An Information Security Place http://infosecplace.com/blog Commentary on the State of Information Security Wed, 23 Jun 2010 11:19:44 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Commentary on the State of Information Security Michael R. Farnum Information, Security, Technology, Computers, Farnum, Broome no Michael R. Farnum m1a1vet@infosecplace.com An Information Security Place Podcast – Episode 37 http://infosecplace.com/blog/2010/06/23/an-information-security-place-podcast-episode-37/ http://infosecplace.com/blog/2010/06/23/an-information-security-place-podcast-episode-37/#comments Wed, 23 Jun 2010 11:19:44 +0000 Michael Farnum http://infosecplace.com/blog/?p=1168

All three of us are on this time. Some good talk about disclosure and web app firewalls, and Google, and some other stuff. Enjoy!

Show Notes:

InfoSec News Update -

Discussion Topic #1 – Google Is Watching Your Wifi, But do You Really Care?

Discussion Topic #2 - Ye’ Old “Disclosure” Debate…Again?!? Link 1 / Link 2

Music Notes –

Link to MP3

]]> http://infosecplace.com/blog/2010/06/23/an-information-security-place-podcast-episode-37/feed/ 0 All three of us are on this time. Some good talk about disclosure and web app firewalls, and Google, and some other stuff. Enjoy! Show Notes: InfoSec News Update - Web App Firewall Discussion Continues – Link 1 / Link 2 / Link 3 / Link 4 Good Ole’ Firmware Hack – Link Here Small and MidSize Businesses are Getting Serious About Security – Link Here Looking for the Next Generation of Security Folks -Link Here “POET” Released – Link Here Fingerprinting the Bad Guys – Link Here Careful Where You Sext! – Link Here Encouraging Everyone to Participate in the Survey -Link Here Discussion Topic #1 – Google Is Watching Your Wifi, But do You Really Care? Discussion Topic #2 - Ye’ Old “Disclosure” Debate…Again?!? Link 1 / Link 2 Music Notes – Intro / Outro – Digital Breaks – “Therapy” Segway #1 – Building Rome – “Bored” Segway #2 – This is Fiction – “Breathe” Segway #3 – Patent Pending – “Los Angeles” Link to MP3 All three of us are on this time. Some good talk about disclosure and web app firewalls, and Google, and some other stuff. Enjoy! Show Notes: InfoSec News Update - Web App Firewall Discussion Continues – Link 1 / Link 2 / Link 3 / Link 4 Good [...] Jim Broome, Dan Kuykendall, and Michael Farnum web application firewall, Google, wireless, data, rsnake, firmware hack, POET, sexting, wifi, Supreme Court An Information Security Place Podcast – Episode 36 http://infosecplace.com/blog/2010/06/02/an-information-security-place-podcast-episode-36/ http://infosecplace.com/blog/2010/06/02/an-information-security-place-podcast-episode-36/#comments Thu, 03 Jun 2010 03:33:57 +0000 Michael Farnum http://infosecplace.com/blog/?p=1163

So do we suck or what? Sorry that its taken so long for us to get another episode out… things have been crazy busy for all of us.

Anyway for this episode, Dan and Jim found themselves with 30 minutes or so of spare time, not much of a script, and working mics (Michael was working on a couple of proposals and an RFP that is due in two days); so they sat down and simply recorded an unscripted show of rambling about things that are going on for the moment.

Info Sec News Moments:

  • Kudos to MS’ IE 8 Add Campaign – Link Here
  • Jim’s 4.5 Seconds of fame – DenverGov website Hack – Link Here
  • Android and the SMS Rootkit Hack – Link Here
  • Google Ditching Windows due to Security Concerns – Link Here
  • Denver OWASP – SnowFroc Con – Link Here

Music Notes:

