Facebook privacy settings are getting simplified.
Michal Jackson causes google to trip...]]> chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP35.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP35.mp3?dest-id=18154 Wed, 01 Jul 2009 20:34:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/VsyjLcvJUMI/SecuraBit_EP34.mp3 <p>SecuraBit Episode 34</p><br/><p>This week we welcome Scott Fitzpatrick of Symantec to join our roundtable on the news items of the day.</p><br/><p>News Items:<br /><br/>StrongWebMail Fail - http://www.pcworld.com/businesscenter/article/166314/web_mail_company_to_pay_prize_after_ceo_hacked.html</p><br/><p>TweetDeck still passes authentication in the clear</p><br/><p>Google Apps criticized about their security</p><br/><p>iPhone 3.0 Teathering Hack - http://www.jellysms.com/blog/enable-internet-tethering-with-your-iphone-in-2-minutes-on-o2-ireland-with-30-gm/</p><br/><p>RSnake's SlowLoris (low bandwidth, greedy, poisonus HTTP client) - http://ha.ckers.org/slowloris/</p><br/><p>Mubix presenting a six hour work shop "From Shell to Owning the Company" at ToorCamp</p><br/><p>DefCon and the Podcasters Meetup<br /><br/>- In Sky box 207 and 208 8pm or after the last talk on Saturday night.<br /><br/>- Exotic Liability (http://www.exoticliability.com/) and Germaina Newbs (http://grmn00bs.blogspot.com/) will be join the line up.</p><br/><p>PaulDot Com with Securabity Thursday July 2, 2009 at 7pm.</p><br/><p>Join us in IRC at irc.freenode.net #securabit</p><br/><p>Our Next live recording is July 1, 2009 at 8pm EDT.</p><br/><p>Hosts:<br /><br/>Chris Gerling - http://www.chrisgerling.com - @hak5chris<br /><br/>Jason Mueller - @securabit_jay<br /><br/>Christopher Mills - http://www.packetsense.net - @thechrisam<br /><br/>Rob Fuller - Mubix - http://room362.com - @Mubix<br /><br/>Andrew Borel - @andrew_secbit</p><br/><p>Guests:<br /><br/>Scott Fitzpatrick</p><br/><p>Links:<br /><br/>Symantec - http://www.symantec.com/<br /><br/>Mubix - Couch to Career - http://www.room362.com/archives/564-couch-to-career-follow-up.html</p><br/><br type="_moz"/><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=VsyjLcvJUMI:VXmRzfaJn1I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=VsyjLcvJUMI:VXmRzfaJn1I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=VsyjLcvJUMI:VXmRzfaJn1I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=VsyjLcvJUMI:VXmRzfaJn1I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=VsyjLcvJUMI:VXmRzfaJn1I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=VsyjLcvJUMI:VXmRzfaJn1I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=VsyjLcvJUMI:VXmRzfaJn1I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=VsyjLcvJUMI:VXmRzfaJn1I:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=VsyjLcvJUMI:VXmRzfaJn1I:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/VsyjLcvJUMI" height="1" width="1" alt=""/> 50:06 clean SecuraBit Episode 34

This week we welcome Scott Fitzpatrick of Symantec to join our roundtable on the news items of the day.

News Items:
StrongWebMail Fail -...]]> chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP34.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP34.mp3?dest-id=18154 Sat, 13 Jun 2009 05:50:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/DC-9igg66_I/SecuraBit_EP33.mp3 <p>In this episode we talk to Kostya about the process that is behind Cloud Burst.  He speaks about breaking out of the existing Virtual Machine and into the host.  Once you own the host you have the ability to own other Virtual Machines.</p> <p>Quick Topics:<br/> OS X Security Update<br/> Palm Pre<br/> North Korea Cyberware<br/> Air France Flight 447</p> <p>Hosts:<br/> Anthony Gartner - http://<a target="_blank" title="www.anthonygartner.com" mce_href="http://www.anthonygartner.com" href="http://www.anthonygartner.com/">www.anthonygartner.com</a> - @anthonygartner<br/> Chris Gerling - <a target="_blank" title="http://www.chrisgerling.com" mce_href="http://www.chrisgerling.com" href="http://www.chrisgerling.com/">http://www.chrisgerling.com</a> - @hak5chris<br/> Christopher Mills - <a target="_blank" title="http://www.packetsense.net " mce_href="http://www.packetsense.net " href="http://www.packetsense.net/">http://www.packetsense.net </a>- @thechrisam<br/> Jason Mueller - @securabit_jay</p> <p>Guests:<br/> Kostya Kortchinsky -<a target="_blank" title="http://www.linkedin.com/pub/kostya-kortchinsky/4/211/a71" mce_href="http://www.linkedin.com/pub/kostya-kortchinsky/4/211/a71" href="http://www.linkedin.com/pub/kostya-kortchinsky/4/211/a71"> http://www.linkedin.com/pub/kostya-kortchinsky/4/211/a71</a><br/> Tim Krabec - <a target="_blank" title="http://www.SMBMinute.com" mce_href="http://www.SMBMinute.com" href="http://www.smbminute.com/">http://www.SMBMinute.com</a> - @tkrabec</p> <p>Links:<br/> Immunity Inc - <a target="_blank" title="http://www.immunitysec.com/" mce_href="http://www.immunitysec.com/" href="http://www.immunitysec.com/">http://www.immunitysec.com/</a><br/> CLOUDBURST exploit video -  <a target="_blank" title="http://www.immunityinc.com/documentation/cloudburst-vista.html" mce_href="http://www.immunityinc.com/documentation/cloudburst-vista.html" href="http://www.immunityinc.com/documentation/cloudburst-vista.html">http://www.immunityinc.com/documentation/cloudburst-vista.html</a><br/> CVE-2009-1244 -<a target="_blank" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244" mce_href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244" href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244"> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244</a><br/> 53634 : VMware Multiple Products Display Function Host OS Arbitrary Code Execution - <a target="_blank" title="http://osvdb.org/53634" mce_href="http://osvdb.org/53634" href="http://osvdb.org/53634">http://osvdb.org/53634</a><br/> Microsoft Security Bulletin MS08-067 - <a target="_blank" title="http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx" mce_href="http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx" href="http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx">http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx</a><br/> SyScan '09 Singapore July 2-3 - <a target="_blank" title="http://www.syscan.org/Sg/program.html" mce_href="http://www.syscan.org/Sg/program.html" href="http://www.syscan.org/Sg/program.html">http://www.syscan.org/Sg/program.html</a><br/> The Cassandra Tool - <a target="_blank" title="https://cassandra.cerias.purdue.edu/main/index.html" mce_href="https://cassandra.cerias.purdue.edu/main/index.html" href="https://cassandra.cerias.purdue.edu/main/index.html">https://cassandra.cerias.purdue.edu/main/index.html</a><br/> Apple Security Update 2009-002 / Mac OS X v10.5.7 - <a target="_blank" title="http://support.apple.com/kb/HT3549" mce_href="http://support.apple.com/kb/HT3549" href="http://support.apple.com/kb/HT3549">http://support.apple.com/kb/HT3549</a><br/> Palm® Pre™ - <a target="_blank" title="http://www.palm.com/us/products/phones/pre/" mce_href="http://www.palm.com/us/products/phones/pre/" href="http://www.palm.com/us/products/phones/pre/">http://www.palm.com/us/products/phones/pre/</a><br/> North Korea Builds Up Cyber Warfare Unit - <a target="_blank" title="http://news.yahoo.com/s/afp/20090505/ts_afp/nkoreaitmilitary" mce_href="http://news.yahoo.com/s/afp/20090505/ts_afp/nkoreaitmilitary" href="http://news.yahoo.com/s/afp/20090505/ts_afp/nkoreaitmilitary">http://news.yahoo.com/s/afp/20090505/ts_afp/nkoreaitmilitary</a><br/> Air France Flight 447 - <a target="_blank" title="http://en.wikipedia.org/wiki/Air_France_Flight_447" mce_href="http://en.wikipedia.org/wiki/Air_France_Flight_447" href="http://en.wikipedia.org/wiki/Air_France_Flight_447">http://en.wikipedia.org/wiki/Air_France_Flight_447</a><br/> DEFCON® Hacking Conference - <a target="_blank" title="http://www.defcon.org/" mce_href="http://www.defcon.org/" href="http://www.defcon.org/">http://www.defcon.org/</a><br/> Immunity CANVAS - <a target="_blank" title="http://www.immunitysec.com/products-canvas.shtml" mce_href="http://www.immunitysec.com/products-canvas.shtml" href="http://www.immunitysec.com/products-canvas.shtml">http://www.immunitysec.com/products-canvas.shtml</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=DC-9igg66_I:vq3QqAQKTtA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=DC-9igg66_I:vq3QqAQKTtA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=DC-9igg66_I:vq3QqAQKTtA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=DC-9igg66_I:vq3QqAQKTtA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=DC-9igg66_I:vq3QqAQKTtA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=DC-9igg66_I:vq3QqAQKTtA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=DC-9igg66_I:vq3QqAQKTtA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=DC-9igg66_I:vq3QqAQKTtA:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=DC-9igg66_I:vq3QqAQKTtA:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/DC-9igg66_I" height="1" width="1" alt=""/> 53:10 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP33.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP33.mp3?dest-id=18154 Wed, 27 May 2009 14:32:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/vb2-jIlsJ5Y/SecuraBit_EP32.mp3 <p><b>SecuraBit Episode 32 PDF Love!</b></p> <p>Dieter talks about how the ifilter will actually allow you to use a pdf to exploit the system because ifilter uses the windows indexing service. He also discusses some of the various methods of prevention including his tool called <a target="_blank" mce_href="http://blog.didierstevens.com/2009/03/31/pdfid/" href="http://blog.didierstevens.com/2009/03/31/pdfid/" title="http://blog.didierstevens.com/2009/03/31/pdfid/">PDFiD</a>.</p> <p><b><br/> Penetration Document Format</b><br/> <a target="_blank" mce_href="http://www.flickr.com/photos/packetsense/3549486353/" href="http://www.flickr.com/photos/packetsense/3549486353/" title="http://www.flickr.com/photos/packetsense/3549486353/">http://www.flickr.com/photos/packetsense/3549486353/</a></p> <p><b>Hosts:</b><br/> Anthony Gartner - <a target="_blank" mce_href="http://www.anthonygartner.com" href="http://www.anthonygartner.com/" title="http://www.anthonygartner.com">http://www.anthonygartner.com</a> - @anthonygartner<br/> Chris Gerling - <a target="_blank" mce_href="http://www.chrisgerling.com " href="http://www.chrisgerling.com/" title="http://www.chrisgerling.com ">http://www.chrisgerling.com </a>- @hak5chris<br/> Christopher Mills - <a target="_blank" mce_href="http://www.packetsense.net " href="http://www.packetsense.net/" title="http://www.packetsense.net ">http://www.packetsense.net </a>- @thechrisam</p> <p><b>Guests:</b><br/> Didier Stevens - <a target="_blank" mce_href="http://blog.didierstevens.com/" href="http://blog.didierstevens.com/" title="http://blog.didierstevens.com/">http://blog.didierstevens.com/</a></p> <p><b>Links:</b><br/> PDFiD - <a target="_blank" mce_href="http://blog.didierstevens.com/2009/03/31/pdfid/" href="http://blog.didierstevens.com/2009/03/31/pdfid/" title="http://blog.didierstevens.com/2009/03/31/pdfid/">http://blog.didierstevens.com/2009/03/31/pdfid/</a><br/> PDF Tools - <a target="_blank" mce_href="http://blog.didierstevens.com/programs/pdf-tools/" href="http://blog.didierstevens.com/programs/pdf-tools/" title="http://blog.didierstevens.com/programs/pdf-tools/">http://blog.didierstevens.com/programs/pdf-tools/</a><br/> Security Justice - <a target="_blank" mce_href="http://securityjustice.com/" href="http://securityjustice.com/" title="http://securityjustice.com/">http://securityjustice.com/</a><br/> Exotic Liability - <a target="_blank" mce_href="http://exoticliability.ning.com/" href="http://exoticliability.ning.com/" title="http://exoticliability.ning.com/">http://exoticliability.ning.com/</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=vb2-jIlsJ5Y:put9p_nGMJM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=vb2-jIlsJ5Y:put9p_nGMJM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=vb2-jIlsJ5Y:put9p_nGMJM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=vb2-jIlsJ5Y:put9p_nGMJM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=vb2-jIlsJ5Y:put9p_nGMJM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=vb2-jIlsJ5Y:put9p_nGMJM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=vb2-jIlsJ5Y:put9p_nGMJM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=vb2-jIlsJ5Y:put9p_nGMJM:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=vb2-jIlsJ5Y:put9p_nGMJM:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/vb2-jIlsJ5Y" height="1" width="1" alt=""/> 43:05 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP32.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP32.mp3?dest-id=18154 Fri, 22 May 2009 14:46:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/N61o_uVvWeA/SecuraBit_EP31.mp3 <div id="magicdomid21"><tt class="author24-243-4-134-1242259840705-7965">Episode 31 Show Notes - The Intertubes need a patch Episode</tt></div> <div id="magicdomid23"><tt class="author98-183-203-99-1241726073187-36801">In this episode we are joined by Russell Butturini, he speaks to the guys about the tool he authored at the suggestion of the hak5 crew.  He even talks about some of his horror stories about security.</tt></div> <div id="magicdomid28"><tt class="author24-243-4-134-1242259840705-7965">Hosts:</tt></div> <div id="magicdomid29"><tt class="author24-243-4-134-1242259840705-7965">Anthony Gartner - </tt><a class="author24-243-4-134-1242259840705-7965 url" href="http://www.anthonygartner.com/" mce_href="http://www.anthonygartner.com/">http://www.anthonygartner.com</a><tt class="author24-243-4-134-1242259840705-7965"> - @anthonygartner</tt></div> <div id="magicdomid30"><tt class="author24-243-4-134-1242259840705-7965">Christopher Mills - </tt><a class="author24-243-4-134-1242259840705-7965 url" href="http://www.packetsense.net/" mce_href="http://www.packetsense.net/">http://www.packetsense.net</a><tt class="author24-243-4-134-1242259840705-7965"> - @thechrisam</tt></div> <div id="magicdomid31"><tt class="author24-243-4-134-1242259840705-7965">Andrew Borel - @Andrew_Secbit</tt></div> <div id="magicdomid33"><tt class="author24-243-4-134-1242259840705-7965">Guests:</tt></div> <div id="magicdomid34"><tt class="author24-243-4-134-1242259840705-7965">Russell Butturini - </tt><a class="author24-243-4-134-1242259840705-7965 url" href="http://www.linkedin.com/pub/b/960/913" mce_href="http://www.linkedin.com/pub/b/960/913">http://www.linkedin.com/pub/b/960/913</a></div> <div><tt class="author24-243-4-134-1242259840705-7965">Links:</tt></div> <div id="magicdomid37"><tt class="author24-243-4-134-1242259840705-7965"><a title="http://wiki.hak5.org/wiki/U3_Incident_Response_Switchblade" href="http://wiki.hak5.org/wiki/U3_Incident_Response_Switchblade" mce_href="http://wiki.hak5.org/wiki/U3_Incident_Response_Switchblade" target="_blank">U3 Incident Response Switch Blade</a> - </tt><a class="author24-243-4-134-1242259840705-7965 url" href="http://wiki.hak5.org/wiki/U3_Incident_Response_Switchblade" mce_href="http://wiki.hak5.org/wiki/U3_Incident_Response_Switchblade">http://wiki.hak5.org/wiki/U3_Incident_Response_Switchblade</a></div> <div id="magicdomid38"><tt class="author24-243-4-134-1242259840705-7965"><a title="http://blog.commandlinekungfu.com/" href="http://blog.commandlinekungfu.com/" mce_href="http://blog.commandlinekungfu.com/" target="_blank">Command Line Kung Fu Blog</a> </tt><a class="author24-243-4-134-1242259840705-7965 url" href="http://blog.commandlinekungfu.com/" mce_href="http://blog.commandlinekungfu.com/">http://blog.commandlinekungfu.com/</a></div> <div id="magicdomid39"><a class="author98-183-203-99-1241726073187-36801 url" href="http://packetsense.net/blog" mce_href="http://packetsense.net/blog">http://packetsense.net/blog</a></div> <div id="magicdomid44"><tt class="author24-243-4-134-1242259840705-7965"><a title="http://www.packetsense.net/blog/2009/05/12/extending-cvss-beyond-its-base-score/" href="http://www.packetsense.net/blog/2009/05/12/extending-cvss-beyond-its-base-score/" mce_href="http://www.packetsense.net/blog/2009/05/12/extending-cvss-beyond-its-base-score/" target="_blank">Extending CVSS Beyond Its Base Score</a> - </tt><a class="author24-243-4-134-1242259840705-7965 url" href="http://www.packetsense.net/blog/2009/05/12/extending-cvss-beyond-its-base-score/" mce_href="http://www.packetsense.net/blog/2009/05/12/extending-cvss-beyond-its-base-score/">http://www.packetsense.net/blog/2009/05/12/extending-cvss-beyond-its-base-score/</a></div> <div id="magicdomid48"><a class="author98-183-203-99-1241726073187-36801 url" href="http://www.splunk.com/" mce_href="http://www.splunk.com/">http://www.splunk.com/</a></div> <div><a class="author98-183-203-99-1241726073187-36801 url" href="http://www.cisco.com/en/US/products/ps6241/index.html" mce_href="http://www.cisco.com/en/US/products/ps6241/index.html">http://www.cisco.com/en/US/products/ps6241/index.html</a></div><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=N61o_uVvWeA:cKKrf6hBC8Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=N61o_uVvWeA:cKKrf6hBC8Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=N61o_uVvWeA:cKKrf6hBC8Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=N61o_uVvWeA:cKKrf6hBC8Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=N61o_uVvWeA:cKKrf6hBC8Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=N61o_uVvWeA:cKKrf6hBC8Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=N61o_uVvWeA:cKKrf6hBC8Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=N61o_uVvWeA:cKKrf6hBC8Q:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=N61o_uVvWeA:cKKrf6hBC8Q:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/N61o_uVvWeA" height="1" width="1" alt=""/> 49:43 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP31.