Real CyberSecurity

Current events are highlighting the nasty issues around privacy and broad surveillance.  As some companies announce they will no longer support certain applications of facial recognition we discuss the shift in privacy to being up to the individual.  

We talk about "The Channel" during the week when Canalys releases their annual Global Cybersecurity Matrix.  No not TV channels, but the channel of partners that are how cybersecurity products get from the makers to the users.

We discuss the issues of dishonesty in cybersecurity marketing, that it's OK to not speak at security conferences, a bunch of non-traditional book references for cybersecurity, and our favorite conferences .  And Bill ends up in Facebook jail for crimes involving cat videos.

Bill gets thrown in Facebook jail for crimes involving cat videos.  We talk about how the importance  minimizing Peak awesomeness is achieved when Bill gives us the security book recommendations from our listeners.  And we lose our minds and go on a security book recommendation binge ourselves. We revisit election security.  Greg has false negative brain syndrome because gets his spies mixed up (Aldrich Ames confused with Robert Hannsen), says transitive when he meant transitory, and creatively edits Keanu Reeves' bio. 

We return after Bill has recovered from a denial of service attack, and cover the basics of where MITRE ATT&CK fits into the security world, and how Greg is a fan of it after his initial skepticism. Where does IoT fit into MITRE?  Bill poses a big question - is remote voting security possible?  We agree that ML and AI in automated screening out of job candidates is a garbage practice, and finish up with some reading recommendations.

We kick off with much discussion on CISOs: the secrets and qualities of successful them, where they fit into the org chart and their role and how that has changed.  XDR - what is it?  We try and parse out what XDR means vs platforms, how it helps threat hunting, and how it deals with issues such as alert fatigue, and obfuscation.

We also hear that Greg got a haircut from a professional stylist during an office Zoom chat (without violating lockdown) lowering his popularity with colleagues, while Bill rocks a Renaissance hat and gets into D&D.

There's a lot of discussion about webconferencing security, so we do some more! We agree on and name the must-see movie about spies, the difference between stealth and force in locks and lockpicking, attackers playing the long game, and Bill mentions the Mythical Man Month (which is not a statutory holiday).

The podcast Greg mentioned was "I Spy" by Foreign Policy.  
https://open.spotify.com/show/3MOUvGwMfXnhsfUybX6vip?si=Yzf7H6qwQTC9uVpRvezo3A

This week we cover a few hot topics and it's a good one. Supply chain integrity is a big one.  And we talk worst security practices.  No, we aren't recommending these.  We discuss about why Y2K provides us with lessons we need. Bill tells a great story about back up tape retrieval and airports, and some good advice on consequences and clear code. Greg relates the story of tampered typewriters and that he wants to visit the Kryptos statue at the CIA.  

Telework is a big topic right now, and with any big topic we need to answer the questions about security.  Who better to bring on and chat than John Girard?  Recently retired (although up to more mischief than ever) John spent 25 years at Gartner, leading topics like SSL VPNs and mobile device management.  So join John and us talk about telework security, but also some non-security telework advice.

In this second half of the interview we cover split tunneling, telework culture, investments in your productivity, our own experiences as long time teleworkers, the history of the Wireless Brothers, and John's friend Taylor Swift.    Part 2 of 2.

Telework is a big topic right now, and with any big topic we need to answer the questions about security.  Who better to bring on and chat than John Girard?  Recently retired (although up to more mischief than ever) John spent 25 years at Gartner, leading topics like SSL VPNs and mobile device management.  So join John and us talk about telework security, but also some non-security telework advice.  John is famous for his elaborate Halloween displays, but we won't talk about that ... this time.  Part 1 of 2.

Spring is around the corner so when looking for a high grade fertilizer stronger than manure we decided to combine blockchain and cryptocurrency.  Blockchain is great security technology, but it is usually just badly implemented or treated like magic.  The anonymity and irrefutably are great features of cryptocurrency, but the evil side that stains the technology holds them back as ransomware payouts are all made in Bitcoin.  And we talk about the T word - Trust.  And maple syrup. And why Keith Richards should replace Matt Damon.