In this week’s episode it’s all things RSA Conference. I’ll be discussing two talks put on by Trustwave SpiderLabs researchers; one on PoS security and one on hacking SAP ASE databases. I’ll also talk about our password cracking rig and how it stood up against attendee provided passwords.

Links mentioned in the show:

Building a Password Cracking Rig 

David Byrne and Charles Henderson “That Point of Sale Is a PoS”

Martin Rakhmanov: “Owning SAP ASE: Chained Database Attack” 

CVE-2014-6284 - "Probe" login access vulnerability in SAP ASE 

Custom ASE “probe” account client