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP31.mp3?dest-id=18154 Sat, 02 May 2009 20:43:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/4nD7gRITpkQ/SecuraBit_EP30.mp3 <p>This week we interview <span class="fn">Christien Rioux and </span><span class="status-body"><span class="entry-content">Chris Wysopal about the upcoming release of l0phtcrack 6.</span></span></p> <p>Hosts:<br/> Anthony Gartner - <a title="http://www.anthonygartner.com" onclick="pageTracker._trackPageview('/outgoing/www.anthonygartner.com/?referer=');pageTracker._trackPageview('/outgoing/www.anthonygartner.com?referer=http://securabit.com/');" href="http://www.anthonygartner.com/" mce_href="http://www.anthonygartner.com/" target="_blank">http://www.anthonygartner.com</a> - @anthonygartner<br/> Chris Gerling - <a title="http://www.chrisgerling.com" onclick="pageTracker._trackPageview('/outgoing/www.chrisgerling.com/?referer=');pageTracker._trackPageview('/outgoing/www.chrisgerling.com?referer=http://securabit.com/');" href="http://www.chrisgerling.com/" mce_href="http://www.chrisgerling.com/" target="_blank">http://www.chrisgerling.com</a> - @hak5chris<br/> Christopher Mills - <a title="http://www.packetsense.net" onclick="pageTracker._trackPageview('/outgoing/www.packetsense.net/?referer=');pageTracker._trackPageview('/outgoing/www.packetsense.net?referer=http://securabit.com/');" href="http://www.packetsense.net/" mce_href="http://www.packetsense.net/" target="_blank">http://www.packetsense.net</a> - @thechrisam<br/> Jason Mueller - @securabit_jay</p> <p>Guests:</p> <p><span class="fn">Christien Rioux - </span><span class="status-body"><span class="entry-content">@<a href="https://twitter.com/dildog" mce_href="https://twitter.com/dildog">dildog</a><br/></span></span></p> <p><span class="status-body"><span class="entry-content">Chris Wysopal - @<a href="https://twitter.com/cwysopal" mce_href="https://twitter.com/cwysopal">cwysopal</a> </span></span></p> <p>Links:</p> <p>l0phtcrack - <a title="http://www.l0phtcrack.com/" href="http://www.l0phtcrack.com/" mce_href="http://www.l0phtcrack.com/" target="_blank">http://www.l0phtcrack.com/</a></p> <p>Adobe Product Security Incident Response Team (PSIRT) - <a title="http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html" href="http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html" mce_href="http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html" target="_blank">http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html</a></p> <p>Finjan finds botnet of 1.9m infected computers  - <a title="http://news.zdnet.co.uk/security/0,1000000189,39643173,00.htm" href="http://news.zdnet.co.uk/security/0,1000000189,39643173,00.htm" mce_href="http://news.zdnet.co.uk/security/0,1000000189,39643173,00.htm" target="_blank">http://news.zdnet.co.uk/security/0,1000000189,39643173,00.htm</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4nD7gRITpkQ:LN_OUHQ3DNU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4nD7gRITpkQ:LN_OUHQ3DNU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4nD7gRITpkQ:LN_OUHQ3DNU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4nD7gRITpkQ:LN_OUHQ3DNU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4nD7gRITpkQ:LN_OUHQ3DNU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4nD7gRITpkQ:LN_OUHQ3DNU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4nD7gRITpkQ:LN_OUHQ3DNU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4nD7gRITpkQ:LN_OUHQ3DNU:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4nD7gRITpkQ:LN_OUHQ3DNU:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/4nD7gRITpkQ" height="1" width="1" alt=""/> 01:02:54 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP30.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP30.mp3?dest-id=18154 Sun, 26 Apr 2009 19:40:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/jWrHqQh0GKg/SecuraBit_EP29.mp3 <p>This week ....</p> <p>Chris Gerling's experience at Helix training and his impressions of Helix 3 Pro.</p> <p>Flash on the TV.  Are TV's the next big botnet?</p> <p>Oracle's buying Sun. Does this mean the end for MySQL?</p> <p>We discuss these topics and more on Securabit Episode 29.</p> <p>Hosts:<br/> Andrew Borel - @Andrew_Secbit<br/> Anthony Gartner - <a target="_blank" mce_href="http://www.anthonygartner.com/" href="http://www.anthonygartner.com/" onclick="pageTracker._trackPageview('/outgoing/www.anthonygartner.com?referer=http://securabit.com/');" title="http://www.anthonygartner.com">http://www.anthonygartner.com</a> - @anthonygartner<br/> Chris Gerling - <a target="_blank" mce_href="http://www.chrisgerling.com/" href="http://www.chrisgerling.com/" onclick="pageTracker._trackPageview('/outgoing/www.chrisgerling.com?referer=http://securabit.com/');" title="http://www.chrisgerling.com">http://www.chrisgerling.com</a> - @hak5chris<br/> Christopher Mills - <a target="_blank" mce_href="http://www.packetsense.net/" href="http://www.packetsense.net/" onclick="pageTracker._trackPageview('/outgoing/www.packetsense.net?referer=http://securabit.com/');" title="http://www.packetsense.net">http://www.packetsense.net</a> - @thechrisam<br/> Jason Mueller - @securabit_jay</p> <p>Links:</p> <p>Live Forensics & Incident Response Featuring Helix3 - <a href="http://www.e-fense.com/Docs/E103.pdf" mce_href="http://www.e-fense.com/Docs/E103.pdf" title="http://www.e-fense.com/Docs/E103.pdf" target="_blank">http://www.e-fense.com/Docs/E103.pdf</a></p> <p>Adobe Flash for Your TV Means Hulu in Your Living Room -<a href="http://blog.wired.com/gadgets/2009/04/adobe-flash-for.html" mce_href="http://blog.wired.com/gadgets/2009/04/adobe-flash-for.html" title="http://blog.wired.com/gadgets/2009/04/adobe-flash-for.html" target="_blank">http://blog.wired.com/gadgets/2009/04/adobe-flash-for.html</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jWrHqQh0GKg:px3MFLHGQXE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jWrHqQh0GKg:px3MFLHGQXE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=jWrHqQh0GKg:px3MFLHGQXE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jWrHqQh0GKg:px3MFLHGQXE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jWrHqQh0GKg:px3MFLHGQXE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=jWrHqQh0GKg:px3MFLHGQXE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jWrHqQh0GKg:px3MFLHGQXE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=jWrHqQh0GKg:px3MFLHGQXE:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jWrHqQh0GKg:px3MFLHGQXE:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/jWrHqQh0GKg" height="1" width="1" alt=""/> 44:05 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP29.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP29.mp3?dest-id=18154 Wed, 15 Apr 2009 16:06:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/_vcg8ywP4dI/SecuraBit_EP28.mp3 <p>SecuraBit EP28  I am stuck in a VM, and I can't get out!!!</p> <p>Special Guest - Rob Randell</p> <p>This week we are joined by Rob Randell from VMware. We cover recommendations for using Virtual Machines securely, VM breakouts such as cloudburst, and various other issues revolving around the security of virtual machines.</p> <p>Hosts:<br/> Andrew Borel - @Andrew_Secbit<br/> Anthony Gartner - <a target="_blank" mce_href="http://anthonygartner.com" href="http://anthonygartner.com/" title="http://anthonygartner.com">http://anthonygartner.com</a> - @anthonygartner<br/> Rob Fuller - Mubix -<a target="_blank" mce_href="http://room362.com" href="http://room362.com/" title="http://room362.com"> http://room362.com</a> - @mubix</p> <p>Guest:<br/> Rob Randell – <a target="_blank" mce_href="http://vmware.com" href="http://vmware.com/" title="http://vmware.com">http://vmware.com</a> @rjrandell<br/> Steve McGrath - <a target="_blank" mce_href="http://cutnet.net" href="http://cutnet.net/" title="http://cutnet.net">http://cutnet.net</a><br/> Chris Hoff - <a target="_blank" mce_href="http://www.rationalsurvivability.com" href="http://www.rationalsurvivability.com/" title="http://www.rationalsurvivability.com">http://www.rationalsurvivability.com</a> @beaker</p> <p>Links:<br/> <a target="_blank" mce_href="http://vmware.com" href="http://vmware.com/" title="http://vmware.com">http://vmware.com</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=_vcg8ywP4dI:RJm36PsV_0Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=_vcg8ywP4dI:RJm36PsV_0Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=_vcg8ywP4dI:RJm36PsV_0Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=_vcg8ywP4dI:RJm36PsV_0Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=_vcg8ywP4dI:RJm36PsV_0Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=_vcg8ywP4dI:RJm36PsV_0Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=_vcg8ywP4dI:RJm36PsV_0Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=_vcg8ywP4dI:RJm36PsV_0Q:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=_vcg8ywP4dI:RJm36PsV_0Q:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/_vcg8ywP4dI" height="1" width="1" alt=""/> 01:05:40 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP28.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP28.mp3?dest-id=18154 Sun, 05 Apr 2009 17:48:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/gnedItdE7Ek/SecuraBit_EP27.mp3 <p>SecuraBit EP27  No joke!! We have George Starcher!!</p> <p>This week we have special guest George Starcher and we recorded the show on April 1st.  George is a long time podcaster with older shows such as In The trenches which he did with Kevin Devin and later had some guests fill in including our own Anthony Gartner.  George is still very active in the security community with his job and also does spots on the The Typical Mac User Podcast as well as a big contributor to their forums.</p> <p>Hosts:<br/> Anthony Gartner - <a title="http://www.anthonygartner.com" href="http://www.anthonygartner.com/" mce_href="http://www.anthonygartner.com" target="_blank">http://www.anthonygartner.com</a> - @anthonygartner<br/> Chris Gerling - <a title="http://www.chrisgerling.com" href="http://www.chrisgerling.com/" mce_href="http://www.chrisgerling.com" target="_blank">http://www.chrisgerling.com</a> - @hak5chris</p> <p>Guest:<br/> George Starcher - <a title="http://georgestarcher.com" href="http://georgestarcher.com/" mce_href="http://georgestarcher.com">http://georgestarcher.com</a> - @GeorgeStarcher</p> <p>Links:<br/> <a title="http://en.wikipedia.org/wiki/Conficker" href="http://en.wikipedia.org/wiki/Conficker" mce_href="http://en.wikipedia.org/wiki/Conficker" target="_blank">http://en.wikipedia.org/wiki/Conficker</a><br/> <a title="http://kevindevin.com" href="http://kevindevin.com/" mce_href="http://kevindevin.com" target="_blank">http://kevindevin.com</a><br/> <a title="http://georgestarcher.com/" href="http://georgestarcher.com/" mce_href="http://georgestarcher.com/" target="_blank">http://georgestarcher.com/</a><br/> <a title="http://typicalmacuser.com/" href="http://typicalmacuser.com/" mce_href="http://typicalmacuser.com/" target="_blank">http://typicalmacuser.com/</a><br/> <a title="http://en.wikipedia.org/wiki/The_Castles_of_Dr._Creep" href="http://en.wikipedia.org/wiki/The_Castles_of_Dr._Creep" mce_href="http://en.wikipedia.org/wiki/The_Castles_of_Dr._Creep" target="_blank">http://en.wikipedia.org/wiki/The_Castles_of_Dr._Creep</a><br/> <a title="http://www.opendns.com/" href="http://www.opendns.com/" mce_href="http://www.opendns.com/" target="_blank">http://www.opendns.com/</a><a title=" http://www.govtech.com/events/vatech2009" href="http://www.govtech.com/events/vatech2009" mce_href=" http://www.govtech.com/events/vatech2009" target="_blank"><br/> http://www.govtech.com/events/vatech2009</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gnedItdE7Ek:DTzp3FEgU8A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gnedItdE7Ek:DTzp3FEgU8A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=gnedItdE7Ek:DTzp3FEgU8A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gnedItdE7Ek:DTzp3FEgU8A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gnedItdE7Ek:DTzp3FEgU8A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=gnedItdE7Ek:DTzp3FEgU8A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gnedItdE7Ek:DTzp3FEgU8A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=gnedItdE7Ek:DTzp3FEgU8A:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gnedItdE7Ek:DTzp3FEgU8A:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/gnedItdE7Ek" height="1" width="1" alt=""/> 01:07:49 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP27.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP27.mp3?dest-id=18154 Mon, 30 Mar 2009 02:30:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/atkvb114eiA/SecuraBit_EP26.mp3 <p>SecuraBit Episode 26: "@Quine and back to Roots"</p> <p>This week we interview Zach Lanier aka @Quine, the Security Twits manager.  We ask all about Security Twits as well as delve into some security topics in the second half.  Listen all the way through to hear us as our normal selves without serious guests, it's a riot!</p> <p>Security Twits is a listing of security professionals on Twitter.  It's a great opportunity to discover other great people in our community.  Go to http://www.security-twits.com/ for more details and follow @securitytwits as well as @quine on twitter.</p> <p>Hosts:<br/> Anthony Gartner - http://www.anthonygartner.com - @anthonygartner<br/> Chris Gerling - http://www.chrisgerling.com - @hak5chris<br/> Christopher Mills - http://www.packetsense.net - @thechrisam<br/> Jason Mueller - http://www.securinate.com - @securabit_jay</p> <p>Guest:<br/> Zach Lanier - http://n0where.org/ - @quine</p> <p>Links:<br/> http://en.wikipedia.org/wiki/Conficker<br/> http://www.adam.com.au/bogaurd/PSYB0T.pdf<br/> http://it.slashdot.org/article.pl?sid=09/03/23/2257252&from=rss<br/> http://ciscofatty.com/</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=atkvb114eiA:aahJ1ag3KSc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=atkvb114eiA:aahJ1ag3KSc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=atkvb114eiA:aahJ1ag3KSc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=atkvb114eiA:aahJ1ag3KSc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=atkvb114eiA:aahJ1ag3KSc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=atkvb114eiA:aahJ1ag3KSc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=atkvb114eiA:aahJ1ag3KSc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=atkvb114eiA:aahJ1ag3KSc:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=atkvb114eiA:aahJ1ag3KSc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/atkvb114eiA" height="1" width="1" alt=""/> 56:20 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP26.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP26.mp3?dest-id=18154 Mon, 23 Mar 2009 11:31:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/7_wYfubK_e0/SecuraByte_EP06.mp3 <p>We're proud to <a mce_href="http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2009/03/20/exposing-flash-application-vulnerabilities-with-swfscan.aspx" href="http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2009/03/20/exposing-flash-application-vulnerabilities-with-swfscan.aspx" title="HP's announcement for SWFScan">announce</a> a new tool from HP's Application Security Center called <a mce_href="http://www.hp.com/go/swfscan" href="http://www.hp.com/go/swfscan" title="HP SWFScan">SWFScan</a>.  Prajakta Jagdale and Matt Wood from the HP Web Security Research Group  explain why <a mce_href="http://www.hp.com/go/swfscan" href="http://www.hp.com/go/swfscan" title="HP SWFScan">SWFScan</a> was created, and the hope that it will help developers produce more secure flash applications.