!

Cheers Thomas P.

Hello guys, and thank you for the great show.

Referring to your second episode where you flamed Iran IrCERT, I just thought I would let you know that Libya now also has a CERT, it's called LY-CERT and you can find them online here http://cert.ly

Regards

Ahmed S.

Greetings from +52° 56' 58.92", -1° 9' 0.36" (approx),

As you all adore PCI-DSS so much, I figured I'd share this article with you: Silicon Republic

Some of my favourite quotes:

I can already hear James Arlen screaming.

Keep up the good work and try not to have an aneurysm!

Cheers,
Graham S

Creative Commons license: BY-NC-SA

Television Episode 0x03 -- SecTor Interviews The Third

NFC with Charlie - IT'S MILLER TIME

Back again again - An interview with Charlie Miller at Sector during which you may want to hold your phone tightly in a tinfoil hat of it's own.

If you don't know the name Charlie Miller - you should head over and read his Wikipedia Page first and then come back and watch the video. Charlie has been doing some cool things with NFC on phones. He's goooooood at messing them up using only a passive NFC tag! You'll learn something if you pay attention, I swear.

There's more of these in the queue. Tell us what you think or what you'd like to see.

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones/cover the screen if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

Creative Commons license: BY-NC-SA

Episode 0x15 -- So Much News...

Pre-election Bets Are Off

Starting off this week with a couple of Con Reports - Ben, you go first... how was HackFest? ((wait)) and Dave - what was the high point of your HackFest experience? ((crickets))

Upcoming over the next hour...

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

Sorry US gov. It's on you. For how long have you known about this?

Hey guys. Love the podcast. Not sure if you saw, but the report from the investigation of DigiNotar, the Dutch CA that got violated last year, is out: PDF

Given some of the things you highlight on the podcast it would probably be worth talking about on the show as an example of what not to do. Diginotar had a segmented network and good physical security but also a poorly configured firewall and IPS (managed by an external 3rd party) and no real procedures for examining logs from either.

Despite these "defenses", the intruder was able to compromise an external-facing server and use it to pivot to the internal network, get access to a machine that creates certificates, and issue over 500 rogue certificates, including one that was used to execute a MITM attack on Gmail users in Iran.

---------

Brian

Creative Commons license: BY-NC-SA

Episode 0x14-- Happy Birthday Mr. Gattaca... we'll vote for you too.

There's interesting things afoot. Y'all should pay attention.

This is the 21st episode for those of you that don't have 16 fingers. Not sure we should be revealing this yet, but it's going to be a wild winter solstice celebration this year. The southern folk at Southern Fried Security and this gang of teenage malcontents are up to no good. Well, actually extra special good. Let me sum up - it's Security Charity... Gangnam Style.

Stay tuned for the carnage.

Upcoming over the next hour...

And if you've got commentary, please sent it [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

Dear Sir/Madame,

My name is Jakub Walczak, and I work for Hakin9 – the magazine that reaches over 60 000 readers mainly in the USA, India, and Australia.

I have seen your website and I was wondering if you would like to cooperate with us. Please let me know.

I am looking forward to hearing from you.

Regards,

Jakub Walczak

Yeah, so we ran a little long... the commentary segment has been pulled out into a separate recording. It'll show up on the RSS feed tomorrow, but if you want it right now, you can grab it here.

The quick & dirty: Stroz Friedberg evaluated the technical watchdog (MarkMonitor) for the so-called ISP "Six Strikes", and gave it a thumbs-up. However, SF was also actively lobbying for the RIAA between 2004 and 2009.

I want to like this company - they're doing it less wrong than many other folks - and thus I find myself experiencing another bout of Infosec Depression.

Original article, albeit from a non-impartial source here

-Jim

Creative Commons license: BY-NC-SA

Episode 0x13 -- the 20th episode for those of you that don't have 16 fingers

The Pirate Bay is in the clouds, but we got here first, so suck it!!!

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

I don't even have words any more.

Hi Security Nerds!!

Does Canada need to spend more on cyber security??

Ontario's cyber douche warrior

YES!!!!!

Creative Commons license: BY-NC-SA

Television Episode 0x02 -- SecTor Interviews The Second

A Full Dose of Rothman

Back again - and understand that we're serious this time.

Attempt to not learn something as I interview Mike Rothman (@securityincite), Analyst and The PRESIDENT of Securosis. Please try to pay attention. There's an awesome amount of information in there.

There's more of these in the queue. Tell us what you think or what you'd like to see.

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones/cover the screen if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

Download the m4v

Episode 12 -- These are the Daves I know I know

He claims it's not his fault he missed an episode...

Yes, we're still doing a podcast. Lots of you listen. It's kinda awesome. We promise to be more awesome in the future.

And tonight, let us regale you with tales of:

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

Creative Commons license: BY-NC-SA

Television Episode 0x01 -- SecTor Interviews The First

Video even - inorite!

We gave you a warning and then didn't follow through, so we understand the confusion. This is the first of many Liquidmatrix Security Television Episodes which we naively think you might enjoy.

To start off, we've got this delicious interview with Dave Mortman (@mortman), the Chief Security Architect of Enstratus. Watch as Dave regales you with tales of the way things where back when he was a boy ((It appears that he's still a boy, but that's all charm.))

There's more of these in the queue. Tell us what you think or what you'd like to see.

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones/cover the screen if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

Creative Commons license: BY-NC-SA

Episode 11 -- Dave's Away

w00000000000000000t!

Hey Everyone, welcome to the Liquidmatrix Security Podcast - Episode 0x11 or the 18th recording for those who don’t start with zero and are not good at Hexadecimal - or math, like us.

Everyone showed up except Dave. Something about Canadian Thanksgiving causing a Turkey Coma. We manage to struggle through without him. Actually, we think the show turned out just fine. We don't need no stinkin' Dave.

And tonight, let us regale you with tales of:

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

Hey!

I just watched Ben’s talking head on CTV news, what are your thoughts on Huawei, ZTE? What does this mean to Canada?

Paranoidly,

Jacques L, QC

Creative Commons license: BY-NC-SA

Episode 10 -- It's Special

recorded live at SecTor 2012

There is no Matt. Again. So we found a replacement. As it turns out, pretty much any American who's name starts with "M" will do. Huge thanks to Mike Rothman for helping out with the madness.

This discussion has only the four topics:

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

Creative Commons license: BY-NC-SA