Russian Hacker group responsible for DNC Hack is at it again - https://krebsonsecurity.com/2016/11/russian-dukes-of-hackers-pounce-on-trump-win/

Russian banks getting hit back by DDoS Attack - https://themoscowtimes.com/news/ddos-attack-hits-russian-banks-56077

(Ben didn't do show notes)

MS16-137 - https://g-laurent.blogspot.ca/2016/11/ms16-137-lsass-remote-memory-corruption.html?m=1

Tesco was breached - https://www.google.ca/amp/www.bbc.co.uk/news/amp/37907441

The grugq on Security, Cyber, and Elections - https://medium.com/@thegrugq/security-cyber-and-elections-part-1-cd04de8ed125#.9dtgkxkut

http://www.mprnews.org/story/2016/11/07/npr-how-hostile-nation-could-disrupt-election

Nobody knew what CSIS was up to - http://www.cbc.ca/beta/news/politics/what-you-need-to-know-about-csis-metadata-1.3837104

Matthew Keys is in jail for not giving up a source - http://arstechnica.com/tech-policy/2016/11/speaking-from-prison-incarcerated-reporter-maintains-innocence/

Go Secure botnet analysis - https://gosecure.net/2016/11/02/exposing-the-ego-market-the-cybercrime-performed-by-the-linux-moose-botnet/

Blackhat EU talks - https://www.blackhat.com/eu-16/

getting root on wemos - https://www.invincealabs.com/blog/tag/wemo/

Quebec police spied on multiple journalists - https://www.engadget.com/2016/11/03/quebec-canada-cops-monitor-journalists/

Canadian intelligence agency gets hands slapped - http://www.cbc.ca/news/politics/csis-metadata-ruling-1.3835472

EMET EOL announced - https://blogs.technet.microsoft.com/srd/2016/11/03/beyond-emet/

Episode 0x70

Dave Doesn't Exist

We've been unable to capture Dave on video yet despite turning out a absolutely epic amount of video material. We think it's because he doesn't actually exist. Do not even get me started on the hipster beard and hipster actor. Those two. Sigh. In any case...

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Surveillance of reporters has chilling effects
  2. Great series of articles from Rich Mogull on Cloud Security Your Cloud Consultant Probably Sucks How to Start Moving to Cloud Seven Steps to Secure Your AWS Root Account
• Breaches
• 1. Github responsible disclosure
  2. haveibeenpwned - NSA edition (a written message from the Shadow Brokers)
• SCADA / Cyber, cyber... etc
• 1. White hat Marai
  2. UK gov investing mucho Brexit dollars in cyber security
• DERP
• 1. Don't do illegal searches of CPIC (especially if you're a police officer)
• Mailbag
• 1. What's with google disclosing vulns without patches? (thanks to Ed)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Macbook Pro review
  2. Ten Securosis Years
  3. Let's Encrypt Crowdfunding campaign
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - invading Sweden
  2. James: - VACATION!
  3. Ben: - still work
  4. Matt: - beard
  5. Wil: - hipster
  6. Other LSD Writers: - whaaaaaaa?
• Closing Thoughts
• 1. Seacrest Says: Dave loves swedish meatballs

Creative Commons license: BY-NC-SA

Typed JSON - https://tonyarcieri.com/introducing-tjson-a-stricter-typed-form-of-json