Link to MP3

]]> http://infosecplace.com/blog/2010/06/02/an-information-security-place-podcast-episode-36/feed/ 0 So do we suck or what? Sorry that its taken so long for us to get another episode out… things have been crazy busy for all of us. Anyway for this episode, Dan and Jim found themselves with 30 minutes or so of spare time, not much of a script, and working mics (Michael was working on a couple of proposals and an RFP that is due in two days); so they sat down and simply recorded an unscripted show of rambling about things that are going on for the moment. Info Sec News Moments: Kudos to MS’ IE 8 Add Campaign – Link Here Jim’s 4.5 Seconds of fame – DenverGov website Hack – Link Here Android and the SMS Rootkit Hack – Link Here Google Ditching Windows due to Security Concerns – Link Here Denver OWASP – SnowFroc Con – Link Here Music Notes: Intro / Outro – Digital Breaks – “Therapy” Link to MP3 So do we suck or what? Sorry that its taken so long for us to get another episode out… things have been crazy busy for all of us. Anyway for this episode, Dan and Jim found themselves with 30 minutes or so of spare time, not much of a script, [...] Jim Broome and Dan Kuykendall Microsoft, IE8, Denver, interview, denvergov, website, hacked, Android, SMS Rootkit, Google, Windows, security, OWASP An Information Security Place Podcast – Episode 35 http://infosecplace.com/blog/2010/05/03/an-information-security-place-podcast-episode-35/ http://infosecplace.com/blog/2010/05/03/an-information-security-place-podcast-episode-35/#comments Mon, 03 May 2010 14:00:03 +0000 Michael Farnum http://infosecplace.com/blog/?p=1160

Episode 35 is here. The format is different today. Instead of you listening to Dan, Jim, and me yap about news and pontificate about security topics, you are going to hear a talk I gave at the Texas Technology Summit in early April 2010. The talk title and synopsis are below, along with a link to the slide deck.

Title: Breaking Down the Enterprise Security Assessment

Synopsis: Many enterprise security assessments look at too few attack vectors or do not dig far enough into the attack vectors once a vulnerability has been discovered. Come join a discussion on the breakdown of a security assessment, explore the essential attack vectors, and debate the depth to which the assessment should go.

Link to MP3

Link to slides

]]> http://infosecplace.com/blog/2010/05/03/an-information-security-place-podcast-episode-35/feed/ 0 Episode 35 is here. The format is different today. Instead of you listening to Dan, Jim, and me yap about news and pontificate about security topics, you are going to hear a talk I gave at the Texas Technology Summit in early April 2010. The talk title and synopsis are below, along with a link to the slide deck. Title: Breaking Down the Enterprise Security Assessment Synopsis: Many enterprise security assessments look at too few attack vectors or do not dig far enough into the attack vectors once a vulnerability has been discovered. Come join a discussion on the breakdown of a security assessment, explore the essential attack vectors, and debate the depth to which the assessment should go. Link to MP3 Link to slides Episode 35 is here. The format is different today. Instead of you listening to Dan, Jim, and me yap about news and pontificate about security topics, you are going to hear a talk I gave at the Texas Technology Summit in early April 2010. The [...] Michael Farnum assessment, enterprise, security An Information Security Place Podcast – Episode 34 http://infosecplace.com/blog/2010/04/16/an-information-security-place-podcast-episode-34/ http://infosecplace.com/blog/2010/04/16/an-information-security-place-podcast-episode-34/#comments Fri, 16 Apr 2010 12:43:07 +0000 Michael Farnum http://infosecplace.com/blog/?p=1153

We are really sorry for the long delay, but all three of our schedules have been packed for the last 2 months. But I’m sure you don’t want to hear any excuses, so without further hesitation… Here’s Episode 34.

Show Notes:

Kudos to Tommy Perniciaro for article at SC Magazine – Link Here

InfoSec News Update –

  • Physical Security on Mac sucks – Link Here
  • What Drives Corporate Security Spending? – Link Here
  • Crazy Patch Week – Link 1 / Link 2
  • Federal Court Uphold Border Searches for Laptops – Link Here
  • Are Bank Breaches Still Trending High in 2010 -Link Here
  • So Easy, Even a Celebretard Can Do It! – Link Here
  • Perceptions Of Security Vary Widely Between IT Management, Security Staff – Link Here
  • Slow Death of XSS Vulns – Link Here

Discussion Topic #1 – Integration of Web Vuln Scanners with IPS/WAFs

Discussion Topic #2 - Update your End user Awareness Training and stop blaming your users!

