Liquidmatrix Security Digest Podcast

Episode 0x74

Quarantine 2020 Edition

All the late shows are doing the "I phoned in from home" why shouldn't we?

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. coronavirus insider trading
  2. fixing vulns at scale
  3. US authorities battle surge in coronavirus scams, from phishing to fake treatments
  4. Coronavirus Sets the Stage for Hacking Mayhem
• Breaches
• 1. Princess Cruises Confirms Data Breach
  2. Rogers had a woopsie
• SCADA / Cyber, cyber... etc
• 1. Hackers Promise 'No More Healthcare Cyber Attacks' During COVID-19 Crisis
• DERP
• 1. Stupid shit that vendors say due to Coronavirus (THIS)
• Mailbag
• 1. So... what about actually doing this podcast a little more often? Signed: The Internet What do you mean our RSS feed didn't update? What do you mean RSS is dead?
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. cyentia 2020 information risk insights study
  2. On Making Work Less Remote: How the Heroku Team Works Together
  3. HBR has some thoughts on newly remote teams too
  4. automated reasoning about AWS security
  5. s3 thinger
  6. https://twitter.com/JSTOR/status/1240306471168028674?s=20Get bent JSTOR
• Closing Thoughts
• 1. Seacrest Says: There's finally a word for what we do... On-nomi

Creative Commons license: BY-NC-SA

Episode 0x73

Surprise! Happy Holidays

Are you having a happy holiday? Listen to us and you'll have a happy holiday.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Comparison of DNS resolvers Stylish Norton Core Router
  2. Russian wessels messing with underwater internets Submarine Cable Map
  3. Keeper Security learns about The Striesand Effect
  4. Russian hackers targeted more than 200 journalists globally
• Breaches
• 1. Internet Hijacking
  2. Free Credit Monitoring from Nissan Finance Canada!
• SCADA / Cyber, cyber... etc
• 1. VMWare has bugs. Who knew?
• DERP
• 1. The person that thought we our recent fail panel was unprofessional
  2. Screenshot kernel patch
• Mailbag
• 1. So... what about actually doing this podcast a little more often? Signed: The Internet
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Enpass
  2. Pineapple Fund
  3. Die Hard at the Theatre
  4. Magic Leap is real... ish
  5. Has no link.
• Closing Thoughts
• 1. Seacrest Says: Where the fuck is Matt? Has anyone seen Matt?

Creative Commons license: BY-NC-SA

Episode 0x72

SPECIAL ELECTION EDITION

Vote Dave... please?

Upcoming this week...

1. We yammer about stuff with no real direction or point.

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• SCADA / Cyber, cyber... etc
• 1. ETERNALBLUE was being used before wannacry
• DERP
• 1. Hacking Mar-A-Largo... Kinda? Is this legal?
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. https://securityheaders.io/
  2. https://www.gofundme.com/crunch-medical-fund
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. Advertising - pay the bills...
  2. 1. Thinking about SecTor this November? Be sure to use the code "liquidmatrix2017" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2017expo" will get you in for $0
     1. Seacrest Says: I can't even remember... something about Kelly.
  3. Closing Thoughts

Creative Commons license: BY-NC-SA

Episode 0x71

Um... We're back?

I think it's called falling off the wagon. We did that. We should get back on the wagon. Why is it always a wagon?

Upcoming this week...

1. /dev/random

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• We totally forgot show-notes

Creative Commons license: BY-NC-SA

Samy Kamkar - PoisonTap - https://samy.pl/poisontap/

RCMP want an iphone unlocker - http://www.cbc.ca/news/investigates/police-power-privacy-encryption-1.3856375

Discussion paper - https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/ntnl-scrt-grn-ppr-2016-bckgrndr/index-en.aspx

More Travels With Dave...

Reporting on the infosec implications of Walt Disney World...

https://disneyworld.disney.go.com/ https://www.wired.com/2015/03/disney-magicband/

http://www.nytimes.com/1998/08/20/technology/roller-coasters-take-a-ride-from-wild-to-wired.html http://www.rockwellautomation.com/global/industries/entertainment/overview.page http://dsicontrols.com/amusement.html

Dave is actually alive. We have video proof.

No notes.

https://2016.pycon.ca/en/