Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Chris Gerling  – @chrisgerling Christopher Mills – @thechrisam Jason Mueller – @securabit_jay Andrew Borel –  @andrew_secbit

Guests: We discuss Kneber and other fun security topics with Alex Cox of NetWitness @perpetualsec http://www.networkforensics.com/

General topics: Kneber Botnet Mariposa Responsible disclosure Evil Virustotal http://socialmediasecurity.com/downloads/Facebook_Privacy_and_Security_Guide.pdf

PROGRAMMABLE HID USB KEYSTROKE DONGLE: USING THE TEENSY AS A PEN TESTING DEVICE https://www.defcon.org/html/defcon-18/dc-18-speakers.html#Crenshaw

http://www.irongeek.com/i.php?page=videos/dojocon-2010-videos Use our discount code "Connect_SecuraBit10" to get 10% off of ANY training course. The discount code is good for all SANS courses in all formats.

Upcoming events ShmooCon (28 - 31 Jan 2011) RSA Conference 2011 (14 -18 Feb 2011) #BSidesSanFrancisco (14 - 15 Feb 2011) #BSidesCleveland (18 Feb 2011) #BSidesHalifax (5 Mar 2011) #BSidesGSO Greensboro, NC (9 Mar 2011) #BSidesAustin (11 - 12 March 2011) http://www.keepsecurityweird.org/ #BSidesChicago (16 - 17 Apr 2011) #BSides London, (20 Apr 2011) #BSidesROC Rochester, NY (21 May 2011) #BSidesDetroit (3 - 4 Jun 2011)

Links: http://www.securabit.com

SecuraBit  Episode 72:  Take risks, get owned! Recorded on December 29, 2010

Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Chris Gerling  – @chrisgerling Christopher Mills – @thechrisam Jason Mueller – @securabit_jay Andrew Borel –  @andrew_secbit

Guests: Jack Jones discusses Risk Assessment and the FAIR method http://riskmanagementinsight.com/

General topics:

Risk Management, Small biz vs Enterprise Monte Carlo? How to Measure Anything: Finding the Value of Intangibles in Business by Douglas W. Hubbard http://www.amazon.com/How-Measure-Anything-Intangibles-Business/dp/0470539399/ref=tmm_hrd_title_0

OnePassword - http://agilewebsolutions.com/onepassword KeePass - http://keepass.info/ LastPass - http://lastpass.com/

Use our discount code "Connect_SecuraBit10" to get 10% off of ANY training course. The discount code is good for all SANS courses in all formats.

Upcoming events #BSidesMSP (7 Jan 2011) ShmooCon (28-31 Jan 2011) RSA Conference 2011 (14 -18 Feb 2011) #BSidesSanFrancisco (14-15 Feb 2011) #BSidesAustin (11-12 March 2011) http://www.keepsecurityweird.org/

Links: http://securabit.com Chat with us on IRC at irc.freenode.net #securabit iTunes Podcast - http://itunes.apple.com/us/podcast/securabit/id280048405 iPhone App Now Available - http://itunes.apple.com/us/app/securabit-mobile/id382484512?mt=8

SecuraBit  Episode 71: Managing our Careers with Lee KushnerDecember 15, 2010Hosts:Anthony Gartner – @anthonygartner http://anthonygartner.comChris Gerling  – @chrisgerlingChristopher Mills – @thechrisamAndrew Borel –  @andrew_secbitGuests:Lee Kushner - @LJKush - http://www.ljkushner.com/ - http://www.infosecleaders.com/General topics:Discussion on Career ManagementThe importance of having a career plan.It’s a very crowded market in information security, and it’s getting more so every day.www.infosecleaders.com/2010-compensation-survey/FAQ: Compromised Commenting Accounts on Gawker Media http://lifehacker.com/5712785/OnePassword - http://agilewebsolutions.com/onepasswordKeePass - http://keepass.info/LastPass - http://lastpass.com/Use our discount code "Connect_SecuraBit10" to get 10% off of ANY training course. The discount code is good for all SANS courses in all formats.Upcoming events#BSidesBerlin (28-30 Dec 2010)#BSidesMSP (7 Jan 2011)ShmooCon (28-31 Jan 2011)RSA Conference 2011 (14 -18 Feb 2011)#BSidesSanFrancisco (14-15 Feb 2011)#BSidesAustin (March 2011)Links:http://securabit.comChat with us on IRC at irc.freenode.net #securabitiTunes Podcast - http://itunes.apple.com/us/podcast/securabit/id280048405iPhone App Now Available - http://itunes.apple.com/us/app/securabit-mobile/id382484512?mt=8