Link 1 / Link 2 / Link 3

Music Notes:

Link to MP3

]]> http://infosecplace.com/blog/2010/04/16/an-information-security-place-podcast-episode-34/feed/ 0 We are really sorry for the long delay, but all three of our schedules have been packed for the last 2 months. But I’m sure you don’t want to hear any excuses, so without further hesitation… Here’s Episode 34. Show Notes: Kudos to Tommy Perniciaro for article at SC Magazine – Link Here InfoSec News Update – Physical Security on Mac sucks – Link Here What Drives Corporate Security Spending? – Link Here Crazy Patch Week – Link 1 / Link 2 Federal Court Uphold Border Searches for Laptops – Link Here Are Bank Breaches Still Trending High in 2010 -Link Here So Easy, Even a Celebretard Can Do It! – Link Here Perceptions Of Security Vary Widely Between IT Management, Security Staff – Link Here Slow Death of XSS Vulns – Link Here Discussion Topic #1 – Integration of Web Vuln Scanners with IPS/WAFs Discussion Topic #2 - Update your End user Awareness Training and stop blaming your users! Link 1 / Link 2 / Link 3 Music Notes: Intro / Outro – Digital Breaks – “Therapy” Segway 1 – The Mannish Boys – “Too Tired” Segway 2 – Slide Show Baby – “Long, Long Road” Segway 3 – Megaphone – “Making Sense” Link to MP3 We are really sorry for the long delay, but all three of our schedules have been packed for the last 2 months. But I’m sure you don’t want to hear any excuses, so without further hesitation… Here’s Episode 34. Show Notes: Kudos to Tommy [...] Jim Broome, Michael Farnum, Dan Kuykendall Tommy Perniciaro, Physical Security, Macintosh, Apple, RSA, Security, Spending, patching, Federal, judge, laptop, search, Twitter, Ponemon, awareness, training, Cormac Herley An Information Security Place Podcast – Episode 33 http://infosecplace.com/blog/2010/03/12/an-information-security-place-podcast-episode-33/ http://infosecplace.com/blog/2010/03/12/an-information-security-place-podcast-episode-33/#comments Fri, 12 Mar 2010 21:34:19 +0000 Michael Farnum http://infosecplace.com/blog/?p=1151

Yes, the logo is weird this time.  If you can’t tell what it is, maybe this will help.  For the first time ever (and probably the only time since I don’t get to Atlanta much), An Information Security Place Podcast has joined forces with the  Southern Fried Security Podcast to create a joint episode.  Can you see it now??  Yes, that is the logo for An Information Security Place Podcast placed over Colonel Sander’s face (he is the patron saint for the SFS podcast).  Yea,  I thought it was actually kinda freaky, too.  but what else do I have to do with my time??

So we joined forces for a couple of reasons:

  1. Because I was in Atlanta to speak about security assessments at the local NAISG chapter.
  2. I begged Martin to let me post it up as episode 33 over here since Dan, Jim and I haven’t had a chance to record yet, and this makes it all better!

So we stayed in the same room where the event was held and got irradiated by a myriad of computer and sound equipment while recording the podcast.  I had to wear someone’s headset, and now I have some kind of weird rash and some minor swelling around my ears.  And to make it even more fun, Mike Rothman sat across from us the whole time and heckled us.  What a night.

Actually, I had an awesome time.  Very good times with very good friends.  Thanks to the whole Atlanta NAISG crew and the SFS podcast crew (Andy Willingham, Martin Fisher, and Steve Ragan) for inviting me in with typical southern hospitality (even though Steve is a Yankee).

As to show notes, I am lazy.  I am only going to have one note (below) because it is the one news item that I brought along and the ONLY one that Andy didn’t include in his notes (in fairness, I never sent him the link).  Here’s a link to the SFS podcast site with the rest of the notes.   (Hey, Andy did the hard work – why duplicate efforts??)

  • Caleb Sima says that developers shouldn’t learn anything about security – Link here

