Liquidmatrix Security Digest Podcast

Episode 0x61

THERE IS NO DAVE, ONLY ZUUL

Twice in two weeks. It's almost like we're making this thing a thing. Of course it'd be nice if Dave would fix the website so I could post there. At least libsyn and iTunes still work.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Adblock Plus just got uninvited from the ininternet-advertising industry's big conference
2. Yahoo 10k bug bounty
3. Affinity Gaming sues Trustwave
4. AWS Enterprise Accelerator - Compliance -- Standardized Architecture for NIST 800-53 on the AWS Cloud
• SCADA / Cyber, cyber... etc
1. Firm Sues Cyber Insurer Over $480K Loss
2. Ukraine power hacked by someone? But too soon for attribution.
• DERP
1. Griefer hacks baby monitor, terrifies toddler with spooky voices
2. RSA Conference Keynote Speakers
3. RBC doesn't respond to security vuln
4. LastPass LostPass ShmostPass
• Mailbag

1. Hi LSD

   Why do we keep buying shitty enterprise security products? Can't we be awesome hackers and build our own cool shit?

   Enterprise Guy

   Mentioned: Elastalert, OS Query, Talk Slides
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Topic of Interest: Key Management
2. OpenSSH 0-Day
3. Fast Incident Response
4. I'm still hiring
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Hiding.
2. James: - TASK January: Docker and Home Automation Security 2016-01-27 at Metro Hall in Toronto
3. Ben: - Hiding from plumbers
4. Matt: - South by Infosec
5. Wil: - Slumming in Calgary, being a socialist.
6. Other LSD Writers: - Hiding. Scared of the wilderness.
7. Closing Thoughts
1. Seacrest Says: Elon Musk, please land my rocket

Creative Commons license: BY-NC-SA

Episode 0x60

Mid-Season Cliffhanger

Short paragraph containing introductory material and a thanks to listeners (if reasonable)

Upcoming this week...

1. Lots of News
2. SCADA / Cyber, cyber... etc.
3. finishing it off with DERPs/Mailbag (or Deep Dive)
4. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. TrendMicro security fails TrendMicro also asks: What About Canada, Eh?
2. Juniper ScreenOS VPN traffic possibly snoopable... and admin access backdoored. But... They are patching it. And Fortinet as well?
3. We can read encrypted emails on BlackBerry devices, Dutch team says
4. Microsoft Drops Support for IE Older Than 11
5. Cyber Insurers Dictating Cybersecurity Standards?
• SCADA / Cyber, cyber... etc
1. Steal your keys from your doorbell... Forget the Doorbell - APT the Surveillance Camera
2. Project GRIDSTRIKE
3. Reid Wightman Explains Why VFD Mfg Companies Are Stupid
4. SCADAPASS ALL THE PASSWORDS
• DERP
1. T-Mobile. Dude. You suck.
2. Canadian company helps with oppression... again
3. And again... And again...
4. So here's The State of The Onion...
5. So run a Node or donate.
6. (Unsure DERP delivery...) Let's Encrypt certs used to hide malware transmission.
• Mailbag

1. Dear Liquid-whatever-your-name-is,

   Seriously, what the shit.

   Is this a thing again?

   Signed The People

   Also, how come large enterprises don't get small startup security?

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Using Massscan to push poetry
2. Urban Dictionary Goes Infosec
3. Intro to DFIR
4. I'm hiring again (I swear the last guy survived that incident)
5. Closing Thoughts
1. Seacrest Says: Are you really back? REALLY!?!!

Creative Commons license: BY-NC-SA

Episode 0x51

Not Dead

Yup, we're still a thing. Scheduling is hard. Look forward to more of these with less than a full cast of characters. It happens.

Upcoming this week...

1. Just some general ranting. It's what we've got.

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

• Closing Thoughts
1. Seacrest Says: Do this again sometime, eh?
Creative Commons license: BY-NC-SA