</p> <p>Hosts<br/> Anthony Gartner - http://www.anthonygartner.com @AnthonyGartner<br/> Chris Gerling - Hak5Chris, http://www.chrisgerling.com @Hak5chris<br/> Chris Mills - ChrisAM @packetsense</p> <p>Guest<br/> Prajakta Jagdale (http://www.linkedin.com/pub/4/93a/785)<br/> Matt Wood - HP Web Security Research Group</p> <p>Links<br/> SWF Scan (http://www.hp.com/go/swfscan)<br/> HP (http://www.hp.com/)<br/> Win a Cheeseburger (http://h30423.www3.hp.com/?fr_story=3a98c704f7ef61299c19ef1f648f1acb1a5aeab8&rf=sitemap)</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=7_wYfubK_e0:VETAAAJaswc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=7_wYfubK_e0:VETAAAJaswc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=7_wYfubK_e0:VETAAAJaswc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=7_wYfubK_e0:VETAAAJaswc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=7_wYfubK_e0:VETAAAJaswc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=7_wYfubK_e0:VETAAAJaswc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=7_wYfubK_e0:VETAAAJaswc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=7_wYfubK_e0:VETAAAJaswc:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=7_wYfubK_e0:VETAAAJaswc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/7_wYfubK_e0" height="1" width="1" alt=""/> 31:10 clean wood,matt,web,security,flash,development,application,hp,fuzzing,whitehat,vulnerabilities,prajakta,jagdale,sdlc chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraByte_EP06.mp3http://traffic.libsyn.com/securabit/SecuraByte_EP06.mp3?dest-id=18154 Sat, 21 Mar 2009 18:57:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/gQeO89V2EvY/SecuraBit_EP25.mp3 <p>Securabit Episode 25 Show Notes "Jayson E. Street's f0rb1dd3n"</p> <p>This week we interview Jayson E. Street about his new novel f0rb1dd3n.</p> <p>f0rb1dd3n is a fictional story that also provides an overview of the tools, techniques, and culture of hackers. Throughout the story reference to an appendix that will provide the detail information about the item being referenced, and where to find more information. The expected release data is in July 2009 around Black Hat and Defcon.</p> <p>A beta of Sumo LINUX is targeted for release the first week of April.</p> <p>Quine will be our next guest interview.</p> <p>Hosts<br/> Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/> Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/> Chris Mills - ChrisAM @packetsense</p> <p>Guest<br/> Jayson E. Street - http://f0rb1dd3n.com/author.php</p> <p>Links<br/> http://f0rb1dd3n.com<br/> http://osvdb.org<br/> http://datalossdb.org</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gQeO89V2EvY:TmdJ1QTiynE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gQeO89V2EvY:TmdJ1QTiynE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=gQeO89V2EvY:TmdJ1QTiynE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gQeO89V2EvY:TmdJ1QTiynE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gQeO89V2EvY:TmdJ1QTiynE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=gQeO89V2EvY:TmdJ1QTiynE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gQeO89V2EvY:TmdJ1QTiynE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=gQeO89V2EvY:TmdJ1QTiynE:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=gQeO89V2EvY:TmdJ1QTiynE:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/gQeO89V2EvY" height="1" width="1" alt=""/> 51:17 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP25.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP25.mp3?dest-id=18154 Sun, 15 Mar 2009 22:17:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/ieCRXzIVOTY/secura_bit_ep24_a_night_with_g_mark_hardy_ <p>Securabit Episode 24 ìG, Mark Hardy</p> <p>In this episode of Securait we are joined by G. Mark Hardy, President of National Security Corporation. </p> <p>Topics<br/> The history of computer security industry<br/> The Shmoocon Puzzle 2009 Badge Puzzle<br/> The Value of Information<br/> Coffee Wars IX<br/> Developing Public Speaking Skills<br/> Explaining Technical Topics to Nontechnical Audiences<br/> Are bad times good for security professionals?<br/> The Value in Investing in Yourself</p> <p>Hosts<br/> Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/> Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/> Chris Mills - ChrisAM @packetsense<br/> Jason Mueller - @Securabit_Jay</p> <p>Guest<br/> G. Mark Hardy - http://www.gmarkhardy.com/</p> <p>Links<br/> Shmoocon 2009 Badge Puzzle (http://shmoocon.info)<br/> CoffeeWars (http://www.coffeewars.org)<br/> Between Silk and Cyanide: A Codemaker's War, 1941-1945 (http://www.amazon.com/Between-Silk-Cyanide-Codemakers-1941-1945/dp/0684864223)<br/> Tight Security for Tough Times (http://events.techtarget.com/secdefense/) </p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ieCRXzIVOTY:avtr3Tya5FI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ieCRXzIVOTY:avtr3Tya5FI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ieCRXzIVOTY:avtr3Tya5FI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ieCRXzIVOTY:avtr3Tya5FI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ieCRXzIVOTY:avtr3Tya5FI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ieCRXzIVOTY:avtr3Tya5FI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ieCRXzIVOTY:avtr3Tya5FI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ieCRXzIVOTY:avtr3Tya5FI:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ieCRXzIVOTY:avtr3Tya5FI:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/ieCRXzIVOTY" height="1" width="1" alt=""/> 01:16:26 clean chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://securabit.libsyn.com/secura_bit_ep24_a_night_with_g_mark_hardy_http://traffic.libsyn.com/securabit/SecuraBit_EP24.mp3?dest-id=18154 Fri, 27 Feb 2009 14:03:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/fx0nlzOSOG0/SecuraBit_EP23.mp3 <p>We have a brief discussion hackerspaces. Chris Gerling is looking into starting a hackerspace in the Richmond, VA area. <br/> <br/> Next we cover the details about SUMO LINUX 2.0 with our guest Marcus Carey. <br/> <br/> SUMO LINUX 2.0<br/> - Based on a stable version of Debian so we can update with Debian packages and Unbuntu Packages.<br/> -Windows response tools will be added.<br/> -Build a wiki with detailed documentation of all the tools included to make it easy for a newbie to get started.<br/> -No plans for multi-boot.<br/> -Distributed out via Bit Torrent. <br/> -Memory analysis and RAM dumping. Cheap USB sticks have really helped with this. The analysis is also proving to be a big help in forensics.<br/> -Will be coordinating the project on the Securabit forums (http://forums.securabit.com/index.php?showforum=9) <br/> -User feedback will help us make it better for everyone. <br/> -Post in the forum if you are interested in helping out.<br/> <br/> Other News Items<br/> -Homebrew patches for zero days in the enterprise. <br/> -Cell phones and international roaming charges at the border. <br/> -What hardware tools should you have in a forensic toolkit?<br/> <br/> Have something you want plugged on Securabit? Send it to Feedback@securabit.com. <br/> <br/> If you are interested in helping with the Richmond, VA area hackerspace contact Chris Gerling. <br/> <br/> Hosts<br/> Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/> Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/> Chris Mills - ChrisAM @packetsense<br/> Jason Mueller - @Securabit_Jay<br/> <br/> Guest<br/> Marcus Carey ñ SUMO LINUX http://www.sumolinux.com<br/> <br/> Links<br/> Hackerspaces http://hackerspaces.org <br/> SUMO LINUX http://www.sumolinux.com<br/> Adobe Zero Day http://isc.sans.org/diary.html?storyid=5902&rss <br/> Excel Zero Day http://isc.sans.org/diary.html?storyid=5923  & http://www.microsoft.com/technet/security/advisory/968272.mspx <br/> Forensic Talon http://www.logicubeforensics.com/products/hd_duplication/talon.asp <br mce_bogus="1"/></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=fx0nlzOSOG0:RcPZYcPkmFg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=fx0nlzOSOG0:RcPZYcPkmFg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=fx0nlzOSOG0:RcPZYcPkmFg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=fx0nlzOSOG0:RcPZYcPkmFg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=fx0nlzOSOG0:RcPZYcPkmFg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=fx0nlzOSOG0:RcPZYcPkmFg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=fx0nlzOSOG0:RcPZYcPkmFg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=fx0nlzOSOG0:RcPZYcPkmFg:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=fx0nlzOSOG0:RcPZYcPkmFg:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/fx0nlzOSOG0" height="1" width="1" alt=""/> 01:03:03 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP23.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP23.mp3?dest-id=18154 Fri, 13 Feb 2009 17:54:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/TGOPJ7poJPM/SecuraBit_EP22.mp3 Episode 22 Schmoocon Recap<br/><br/>We reflect back on Schmoocon 2009, the Podcasters Meetup, and look foward to DEFCON. <br/>Also we cover patch Tuesday, Back|Track 4, and a community replacement for Helix.<br/><br/>Hosts:<br/>Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/>Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/>Chris Mills - ChrisAM @packetsense<br/>Jason Mueller - @Securabit_Jay<br/><br/>Links:<br/><a href="http://www.shmoocon.org/">Schmoocon</a><br/><a href="http://www.podcastersmeetup.com/">Podcasters Meetup</a><br/><a href="http://www.microsoft.com/technet/security/bulletin/ms09-003.mspx">Microsoft Security Bulletin MS09-003</a> <br/><a href="http://www.microsoft.com/technet/security/bulletin/ms09-004.mspx">Microsoft Security Bulletin MS09-004</a> <br/><a href="http://backtrack4.blogspot.com/">Back|Track 4</a> <br/><a href="https://www.defcon.org/">DEFCON</a><br/><a href="http://www.e-fense.com/products.php">Helix</a> <br/><br/><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=TGOPJ7poJPM:BcjbVhj6lGY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=TGOPJ7poJPM:BcjbVhj6lGY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=TGOPJ7poJPM:BcjbVhj6lGY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=TGOPJ7poJPM:BcjbVhj6lGY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=TGOPJ7poJPM:BcjbVhj6lGY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=TGOPJ7poJPM:BcjbVhj6lGY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=TGOPJ7poJPM:BcjbVhj6lGY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=TGOPJ7poJPM:BcjbVhj6lGY:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=TGOPJ7poJPM:BcjbVhj6lGY:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/TGOPJ7poJPM" height="1" width="1" alt=""/> 56:37 clean podcast,episode,community,securabit,defcon,shmoocon,backtrack,livecd chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP22.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP22.mp3?dest-id=18154 Tue, 10 Feb 2009 23:35:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/YSSwnksGQro/ShmooCon09-PodcasterMeetup.mp3 Here is the audio from the meetup on 2/6 if anyone is interested.  We're releasing this on our feed for anyone who doesn't follow pauldotcom.  It's not edited, just raw audio so if you have any complaints keep them to yourself. ;)<br/><br/>Thanks to all who came!<br/><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YSSwnksGQro:o8IVKujCHik:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YSSwnksGQro:o8IVKujCHik:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=YSSwnksGQro:o8IVKujCHik:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YSSwnksGQro:o8IVKujCHik:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YSSwnksGQro:o8IVKujCHik:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=YSSwnksGQro:o8IVKujCHik:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YSSwnksGQro:o8IVKujCHik:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=YSSwnksGQro:o8IVKujCHik:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YSSwnksGQro:o8IVKujCHik:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/YSSwnksGQro" height="1" width="1" alt=""/> 38:51 no security,justice,pauldotcom,shmoocon,podcastersmeetup,podcastermeetup,mubix,smbminute,sploitcast chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/ShmooCon09-PodcasterMeetup.mp3http://traffic.libsyn.com/securabit/ShmooCon09-PodcasterMeetup.mp3?dest-id=18154 Tue, 10 Feb 2009 23:21:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/BLWrl4ork5o/SecuraBit_EP20.mp3 Sorry folks, we will not be releasing episodes out of order anymore.<br/><br/>In this episode we discuss:<br/><br/>Managing IP space inside a company network. Attributing a device on the network to an employee / function.<br/><br/>Standardizing vulnerability management using Security Content Automation Protocol (SCAP) and Open Vulnerability Assessment System (OpenVAS).<br/><br/>And briefly touch on the Obama Administration's Outline for their Cyber Security Strategy.<br/><br/>Use our Forums!<br/><br/>Don’t forget to give us a feedback on Itunes so we can bump the old shows off the list.<br/><br/>Thanks again for all the donations for the Tip Jar.<br/><br/>Hosts:<br/><br/>Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/>Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/>Chris Mills - ChrisAM @packetsense<br/>Andrew Borel - @Andrew_Secbit<br/><br/>Special Guest:<br/> <br/>Tim Krabec (@tkrabec) of the <a href="http://smbminute.com/">SMBMinute.com</a><br/><br/>Important links for the show and documents used:<br/><br/><a href="http://www.openvas.org/">Open Vulnerability Assessment System</a><br/><a href="http://en.wikipedia.org/wiki/Security_Content_Automation_Protocol">Security Content Automation Protocol</a><br/><a href="http://www.diigo.com/annotated/5e5c73ed44f27f40631af447951b4bf8">Obama Administration Outlines Cyber Security Strategy</a><br/><a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/12/08/AR2008120801944.html">More Cyber Security Regulations Recommended</a><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=BLWrl4ork5o:9fy4Yq7XS3g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=BLWrl4ork5o:9fy4Yq7XS3g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=BLWrl4ork5o:9fy4Yq7XS3g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=BLWrl4ork5o:9fy4Yq7XS3g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=BLWrl4ork5o:9fy4Yq7XS3g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=BLWrl4ork5o:9fy4Yq7XS3g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=BLWrl4ork5o:9fy4Yq7XS3g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=BLWrl4ork5o:9fy4Yq7XS3g:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=BLWrl4ork5o:9fy4Yq7XS3g:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/BLWrl4ork5o" height="1" width="1" alt=""/> 59:54 no forums,securabit,scap,openvas chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP20.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP20.mp3?dest-id=18154 Sat, 07 Feb 2009 16:02:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/QTd04N2mRaA/SecuraBit_EP21.mp3 <br/>In this special episode of Securabit we are interviewing Billy Hoffman and Prajakta Jagdale. Billy is the author of the book Ajax Security. Prajakta is a Security Research Engineer with HP and is presenting at this year's ShmooCon.<br/> <br/>Hosts:<br/><br/>Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/>Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/>Chris Mills - ChrisAM @packetsense<br/>Jason Mueller - SecurabitJay<br/><br/>Special Guests:<br/> Billy Hoffman (<a target="_blank" href="http://en.wikipedia.org/wiki/Billy_Hoffman">http://en.wikipedia.org/wiki/<wbr/>Billy_Hoffman</a>)<br/>Prajakta Jagdale (<a target="_blank" href="http://www.linkedin.com/pub/4/93a/785">http://www.linkedin.com/pub/<wbr/>4/93a/785</a>)<br/> <br/>Important links for the show and documents used:<br/>HP (<a target="_blank" href="http://www.hp.com/">http://www.hp.com/</a>)<br/>Ajax Security (<a target="_blank" href="http://www.amazon.com/Ajax-Security-Billy-Hoffman/dp/0321491939">http://www.amazon.com/Ajax-<wbr/>Security-Billy-Hoffman/dp/<wbr/>0321491939</a>)<br/> NoScript (<a target="_blank" href="http://noscript.net/">http://noscript.net/</a>)<br/>SchmoonCon (<a target="_blank" href="http://www.shmoocon.org/presentations-all.html#flash">http://www.shmoocon.org/<wbr/>presentations-all.html#flash</a>)HP's very own Prajakta Jagdale (She is the security research engineer for<br/> HP's Web Security Research Group) & Matt Wood (HP Web<br/> Security Research Group) join SecuraBit for a very informative discussion.<br/> <br/> Questions on Ajax, Flash, and Web Application security.<br/><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=QTd04N2mRaA:YRdghxQcULY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=QTd04N2mRaA:YRdghxQcULY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=QTd04N2mRaA:YRdghxQcULY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=QTd04N2mRaA:YRdghxQcULY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=QTd04N2mRaA:YRdghxQcULY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=QTd04N2mRaA:YRdghxQcULY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=QTd04N2mRaA:YRdghxQcULY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=QTd04N2mRaA:YRdghxQcULY:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=QTd04N2mRaA:YRdghxQcULY:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/QTd04N2mRaA" height="1" width="1" alt=""/> 01:14:36 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP21.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP21.mp3?dest-id=18154 Sun, 25 Jan 2009 20:36:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/B1mP-Od5PLg/SecuraBit_EP18.mp3 <p>This show is out of order and we debated if we would even release it. Well why not, have a listen if you don't like it delete it and remember we told you so ;)</p> <p>This show was a hostile take over by The guys at SMB Minute. It was all just for fun and happened on Dec 31 2008. Remember we warned you.... Listen at your own risk!!!