Open Source Security

By Josh BressersTechnology

Open Source Security episodes

August 26, 2019Episode 158 - The mess that we call credit agencies in the US
Josh and Kurt talk about the current state of credit security freezes in the US. We recount a thrilling tale of all the things Josh had to do to get new Internet service. It was all quite silly really.
Show Notes

Weak security freeze pins

'null' license plate
28 min
August 19, 2019Episode 157 - Backdoors and snake oil in our cryptography
Josh and Kurt talk about snakeoil cryptography at Black Hat and the new backdoored cryptography fight. Both of these problems will be with us for a very long time. These are fights worth fighting because it's the right thing to do.
Show Notes

Time AI video

Kurt's Tweet about technical explanations

Josh's blog post about bug training

Schneier on Barr's encryption discussion
31 min
July 29, 2019Episode 156 - What if we MitM a whole country?
Josh and Kurt talk about Kazakhstan requiring citizens to place a government controlled root CA certificate on their computers. How does this work. What does it mean for the citizens of Kazakhstan, and why we all should be paying attention.
Show Notes

Kazakhstan MitM all TLS traffic

Mozilla bug
30 min
July 22, 2019Episode 155 - Stealing cars and ransomware
Josh and Kurt talk about a new way to steal cars because a service didn't do proper background checks. We also discuss how this relates to working with criminals, such as ransomware, and what it means for the future of the ransomware industry.
Show Notes

Car2go theft

Alberta driver's license security

Albertosaurus

Las Vegas won't pay a ransom
28 min
July 16, 2019Episode 154 - Chat with the authors of the book "The Fifth Domain"
Josh and Kurt talk to the authors of a new book The Fifth Domain. Dick Clarke and Rob Knake join us to discuss the book, cybersecurity, US policy, how we got where we are today and what the future holds for cybersecurity.
Show Notes

The Fifth Domain

Dick Clarke

Rob Knake

Future State Podcast
32 min
July 08, 2019 Episode 153 - The unexpected security of AI, photographs, and VPN
Josh and Kurt talk about user expectations around Facebook's AI. Normal people are starting to see the capabilities and potential risk with all these services. We also cover the topic of China owning a number of VPN services.
35 min
July 01, 2019 Episode 152 - Tavis breaks the world ... again
Josh and Kurt talk about the disclosure of security vulnerabilities. It's still not a settled topic, we frame the conversation around a recent disclosure from Tavis Ormandy of Google Project Zero.
31 min
June 24, 2019 Episode 151 - The DARPA Cyber Grand Challenge with David Brumley
Josh and Kurt talk to David Brumley. The CEO of ForAllSecure and professor at CMU. We discuss when David's team won the Cyber Grand Challenge, what the future of automated security looks like, and what ForAllSecure is doing. It's a fascinating window into the future of the industry.
31 min
June 17, 2019 Episode 150 - Our ad funded dystopian present
Josh and Kurt talk about the future Chrome and ad blockers. There is a lot of nuance to unpack around this one. There are two versions of the Internet today. One with an ad blocker and one without. The Internet without an ad blocker is a dystopian nightmare. The actionable advice at the end of this one is to use Firefox.
31 min
June 10, 2019 Episode 149 - Chat with Michael Coates about data security
Josh and Kurt have a chat with Michael Coates from Altitude Networks. We cover what Altitude is up to as well as general trends we're seeing around data security in the cloud. Michael lays out his vision for "data first security".
27 min

About Open Source Security

From the publisher's feed

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works.