Link to MP3

]]> http://infosecplace.com/blog/2010/03/12/an-information-security-place-podcast-episode-33/feed/ 0 Yes, the logo is weird this time.  If you can’t tell what it is, maybe this will help.  For the first time ever (and probably the only time since I don’t get to Atlanta much), An Information Security Place Podcast has joined forces with the  Southern Fried Security Podcast to create a joint episode.  Can you see it now??  Yes, that is the logo for An Information Security Place Podcast placed over Colonel Sander’s face (he is the patron saint for the SFS podcast).  Yea,  I thought it was actually kinda freaky, too.  but what else do I have to do with my time?? So we joined forces for a couple of reasons: Because I was in Atlanta to speak about security assessments at the local NAISG chapter. I begged Martin to let me post it up as episode 33 over here since Dan, Jim and I haven’t had a chance to record yet, and this makes it all better! So we stayed in the same room where the event was held and got irradiated by a myriad of computer and sound equipment while recording the podcast.  I had to wear someone’s headset, and now I have some kind of weird rash and some minor swelling around my ears.  And to make it even more fun, Mike Rothman sat across from us the whole time and heckled us.  What a night. Actually, I had an awesome time.  Very good times with very good friends.  Thanks to the whole Atlanta NAISG crew and the SFS podcast crew (Andy Willingham, Martin Fisher, and Steve Ragan) for inviting me in with typical southern hospitality (even though Steve is a Yankee). As to show notes, I am lazy.  I am only going to have one note (below) because it is the one news item that I brought along and the ONLY one that Andy didn’t include in his notes (in fairness, I never sent him the link).  Here’s a link to the SFS podcast site with the rest of the notes.   (Hey, Andy did the hard work – why duplicate efforts??) Caleb Sima says that developers shouldn’t learn anything about security – Link here Link to MP3 Yes, the logo is weird this time.  If you can’t tell what it is, maybe this will help.  For the first time ever (and probably the only time since I don’t get to Atlanta much), An Information Security Place Podcast has joined forces with the [...] Martin Fisher, Andy Willingham, Steve Ragan, Michael Farnum Southern Fried Security Podcast, Caleb Sima clean An Information Security Place Podcast – Episode 32 http://infosecplace.com/blog/2010/02/18/an-information-security-place-podcast-episode-32/ http://infosecplace.com/blog/2010/02/18/an-information-security-place-podcast-episode-32/#comments Thu, 18 Feb 2010 13:24:35 +0000 Michael Farnum http://infosecplace.com/blog/?p=1136

OK, holy crap.  We expected this episode to be pretty short since Jim was not around to add his golden commentary, but we got to yappin’ and churned out almost an hour of content (I use that term loosely).  So enjoy the show!

Show Notes:

InfoSec News Update –

  • Iran Shutters Google’s Gmail Service, offering own email for citizens – Link here
  • Security Scoreboard – Link here
  • Brian Kreb’s has blog post used by scammers - Link here and Sophos article link here
  • The Death of Product Reviews (Mike Rothman at Securosis) - Link here
  • TSA agent arrested for molestation - Link here
We won’t get intot he details here because this guy is sick, but I had to point out this line from the TSA blog about the issue:
“TSA holds the highest standards for our workforce and this individual’s actions do not reflect on the more than 50,000 men and women who work every day to keep the traveling public safe.”
  • Hacker threat forces DoH to close appraisal site (Political Activist?) - Link here
Discussion Topic – Smaller, more intimate security conferences (Security B-Sides, Schmoocon, etc)
]]> http://infosecplace.com/blog/2010/02/18/an-information-security-place-podcast-episode-32/feed/ 0 OK, holy crap.  We expected this episode to be pretty short since Jim was not around to add his golden commentary, but we got to yappin’ and churned out almost an hour of content (I use that term loosely).  So enjoy the show! Show Notes: InfoSec News Update – Iran Shutters Google’s Gmail Service, offering own email for citizens – Link here Security Scoreboard – Link here Brian Kreb’s has blog post used by scammers - Link here and Sophos article link here The Death of Product Reviews (Mike Rothman at Securosis) - Link here TSA agent arrested for molestation - Link here We won’t get intot he details here because this guy is sick, but I had to point out this line from the TSA blog about the issue: “TSA holds the highest standards for our workforce and this individual’s actions do not reflect on the more than 50,000 men and women who work every day to keep the traveling public safe.” Hacker threat forces DoH to close appraisal site (Political Activist?) - Link here Discussion Topic – Smaller, more intimate security conferences (Security B-Sides, Schmoocon, etc) Intro/Outro – Digital Breaks – “Therapy” Segway 1 – Guitar Slingers – “Johnny Dangerously” Segway 2 – Matthew Ebel – “Trees” Link to MP3 OK, holy crap.  We expected this episode to be pretty short since Jim was not around to add his golden commentary, but we got to yappin’ and churned out almost an hour of content (I use that term loosely).  So enjoy the show! Show [...] An Information Security Place Podcast – Episode 31 http://infosecplace.com/blog/2010/02/05/an-information-security-place-podcast-episode-31/ http://infosecplace.com/blog/2010/02/05/an-information-security-place-podcast-episode-31/#comments Fri, 05 Feb 2010 12:58:46 +0000 Michael Farnum http://infosecplace.com/blog/?p=1134