</p> <p>Don’t forget to give us a feedback on Itunes so we can bump the old shows off the list.</p> <p>Thanks again for all the donations for the Tip Jar.</p> <p>Hosts:</p> <p>Rob Fuller - Mubix,<a mce_href="http://www.room362.com/" href="http://www.room362.com/" onclick="pageTracker._trackPageview('/outgoing/www.room362.com/?referer=');pageTracker._trackPageview('/outgoing/www.room362.com/?referer=');"> room362.com</a> <a mce_href="http://twitter.com/mubix" href="http://twitter.com/mubix" onclick="pageTracker._trackPageview('/outgoing/twitter.com/mubix?referer=');pageTracker._trackPageview('/outgoing/twitter.com/mubix?referer=');">@mubix</a><br/> Anthony Gartner - <a mce_href="http://www.anthonygartner.com/" href="http://www.anthonygartner.com/" onclick="pageTracker._trackPageview('/outgoing/www.anthonygartner.com/?referer=');pageTracker._trackPageview('/outgoing/www.AnthonyGartner.com?referer=');">AnthonyGartner.com</a> <a mce_href="http://twitter.com/AnthonyGartner" href="http://twitter.com/AnthonyGartner" onclick="pageTracker._trackPageview('/outgoing/twitter.com/AnthonyGartner?referer=');pageTracker._trackPageview('/outgoing/twitter.com/AnthonyGartner?referer=');">@AnthonyGartner</a><br/> Chris Gerling - Hak5Chris, <a mce_href="http://www.chrisgerling.com/" href="http://www.chrisgerling.com/" onclick="pageTracker._trackPageview('/outgoing/www.chrisgerling.com/?referer=');pageTracker._trackPageview('/outgoing/www.chrisgerling.com?referer=');">Chrisgerling.com</a> <a mce_href="http://twitter.com/Hak5chris" href="http://twitter.com/Hak5chris" onclick="pageTracker._trackPageview('/outgoing/twitter.com/Hak5chris?referer=');pageTracker._trackPageview('/outgoing/twitter.com/Hak5chris?referer=');">@Hak5chris</a><br/> Chris Mills - ChrisAM <a mce_href="http://twitter.com/packetsense" href="http://twitter.com/packetsense" onclick="pageTracker._trackPageview('/outgoing/twitter.com/packetsense?referer=');pageTracker._trackPageview('/outgoing/twitter.com/packetsense?referer=');">@packetsense</a><br/> Jason Mueller - SecurabitJay</p> <p>Important links for the show and documents used:</p> <p>NONE</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B1mP-Od5PLg:M22fLcjM3j0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B1mP-Od5PLg:M22fLcjM3j0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=B1mP-Od5PLg:M22fLcjM3j0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B1mP-Od5PLg:M22fLcjM3j0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B1mP-Od5PLg:M22fLcjM3j0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=B1mP-Od5PLg:M22fLcjM3j0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B1mP-Od5PLg:M22fLcjM3j0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=B1mP-Od5PLg:M22fLcjM3j0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B1mP-Od5PLg:M22fLcjM3j0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/B1mP-Od5PLg" height="1" width="1" alt=""/> 44:54 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP18.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP18.mp3?dest-id=18154 Sat, 24 Jan 2009 16:58:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/rxt8zQIThTk/SecuraBit_EP19.mp3 <p>In this episode which is likely to be out of sequence. SecuraBit did a recording on the 31st of the year and we will likely release it but episode 18 was a potential lost episode. Chris Mills talks about how twitter has changed some of it's security measures in the aftermath of the hack on its admin accounts. He even did some testing of a bogus account. We even got into some discussions on which types of phones handle what kind of sites. Please be careful, Jay is going to be getting a twitter account and might actually post. Oh FRAK!!!!</p> <p>The next part on the agenda was the new Windows 7 Beta. This caused Microsoft to DOS itself. Which really takes a LOT to happen.</p> <p>After the break we started to go into some tools we actually use or have used and wanted to recommend. Jay spoke of his Retina software they use. We did play a nice practical joke on jay and left him hanging in the wind for a few moments, but he did recover. Spoke about running <a mce_href="http://www.iss.net/" href="http://www.iss.net/" title="http://www.iss.net/">ISS</a> for the nice pretty reports for the higher up's and <a target="_blank" mce_href="http://www.nessus.org/nessus" href="http://www.nessus.org/nessus" title="http://www.nessus.org/nessus">Nessus</a> for the technicians. Anthony mentioned <a mce_href="hotspotshield.com" href="http://securabit.com/wp-admin/hotspotshield.com" title="hotspotshield.com">Hot Spot Shield</a> which works on windows, mac, iphone and many other platforms. The chat room recommended <a mce_href="http://openvpn.net" href="http://openvpn.net/" title="http://openvpn.net">Open VPN</a> but none of us had used it. Chris Mills also went into one of the tools he used back in the day but recently started to use again called <a mce_href="http://www.ntop.org" href="http://www.ntop.org/" title="http://www.ntop.org">NTop</a>.<br/> Talked about itunes going DRM free. Always a good thing!!! This then drifted in to a conversation about players in general. Jay recommended engadget.com and how they covered CES so well. This then divulged into computers for kids as well as netbooks.<br/> Anthony is getting close to being able to do the Mix MInus. This means there will be the chance to play the music / voice mails / audio feedback on to everyone so that we can comment or answer the questions. This will be a welcome addition to the show.<br/> Jay stated our new goal - to be "Internet Famous"</p> <p>Don’t forget to give us a feedback on Itunes so we can bump the old shows off the list.</p> <p>Thanks again for all the donations for the Tip Jar.</p> <p>Hosts:</p> <p>Rob Fuller - Mubix,<a mce_href="http://www.room362.com/" href="http://www.room362.com/" onclick="pageTracker._trackPageview('/outgoing/www.room362.com/?referer=');"> room362.com</a> <a mce_href="http://twitter.com/mubix" href="http://twitter.com/mubix" onclick="pageTracker._trackPageview('/outgoing/twitter.com/mubix?referer=');">@mubix</a><br/> Anthony Gartner - <a mce_href="http://www.anthonygartner.com/" href="http://www.anthonygartner.com/" onclick="pageTracker._trackPageview('/outgoing/www.AnthonyGartner.com?referer=');">AnthonyGartner.com</a> <a mce_href="http://twitter.com/AnthonyGartner" href="http://twitter.com/AnthonyGartner" onclick="pageTracker._trackPageview('/outgoing/twitter.com/AnthonyGartner?referer=');">@AnthonyGartner</a><br/> Chris Gerling - Hak5Chris, <a mce_href="http://www.chrisgerling.com/" href="http://www.chrisgerling.com/" onclick="pageTracker._trackPageview('/outgoing/www.chrisgerling.com?referer=');">Chrisgerling.com</a> <a mce_href="http://twitter.com/Hak5chris" href="http://twitter.com/Hak5chris" onclick="pageTracker._trackPageview('/outgoing/twitter.com/Hak5chris?referer=');">@Hak5chris</a><br/> Chris Mills - ChrisAM <a mce_href="http://twitter.com/packetsense" href="http://twitter.com/packetsense" onclick="pageTracker._trackPageview('/outgoing/twitter.com/packetsense?referer=');">@packetsense</a><br/> Jason Mueller - SecurabitJay</p> <p>Important links for the show and documents used:</p> <p>http://www.iss.net/<br/> http://www.nessus.org/nessus<br/> hotspotshield.com<br/> http://openvpn.net<br/> http://www.ntop.org</p> <p>Check out the end of the cast for Jay's audition for American 1dol!!!<br/></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=rxt8zQIThTk:RaosV83xy1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=rxt8zQIThTk:RaosV83xy1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=rxt8zQIThTk:RaosV83xy1A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=rxt8zQIThTk:RaosV83xy1A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=rxt8zQIThTk:RaosV83xy1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=rxt8zQIThTk:RaosV83xy1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=rxt8zQIThTk:RaosV83xy1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=rxt8zQIThTk:RaosV83xy1A:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=rxt8zQIThTk:RaosV83xy1A:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/rxt8zQIThTk" height="1" width="1" alt=""/> 48:01 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraBit_EP19.mp3http://traffic.libsyn.com/securabit/SecuraBit_EP19.mp3?dest-id=18154 Wed, 07 Jan 2009 19:58:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/Wk9vM-jJgaI/SecuraByte_EP05.mp3 <p>News at 11. Well really we started recording about 8 PM on Monday January 5th.  In this SecuraByte episode, Securabit had its largest conference call yet.  Securabit was joined by the guys from both SecurityJustice.com and SMBMinute.com, as well as Melissa on Twitter AKA @Geekgrrl. We discussed the security vulnerability discovered with twitter.com's tech support.  This is a service many of us use and enjoy.  Please have a listen in while we discuss amongst ourselves.</p> <p>Don’t forget to give us a feedback on Itunes so we can bump the old shows off the list.</p> <p>Thanks again for all the donations for the Tip Jar.</p> <p>Hosts:</p> <p>Rob Fuller - Mubix, room362.com @mubix<br/> Anthony Gartner - AnthonyGartner.com @AnthonyGartner<br/> Chris Gerling - Hak5Chris, Chrisgerling.com @Hak5chris<br/> Chris Mills - ChrisAM @packetsense<br/> Jason Mueller - SecurabitJay</p> <p>Special Guests: Melissa (@geekgrrl), Tim Krabec (@tkrabec) of the SMBMinute.com, Tom (@agent0x0) securityjustice.com, and Dave (@Securi-D) securityjustice.com</p> <p>Important links for the show and documents used:</p> <p>Britney, Obama Twitter Feeds Hijacked Following Phishing Attack<br/> http://blog.wired.com/27bstroke6/2009/01/twits-get-phish.html<br/> Fire Fox Addon "Long URL Please"<br/> http://www.longurlplease.com/<br/> WIRED just posted this follow up:<br/> http://blog.wired.com/27bstroke6/2009/01/professed-twitt.html</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=Wk9vM-jJgaI:UA8x03pgCWY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=Wk9vM-jJgaI:UA8x03pgCWY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=Wk9vM-jJgaI:UA8x03pgCWY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=Wk9vM-jJgaI:UA8x03pgCWY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=Wk9vM-jJgaI:UA8x03pgCWY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=Wk9vM-jJgaI:UA8x03pgCWY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=Wk9vM-jJgaI:UA8x03pgCWY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=Wk9vM-jJgaI:UA8x03pgCWY:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=Wk9vM-jJgaI:UA8x03pgCWY:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/Wk9vM-jJgaI" height="1" width="1" alt=""/> 39:08 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraByte_EP05.mp3http://traffic.libsyn.com/securabit/SecuraByte_EP05.mp3?dest-id=18154 Mon, 22 Dec 2008 17:42:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/eBag-gwAgxM/Securabit_EP17.mp3 <p><span> </span>This is a unique episode for SecuraBit, we are teaming up with the Security Justice Podcast to do a double header show.  SecuraBit recorded their show from 8-9 PST, then handed off the reins to Security Justice to finish out the night.  In doing so we had a combine set of prizes.  To win the prize required that you listen and get the correct answer to a trivia question given on SecuraBit.  You also had to listen to the Security Justice Podcast to and know the answer to their question as well.  SecuraBit even manged to start on time as well as hand off on time.  It was a very different type of show due to trying to condense everything in to a single hour.  (Good thing we didn't have any real content, Just kidding)</p> <p><span><span> </span></span>SecuraBit opened the show but because Jay needed to switch some things out we actually went to a break faster than normal.  When we returned from the break we did indeed have Jay on the line.  We started to go into the new Microsoft Zero Day, and Jay informed us that he had been out of the loop for a week but since the patch only came out 73 minute before he found out about it he figured he was right on time.</p> <p><span> The next topic was Chris Gerling going to sans and taking the forensics 508 course.  Chris then told us that he felt like he should never have picked up a helix disk based on the level of knowledge he has now compared to before the course.</span> We also discussed that many states are requiring a Private Investigators license to do forensics.   That none of us on the show agreed that this was a good idea, but yet several lobbyists have been pushing for this very idea.  Jay asked the question about what was thought about the BGP security vulnerability.  Anthony discussed a new site he went to as a security review.</p> <p><span> </span>After the break, we went into the trivia question.  The trivia Question was: What are the flags you have to set in order to do an NMAP-style XMAS scan in Unicornscan? We will post the winner soon in conjunction with the Security Justice podcast.  After the trivia question we went into thoughts on what to do about prior employees, handling creditials, voice mails, and emails.  We referenced the guy in San Francisco who was fired from the job, but yet still was able to hold the network he left hostage.</p> <p>Don't forget to give us a feedback on Itunes so we can bump the old shows off the list.</p> <p>Thanks again for all the donations for the Tip Jar.</p> <p>Hosts:</p> <p>Rob Fuller - Mubix, room362.com<br/> Anthony Gartner - AnthonyGartner.com<br/> Chris Gerling - Hak5Chris, Chrisgerling.com<br/> Chris Mills - ChrisAM<br/> Jason Mueller - SecurabitJay</p> <p>Important links for the show and documents used:</p> <p>No links this time!</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=eBag-gwAgxM:qIqhiyQLv64:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=eBag-gwAgxM:qIqhiyQLv64:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=eBag-gwAgxM:qIqhiyQLv64:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=eBag-gwAgxM:qIqhiyQLv64:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=eBag-gwAgxM:qIqhiyQLv64:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=eBag-gwAgxM:qIqhiyQLv64:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=eBag-gwAgxM:qIqhiyQLv64:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=eBag-gwAgxM:qIqhiyQLv64:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=eBag-gwAgxM:qIqhiyQLv64:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/eBag-gwAgxM" height="1" width="1" alt=""/> 44:52 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP17.mp3http://traffic.libsyn.com/securabit/Securabit_EP17.mp3?dest-id=18154 Wed, 10 Dec 2008 06:13:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/LCyPXhJxC40/Securabit_EP16.mp3 <p>In this episode we talk about Chris Gerling attending the <a target="_blank" mce_href="http://www.sans.org/cdi08/" href="http://www.sans.org/cdi08/" title="http://www.sans.org/cdi08/">SANS Cyber Defense Initiative 2008</a> in Washing DC.  He will be taking the <a target="_blank" mce_href="http://www.sans.org/training/description.php?mid=98" href="http://www.sans.org/training/description.php?mid=98" title="http://www.sans.org/training/description.php?mid=98">Security 508 Computer Forensics, Investigation, and Response course</a>.  If you are at the conference please make sure you look for Chris.  He also plans to take the new <a target="_blank" mce_href="http://www.sans.org/press/giac_pentest_cert.php" href="http://www.sans.org/press/giac_pentest_cert.php" title="http://www.sans.org/press/giac_pentest_cert.php">GPEN test</a> while there.  We might be bringing the sock monkey to Shmoocon and have him do some interviews.</p> <p>We also spoke about how few businesses are actually checking a persons signature or id for credit cards.  Most businesses are simply not checking the cards like they should be. Chris is beginning to wonder if they will card his fiancee between now and when they get married.</p> <p>After the break we came back and mentioned that we were not going going to drop the Fbomb for 40 bucks as was hinted at in the chat room.  Went into the issue of dns forwarding being done on  <a target="_blank" mce_href="CheckFree.com" href="http://securabit.com/wp-admin/CheckFree.com" title="CheckFree.com">CheckFree.com </a> The article was actually from <a target="_blank" mce_href="http://voices.washingtonpost.com/securityfix/2008/12/hackers_hijacked_large_e-bill.html?nav=rss_blog" href="http://voices.washingtonpost.com/securityfix/2008/12/hackers_hijacked_large_e-bill.html?nav=rss_blog" title="http://voices.washingtonpost.com/securityfix/2008/12/hackers_hijacked_large_e-bill.html?nav=rss_blog">The Washington Post by Brian Krebs</a>.  Anthony put a shout out to Ed Smiley for sending both Mubix and Anthony a copy of  <a target="_blank" mce_href="http://agilewebsolutions.com/products/1Password" href="http://agilewebsolutions.com/products/1Password" title="http://agilewebsolutions.com/products/1Password">1password</a>.  It was a Great hookup.  