Liquidmatrix Security Digest Podcast

Hangzhou Xiongmai recalls IoT devices - http://www.reuters.com/article/us-cyber-attacks-manufacturers-idUSKCN12O0MS

Comodo CA relies on broken OCR and issues certs incorrectly - https://bugzilla.mozilla.org/show_bug.cgi?id=1311713

Using Rowhammer on Android - http://arstechnica.com/security/2016/10/using-rowhammer-bitflips-to-root-android-phones-is-now-a-thing/

Hyper scale defenses (https://youtu.be/90kxsEOSZQ8), scaring the Russians (http://www.cbc.ca/beta/news/technolog...) and rigged elections in the Philippines (http://thestandard.com.ph/mobile/arti...) -- turns out its very old news which popped up in my news feed and I can't read dates

Mini episode #4: crazy TLDs and DDoS on Dyn.

https://twitter.com/kpyke/status/789156391726387200 https://www.dynstatus.com/incidents/5r9mppc1kb77 https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/amp/ https://youtu.be/90kxsEOSZQ8

Friday's episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks Yahoo! and Boards of Directors and Linux privilege escalation and Wikileaks and HE JUST KEEPS TALKING.

The SECOND episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks data exfiltration.

In this first episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro walks you through SecTor 2016.

Episode 0x6E

IT LIVES (Live from SecTor 2016)

All five LSDP's in one room at the same time. It actually happened.

Upcoming this week...

1. Catching Up!

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• LIVE FROM SECTOR!!!
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Closing Thoughts
• 1. Seacrest Says: Eventually we will return. Maybe.

Creative Commons license: BY-NC-SA

Episode 0x6D

We've been gone for a month, we've been drunk since we left

hej till våra lyssnare i Sverige

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Etherium TheDAO attack simplified
  2. People who have been victim of workplace violence, harrasment and sexual assault Isis agora lovecruft Alison Macrina Violet Blue Nick Farr
  3. "Consent, it's as simple as tea" if you haven't seen it Canadian Association of Sexual Assult Centers Women Against Violence Against Women Ontario Coalition of Rape Crisis Centers Central Alberta Sexual Assult Center VictimLink BC page on Sexual Assult Rape, Abuse & Incest National Network (USA)
  4. DHS seeks to ask foreign visitors their social media accounts
• Breaches
• 1. All your gotomypc are belong to us
• DERP
• 1. Comodo are the good guys, seriously (not seriously)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. The Intercept's comparison of instant messaging applications (And the EFF's scorcard is soon to be updated)
  2. Mooltipass
  3. Intel Corp. Said to Weigh Sale of Cyber-Security Unit, FT Says
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Upcoming Appearances: -- more gratuitous self-promotion
• 1. Dave: - BSidesLV, DEF CON, Black Hat, Energysec, HTCIA, Security Congress...
  2. James: - Vegas. Sigh.
  3. Ben: - Coding my ass for SECTOR building G.Tool
  4. Matt: - Keeping banker's hours.
  5. Wil: - BSidesLV, DEF CON, Burning Man...
  6. Other LSD Writers: - Who?
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: I don't have to outrun you... I just have to outrun the other short guys

Creative Commons license: BY-NC-SA

Episode 0x6C

I'm bringing Six Cee Back...

Oh yeah, bad joke from the start.

Upcoming this week...

1. Lots of News
2. Breaches?
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. VirusTotal pitches a fit^Wethical stance
  2. Another attack against the SWIFT network but the attack was stopped althought SWIFT is now warning its members
• DERP/Cybers
• 1. Honey... it may look like I'm looking at Pornhub but this midget porn is an essential part of my bug hunting
  2. SYMANTEC... this is not how you do malware analysis safely
  3. Nice guy tells Indian bank about their app that could have let him steal all the monies
  4. Unintended Consequences of DMCA on Medical Implants Michigan ok with wrenches, not ok with computers
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Personal Warrant Canary
  2. Poor man Windows Security Metrics
• Upcoming Appearances: -- more gratuitous self-promotion
• 1. Dave: - Everywhere
  2. James: - Vegas Baby!
  3. Ben: - Toronto
  4. Matt: - Fleeing Trump... Welcome to Canada Matt
  5. Wil: - Bermuda Triangle
  6. Other LSD Writers: - Dunno. Bill and Chris?
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: insert crickets.wav

Creative Commons license: BY-NC-SA

Episode 0x6B

SIX BEEEEEEEEEEEEE

Ben, Wil, and Dave provide entertainment value that is also questionable.

Upcoming this week...

1. Lots of News
2. Breaches?
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Facebook bug bounty hacker finds that he wasn't the first there (Tech details) (Trey's talk on sharing incident details)
  2. Jericho et. al run some numbers on the VZDBIR (Michael Roytman's response)
  3. There was irony, and then there was getting the message out
  4. I love Gooooold
• DERP/Cybers
• 1. Brazilian judge is scared of the internet ruining Brazilian telco's
  2. Idiot grounds his own flight and runins everyone's day
  3. Kernreaktor Malware Scheiße!!!!
  4. Canadian infrastructure keeps getting hacked
• Mailbag
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. How to hack 2FA
  2. Required reading
  3. OpenSSL
• Upcoming Appearances: -- more gratuitous self-promotion
• 1. Dave: - Interop, RMISC, HackMiami, NolaCon, Securityfest, Infosecurity EU,
  2. James: - On a plane
  3. Ben: - work then off to Vancouver for work
  4. Matt: - I think he's on the phone.
  5. Wil: - Locking himself away this weekend to work on his OSCP training.
  6. Other LSD Writers: -
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: worst. segue. ever

Creative Commons license: BY-NC-SA