Episode 0x50

Revenge of the Fourth

We've been around, just not... you know... around. It's best that you do not think about what happened to episodes that were not published.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Home routers take down Sony, Microsoft, Kerbs... you're next
2. Google won't fix old vulns (but it's not their fault)
3. JJX talks about Year 1 -- And it's my first year too!
4. 3 Problems With UK PM Cameron's Crypto Proposal
• SCADA / Cyber, cyber... etc
1. There's vulns in the hermit kingdom's glorious OS
2. And a crazy web browser
3. South Korea smokes a doobie and says North Korea has computers
• DERP
1. Don't enjoy respawning cookies? Don't use our service
2. Adsense didn't watch Matt Jay's talk on malvertising
3. Marriott Agrees to Stop Blocking Guest WiFi Devices
• Mailbag
1. Hi guysWhere the fuck have you been sincerely the internet of thingersWe told you already!
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Keystroke Sniffer inside a USB Wallwart
2. What Happens When You Install the Top 10 Download Dot Com Apps
3. I'm hiring!
4. I'm hiring!
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. We'll get back to you when we have projects again. In the mean time, find us here:
1. Dave: - #jeSuisCharlie
2. James: -
3. Ben: - Bed
4. Wil: - Anywhere that is nowhere.
5. Other LSD Writers: - Anyone else notice that Bill Brenner posts to LSD ALL THE TIME?
2. Wrapping up...
1. NyQuil - you giant fucking Q
3. Closing Thoughts
1. Seacrest Says: Who the fuck is Seacrest.

Creative Commons license: BY-NC-SA

Episode 0x3F

Last one before Summer Security Camp

Pretty much everyone is drowning under piles of wtf and omfg diaf. But we promised you we'd be back and this time we're pretending we care.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Police Dog Sniffs Out Child Porn Hard Drives
2. News about the news - the WaPo launches it's own wiki-leaks-esque platform
3. Rogers Releases New Policy on Disclosing Subscriber Information
4. UN human rights report blows apart governments’ pro-surveillance arguments
• Breaches
1. HotelHippo.com Closes after Data Leak
2. Lastpass doesn't think it got breached
• SCADA / Cyber, cyber... etc
1. Senate "Intelligence Committee" approves cybersecurity bill.
2. If you read Boing Boing, the NSA considers you a target for deep surveillance
3. The NSA Revelations All in One Chart
• DERP
1. Congress in middle of Hollywood copyright clash with Silicon Valley from listener Marco Tietz
• Mailbag / Deep Dive
1. We're coming up to Summer Security Camp in Vegas. Some thoughts on how to survive - and even prosper - while retaining your mind.
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Plain Text Offenders - one of many Tumblrs to follow
2. Putting the TOR back in Torrent
3. Telehash
4. Australian bill will put journos in prison for 10 years for reporting leaks
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
3. If you're interested in helping out with openCERT.ca, drop a line to [email protected]
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Speaking at RSA Asia next week, Attending Black Hat/Defcon (goon) and BSidesLV, BSides Cape Breton as keynote and will be speaking at 44CON, Sector and BSides Toronto is coming.
2. James: - Blackhat, DEF CON, Derbycon, BSides Toronto, Sector - dunno where else... somewhere I suppose
3. Ben: - Staying at home - cause baby
4. Matt: - If you see me, call me. I'm lost. Perhaps I'll be in Las Vegas.
5. Wil: -
6. Other LSD Writers: - We added another one. Trying to clean up our image. Say hi to Bill - yes, that Bill.
• Advertising - pay the bills...
1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
• Closing Thoughts
1. Seacrest Says: Viva Las Vegas!!!!

Creative Commons license: BY-NC-SA

Episode 0x3E

HAPPY $COUNTRY JULY PAID DAY OFF

We're back. Reasons shall be enumerated. And so forth.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. cryptolocker extortionists use bitcoin for less traceable blackmail payments, extortion payments visible in the blockchain till it goes through a mixer. crime pays
2. Harper - Canada needs NSA lite because protesters
3. More details on the Hacking Team spying software.
4. Los Angeles Police Department Kept User ID and Password to “Big Data Policing” Software on Office Whiteboard, Incidentally Broadcast to CNN Viewers During Interview (UK gov/World Cup)
• Breaches
1. Benjamin F. Edwards Co. Discloses Data Breach Affecting Customers
2. DDoS Attack Puts Code Spaces Out of Business
3. Feedly Suffers Extortion Related DDoS Attack
• SCADA / Cyber, cyber... etc
1. The Akamai State of the Internet Report
2. Deloitte Global Defense Outlook 2014
3. OpenSSL roadmap - we're going faster now
• DERP
1. Austria prosecutes a TOR node operate - forgets about other common carriers
2. CASL means no more security notifications
3. Microsoft steals no-ip's domain
• Mailbag

1. Hi guys, Where the fuck have you been? Sincerely, The Internet PS Can we have your domain name if you're not using it anymore?