Everyone was here for this episode (meaning Dan, Jim, and Michael), and it was pretty much on schedule this time. We do the normal cutting up, then talk about news and start discussing stuff. Then Dan puts the hurt down on some developer geek speak. You will definitely learn  from stuff from this episode (as opposed to the drivel you get from most of our episodes).  Very good stuff.

BTW, the format of the posts are changing just a bit. While the podcast player will stay where it usually is at the top of the post, the link to the file will now be below the posts. This is changing because when iTunes picks up the text from the feed, it throws the “Link to MP3″ text at the top, and it looks weird when looking at the show description in iTunes. Just a minor change really, but just wanted to point it out here in case that is where you grab the file. OK, now on to the show!

Show Notes:

InfoSec News Update –

Discussion Topic #1 – Laptops on Hostile Networks – Link Here

Discussion Topic #2 - DK’s Web App Security Minute… and then some :)

Music Notes:

Link to MP3

]]> http://infosecplace.com/blog/2010/02/05/an-information-security-place-podcast-episode-31/feed/ 0 Everyone was here for this episode (meaning Dan, Jim, and Michael), and it was pretty much on schedule this time. We do the normal cutting up, then talk about news and start discussing stuff. Then Dan puts the hurt down on some developer geek speak. You will definitely learn  from stuff from this episode (as opposed to the drivel you get from most of our episodes).  Very good stuff. BTW, the format of the posts are changing just a bit. While the podcast player will stay where it usually is at the top of the post, the link to the file will now be below the posts. This is changing because when iTunes picks up the text from the feed, it throws the “Link to MP3″ text at the top, and it looks weird when looking at the show description in iTunes. Just a minor change really, but just wanted to point it out here in case that is where you grab the file. OK, now on to the show! Show Notes: InfoSec News Update – Hacker Cracks 49 House Sites and Insults Obama – Link Here 17 Year Old Vulnerability – Link Here 77K Risk Data Loss in Alaska – Link Here SEC Workers Surfing Pr0n – Link Here / BREAK.COM VIDEO Link If your password is 123456, just make it HACKME – Link Here ID Thieves Successfully Targeting Wealth Victims – Link Here Discussion Topic #1 – Laptops on Hostile Networks – Link Here Discussion Topic #2 - DK’s Web App Security Minute… and then some Remote File Include Attacks – Link Here / DK’s Info Page Larry Suto’s New Web App Scanner Review Report - Link Here Music Notes: Intro/Outro – Digital Breaks – “Therapy” Segway 1 – Nathan Lee – “Hold Me Down” Segway 2 – Building Rome – “Bored” Segway 3 – Devo Spice – “I’m Not Your Personal IT Guy” Link to MP3 Everyone was here for this episode (meaning Dan, Jim, and Michael), and it was pretty much on schedule this time. We do the normal cutting up, then talk about news and start discussing stuff. Then Dan puts the hurt down on some developer geek [...] Dan Kuykendall, Jim Broome, and Michael Farnum 1:15 Obama, hacked, websites, RFI, rsnake, remote file include, Larry Suto, Mike Kershaw passwords, laptops, hostile network, wireless, cache poisoning, SEC, pr0n, Alaska, ID theft, 77000, House of Representatives, Web App Scanners, NTO Spider An Information Security Place Podcast – Episode 30 http://infosecplace.com/blog/2010/01/25/an-information-security-place-podcast-episode-30/ http://infosecplace.com/blog/2010/01/25/an-information-security-place-podcast-episode-30/#comments Tue, 26 Jan 2010 02:02:00 +0000 Michael Farnum http://infosecplace.com/blog/?p=1126

Link to MP3

The first podcast of the new year is here, and it is a nice round number!  That is sweet!  So please forgive any weirdness in the way this episode sounds.  It was put together over a couple of weeks doing interviews here and there with vendors as well as each other while we were at our (Michael and Jim) employer’s annual company meeting.  Jim is a miracle worker, but even he could not make it completely fluid!