SecuraBit  Episode 70: Following the wh1t3Rabbit, Hat-tricks with a wh1t3RabbitDecember 1, 2010Hosts:Anthony Gartner – @anthonygartner http://anthonygartner.comChristopher Mills – @thechrisamChris Gerling  – @chrisgerlingAndrew Borel –  @andrew_secbitGuests:HP's Rafal Los - @wh1t3RabbitSubscribe to his blog at http://hp.com/go/white-rabbitGeneral topics:Shmoocon tickets, who’s got them?Hat-trick http://en.wikipedia.org/wiki/Hat-trickPassword security, does it really matter?Application security to detect and prevent malicious code.Diaspora https://joindiaspora.com/Security MetricsStory time with RafalRSnake shutting down his blog after 5 years and 1000 posts http://ha.ckers.org/FTC Staff Issues Privacy Report Offers Framework for Consumers, Businesses, and Policymakers: Endorses “Do Not Track” to Facilitate Consumer Choice About Online Trackinghttp://www.ftc.gov/opa/2010/12/privacyreport.shtmSANS Discount:Use our discount code "Connect_SecuraBit10" to get 10% off of ANY training course. The discount code is good for all SANS courses in all formats.Syngress Discount:Use our discount code 36449 to receive 20% off any order direct from Elsevier!Upcoming eventsSunbelt Quarterly Briefing December 8th, 2010 at 9am and 2pmDojoCon December 11-12, 2010#BSidesBerlin December 28-30, 2010ShmooCon January 28-31, 2011Links:http://securabit.comChat with us on IRC at irc.freenode.net #securabitiTunes Podcast - http://itunes.apple.com/us/podcast/securabit/id280048405iPhone App Now Available - http://itunes.apple.com/us/app/securabit-mobile/id382484512?mt=8

SecuraBit Episode 69: Picking Locks and Messing up Podcasts, Welcome to Gringo Village! November 3, 2010

Hosts: Christopher Mills – @thechrisam Andrew Borel –  @andrew_secbit Anthony Gartner – @anthonygartner http://anthonygartner.com Jason Mueller – @securabit_jay Rob Fuller – @mubix Tim Krabec – @tkrabec http://www.SMBMinute.com

Guests: Deviant Ollum - http://deviating.net/ - Author of Syngress Practical Lock Picking General topics: Practical Lock Picking By Deviant Ollam http://www.syngress.com/hacking-and-penetration-testing/Practical-Lock-Picking/

Review submitted by a coworker: Practical Lock Picking by Deviant Ollum was an enjoyable read. The author does a good job of covering the art and science of picking locks. He chose two of the most common types of locks for the bulk of his material which helps keep the focus of the book tight. He leads the reader from the basic operational principles of the locks, to flaws in the design & manufacture and finally how to pick the locks. The coverage of pick types and other tools of the trade round out the readers knowledge of the subject. His down to earth style and simple language help the reader understand the material and develop the skills to pick these types of locks. His logical progression of starting with one pin and working your way up to all the pins in the lock will help the reader build confidence in their skills. The final sections on bypassing the door reminds the reader that locks are part of a system and sometimes the way to defeat a system is not the direct approach. Overall I would give this book 4 out of 4 stars.

Shmoocon Tickets??

The Open Organization Of Lockpickers http://toool.us/ Lock Picking Videos - http://www.youtube.com/deviantollam General Information http://deviating.net/lockpicking/

IE Zero Day Microsoft Security Advisory (2458511) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://www.microsoft.com/technet/security/advisory/2458511.mspx

Enhanced Mitigation Experience Toolkit v2.0 http://www.microsoft.com/downloads/en/details.aspx?FamilyID=c6f0a6ee-05ac-4eb6-acd0-362559fd2f04

SpyEye v. ZeuS Rivalry Ends in Quiet Merger http://krebsonsecurity.com/2010/10/spyeye-v-zeus-rivalry-ends-in-quiet-merger/

Use our discount code "Connect_SecuraBit10" to get 10% off of ANY training course. The discount code is0 good for all SANS courses in all formats. Upcoming events #BSidesDFW November 6, 2010 #BSidesDE November 6, 2010 AppSec DC 2010 November 8-12, 2010 #BSidesOttawa November 12-13, 2010 RUXCON 2010 December 4-5, 2010 DojoCon December 11-12, 2010 #BSidesBerlin December 28-30, 2010 ShmooCon January 28-31, 2010

Links: http://securabit.com Chat with us on IRC at irc.freenode.net #securabit iTunes Podcast - http://itunes.apple.com/us/podcast/securabit/id280048405 iPhone App Now Available - http://itunes.apple.com/us/app/securabit-mobile/id382484512?mt=8

SecuraBit  Episode 68: Teaching for handbags!