Then we covered various apps on the IPhone.  We touched on what the <a target="_blank" mce_href="http://www.google.com/url?sa=t&source=web&ct=res&cd=3&url=http%3A%2F%2Fchoices.cs.uiuc.edu%2FMobilSec%2Fposted_docs%2F3G_Security_Overview.ppt&ei=SEA_SZfELpqYwwHEjNzjDg&usg=AFQjCNEk8TMsmdDPBFNPZazURf0eZRzQjg&sig2=DLx7hQFHbPcDtIIJjSDdbw" href="http://www.google.com/url?sa=t&source=web&ct=res&cd=3&url=http%3A%2F%2Fchoices.cs.uiuc.edu%2FMobilSec%2Fposted_docs%2F3G_Security_Overview.ppt&ei=SEA_SZfELpqYwwHEjNzjDg&usg=AFQjCNEk8TMsmdDPBFNPZazURf0eZRzQjg&sig2=DLx7hQFHbPcDtIIJjSDdbw" title="http://www.google.com/url?sa=t&source=web&ct=res&cd=3&url=http%3A%2F%2Fchoices.cs.uiuc.edu%2FMobilSec%2Fposted_docs%2F3G_Security_Overview.ppt&ei=SEA_SZfELpqYwwHEjNzjDg&usg=AFQjCNEk8TMsmdDPBFNPZazURf0eZRzQjg&sig2=DLx7hQFHbPcDtIIJjSDdbw">encryption is on a 3g network</a>.  We found a great powerpoint slide show explaining it.</p> <p>After the last break we went into firewall set ups.  Everyone but Anthony is running FIOS so the discussion on how to set up the coax or ethernet wan links ensued.  You will just have to listen to it to see what kind of sense it makes.  We did get lots of comments from our faithfull in the irc channel (irc.freenode.net #Securabit).  From there the show just went down hill with strippers and alcohol.</p> <p>Don't forget to give us a feedback on Itunes so we can bump the old shows off the list.</p> <p>Thanks again for all the donations for the Tip Jar.</p> <p>Hosts:</p> <p>Rob Fuller - Mubix, room362.com<br/> Anthony Gartner - AnthonyGartner.com<br/> Chris Gerling - Hak5Chris, Chrisgerling.com<br/> Chris Mills - ChrisAM<br/> Jason Mueller - SecurabitJay</p> <p>Special Guest: Joel Esler from sourcefire.com and Joelesler.net</p> <p>Important links for the show and documents used:</p> <p>http://www.sans.org/cdi08/<br/> http://www.sans.org/training/description.php?mid=98<br/> http://www.sans.org/press/giac_pentest_cert.php<br/> http://voices.washingtonpost.com/securityfix/2008/12/hackers_hijacked_large_e-bill.html?nav=rss_blog</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=LCyPXhJxC40:YRUUdCFbdTw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=LCyPXhJxC40:YRUUdCFbdTw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=LCyPXhJxC40:YRUUdCFbdTw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=LCyPXhJxC40:YRUUdCFbdTw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=LCyPXhJxC40:YRUUdCFbdTw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=LCyPXhJxC40:YRUUdCFbdTw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=LCyPXhJxC40:YRUUdCFbdTw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=LCyPXhJxC40:YRUUdCFbdTw:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=LCyPXhJxC40:YRUUdCFbdTw:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/LCyPXhJxC40" height="1" width="1" alt=""/> 52:37 yes chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP16.mp3http://traffic.libsyn.com/securabit/Securabit_EP16.mp3?dest-id=18154 Mon, 01 Dec 2008 00:54:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/e0_HEPYruAQ/Securabit_EP15.mp3 <p>Sorry for the delay in getting this episode out this time.  Anthony got stuck with doing some actual work and then we all got hit by the holidays.  We do hope you enjoy the show this week.</p> <p>Mubix attended the CSI Conference and no not CSI on TV, the <a title="http://www.csiannual.com/" href="http://www.csiannual.com/" mce_href="http://www.csiannual.com/" target="_blank">CSI Anual conference</a>. The topic he found intriguing is Security and Responsibility.  If something happens how and to what extent as security professionals are we responsible and accountable.  This is a topic he brought up on twitter as well and got a lot of replies back.  Some agreeing and some not, Feel free to weigh in on this one.</p> <p>Some of the references that were brought up in response to this topic were <a title="http://sandboxie.com/" href="http://sandboxie.com/" mce_href="http://sandboxie.com/" target="_blank">Sandboxie</a>, <a title="http://www.castlecops.com/" href="http://www.castlecops.com/" mce_href="http://www.castlecops.com/" target="_blank">castlecops</a>, and <a title="http://en.wikipedia.org/wiki/Web_of_trust" href="http://en.wikipedia.org/wiki/Web_of_trust" mce_href="http://en.wikipedia.org/wiki/Web_of_trust" target="_blank">Web of Trust</a>.</p> <p>After the break we went into a discussion on <a title="http://en.wikipedia.org/wiki/Dd_(Unix)" href="http://en.wikipedia.org/wiki/Dd_%28Unix%29" mce_href="http://en.wikipedia.org/wiki/Dd_(Unix)" target="_blank">DD Images</a> and using <a title="http://liveview.sourceforge.net/" href="http://liveview.sourceforge.net/" mce_href="http://liveview.sourceforge.net/" target="_blank">live view</a> on them, but since that was a fail, Chris used <a title="http://en.wikipedia.org/wiki/QEMU" href="http://en.wikipedia.org/wiki/QEMU" mce_href="http://en.wikipedia.org/wiki/QEMU" target="_blank">QEMU</a>.   You can even go get some test images at <a title="http://www.projecthoneypot.org/" href="http://www.projecthoneypot.org/" mce_href="http://www.projecthoneypot.org/" target="_blank">ProjectHoneypot.org</a> and convert them using a tool <a title="http://www.bschatz.org/2006/p2v/" href="http://www.bschatz.org/2006/p2v/" mce_href="http://www.bschatz.org/2006/p2v/" target="_blank">dd2vmdk</a> .  The conversation went into WPA is not Busted.  We referenced Steven Gibson's explantion and Joel Eslers <a title="http://isc.sans.org/diary.html?storyid=5300" href="http://isc.sans.org/diary.html?storyid=5300" mce_href="http://isc.sans.org/diary.html?storyid=5300" target="_blank">blog posts</a> on the subject.  During the break we discussed a great site as well from Josh Wright about <a title="http://www.wirelessve.org/news_entries" href="http://www.wirelessve.org/news_entries" mce_href="http://www.wirelessve.org/news_entries" target="_parent">Wireless Vulnerabilities & Exploits</a></p> <p>After the Break we were able to bring in the real Joel Esler.  Joel is part time batman as well and Joel has aggred to give us at least one batmobile, but we digress.  He actually works for <a title="http://www.sourcefire.com/" href="http://www.sourcefire.com/" mce_href="http://www.sourcefire.com/" target="_blank">sourcefire</a>.  This is an organzation that you should take a look at, it is well worth your time.  He also is an avid security blogger and has his own blog at Joel Esler.net  Joel talks about he IPS's of today are simply not the same as many of the original IPS's.</p> <p>We lose Joel a little bit during the break and we cut a little more abruptly to break than we normally do.  Sorry about that!  But we kind of ran out of content and time.</p> <p>SecuraBit would like to make sure everyone has a Happy Holidays and don't forget to leave us feedback on Itunes even if you don't listen via Itunes.  We want to get some of these casts out of there that have not posted in years.</p> <p>Hosts:</p> <p>Rob Fuller - Mubix, room362.com<br/> Anthony Gartner - AnthonyGartner.com<br/> Chris Gerling - Hak5Chris, Chrisgerling.com<br/> Chris Mills - ChrisAM<br/> Jason Mueller - SecurabitJay</p> <p>Special Guest: Joel Esler from sourcefire.com and Joelesler.net</p> <p>Important links for the show and documents used:</p> <p>http://www.phishtank.com/<br/> http://projecthoneypot.org/<br/> http://www.sourcefire.com/products/3D/?semg=USSFR2&gclid=CISstozXgpcCFQVKtAodijdxXQ<br/> http://www.joelesler.net/finshake/Blog/Blog.html<br/> http://www.wirelessve.org/news_entries<br/> http://en.wikipedia.org/wiki/Dd_(Unix)<br/> http://en.wikipedia.org/wiki/QEMU<br/> http://isc.sans.org/diary.html?rss<br/> http://isc.sans.org/diary.html?storyid=5300<br/> http://www.clamav.net/<br/> http://sandboxie.com/<br/> http://www.castlecops.com/<br/> http://en.wikipedia.org/wiki/Web_of_trust</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e0_HEPYruAQ:dFzku0bpL-g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e0_HEPYruAQ:dFzku0bpL-g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=e0_HEPYruAQ:dFzku0bpL-g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e0_HEPYruAQ:dFzku0bpL-g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e0_HEPYruAQ:dFzku0bpL-g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=e0_HEPYruAQ:dFzku0bpL-g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e0_HEPYruAQ:dFzku0bpL-g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=e0_HEPYruAQ:dFzku0bpL-g:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e0_HEPYruAQ:dFzku0bpL-g:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/e0_HEPYruAQ" height="1" width="1" alt=""/> 52:54 yes chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP15.mp3http://traffic.libsyn.com/securabit/Securabit_EP15.mp3?dest-id=18154 Mon, 10 Nov 2008 18:10:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/jahKRjHBGV8/securabit_episode_14_we_remind_you_to_not_get_swacked_ <p>In this episode we have a special guest Adrian from <a title="http://irongeek.com" href="http://irongeek.com/" mce_href="http://irongeek.com" target="_blank">Irongeek.com</a>.  We conversed about the going's on at <a title="http://www.phreaknic.info/pn12/" href="http://www.phreaknic.info/pn12/" mce_href="http://www.phreaknic.info/pn12/" target="_blank">phreaknic</a>. Adrian presented down there and this is where he ended up meeting Bruce and Heidi Potter from the <a title="http://shmoocon.org" href="http://shmoocon.org/" mce_href="http://shmoocon.org" target="_blank">Shmoocon Group</a>.  The discussion covered a little more on the MS08-067 issues, Sans Training, and CEH.  This is the first episode where we experimented and used stickam.com to allow the listeners to see just how messed up we really are.</p> <p>After the break, Adrian spoke about how one of the guys from <a title="http://www.binrev.com/" href="http://www.binrev.com/" mce_href="http://www.binrev.com/" target="_blank">binrev.com</a> turned him on to a book for review called <a title="http://www.amazon.com/Googling-Security-Much-Google-About/dp/0321518667" href="http://www.amazon.com/Googling-Security-Much-Google-About/dp/0321518667" mce_href="http://www.amazon.com/Googling-Security-Much-Google-About/dp/0321518667" target="_blank">Googling Security: How Much Does Google Know About You?</a> written by Greg Conti.  Anthony ended up going into some of new virus / trojan infections.  These were on the lines of antivirus 2009 and others of the type.  Consensus was that a good cleaner tool was called <a title="http://www.technibble.com/repair-tool-of-the-week-roguefix/" href="http://www.technibble.com/repair-tool-of-the-week-roguefix/" mce_href="http://www.technibble.com/repair-tool-of-the-week-roguefix/" target="_blank">Rougefix</a> (recommendatin from the IRC channel by Tim Krabek).  Adrian recommended a song by <a title="http://www.tomsmithonline.com/main1.htm" href="http://www.tomsmithonline.com/main1.htm" mce_href="http://www.tomsmithonline.com/main1.htm" target="_blank">Tom Smith</a> about Technical Suport for Dad.</p> <p>We went into a little more information on the <a title="http://www.dvorak.org/blog/?p=29213" href="http://www.dvorak.org/blog/?p=29213" mce_href="http://www.dvorak.org/blog/?p=29213" target="_blank">New York School district's vulnerability</a>. We also went into a little bit on how to lock down a printer as well.  Found a list of the <a title="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&taskId=120&prodSeriesId=84028&prodTypeId=18972&prodSeriesId=84028&objectID=bpl01965" href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&taskId=120&prodSeriesId=84028&prodTypeId=18972&prodSeriesId=84028&objectID=bpl01965" mce_href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&taskId=120&prodSeriesId=84028&prodTypeId=18972&prodSeriesId=84028&objectID=bpl01965" target="_blank">PJL</a> commands for HP.</p> <p>Securabit wanted to remind everyone that if you have anything to say you are welcome to come on the show and tell us what you think and know.  It is an open invitation. We want to thank those individuals who have donated to the podcast as well.  Check out a couple of our friends podcasts at http://securityjustice.com and the http://SMBminute.com</p> <p>Hosts:</p> <p>Chris Mills - ChrisAM</p> <p>Chris Gerling - Hak5Chris, Chrisgerling.com</p> <p>Anthony Gartner - AnthonyGartner.com</p> <p>Jason Mueller - SecurabitJay</p> <p>Special Guest: Adrian from Irongeek.com</p> <p>Important links for the show and documents used:</p> <p>http://irongeek.com<br/> http://www.phreaknic.info/pn12/<br/> http://shmoocon.org<br/> http://www.binrev.com/<br/> http://www.amazon.com/Googling-Security-Much-Google-About/dp/0321518667<br/> http://www.technibble.com/repair-tool-of-the-week-roguefix/<br/> http://www.tomsmithonline.com/main1.htm<br/> http://timesunion.com/AspStories/story.asp?storyID=732745<br/> http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&taskId=120&prodSeriesId=84028&prodTypeId=18972&prodSeriesId=84028&objectID=bpl01965</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jahKRjHBGV8:kUB4ADlXkVU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jahKRjHBGV8:kUB4ADlXkVU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=jahKRjHBGV8:kUB4ADlXkVU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jahKRjHBGV8:kUB4ADlXkVU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jahKRjHBGV8:kUB4ADlXkVU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=jahKRjHBGV8:kUB4ADlXkVU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jahKRjHBGV8:kUB4ADlXkVU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=jahKRjHBGV8:kUB4ADlXkVU:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=jahKRjHBGV8:kUB4ADlXkVU:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/jahKRjHBGV8" height="1" width="1" alt=""/> 54:46 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://securabit.libsyn.com/securabit_episode_14_we_remind_you_to_not_get_swacked_http://traffic.libsyn.com/securabit/SecurabitEP14.mp3?dest-id=18154 Thu, 30 Oct 2008 19:36:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/9xKzyw0pSHM/securabit_episode_13_b00_happy_ha110w33n_ <p>In the Halloween Episode 13 where we neglected to mention Halloween, the guys talk about a wide range of topics on the show.  The topics we covered included Australia joining the Great Firewall of China, The FBI's Dark Market Takedown, National Cyber Security Awareness Month, CERT Training, spaghetti sauce, and phreaknic 12 (where Chris was going to go but was not able to at the last minute)</p> <p>The East Coast is represented up and down with Chris G traveling to New York.  We even had a ghostly apparition that sounded a lot like Jason Mueller.</p> <p>Hosts:</p> <p>Chris Mills - ChrisAM</p> <p>Chris Gerling - Hak5Chris</p> <p>Anthony Gartner - AnthonyGartner.com</p> <p>Jason Mueller -</p> <p>Important links for the show and documents used:</p> <p><a target="_blank" mce_href="http://www.techcrunch.com/2007/12/30/australia-joins-china-in-censoring-the-internet/" href="http://www.techcrunch.com/2007/12/30/australia-joins-china-in-censoring-the-internet/" title="Austraila">http://www.techcrunch.com/2007/12/30/australia-joins-china-in-censoring-the-internet/</a></p> <p><a target="_blank" mce_href="http://www.fbi.gov/page2/oct08/darkmarket_102008.html" href="http://www.fbi.gov/page2/oct08/darkmarket_102008.html" title="Dark Market">http://www.fbi.gov/page2/oct08/darkmarket_102008.html</a></p> <p><a mce_href="http://www.sickurity.com/" href="http://www.sickurity.com/" title="Sickurity.com">http://www.sickurity.com/</a></p> <p><a target="_blank" mce_href="http://www.us-cert.gov/press_room/cyber_security_awareness_month.html" href="http://www.us-cert.gov/press_room/cyber_security_awareness_month.html" title="National Cyber Security Month">http://www.us-cert.gov/press_room/cyber_security_awareness_month.html</a></p> <p><a target="_blank" mce_href="https://www.vte.cert.org/vteweb/" href="https://www.vte.cert.org/vteweb/" title="Cert.org Training">https://www.vte.cert.org/vteweb/</a></p> <p><a target="_blank" mce_href="http://www.acm.org/" href="http://www.acm.org/" title="ACM">http://www.acm.org/</a></p> <p><a target="_blank" mce_href="http://www.schneier.com/essay-241.html" href="http://www.schneier.com/essay-241.html" title="Airport Spagetti">http://www.schneier.com/essay-241.html</a></p> <p><a target="_blank" mce_href="http://www.phreaknic.info/pn12/" href="http://www.phreaknic.info/pn12/" title="Phreaknic 12">http://www.phreaknic.info/pn12/</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9xKzyw0pSHM:Qrx-b951OqU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9xKzyw0pSHM:Qrx-b951OqU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=9xKzyw0pSHM:Qrx-b951OqU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9xKzyw0pSHM:Qrx-b951OqU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9xKzyw0pSHM:Qrx-b951OqU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=9xKzyw0pSHM:Qrx-b951OqU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9xKzyw0pSHM:Qrx-b951OqU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=9xKzyw0pSHM:Qrx-b951OqU:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9xKzyw0pSHM:Qrx-b951OqU:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/9xKzyw0pSHM" height="1" width="1" alt=""/> 46:16 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://securabit.libsyn.com/securabit_episode_13_b00_happy_ha110w33n_http://traffic.libsyn.com/securabit/SecuraBit_EP13.mp3?dest-id=18154 Sat, 25 Oct 2008 05:38:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/9tmd_A230rY/secura_byte_episode_4 <p>This evening we had a podcast about the new Zero Day Exploit.  