Also, because of scheduling, Dan did not get to join us.  But Jim and I were fortunate enough to be joined by coworker and wireless uber-beast, Mr. Tyler Theys.  I think you will enjoy this episode, even with all the weirdness!

Show Notes:

Info Sec News Update -

  • Jim, Michael, and Tyler talk about all the Google Hacking – Link Here

Interview #1 -Michael with Roger Hegland of TruARX

Interview #2 - Jim with Mike Tuchen of Rapid7

“Added Bonus to Our Listeners”

Going to RSA? Join Rapid7 on March 3rd for a party at Ruby Skye. Get on the VIP list for the evening everyone else will be talking about at RSA 2010: www.rapid7.com/forms/rsarsvp.jsp

Discussion Topic - PCI in the Gaming Industry

Music Notes –

]]> http://infosecplace.com/blog/2010/01/25/an-information-security-place-podcast-episode-30/feed/ 0 Link to MP3 The first podcast of the new year is here, and it is a nice round number!  That is sweet!  So please forgive any weirdness in the way this episode sounds.  It was put together over a couple of weeks doing interviews here and there with vendors as well as each other while we were at our (Michael and Jim) employer’s annual company meeting.  Jim is a miracle worker, but even he could not make it completely fluid! Also, because of scheduling, Dan did not get to join us.  But Jim and I were fortunate enough to be joined by coworker and wireless uber-beast, Mr. Tyler Theys.  I think you will enjoy this episode, even with all the weirdness! Show Notes: Info Sec News Update - Jim, Michael, and Tyler talk about all the Google Hacking – Link Here Interview #1 -Michael with Roger Hegland of TruARX Interview #2 - Jim with Mike Tuchen of Rapid7 “Added Bonus to Our Listeners” Going to RSA? Join Rapid7 on March 3rd for a party at Ruby Skye. Get on the VIP list for the evening everyone else will be talking about at RSA 2010: www.rapid7.com/forms/rsarsvp.jsp Discussion Topic - PCI in the Gaming Industry Music Notes – Intro/Outro – Digital Breaks – “Therapy” Segway 1 – Building Rome – “Dr. Doctor” Segway 2 – Megaphone – “Write it Down” Segway 3 – This is Fiction – “Breathe” Link to MP3 The first podcast of the new year is here, and it is a nice round number!  That is sweet!  So please forgive any weirdness in the way this episode sounds.  It was put together over a couple of weeks doing interviews here and [...] An Information Security Place Podcast – Episode 29 http://infosecplace.com/blog/2009/12/23/an-information-security-place-podcast-episode-29/ http://infosecplace.com/blog/2009/12/23/an-information-security-place-podcast-episode-29/#comments Wed, 23 Dec 2009 14:48:46 +0000 Michael Farnum http://infosecplace.com/blog/?p=1123

Link to MP3

Merry Christmas to all our listeners! It’s that time of the year again where we sit down and make a fun podcast and recap the year and look forward to next year. Heck there was even a Christmas Miracle on this episode… it was actually recorded on time !!!! So sit back with your eggnog next to the Yule log fire under the stockings and enjoy!

Show Notes:

InfoSec News Update –

Discussion Topic -

2009 Year in Review and Looking Forward Predictions to 2010 –

Link 1 / Link 2 / Link 3

Music Notes -

]]> http://infosecplace.com/blog/2009/12/23/an-information-security-place-podcast-episode-29/feed/ 0 Link to MP3 Merry Christmas to all our listeners! It’s that time of the year again where we sit down and make a fun podcast and recap the year and look forward to next year. Heck there was even a Christmas Miracle on this episode… it was actually recorded on time !!!! So sit back with your eggnog next to the Yule log fire under the stockings and enjoy! Show Notes: InfoSec News Update – Howard Schmidt new White House cybersecurity coordinator – Link Here deCOFEEnating Windows – Link Here Twitter DNS hack came from authorized credentials – Link Here Social Networks searches could be a hackers dream… Link 1 / Link 2 FireFox and Adobe named “Most Buggy” – Link Here / Bit9 Link Insurgents Hack US Drones – Link Here / Software Link Discussion Topic - 2009 Year in Review and Looking Forward Predictions to 2010 – Link 1 / Link 2 / Link 3 Music Notes - Intro – TheHipCola – “SleighRide” Segway 1 – Winzenried – “Have Yourself A Merry Little Christmas” Segway 2 – OutSpoken – “Punk Rock Bells” Outro – TheHipCola – “Winter WonderLand” Link to MP3 Merry Christmas to all our listeners! It’s that time of the year again where we sit down and make a fun podcast and recap the year and look forward to next year. Heck there was even a Christmas Miracle on this episode… it was [...] Michael Farnum, Jim Broome, and Dan Kuykendall Merry Christmas, Cybersecurity coordinator, Howard Schmidt, COFEE, DECAF, Firefox, buggy, drones, 2009, 2010. Adobe, Twitter, DNS An Information Security Place Podcast – Episode 28 http://infosecplace.com/blog/2009/12/11/an-information-security-place-podcast-episode-28/ http://infosecplace.com/blog/2009/12/11/an-information-security-place-podcast-episode-28/#comments Fri, 11 Dec 2009 13:49:11 +0000 Michael Farnum http://infosecplace.com/blog/?p=1119


Link to MP3

OK, this was just a stupid, crazy, and fun episode.  We had technical hiccups, a roving co-host that likes to text another cohost during recording, plus this episode is late getting recorded because of end-of-year schedule.  But we powered through it, and Jim got to spend a lot of time on post-production.

I think you are going to enjoy this randomness…

Show Notes:

InfoSec News Update and Geek Toys Update –

  • T-Mobile Employee causes largest data theft in the UK – Link Here
  • Government Security Woes
    Story 1 – 5 TSA workers put on leave over online posting – Link here
    Story 2 – The Party Crashing Scandal – Link Here
    Story 3 – Felon working for DHS for 2 years – Link Here
  • Nessus 4.2 is released – Link Here
  • Rapid7 and Metasploit Community Projects – Link 1 / Link 2
  • ProxMark3 now shipping completed RFID read/write/clone kits – Link here
  • Moxie launched cloud-based WPA password Cracking – Link Here
  • Cure for Eye Strain – Gunnar Glasses – Link Here

Discussion Topic -

Changes to OWASP standard for 2010 –

Link Here

Consultants Corner - Picking your tools wisely… 2009/2010 update

Music Notes –

]]> http://infosecplace.com/blog/2009/12/11/an-information-security-place-podcast-episode-28/feed/ 0 Link to MP3 OK, this was just a stupid, crazy, and fun episode.  We had technical hiccups, a roving co-host that likes to text another cohost during recording, plus this episode is late getting recorded because of end-of-year schedule.  But we powered through it, and Jim got to spend a lot of time on post-production. I think you are going to enjoy this randomness… Show Notes: InfoSec News Update and Geek Toys Update – T-Mobile Employee causes largest data theft in the UK – Link Here Government Security Woes Story 1 – 5 TSA workers put on leave over online posting – Link here Story 2 – The Party Crashing Scandal – Link Here Story 3 – Felon working for DHS for 2 years – Link Here Nessus 4.2 is released – Link Here Rapid7 and Metasploit Community Projects – Link 1 / Link 2 ProxMark3 now shipping completed RFID read/write/clone kits – Link here Moxie launched cloud-based WPA password Cracking – Link Here Cure for Eye Strain – Gunnar Glasses – Link Here Discussion Topic - Changes to OWASP standard for 2010 – Link Here Consultants Corner - Picking your tools wisely… 2009/2010 update Music Notes – Intro/Outro – Digital Breaks – “Therapy” Segway 1 – This is Fiction – “Breathe” Segway 2 – Patent Pending – “Los Angeles” Segway 3 – The FUMP – “”All You Can Tweet” Link to MP3 OK, this was just a stupid, crazy, and fun episode.  We had technical hiccups, a roving co-host that likes to text another cohost during recording, plus this episode is late getting recorded because of end-of-year schedule.  But we [...] Michael Farnum, Jim Broome, and Dan Kuykendall OWASP, Moxie, Marlinspike, Rapid7, ProxMark3, Metasploit, Nessus, WPA, cracking, Gunnar, Salahis, TSA, DHS, felon yes