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Awesome Sysadmin: A curated list of sysadmin resources
2. Goals are for losers
3. iOS 8 is Randomizing MAC Addresses
4. Passwords
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
3. If you're interested in helping out with openCERT.ca, drop a line to [email protected]
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Speaking at RSA Asia, Defcon, Black Hat, BSidesLV, Speaking at BSides Cape Breton, Speaking at 44CON, BSides Toronto, Speaking at Sector
2. James: - Lots of work travel, Black Hat, DEF CON, BSidesLV, BSides Toronto, Speaking at Sector
3. Ben: - Diaper changing
4. Matt: - Seacrest OUT
5. Wil: - Maybe painting the bathroom before DefCon and Burning Man.
6. Other LSD Writers: - At least someone is blogging
• Advertising - pay the bills...
1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
• Closing Thoughts
1. Seacrest Says: "Look at that subtle off-white coloring. The tasteful thickness of it. Oh, my God. It even has a watermark."

Creative Commons license: BY-NC-SA

Episode 0x3D

My Heart Bleeds for Windows XP

Well this is certainly an exciting week around these here parts. I reckon we've not seen this much marketeering since the APT1 days of ought 13. Goodness gracious I'm not a huge fan of this crap.

Do not listen to this podcast at more than 1.5x speed while operating a motor vehicle or heavy equipment. Your face may melt according to some studies conducted by a Murican we know.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Classified NSA Work Mucked Up Security For Early TCP/IP
2. EU court acts like a government of the people
3. Trey Ford talks sense around XP EOL/EOSupport
• Breaches
1. Heart Bleed!!! and some demo and a PoC!!!! With an awesome quote by Mr. Fancy Pants And donate some money to the cause you lazy bitches Also, update your Tor nodes and relays... and while you're updating your OpenSSL
2. Bad CRA
3. How I hacked your router
• SCADA / Cyber, cyber... etc
1. GoGo helps the feds
• DERP
1. US Pushes Canada to Weaken Privacy Legislation
2. The Brits love them some XP good
3. bank drops out of Trustwave lawsuit
• Mailbag
1. Hi Are we now cool with Cyber? Not Jamie
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Plug and play in/with your Tesla...
2. Yeah. So, not really interested in Dropbox anymore.
3. Evilgrade
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
3. If you're interested in helping out with openCERT.ca, drop a line to [email protected]
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Star Alliance Hostage
2. James: - Wait what?
3. Ben: - Suit.
4. Matt: - Beard.
5. Wil: - Actor. and cleaning up his laundry
6. Other LSD Writers: - Blogging? (WTF IS BLOGGING????)
• Advertising - pay the bills...
1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
• Closing Thoughts
1. Seacrest Says: Aviator is already configured to check for revoked certificates. Nyahhhhhhhh.

Creative Commons license: BY-NC-SA

Episode 0x3C

You Got Breached.

And in other news... April 8 is coming up FAST.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. ErrataSec may have witnessed SHOTGIANT in action... more likely the CIA though...
2. Trustwave gets sued
3. Are You An Expert?
• Breaches
1. Hackers compromise EA website, use it to steal Apple IDs (report)
2. Security certification group EC-Council’s website defaced with Snowden passport
• SCADA / Cyber, cyber... etc
1. Full Disclosure is dead, long live full disclosure
2. XP eternal p0wnage
• DERP
1. Wil hasn't seen 80's movies
2. How not to write an API
3. (ANTI-DERP) who to handle a vuln
4. (ANTI-DERP) who to handle a vuln #2
• Mailbag

1. Dear Liquidmatrix People

   Did you forget that you have a podcast? What's up with that shit?

   Love, The Internet

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Aviator is awesome and it should be part of your Mom's day to day.
2. All the places you can MFA
3. Control System Port List
4. MozDef
5. Mylar
6. Frida
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
3. If you're interested in helping out with openCERT.ca, drop a line to [email protected]
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Massively distributed diaper changing operations.
2. James: - Interop next week, BSides of Various Cities and then Summer Security Camp
3. Ben: - Work
4. Matt: - Aviating
5. Wil: - Not drinking coffee... It's beer in the mug...
6. Other LSD Writers: - That Sistrunk Guy won't write about Aegis.
• Advertising - pay the bills...
1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
• Closing Thoughts
1. Seacrest Says: If you ever want to see these liquidmatrix bastards again, follow my instructions carefully

Creative Commons license: BY-NC-SA

Episode 0x3B

We Have Quorum!

Getting tired of hearing about the latest $problem. Can we do something different with our cognitive surplus?