This exploit covers all versions of windows from 2000 and above.  Securabit brought in Tim Krabec from the smbminute.com podcast.  This covers the article from Microsoft MS08-067.</p> <p>Hosts:<br/> Chris Mills - ChrisAM</p> <p>Chris Gerling - Hak5Chris</p> <p>Anthony Gartner - AnthonyGartner.com</p> <p>Guests:</p> <p>Tim Krabec (Cray Beck)</p> <p>Important links for the show and documents used:</p> <p><a title="http://docs.google.com/Presentation?id=dghttrwg_26c47c5xcx" href="http://docs.google.com/Presentation?id=dghttrwg_26c47c5xcx" mce_href="http://docs.google.com/Presentation?id=dghttrwg_26c47c5xcx" target="_blank">http://docs.google.com/Presentation?id=dghttrwg_26c47c5xcx</a><br/> <a title="http://blogs.technet.com/msrc/archive/2008/10/23/ms08-067-released.aspx" href="http://blogs.technet.com/msrc/archive/2008/10/23/ms08-067-released.aspx" mce_href="http://blogs.technet.com/msrc/archive/2008/10/23/ms08-067-released.aspx" target="_blank">http://blogs.technet.com/msrc/archive/2008/10/23/ms08-067-released.aspx</a><br/> <a title="http://blogs.msdn.com/sdl/archive/2008/10/22/ms08-067.aspx" href="http://blogs.msdn.com/sdl/archive/2008/10/22/ms08-067.aspx" mce_href="http://blogs.msdn.com/sdl/archive/2008/10/22/ms08-067.aspx" target="_blank">http://blogs.msdn.com/sdl/archive/2008/10/22/ms08-067.aspx</a><br/> <a title="http://milw0rm.com/exploits/6824" href="http://milw0rm.com/exploits/6824" mce_href="http://milw0rm.com/exploits/6824" target="_blank">http://milw0rm.com/exploits/6824</a><br/> <a title="http://blogs.technet.com/swi/" href="http://blogs.technet.com/swi/" mce_href="http://blogs.technet.com/swi/" target="_blank">http://blogs.technet.com/swi/</a><br/> <a href="http://media.libsyn.com/media/securabit/SecuraByte_04.mp3" mce_href="http://media.libsyn.com/media/securabit/SecuraByte_04.mp3">SecuraByte Episode 4</a>Beer</p> <p>Tim's beer Optimator Spaten Munich</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9tmd_A230rY:yqsmWofOPKY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9tmd_A230rY:yqsmWofOPKY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=9tmd_A230rY:yqsmWofOPKY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9tmd_A230rY:yqsmWofOPKY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9tmd_A230rY:yqsmWofOPKY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=9tmd_A230rY:yqsmWofOPKY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9tmd_A230rY:yqsmWofOPKY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=9tmd_A230rY:yqsmWofOPKY:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=9tmd_A230rY:yqsmWofOPKY:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/9tmd_A230rY" height="1" width="1" alt=""/> 25:44 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://securabit.libsyn.com/secura_byte_episode_4http://traffic.libsyn.com/securabit/SecuraByte_04.mp3?dest-id=18154 Mon, 13 Oct 2008 14:03:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/emwci900FaQ/Securabit_EP12.mp3 <p>Securabit Episode 12<br/> <br/> Anthony Gartner<br/> Chris Mills<br/> Chris Gerling<br/> <br/> Chris G rides the Failbus with his FIOS connection<br/> <br/> IT Jobs: No "Widespread Worry"?: <a target="_blank" mce_href="http://blogs.cioinsight.com/biztech30/content/it_careers/it_jobs_no_widespread_worry_2.html" href="http://blogs.cioinsight.com/biztech30/content/it_careers/it_jobs_no_widespread_worry_2.html">http://blogs.cioinsight.com/<wbr/>biztech30/content/it_careers/<wbr/>it_jobs_no_widespread_worry_2.<wbr/>html</a><br/> <br/> Air Force Cyber Command: <a target="_blank" mce_href="http://blog.wired.com/defense/2008/08/air-force-suspe.html" href="http://blog.wired.com/defense/2008/08/air-force-suspe.html">http://blog.wired.com/defense/<wbr/>2008/08/air-force-suspe.html</a><br/> <br/> Cracking one billion passwords per second with NVIDIA video card - <a target="_blank" mce_href="http://www.net-security.org/secworld.php?id=6616" href="http://www.net-security.org/secworld.php?id=6616">http://www.net-security.org/<wbr/>secworld.php?id=6616</a><br/> <br/> BREAK<br/> <br/> Chris G talks about running VM's in Vista Ultimate 64 bit<br/> <br/> The guys discuss home networking<br/> <br/>        Soekris Box: <a target="_blank" mce_href="http://www.soekris.com/" href="http://www.soekris.com/">http://www.soekris.com/</a><br/>        Netgate m1n1wall firewall 3E 2D3 <a target="_blank" mce_href="http://www.netgate.com/product_info.php?products_id=312" href="http://www.netgate.com/product_info.php?products_id=312">http://www.netgate.com/<wbr/>product_info.php?products_id=<wbr/>312</a><br/> <br/> AIG Executives Blow $440,000 After Getting Bailout: <a target="_blank" mce_href="http://www.foxbusiness.com/story/markets/industries/finance/aig-executives-blow--getting-bailout/" href="http://www.foxbusiness.com/story/markets/industries/finance/aig-executives-blow--getting-bailout/">http://www.foxbusiness.com/<wbr/>story/markets/industries/<wbr/>finance/aig-executives-blow--<wbr/>getting-bailout/</a><br/> <br/> Password Management Systems:<br/> <br/>        Password Safe - <a target="_blank" mce_href="http://passwordsafe.sourceforge.net/" href="http://passwordsafe.sourceforge.net/">http://passwordsafe.<wbr/>sourceforge.net/</a><br/>        KeePass - <a target="_blank" mce_href="http://keepass.info/" href="http://keepass.info/">http://keepass.info/</a><br/>        Password Gorilla - <a target="_blank" mce_href="http://www.fpx.de/fp/Software/Gorilla/" href="http://www.fpx.de/fp/Software/Gorilla/">http://www.fpx.de/fp/Software/<wbr/>Gorilla/</a> - Works on<br/> Mac OS X<br/>        1Password - <a target="_blank" mce_href="http://agilewebsolutions.com/products/1Password" href="http://agilewebsolutions.com/products/1Password">http://agilewebsolutions.com/<wbr/>products/1Password</a><br/>        Apple Keychain - <a target="_blank" mce_href="http://en.wikipedia.org/wiki/Apple_Keychain" href="http://en.wikipedia.org/wiki/Apple_Keychain">http://en.wikipedia.org/wiki/<wbr/>Apple_Keychain</a> - Nice,<br/> but not portable<br/>        TrueCrypt on JungleDisk - <a target="_blank" mce_href="http://www.windmeadow.com/node/35" href="http://www.windmeadow.com/node/35">http://www.windmeadow.com/<wbr/>node/35</a><br/> <br/> New Nevada Law Requiring Businesses to Encrypt Emails with Customers - <a target="_blank" mce_href="http://www.reuters.com/article/pressRelease/idUS182108+29-Sep-2008+BW20080929" href="http://www.reuters.com/article/pressRelease/idUS182108+29-Sep-2008+BW20080929">http://www.reuters.com/<wbr/>article/pressRelease/<wbr/>idUS182108+29-Sep-2008+<wbr/>BW20080929</a><br/> <br/> France required to keep record all connections - <a href="http://news.zdnet.co.uk/itmanagement/0,1000000308,39217959,00.htm" mce_href="http://news.zdnet.co.uk/itmanagement/0,1000000308,39217959,00.htm">http://news.zdnet.co.uk/itmanagement/0,1000000308,39217959,00.htm</a></p> <p><br/></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=emwci900FaQ:8zyu2XiuhHI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=emwci900FaQ:8zyu2XiuhHI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=emwci900FaQ:8zyu2XiuhHI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=emwci900FaQ:8zyu2XiuhHI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=emwci900FaQ:8zyu2XiuhHI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=emwci900FaQ:8zyu2XiuhHI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=emwci900FaQ:8zyu2XiuhHI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=emwci900FaQ:8zyu2XiuhHI:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=emwci900FaQ:8zyu2XiuhHI:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/emwci900FaQ" height="1" width="1" alt=""/> 56:31 yes show,security,vista,releases,episodes,vmware,cracking,fios,securabit,bullshit,failbus chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP12.mp3http://traffic.libsyn.com/securabit/Securabit_EP12.mp3?dest-id=18154 Mon, 29 Sep 2008 15:31:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/YZWBKufJRd8/secura_bit_episode_11 <p>This week Anthony Gartner & Rob Fuller discuss the latest computer security news.  Special guests are Vyrus and CP from the <a target="_blank" title="DC949" mce_href="http://dc949.org" href="http://dc949.org/">dc949.org</a> group.</p> <p><b>Episode 11</b></p> <p>Discussions covered the following topics:</p> <p><a target="_blank" title="Skynet" mce_href="http://dc949.org/forum/viewtopic.php?t=614" href="http://dc949.org/forum/viewtopic.php?t=614">Skynet</a>,<a target="_blank" title="Advanced Dork" mce_href="https://addons.mozilla.org/en-US/firefox/addon/2144" href="https://addons.mozilla.org/en-US/firefox/addon/2144"> Advanced Dork</a>, <a target="_blank" title="Google Site Indexer" mce_href="https://addons.mozilla.org/en-US/firefox/addon/5642" href="https://addons.mozilla.org/en-US/firefox/addon/5642">Google Site Indexer</a>, These tools work worked on by CP and Vyrus and the dc949 group and are written as open source.</p> <p>Rob brought up a Firefox add on called Barrier</p> <p>Spoke of how we can use <a target="_blank" title="http://www.google.com/alerts" mce_href="http://www.google.com/alerts" href="http://www.google.com/alerts">google alerts</a> to help us in our daily tasks to track where our information is being sent out to.</p> <p>Discussion ensued about <a target="_blank" title="Scroogle.org" mce_href="http://scroogle.org/" href="http://scroogle.org/">Scroogle.org</a> not to be confused with scoogle.com and how you can do secure searching though the site and that the site purges logs with in 48 hours.</p> <p>A mention of Cisco was brought up and we also spoke of a visualized version for the <a target="_blank" title="http://dynagen.org/" mce_href="http://dynagen.org/" href="http://dynagen.org/">Cisco Mips processors</a> and the specific virtualized version of the <a target="_blank" title="http://www.ipflow.utc.fr/index.php/Cisco_7200_Simulator" mce_href="http://www.ipflow.utc.fr/index.php/Cisco_7200_Simulator" href="http://www.ipflow.utc.fr/index.php/Cisco_7200_Simulator">Cisco 7200 Routers</a>.</p> <a target="_blank" title="BlackBerry Encrption Keys" mce_href="http://www.informationweek.com/news/mobility/messaging/showArticle.jhtml?articleID=208403978" href="http://www.informationweek.com/news/mobility/messaging/showArticle.jhtml?articleID=208403978">BlackBerry Encryption keys</a> may be in the hands of the Indian Government as part of the deal with Rim.<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YZWBKufJRd8:lx8KIfrqAhU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YZWBKufJRd8:lx8KIfrqAhU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=YZWBKufJRd8:lx8KIfrqAhU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YZWBKufJRd8:lx8KIfrqAhU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YZWBKufJRd8:lx8KIfrqAhU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=YZWBKufJRd8:lx8KIfrqAhU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YZWBKufJRd8:lx8KIfrqAhU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=YZWBKufJRd8:lx8KIfrqAhU:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=YZWBKufJRd8:lx8KIfrqAhU:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/YZWBKufJRd8" height="1" width="1" alt=""/> 01:04:11 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://securabit.libsyn.com/secura_bit_episode_11http://traffic.libsyn.com/securabit/Securabit_EP11.mp3?dest-id=18154 Fri, 19 Sep 2008 13:43:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/n-SdkR9X8vo/Securabit_EP10.mp3 <p>(Apologies in advance for the short term 'wiki' look of these show notes, the public wiki will be up soon!)</p> <p>On this Episode of Securabit:</p> <p>Chris Gerling - Hak5chris</p> <p>Chris Mills - ChrisAM</p> <p>Anthony Gartner - AnthonyGartner</p> <p>Jason Mueller - SecuraBit_Jay</p> <p>Guest Chris Wilson</p> <p>Episode 10 - A milestone!</p> <p>We are all still alive even though the <a mce_href="http://en.wikipedia.org/wiki/Large_Hadron_Collider" href="http://en.wikipedia.org/wiki/Large_Hadron_Collider" rel="nofollow" title="http://en.wikipedia.org/wiki/Large_Hadron_Collider" class="external text">CERN Particle Collider</a> has been started up.</p> <p><a mce_href="http://davide.madrisan.googlepages.com/opensource" href="http://davide.madrisan.googlepages.com/opensource" rel="nofollow" title="http://davide.madrisan.googlepages.com/opensource" class="external text">OpenSource Projects, Software, Patches</a></p> <p><a mce_href="http://www.net-security.org/malware_news.php?id=985" href="http://www.net-security.org/malware_news.php?id=985" rel="nofollow" title="http://www.net-security.org/malware_news.php?id=985" class="external text">Obama Sex Video Spam</a></p> <p><a name="New_Securabit_VPS" class="mceItemAnchor"></a></p> New SecuraBit VPS! (We have since cancelled and will be moving to something else soon)<br/> <p><a mce_href="http://www.linode.com/index.cfm" href="http://www.linode.com/index.cfm" rel="nofollow" title="http://www.linode.com/index.cfm" class="external text">Linode</a> with CentOS. However, no SELinux available</p> <p>For CentOS help go to: #CentOS on irc.freenode.net</p> <p>Tips for configuring the new server:</p> <p>Disable root login on ssh Good passwords Lock down ports</p> <p>The Securabit guys started using the CentOS distribution because of its interconnections with Snort</p> <p>See <a mce_href="http://www.internetsecurityguru.com/index2.shtml" href="http://www.internetsecurityguru.com/index2.shtml" rel="nofollow" title="http://www.internetsecurityguru.com/index2.shtml" class="external text">this site</a> for details on how to configure Snort on CentOS</p> <p>In non-security related news:</p> <p><b><a mce_href="http://events.apple.com.edgesuite.net/0809dt4bs89/event/index.html" href="http://events.apple.com.edgesuite.net/0809dt4bs89/event/index.html" rel="nofollow" title="http://events.apple.com.edgesuite.net/0809dt4bs89/event/index.html" class="external text">Steve Jobs Apple Special Event "Let's Rock"</a></b><br/> Apple did update QuicktTime and Bonjour: <a mce_href="http://voices.washingtonpost.com/securityfix/2008/09/security_updates_for_ipod_touc.html?nav=rss_blog" href="http://voices.washingtonpost.com/securityfix/2008/09/security_updates_for_ipod_touc.html?nav=rss_blog" rel="nofollow" title="http://voices.washingtonpost.com/securityfix/2008/09/security_updates_for_ipod_touc.html?nav=rss_blog" class="external free">http://voices.washingtonpost.com/securityfix/2008/09/security_updates_for_ipod_touc.html?nav=rss_blog</a></p> <p>Netbooks are everywhere: Even Commodore joins Netbook Crowd: <a mce_href="http://news.cnet.com/8301-17938_105-10029963-1.html" href="http://news.cnet.com/8301-17938_105-10029963-1.html" rel="nofollow" title="http://news.cnet.com/8301-17938_105-10029963-1.html" class="external free">http://news.cnet.com/8301-17938_105-10029963-1.html</a></p> <p>Google Chrome:</p> <p>Milworm Chrome Exploit/Vulnerabilities <a mce_href="http://www.milw0rm.com/exploits/6353" href="http://www.milw0rm.com/exploits/6353" rel="nofollow" title="http://www.milw0rm.com/exploits/6353" class="external free">http://www.milw0rm.com/exploits/6353</a> <a mce_href="http://www.milw0rm.com/exploits/6355" href="http://www.milw0rm.com/exploits/6355" rel="nofollow" title="http://www.milw0rm.com/exploits/6355" class="external free">http://www.milw0rm.com/exploits/6355</a> <a mce_href="http://www.milw0rm.com/exploits/6365" href="http://www.milw0rm.com/exploits/6365" rel="nofollow" title="http://www.milw0rm.com/exploits/6365" class="external free">http://www.milw0rm.com/exploits/6365</a> <a mce_href="http://www.milw0rm.com/exploits/6367" href="http://www.milw0rm.com/exploits/6367" rel="nofollow" title="http://www.milw0rm.com/exploits/6367" class="external free">http://www.milw0rm.com/exploits/6367</a> <a mce_href="http://www.milw0rm.com/exploits/6372" href="http://www.milw0rm.com/exploits/6372" rel="nofollow" title="http://www.milw0rm.com/exploits/6372" class="external free">http://www.milw0rm.com/exploits/6372</a> <a mce_href="http://www.milw0rm.com/exploits/6386" href="http://www.milw0rm.com/exploits/6386" rel="nofollow" title="http://www.milw0rm.com/exploits/6386" class="external free">http://www.milw0rm.com/exploits/6386</a> Google Chrome and Germany: <a mce_href="http://www.salon.com/wires/ap/scitech/2008/09/09/D9338OT80_germany_google_chrome/index.html" href="http://www.salon.com/wires/ap/scitech/2008/09/09/D9338OT80_germany_google_chrome/index.html" rel="nofollow" title="http://www.salon.com/wires/ap/scitech/2008/09/09/D9338OT80_germany_google_chrome/index.html" class="external free">http://www.salon.com/wires/ap/scitech/2008/09/09/D9338OT80_germany_google_chrome/index.html</a></p> <p>MS commercial analysis: <a