Hosts: Christopher Mills – @thechrisam Andrew Borel –  @andrew_secbit Anthony Gartner – @anthonygartner http://anthonygartner.com Jason Mueller – @securabit_jay

Guests: Kevin Johnson discusses SANS SEC 542 Web App Pen Testing, Base, etc

General topics: New Apple Macbook Air.

Recent Security Zynga collecting data about Facebook users. Social engineering at a capture the flag event. Pros and cons to using social networks. Attacking your web applications for a more secure application. Samurai WTF (Web Testing Framework) http://samurai.inguardians.com/ Laudanum: Injectable Functionality http://laudanum.inguardians.com/ Basic Analysis and Security Engine (BASE) project http://base.secureideas.net/

Use our discount code "Connect_SecuraBit10" to get 10% off of ANY training course. The discount code is good for all SANS courses in all formats.

Upcoming events #BSidesDFW November 6, 2010 #BSidesDE November 6, 2010 AppSec DC 2010 November 8-12, 2010 #BSidesOttawa November 12-13, 2010 #BSidesBerlin December 28-30, 2010 ShmooCon January 28-31, 2010 Links: http://securabit.com Chat with us on IRC at irc.freenode.net #securabit iTunes Podcast - http://itunes.apple.com/us/podcast/securabit/id280048405 iPhone App Now Available - http://itunes.apple.com/us/app/securabit-mobile/id382484512?mt=8

SecuraBit  Episode 66:September 22, 2010

Guests:Aaron Barr (HB Gary Federal) @aaronbarr

We discuss HBGary with Aaron, and delve into some fun topics like malware analysis, forensics, and other technical skills.

General topics:Media Sponsor for:SecTor 2010 - http://www.sector.ca/Security Training October 25.Conference Sessions October 26 & 27, 2010.Twitter XSShttp://status.twitter.com/post/1161435117/xss-attack-identified-and-patched

Robin SageMalware analysisBehavior of malware in memory

FGET is pretty pimp (free tool that remotely images NTFS volumes)https://www.hbgary.com/community/shawnblog/fget-v10-goes-live/

Free tools from HB Garyhttps://www.hbgary.com/community/free-tools/

Upcoming eventsHacker Halted http://www.hackerhalted.com/ Tim Is speaking October 14thLouisivlle Infosec 10/7. http://www.louisvilleinfosec.com/Atlanta B-Sides 10/8. http://www.securitybsides.com/BSidesAtlantaHacKid - http://www.hackid.org/ 10/9-10/10Phreaknic 10/15. http://www.phreaknic.info/pn14/Links:

SecuraBit  Episode 64:  A whole lot of organized crime going on! August 25, 2010

Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Chris Gerling  – @chrisgerling Andrew Borel –  @andrew_secbit

Guests: Bryan Sartin - Director of Investigative Response at Verizon Business General topics: Verizon RISK Team - http://www.verizonbusiness.com/products/security/risk/

Bryan Sartin, the Director of Investigative Response at Verizon Business, discusses the 2010 Verizon Data Breach Report http://www.verizonbusiness.com/resources/reports/rp_2010-data-breach-report_en_xg.pdf

VERIS Framework - https://verisframework.wiki.zoho.com/

MalCon: A Call for ‘Ethical Malcoding’ http://krebsonsecurity.com/2010/08/malcon-a-call-for-ethical-malcoding/

SecTor 2010 - http://www.sector.ca/ Security Training October 25. Conference Sessions October 26 & 27, 2010.

The real iTunes fraud vulnerability: Gullible users - http://news.cnet.com/8301-13579_3-20014481-37.html

Upcoming events Hacker Halted http://www.hackerhalted.com/ Tim Is speaking October 14th Louisivlle Infosec 10/7. http://www.louisvilleinfosec.com/ Atlanta B-Sides 10/8. http://www.securitybsides.com/BSidesAtlanta HacKid - http://www.hackid.org/ 10/9-10/10 Phreaknic 10/15. http://www.phreaknic.info/pn14/

Links: http://securabit.com Chat with us on IRC at irc.freenode.net #securabit iTunes Podcast - http://itunes.apple.com/us/podcast/securabit/id280048405 iPhone App Now Available - http://itunes.apple.com/us/app/securabit-mobile/id382484512?mt=8