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Facebook Awards Largest Bug Bounty To Date for Remote Code Execution Vulnerability - $33,500
2. Gang Rigged Gas Pumps with Bluetooth Enabled Card Skimmers
3. US Courts uphold that you need an actual reason to search people's stuff
4. F-35 Fighter Plans Intercepted In Shipping Container Destination: Iran
• Breaches
1. 20 million Korean learn about a trusted insider the hard way (and then the executives own it completely)
2. It wasn't just Target (and the obligatory Krebs)
3. Is Your Twitter Password Secure?
• SCADA / Cyber, cyber... etc
1. VSAT terminals are on the internetz ready for the p0wn
2. CSEC Current Issues: Questions and Answers
• DERP
1. Network solutions ripping customers off to make them more secure
2. Snapchat, still not fixing the problem ... but they do implement a bot stopping captcha system... ... that gets broken the same day
3. The first rule of a totalitarian government is you don't talk about hacking (just like an oppresive wannabe theocracy)
• Mailbag

We're reaching a tipping point around the concept of Privacy. Here's a few examples to discuss:

1. Rating Obama’s NSA Reform Plan: EFF Scorecard Explained
2. MPAA & ICE Confirm They Interrogated A Guy For Wearing Google Glass During A Movie
3. 79-year-old census resister has no regrets after conditional discharge
4. Google outed me
5. Here We Go Again: Canadian Recording Industry Calls on Government To Regulate the Internet
6. TrueCrypt's Plausible Deniability is Theoretically Useless
7. Another Six Weeks: Muting vs. Blocking and the Wolf Whistles of the Internet
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Switch to HTTPS Now, For Free
2. RSA Conference Parties
3. WhiteHat Aviator for Windows Alpha
4. NF Tables (die die die IPTables)
5. Predicting attacks (cyber!)
6. ISO 30111 - vulnerability handling process
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
3. If you're interested in helping out with openCERT.ca, drop a line to [email protected]
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Never To Be Seen Again
2. James: - BSidesSF, RSA, etc. Sigh.
3. Ben: - Putting his office tchochkes in a box
4. Matt: - Hiding behind his lustrous facial hair, speaking at AppSec California and BSidesSF/RSA/Metricon/etc.
5. Wil: - Too Pretty (♫ I'm too sexy for this show, too sexy for this show, so sexy it hurts... I'm an actor, you know what I mean and I do my little turn on the catwalk... ♫)
6. Other LSD Writers: - Promised to write up S4 and hasn't
• Advertising - pay the bills...
1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
• Closing Thoughts
1. Seacrest Says: The NSA is in bed with EVERYONE - including me.

Creative Commons license: BY-NC-SA

Episode 0x3A

We Can Do Better

Before we get too far into things this week, I want to draw special attention to Rich Mogull's $500 Cloud Security Screwup posting. Truly awe inspiring and an example of Doing Infosec Right - admitting that you screwed up and getting on with the solution rather than the very common response which would include hiding what happened and hoping no one finds out that it was you who were the screwup. We should all act more like this. Moving along...

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to [email protected] for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Five Product Security Questions Nobody At CES Wants You To Ask. Because, you know, internets.
2. Mandiant gets bought by FireEye
3. Infographic: New ISO 27001:2013 - What Has Changed?
4. Find security flaw, go to jail?
• Breaches
1. Former TIAA-CREF Worker Gets 6 Years for Selling IDs
2. OpenSSL Defacement - Not a Hypervisor Thing
3. Riverside Health System 4-year-long HIPAA Breach
4. Thank Goodness for the NSA! - a fable
5. Yahoo infects people with Malware and makes the bitcoin
• SCADA / Cyber, cyber... etc
1. Several European manufacturers spawn NSA-proof Android “cryptophones”
2. NSA denials
• DERP
1. UK ‘Porn Filter’ Blocks Legitimate File-Sharing Services
• Mailbag
1. We receive some of the most batcrap crazy emails here at LSD. What's the right response to people who don't just have a tinfoil hat, but are opting for the full ensemble?
2. Dear Mailbag I'm thinking about not speaking at RSA because of the NSAs, what do you think? Hugs Mikko H. (not the other Mikko guy)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Crypto Hardening guide for Sysadmins
2. Penetration Testing Lab Contents Mindmap
3. sigcheck now with Virus total
4. Wordpress plugin exploit data
5. Skipfish Scanner Used In Financial Sector Attacks
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. The Security Conference Library
2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
3. If you're interested in helping out with openCERT.ca, drop a line to [email protected]
• Upcoming Appearances: -- more gratuitous self-promotion
1. Dave: - Shmoocon, SOURCE, Infosec EU, BSides London, HITB EU, Secure360, FIRST...
2. James: - At Shmoocon (with a cool surprise), then RSA (sad trombone)
3. Ben: - N/A
4. Matt: - behind the beard
5. Wil: - Gave up, is a car dealer now
6. Other LSD Writers: - huh?
• Advertising - pay the bills...
1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
• Closing Thoughts
1. Seacrest Says: My Voice Is My Passport, Verify Me

Creative Commons license: BY-NC-SA