Naked Security

Paul Ducklin and Chester Wisniewski investigate the what, the why and the how of dealing with the impending end of support for Windows XP in 2014.

Don't worry: even if you have computers that you simply won't be able to update in time, for example because they run bespoke industrial control software, or a legacy financial application, Duck and Chet have some healthy suggestions for you.

They also share some insights into why Microsoft hasn't simply packed all the improved security components from Windows 7 and 8 into the aging XP, leading to the 08 April 2014 deadline.

Chet and Duck deal with: November's Patch Tuesday, whether or not hacking attacks are getting worse, whether Anonymous defacements count as "hacking", an esoteric bug in OpenSSH, and the lessons to learn from Adobe's megabreach.

Chet and Duck discuss the latest Microsoft zero-day, the latest code verification flaw in Android (the third bug of the same sort in the same part of the code!), and whether version numbers are becoming an irrelevancy as products "just update" anyway.

Chet and Duck discuss WordPress autoupdating; OS X's giant new wave, Mavericks; iCloud and 2FA; smartphone tracking by retailers; and security in pacemakers and other medical devices.

Chet and Duck discuss Oracle's monster Java patch, Joel's backdoor in D-Link routers, Cryptolocker and WhatsApp's demonstration of why you shouldn't roll your own crypto.

Chet interviews Robert Slade a well known anti-virus expert for National Cyber Security Awareness Month #NCSAM. Rob shares his thoughts on how average folks can stay safer online.

Chet and Duck are back on the regular schedule and talked about the 10th anniversary of Patch Tuesday, Adobe going "open source" and the alleged demise of the Dread Pirate Roberts.

In the last third of Sophos Security Chet Chat 118 Chet interviews Vanja Svajcer from SophosLabs about his presentation on potentially unwanted Android apps. Many users are being inundated with advertising pop-ups and other pesky behaviours, leading security vendors toward providing tools to block these apps.

As a reminder to everyone that it is National Cyber Security Awareness Month #NCSAM, Chet and Duck remind our listeners to do the three things to help themselves and others stay safer online.

Chester interviews James Wyke of SophosLabs UK about his presentation on the Zero Access Trojan at this year's Virus Bulletin conference in Berlin, Germany.