mce_href="http://www.purpleslinky.com/Humor/Satire/A-Commercial-About-Nothing-Analysis-of-the-First-Microsoft-Seinfeld-Ad.245991" href="http://www.purpleslinky.com/Humor/Satire/A-Commercial-About-Nothing-Analysis-of-the-First-Microsoft-Seinfeld-Ad.245991" rel="nofollow" title="http://www.purpleslinky.com/Humor/Satire/A-Commercial-About-Nothing-Analysis-of-the-First-Microsoft-Seinfeld-Ad.245991" class="external free">http://www.purpleslinky.com/Humor/Satire/A-Commercial-About-Nothing-Analysis-of-the-First-Microsoft-Seinfeld-Ad.245991</a></p> <p>MS Mouse: <a mce_href="http://www.maximumpc.com/tags/bluetrack" href="http://www.maximumpc.com/tags/bluetrack" rel="nofollow" title="http://www.maximumpc.com/tags/bluetrack" class="external free">http://www.maximumpc.com/tags/bluetrack</a></p> <p>BREAK</p> <p>Schneier and portable device security: <a mce_href="http://www.schneier.com/blog/archives/2008/07/open_source_lap.html" href="http://www.schneier.com/blog/archives/2008/07/open_source_lap.html" rel="nofollow" title="http://www.schneier.com/blog/archives/2008/07/open_source_lap.html" class="external free">http://www.schneier.com/blog/archives/2008/07/open_source_lap.html</a></p> <pre> <a mce_href="http://www.schneier.com/blog/archives/2005/07/risks_of_losing.html" href="http://www.schneier.com/blog/archives/2005/07/risks_of_losing.html" rel="nofollow" title="http://www.schneier.com/blog/archives/2005/07/risks_of_losing.html" class="external free">http://www.schneier.com/blog/archives/2005/07/risks_of_losing.html</a></pre> <p>Latest happenings with Securabit Looking for a Team and mentoring atmosphere Coming soon: New Site/wiki/forums on the Linode VPS</p> <p>Chris Mills: Employer Security Expo</p> <pre> Talked about Password Security and showed off Rainbow Tables/Ophcrack (<a mce_href="http://ophcrack.sourceforge.net/" href="http://ophcrack.sourceforge.net/" rel="nofollow" title="http://ophcrack.sourceforge.net/" class="external free">http://ophcrack.sourceforge.net/</a>) and Driftnet (<a mce_href="http://ex-parrot.com/%7Echris/driftnet/" href="http://ex-parrot.com/%7Echris/driftnet/" rel="nofollow" title="http://ex-parrot.com/~chris/driftnet/" class="external free">http://ex-parrot.com/~chris/driftnet/</a>)</pre> <p>BREAK</p> <p>Chris Wilson</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=n-SdkR9X8vo:4XLndRv5rn0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=n-SdkR9X8vo:4XLndRv5rn0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=n-SdkR9X8vo:4XLndRv5rn0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=n-SdkR9X8vo:4XLndRv5rn0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=n-SdkR9X8vo:4XLndRv5rn0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=n-SdkR9X8vo:4XLndRv5rn0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=n-SdkR9X8vo:4XLndRv5rn0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=n-SdkR9X8vo:4XLndRv5rn0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=n-SdkR9X8vo:4XLndRv5rn0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/n-SdkR9X8vo" height="1" width="1" alt=""/> 49:46 clean show,wiki,google,security,cern,releases,chrome,tables,rainbow,securabit,snort,freenode,vps chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP10.mp3http://traffic.libsyn.com/securabit/Securabit_EP10.mp3?dest-id=18154 Tue, 16 Sep 2008 14:01:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/q5iKPUTqsSY/SecuraNibble_01.mp4 <p>Chris Wilson brings us some Snort goodness with this 37 minute tutorial on how to build a snort sensor from scratch using CentOS.</p> <p>I hope this is of use to everyone, it is very very well done!</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=q5iKPUTqsSY:XlVZUe5G6wQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=q5iKPUTqsSY:XlVZUe5G6wQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=q5iKPUTqsSY:XlVZUe5G6wQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=q5iKPUTqsSY:XlVZUe5G6wQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=q5iKPUTqsSY:XlVZUe5G6wQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=q5iKPUTqsSY:XlVZUe5G6wQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=q5iKPUTqsSY:XlVZUe5G6wQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=q5iKPUTqsSY:XlVZUe5G6wQ:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=q5iKPUTqsSY:XlVZUe5G6wQ:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/q5iKPUTqsSY" height="1" width="1" alt=""/> 37:26 clean video,tutorials,howto,snort,securanibble chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/SecuraNibble_01.mp4http://traffic.libsyn.com/securabit/SecuraNibble_01.mp4?dest-id=18154 Wed, 10 Sep 2008 16:05:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/B3D4zwwJzkM/Securabyte_EP03.mp3 <p>Last night we did a spontaneous hour long interview with the guys from HacDC, a Hackerspaces group.<br/><br/>Hosts:<br/>Rob Fuller - Mubix <br/>Chris Mills - ChrisAM </p> <p>Chris Gerling - Hak5Chris</p> <p>Guests:<br/>Nick Farr - Treasurer HacDC <br/>Mitch Altman - http://en.wikipedia.org/wiki/Mitch_Altman - NoiseBridge San Francisco<br/>Bryce<br/><br/><a href="http://hacdc.org/" mce_href="http://hacdc.org" title="HacDC">HacDC</a>  and <a href="http://hackerspaces.org/" mce_href="http://hackerspaces.org" title="Hackerspaces">Hackerspaces</a>.<br/><br/>What is a Hackerspace?: Physical space where hackers make things, in<br/>person place to do things rather in addition to online.  People can<br/>work on their own projects and collaborate with others.<br/><br/>Mitch has been working on <a href="http://makezine.com/10/brainwave/" mce_href="http://makezine.com/10/brainwave/" title="Mitch's Brain Machines">Brain machines</a>.<br/><br/>Tips on how to start a hackerspace:<br/><br/>- Visit a hackerspace<br/><br/>- <a href="http://imakethings.com/Hacker-Space-Design-Patterns.pdf" mce_href="http://imakethings.com/Hacker-Space-Design-Patterns.pdf" title="Hacker Space Design Patterns (PDF)">Document on Hackerspace design patterns</a> (PDF).<br/><br/>- Go to Visit: Hackerspaces.org and email questions about getting started to info@hacdc.org<br/><br/>- Last Hope Talk: <a href="http://www.thelasthope.org/media/audio/16kbps/Building_Hacker_Spaces_Everywhere_Your_Excuses_are_Invalid.mp3" mce_href="http://www.thelasthope.org/media/audio/16kbps/Building_Hacker_Spaces_Everywhere_Your_Excuses_are_Invalid.mp3" title="Last Hope Talk">Building Hacker Spaces Everywhere: Your Excuses are Invalid - Nick Farr and Friends</a> (MP3).<br/><br/>If I am not a member, can I go: Yes!<br/><br/>Some hackerspaces mentioned:<br/><br/><a href="http://www.nycresistor.com/" mce_href="http://www.nycresistor.com/ " title="NY Resistor">NY Resistor</a><br/><a href="http://c-base.org/" mce_href="http://c-base.org/ " title="C-base">C-base</a> (Berlin Germany)<br/><a href="http://thehacktory.org/" mce_href="http://thehacktory.org/" title="The Hacktory">The Hacktory</a> (Philadelphia)<br/><br/>Mitch working on SF Space, <a href="https://www.noisebridge.net/" mce_href="https://www.noisebridge.net/" title="NoiseBridge">NoiseBridge</a><br/><a href="https://www.noisebridge.net/index.php/Mailinglist" mce_href="https://www.noisebridge.net/index.php/Mailinglist" title="NoiseBridge email list">NoiseBridge email list</a><br/><br/>Intersting Hackerspace projects:<br/><br/><a href="http://blinkenlights.de/" mce_href="http://blinkenlights.de/" title="Project Blinkenlights">Blinkenlights</a> -<br/><br/>Project Blinkenlights was a light installation in the Haus des Lehrers<br/>building at the Alexanderplatz in Berlin that transformed the building<br/>front into a giant low-resolution monochrome computer screen.<br/><br/><br/><br/>tmplab - <br/><br/>Paris France<br/><br/>http://www.tmplab.org/ (French)<br/><br/><a href="http://wiki.hacdc.org/index.php?title=Columbia_Heights_Wireless" mce_href="http://wiki.hacdc.org/index.php?title=Columbia_Heights_Wireless" title="Columbia Heights Wireless">Columbia heights Wireless</a> -<br/><br/>The Columbia Heights Wireless Project aims to provide wireless access to<br/>the Internet to HacDC's neighbors in Columbia Heights. This project, in<br/>three phases, will help test different technologies and methods for<br/>providing this access as well as building local neighborhood IT<br/>infrastructure.<br/></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B3D4zwwJzkM:Mn50eIJMPSU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B3D4zwwJzkM:Mn50eIJMPSU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=B3D4zwwJzkM:Mn50eIJMPSU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B3D4zwwJzkM:Mn50eIJMPSU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B3D4zwwJzkM:Mn50eIJMPSU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=B3D4zwwJzkM:Mn50eIJMPSU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B3D4zwwJzkM:Mn50eIJMPSU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=B3D4zwwJzkM:Mn50eIJMPSU:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=B3D4zwwJzkM:Mn50eIJMPSU:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/B3D4zwwJzkM" height="1" width="1" alt=""/> 46:52 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabyte_EP03.mp3http://traffic.libsyn.com/securabit/Securabyte_EP03.mp3?dest-id=18154 Thu, 04 Sep 2008 12:59:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/M8shPvZGoJQ/Securabit_EP09.mp3 <p>On this episode of SecuraBit: </p> <h2><span class="mw-headline">Multiboot Security DVD</span></h2> <p><a rel="nofollow" title="http://www.room362.com/" class="external text" href="http://www.room362.com/">Mubix</a> posted an <a rel="nofollow" title="http://www.room362.com/archives/218-Multi-Boot-Security-LiveCD-DVD.html" class="external text" href="http://www.room362.com/archives/218-Multi-Boot-Security-LiveCD-DVD.html">awesome link on his blog to a Multiboot Security DVD</a> that allows you to choose which common security distros, all on one medium! </p> <p><br/> OS Choices: </p> <p> <a rel="nofollow" title="http://www.remote-exploit.org/backtrack_download.html" class="external text" href="http://www.remote-exploit.org/backtrack_download.html">Backtrack 3</a> </p> <p> <a rel="nofollow" title="http://www.damnsmalllinux.org/" class="external text" href="http://www.damnsmalllinux.org/">Damn Small Linux 4.2.5</a> </p> <p> <a rel="nofollow" title="http://geexbox.org/en/index.html" class="external text" href="http://geexbox.org/en/index.html">GeeXBoX 1.1</a> (not geekbox ) </p> <p> <a rel="nofollow" title="http://www.damnvulnerablelinux.org/" class="external text" href="http://www.damnvulnerablelinux.org/">Damn Vulnerable Linux (Strychnine) 1.4</a> </p> <p> <a rel="nofollow" title="http://www.knoppix.net/" class="external text" href="http://www.knoppix.net/">Knoppix 5.1.1</a> </p> <p> <a rel="nofollow" title="http://www.pentoo.ch/" class="external text" href="http://www.pentoo.ch/">MPentoo 2006.1</a> </p> <p> <a rel="nofollow" title="http://ophcrack.sourceforge.net/" class="external text" href="http://ophcrack.sourceforge.net/">Ophcrack 1.2.2 (with 720 mb tables)</a> </p> <p> <a rel="nofollow" title="http://www.puppylinux.org/" class="external text" href="http://www.puppylinux.org/">Puppy Linux 3.01</a> </p> <p> <a rel="nofollow" title="http://byzgl.sourceforge.net/wiki/index.php/Main_Page" class="external text" href="http://byzgl.sourceforge.net/wiki/index.php/Main_Page">Byzantine OS i586-20040404</a> </p> <p><br/> Make a bootable FAT32 USB stick using <a rel="nofollow" title="http://lubi.sourceforge.net/unetbootin.html" class="external text" href="http://lubi.sourceforge.net/unetbootin.html">Unetbootin</a> </p> <p> Some distros the Securabit guys would like to see added: </p> <p> <a rel="nofollow" title="http://www.e-fense.com/helix/" class="external text" href="http://www.e-fense.com/helix/">Helix</a> <a rel="nofollow" title="http://samurai.intelguardians.com/" class="external text" href="http://samurai.intelguardians.com/">Intelguardians Samurai</a> </p> <p><br/> </p> <p> <a name="RedHat.2FFedora_OpenSSH_Compromises"></a></p> <h2><span class="mw-headline">RedHat/Fedora OpenSSH Compromises </span></h2> <p> As noted on the <a rel="nofollow" title="http://securabit.com/2008/08/23/red-hat-linux-servers-compromised/" class="external text" href="http://securabit.com/2008/08/23/red-hat-linux-servers-compromised/">Securabit website</a>, a Fedora and Red Hat Enterprise Linux servers were compromised. </p> <p> The <a rel="nofollow" title="http://blogs.computerworld.com/linux_security_idiots" class="external text" href="http://blogs.computerworld.com/linux_security_idiots">ComputerWorld Blog - Linux Security Idiots</a> article explains how the servers were compromised </p> <p>-Stolen SSH keys are used to gain access to the system </p> <p>-After that, rootkit "phalanx2" is installed and steals more SSH keys </p> <p>-Obviously this could be used to install any malware at all </p> <p> <a rel="nofollow" title="http://www.karan.org/blog/index.php/2008/08/22/centos-position-on-systems-intrusion-at-" class="external text" href="http://www.karan.org/blog/index.php/2008/08/22/centos-position-on-systems-intrusion-at-">The RHEL offshoot CentOS was not affected by the compromise.</a> </p> <p><br/> </p> <p> <a name="Joomla_Vulnerability"></a></p> <h2><span class="mw-headline">Joomla Vulnerability </span></h2> <p> <a rel="nofollow" title="http://www.us-cert.gov/current/#joomla_password_reset_vulnerability" class="external text" href="http://www.us-cert.gov/current/#joomla_password_reset_vulnerability">US CERT Joomla! Password Reset Vulnerability</a> </p> <p> <a rel="nofollow" title="http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html" class="external text" href="http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html">Joomla Core Exploit Announcement - Password Remind Functionality</a> </p> <p> <a rel="nofollow" title="http://isc.sans.org/diary.html?storyid=4894" class="external text" href="http://isc.sans.org/diary.html?storyid=4894">Joomla user password reset vulnerability being actively exploited</a> </p> <p><br/> <i><b>BREAK</b></i><br/></p> <p> <a name="After_Break_Banter"></a></p> <h2><span class="mw-headline">After Break Banter </span></h2> <p><a rel="nofollow" title="http://arstechnica.com/news.ars/post/20080810-free-advertising-for-the-pirate-bay-italian-isps-block-site.html" class="external text" href="http://arstechnica.com/news.ars/post/20080810-free-advertising-for-the-pirate-bay-italian-isps-block-site.html">Italy tries to ban PirateBay</a> </p> <p><a rel="nofollow" title="http://www.flickr.com/photos/alanbee/2789207201/" class="external text" href="http://www.flickr.com/photos/alanbee/2789207201/">Awesome Quote: "Fear makes the wolf look bigger"</a> </p> <p><br/> </p> <p> <a name="Best_Western_Pwned"></a></p> <h2><span class="mw-headline">Best Western Pwned </span></h2> <p> <a rel="nofollow" title="http://www.sundayherald.com/news/heraldnews/display.var.2432225.0.0.php" class="external text" href="http://www.sundayherald.com/news/heraldnews/display.var.2432225.0.0.php">Originally Discovered by The Sunday Herald.</a> As many as 8 million accounts compromised </p> <p> <a rel="nofollow" title="http://www.networkworld.com/news/2008/08-26-08-best-western-data-breach.html?hpg1=bn" class="external text" href="http://www.networkworld.com/news/2008/08-26-08-best-western-data-breach.html?hpg1=bn">Best Western Response</a> </p> <p><br/> </p> <p> <a name="Vulnerbilty_of_BGP"></a></p> <h2><span class="mw-headline">Vulnerbilty of BGP </span></h2> <p>This exploit of Border Gateway Protocol allows the attacker to monitor internet traffic and forward it to anywhere in the world. Five hours of traffic was forwarded to New York during Defcon 16. This vulnerability is going to be bigger than the Kaminsky DNS Vuln. Speaking of Dan, <a rel="nofollow" title="http://securabit.com/2008/08/22/dan-kaminsky-loves-securabit-and-you-should-too/" class="external text" href="http://securabit.com/2008/08/22/dan-kaminsky-loves-securabit-and-you-should-too/">he loves Securabit!</a> </p> <p><a rel="nofollow" title="https://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-pilosov-kapela.pdf" class="external text" href="https://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-pilosov-kapela.pdf">Defcon presentation from Anton Kapela and Alex Pilosov</a> </p> <p><a rel="nofollow" title="http://en.wikipedia.org/wiki/Border_Gateway_Protocol" class="external text" href="http://en.wikipedia.org/wiki/Border_Gateway_Protocol">Border Gateway Protocol</a> </p> <p> <a rel="nofollow" title="http://blog.wired.com/27bstroke6/2008/08/revealed-the-in.html" class="external text" href="http://blog.wired.com/27bstroke6/2008/08/revealed-the-in.html">Wired - Revealed: The Internet's Biggest Security Hole</a> </p> <p> <a rel="nofollow" title="http://blog.wired.com/27bstroke6/2008/08/how-to-intercep.html" class="external text" href="http://blog.wired.com/27bstroke6/2008/08/how-to-intercep.html">Wired - More on BGP Attacks -- Updated</a> </p> <p><br/> </p> <p> <a name="The_Middler"></a></p> <h2><span class="mw-headline">The Middler </span></h2> <p><a rel="nofollow" title="http://www.intelguardians.com/" class="external text" href="http://www.intelguardians.com/">Jay Beale</a> - Middler - Release it already! <a rel="nofollow" title="https://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-beale-2.pdf" class="external text" href="https://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-beale-2.pdf">DefCon Talk </a> </p> <p> <a name="Audio_Steganography"></a></p> <h2><span class="mw-headline">Audio Steganography </span></h2> <p><a rel="nofollow" title="http://www.snotmonkey.com/work/school/405/" class="external text" href="http://www.snotmonkey.com/work/school/405/">Hiding information by slightly altering the binary sequence of a sound file</a> </p> <p>From simple algorithms that insert info in the form of signal noise, to more powerful methods that exploit sophisticated signal processing techniques to hide information. </p> <p>LSB coding (least significant bit):¬† substitute with a binary msg </p> <p>Parity coding </p> <p>Phase coding:¬† #¬† The original sound signal is broken up into smaller segments whose lengths equal the size of the message to be encoded. </p> <p>A Discrete Fourier Transform (DFT) is applied to each segment to create a matrix of the phases and Fourier transform magnitudes. </p> <p>Phase differences between adjacent segments are calculated. </p> <p>Phase shifts between consecutive segments are easily detected. In other words, the absolute phases of the segments can be changed but the relative phase differences between adjacent segments must be preserved. Therefore the secret message is only inserted in the phase vector of the first signal segment as follows: </p> <p>Spread spectrum </p> <p>Two versions of SS can be used in audio steganography: the direct-sequence and frequency-hopping schemes. In direct-sequence SS, the secret message is spread out by a constant called the chip rate and then modulated with a pseudorandom signal. It is then interleaved with the cover-signal. In frequency-hopping SS, the audio file's frequency spectrum is altered so that it hops rapidly between frequencies. </p> <p><a rel="nofollow" title="http://en.wikipedia.org/wiki/Least_significant_bit" class="external text" href="http://en.wikipedia.org/wiki/Least_significant_bit">Least Significant Bit</a> </p> <p><br/> <i><b>BREAK</b></i> </p> <p><br/> </p> <p> <a name="Security_Justice_stops_by"></a></p> <h2><span class="mw-headline">Security Justice stops by </span></h2> <p>Tom and Dave from <a rel="nofollow" title="http://securityjustice.com/" class="external text" href="http://securityjustice.com/">Security Justice</a> </p> <p> -Search for pics of Mubix gets you <a rel="nofollow" title="http://img338.imageshack.us/img338/7512/slaveleiapillowfight198jf8.jpg" class="external text" href="http://img338.imageshack.us/img338/7512/slaveleiapillowfight198jf8.jpg">this</a> </p> <p> -<a rel="nofollow" title="http://www.shmoocon.org/" class="external text" href="http://www.shmoocon.org/">Shmoocon</a> will have another <a rel="nofollow" title="http://podcastersmeetup.com" class="external text" href="http://podcastersmeetup.com/">Podcasters Meetup</a> and <a rel="nofollow" title="http://hak5.org" class="external text" href="http://hak5.org/">Hak5</a> will be there. </p> <p> -<a rel="nofollow" title="http://en.wikipedia.org/wiki/Hacker_con" class="external text" href="http://en.wikipedia.org/wiki/Hacker_con">List of Hacker/Security Con's</a> </p> <p> <a name="Forensic_recovery_on_SSD"></a></p> <h2><span class="mw-headline">Forensic recovery on SSD </span></h2> <p><b>SSD Forensics:</b> </p> <p> - no physical security hooks that prevent them from being removed from enclosures </p> <p> - ultraviolet laser to wipe out lock bits (encryption) from fuses on chips that secure SSDs </p> <p> - overall easier to erase data on SSD (with encryption) </p> <p><b>vs HDD Forensics:</b> </p> <p>- Harder to fully erase data 9have to overwrite or physically damage) </p> <p>- easier to fully encrypt </p> <p>Jim handy: hacker could easily unsolder NAND chips from an SSD and read the data using a flash chip programmer, then reassembled using data recovery software. </p> <p><a rel="nofollow" title="http://www.networkworld.com/news/2008/082208-ssds-are-hot-but-not.html?fsrc=netflash-rss" class="external text" href="http://www.networkworld.com/news/2008/082208-ssds-are-hot-but-not.html?fsrc=netflash-rss">SSDs are hot, but not without security risks</a> </p> <p><a rel="nofollow" title="http://www.myharddrivedied.com/presentations.html" class="external text" href="http://www.myharddrivedied.com/presentations.html">Scott A. Moulton presentations</a> on data recovery and forensics. </p> <p> <a name="Contact_Securabit"></a></p> <h2><span class="mw-headline">Contact Securabit </span></h2> <p> <a rel="nofollow" title="http://securabit.com" class="external text" href="http://securabit.com/">Securabit Website</a> and <a rel="nofollow" title="http://securabit.com/forums/" class="external text" href="http://securabit.com/forums/">Forums</a> </p> <p> IRC: #securabit on irc.feenode.net </p> <p><a rel="nofollow" title="http://www.linkedin.com/e/gis/125192/3FB0C5760062" class="external text" href="http://www.linkedin.com/e/gis/125192/3FB0C5760062">Join us on LinkedIn</a> </p> <p> Skype Number: (469) 277-2248 </p> <p> <a rel="nofollow" title="http://twitter.com/securabit" class="external text" href="http://twitter.com/securabit" bluelink="yes">Follow us on Twitter - Securabit</a><img align="top" class="blue-icon-launcher" id="smartLink6" src="http://s3.amazonaws.com/blueorganizer/images/shared/icons/person_12.gif" blueimage="http://s3.amazonaws.com/blueorganizer/images/shared/icons/person_12.gif" blueimageover="http://s3.amazonaws.com/blueorganizer/images/shared/icons/icon_14.gif" link="http://twitter.com/securabit"/> </p> <p><a rel="nofollow" title="http://delicious.com/tag/securabit" class="external text" href="http://delicious.com/tag/securabit">Delicious Tag: securabit</a> </p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=M8shPvZGoJQ:TCVQamUR3hE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=M8shPvZGoJQ:TCVQamUR3hE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=M8shPvZGoJQ:TCVQamUR3hE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=M8shPvZGoJQ:TCVQamUR3hE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=M8shPvZGoJQ:TCVQamUR3hE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=M8shPvZGoJQ:TCVQamUR3hE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=M8shPvZGoJQ:TCVQamUR3hE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=M8shPvZGoJQ:TCVQamUR3hE:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=M8shPvZGoJQ:TCVQamUR3hE:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/M8shPvZGoJQ" height="1" width="1" alt=""/> 01:02:44 yes chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP09.mp3http://traffic.libsyn.com/securabit/Securabit_EP09.mp3?dest-id=18154 Fri, 15 Aug 2008 10:49:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/e6d-UBFCxUk/Securabit_EP08.mp3 <p>On this Episode of SecuraBit<br/> <br/> Jason Mueller<br/> Chris Gerling<br/> Anthony Gartner<br/> <br/> Back from three week hiatus.<br/> <br/> Defcon and BlackHat<br/> <br/>     Defcon Parties:<br/> <br/>         Core Impact Party<br/>         EthicalHacker.net party<br/>         Cisco Party<br/>         Isight Party<br/>         I-hacked Party<br/>         StillSecure Freakshow Party<br/> <br/>     ChicagoCon: Boot Camps: Oct 27 - 31 Conference: Oct 31 - Nov 1: http://www.chicagocon.com/<br/> <br/>     Defcon Badges<br/> <br/>         Ran out of Badges on first day: http://search.twitter.com/search?q=Defcon+badges+out<br/>         TV-B-Gone built into the badges: http://www.hackaday.com/2008/08/05/defcon-16-badge-details-released/<br/>         Servo hacks the badges - LINK?<br/> <br/>     Podcasters Meetup - http://www.podcastersmeetup.com/ and http://securabit.com/2008/08/13/dc16-recap/<br/>     <br/>     Documentary: Hackers are People Too: http://www.hackersarepeopletoo.com/<br/>     <br/> BREAK<br/>     <br/> More from Podcasters meetup:<br/> <br/>     Maltego - Maltego is an open source intelligence and forensics application - http://www.paterva.com/maltego/<br/>     Iphone Metasploit: http://secmaniac.blogspot.com/2008/07/metasploit-3-on-iphone.html<br/> <br/> Hak5 plug: Show every Monday - http://www.hak5.org/<br/> <br/> Drinks:<br/> Absolut Mandarin: http://www.absolut.com/us<br/> Rain Vodka: http://www.rainvodka.com/<br/> <br/> Current news:<br/> <br/>     Georgia and Russia: Cyber Warfare: http://it.slashdot.org/article.pl?sid=08/08/10/0126232&from=rss<br/>     Estonia to help Georgia: http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9112399&<br/>     Watch out for tanks in Atlanta: http://is.gd/1qNy<br/>     <br/>     MIT Subway Card Hacking Pulled from Defcon: http://news.cnet.com/8301-1009_3-10012612-83.html<br/>         Talk Posted Here: http://www-tech.mit.edu/V128/N30/subway/Defcon_Presentation.pdf<br/>     <br/>     Naval PostGraduate School wins capture the flag: http://swampie.wordpress.com/2008/08/11/naval-postgraduate-school-wins-defcon-capture-the-flag-competition/<br/>     <br/>     Wall of Sheep: http://www.blackhat.com/html/bh-usa-08/wallofsheep.html<br/>         Lesson: Don't take your production (or perhaps any) computer to hacker conferences<br/>     <br/>     Driftnet to catch Jpegs at Defcon: http://ex-parrot.com/~chris/driftnet/<br/>     <br/>     <br/> Anthony will be working on Iphone Security <br/>     Apple sells 95 Iphones/day/store: http://is.gd/1qND<br/>     <br/> Tshirts and Stickers gone, but more on there way?<br/>     <br/> Martin McKeay at Defcon: http://www.cwes01.com/1083/7776/psw/separated.png<br/> <br/> <a title="SecuraBit Episode 8" mce_href="http://media.libsyn.com/media/securabit/Securabit_EP08.mp3" href="http://media.libsyn.com/media/securabit/Securabit_EP08.mp3">Direct Download</a><br/> </p> On this episode of SecuraBit:<br/><br/>Jason Mueller<br/>Chris Gerling<br/>Anthony Gartner<br/><br/>Back from three week hiatus.<br/><br/>Defcon and BlackHat<br/><br/>    Defcon Parties:<br/><br/>        Core Impact Party<br/>        EthicalHacker.net party<br/>        Cisco Party<br/>        Isight Party<br/>        I-hacked Party<br/>        StillSecure Freakshow Party<br/><br/>    ChicagoCon: Boot Camps: Oct 27 - 31 Conference: Oct 31 - Nov 1: http://www.chicagocon.com/<br/><br/>    Defcon Badges<br/><br/>        Ran out of Badges on first day: http://search.twitter.com/search?q=Defcon+badges+out<br/>        TV-B-Gone built into the badges: http://www.hackaday.com/2008/08/05/defcon-16-badge-details-released/<br/>        Servo hacks the badges - http://edge.i-hacked.com/new-defcon16-details<br/><br/>    Podcasters Meetup - http://www.podcastersmeetup.com/ and http://securabit.com/2008/08/13/dc16-recap/<br/>    <br/>    Documentary: Hackers are People Too: http://www.hackersarepeopletoo.com/<br/>    <br/>BREAK<br/>    <br/>More from Podcasters meetup:<br/><br/>    Maltego - Maltego is an open source intelligence and forensics application - http://www.paterva.com/maltego/<br/>    Iphone Metasploit: http://secmaniac.blogspot.com/2008/07/metasploit-3-on-iphone.html<br/><br/>Hak5 plug: Show every Monday - http://www.hak5.org/<br/><br/>Drinks:<br/>Absolut Mandarin: http://www.absolut.com/us<br/>Rain Vodka: http://www.rainvodka.com/<br/><br/>Current news:<br/><br/>    Georgia and Russia: Cyber Warfare: http://it.slashdot.org/article.pl?sid=08/08/10/0126232&from=rss<br/>    Estonia to help Georgia: http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9112399&<br/>    Watch out for tanks in Atlanta: http://is.gd/1qNy<br/>    <br/>    MIT Subway Card Hacking Pulled from Defcon: http://news.cnet.com/8301-1009_3-10012612-83.html<br/>        Talk Posted Here: http://www-tech.mit.edu/V128/N30/subway/Defcon_Presentation.pdf<br/>    <br/>    Naval PostGraduate School wins capture the flag: http://swampie.wordpress.com/2008/08/11/naval-postgraduate-school-wins-defcon-capture-the-flag-competition/<br/>    <br/>    Wall of Sheep: http://www.blackhat.com/html/bh-usa-08/wallofsheep.html<br/>        Lesson: Don't take your production (or perhaps any) computer to hacker conferences<br/>    <br/>    Driftnet to catch Jpegs at Defcon: http://ex-parrot.com/~chris/driftnet/<br/>    <br/>    <br/>Anthony will be working on Iphone Security <br/>    Apple sells 95 Iphones/day/store: http://is.gd/1qND<br/>    <br/>Tshirts and Stickers gone, but more on there way?<br/>    <br/>Martin McKeay at Defcon: http://www.cwes01.com/1083/7776/psw/separated.png<br/><br/>Direct DL.<br/><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e6d-UBFCxUk:ivNB-pzuD5w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e6d-UBFCxUk:ivNB-pzuD5w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=e6d-UBFCxUk:ivNB-pzuD5w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e6d-UBFCxUk:ivNB-pzuD5w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e6d-UBFCxUk:ivNB-pzuD5w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=e6d-UBFCxUk:ivNB-pzuD5w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e6d-UBFCxUk:ivNB-pzuD5w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=e6d-UBFCxUk:ivNB-pzuD5w:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=e6d-UBFCxUk:ivNB-pzuD5w:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/e6d-UBFCxUk" height="1" width="1" alt=""/> 45:52 yes news,tech,podcasting,georgia,conferences,ddos,securabit,l33t,haxor,defcon,shmoocon chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP08.mp3http://traffic.libsyn.com/securabit/Securabit_EP08.mp3?dest-id=18154 Sun, 27 Jul 2008 22:33:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/4mGYQGZG-fE/Securabit_EP07.mp3 <p>On this episode of SecuraBit, we talk to <a href="http://www.veracode.com/blog/?page_id=5" mce_href="http://www.veracode.com/blog/?page_id=5">Chris Eng</a> and <a href="http://www.veracode.com/blog/?page_id=4" mce_href="http://www.veracode.com/blog/?page_id=4">Chris Wysopal</a> from <a href="http://www.veracode.com/" mce_href="http://www.veracode.com/">Veracode</a> about SOURCE Boston, as well as <a href="http://mediaphyter.wordpress.com/" mce_href="http://mediaphyter.wordpress.com/">Jennifer Leggio</a> about Twitter and more:</p> <ul><li><a href="http://www.sourceconference.com/" mce_href="http://www.sourceconference.com/">SOURCE Boston</a><br/> </li><li><a href="http://identi.ca/main/openid" mce_href="http://identi.ca/main/openid">identi.ca and OpenID</a><br/> </li><li><a href="http://www.darknet.org.uk/2008/07/facebook-bug-leaks-birthday-data/" mce_href="http://www.darknet.org.uk/2008/07/facebook-bug-leaks-birthday-data/">Facebug Bug leaks birthday data</a><br/> </li><li><a href="http://www.activeworx.com/" mce_href="http://www.activeworx.com">Activeworx</a></li><li><a href="http://taosecurity.blogspot.com/2008/07/what-should-dan-have-done.html" mce_href="http://taosecurity.blogspot.com/2008/07/what-should-dan-have-done.html">A little more on the DNS fiasco (see past show links on DNS issues)</a>.</li><li><a href="http://www.failbus.com/" mce_href="http://www.failbus.com/">Failbus</a><br/> </li></ul> <p>I'm going to be installing wiki software and recruiting some folks to help us do proper full show notes for each episode.  We're also looking for people to help out with the forums, IRC, and research for technical segments.  If you can contribute in any way we'll make sure you get recognized.</p> <p><a href="http://media.libsyn.com/media/securabit/Securabit_EP07.mp3" mce_href="http://media.libsyn.com/media/securabit/Securabit_EP07.mp3">Direct link to show here.</a></p> <p>Remember to hit up the <a href="http://securabit.com/securabit-t-shirts-and-stickers/" mce_href="http://securabit.com/securabit-t-shirts-and-stickers/">T-Shirt and Sticker page</a>.  Soon I will remove the T-Shirt donate link as I will be shipping the box of T-Shirts to Jay to take with him to Defcon.  Hit us up on the forums, or at irc.freenode.net #securabit.  Thanks for listening!<br/></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4mGYQGZG-fE:AEc9gEKWne8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4mGYQGZG-fE:AEc9gEKWne8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4mGYQGZG-fE:AEc9gEKWne8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4mGYQGZG-fE:AEc9gEKWne8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4mGYQGZG-fE:AEc9gEKWne8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4mGYQGZG-fE:AEc9gEKWne8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4mGYQGZG-fE:AEc9gEKWne8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4mGYQGZG-fE:AEc9gEKWne8:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4mGYQGZG-fE:AEc9gEKWne8:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/4mGYQGZG-fE" height="1" width="1" alt=""/> 55:39 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP07.mp3http://traffic.libsyn.com/securabit/Securabit_EP07.mp3?dest-id=18154 Sat, 26 Jul 2008 00:57:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/4c0fOIwf-JM/securabyte002.mp3 <p>Last night we decided to discuss a little more on the <a mce_href="http://securabit.com/2008/07/22/securabyte-episode-1-dns-haiku/" href="http://securabit.com/2008/07/22/securabyte-episode-1-dns-haiku/" title="SecuraByte Episode 1">DNS vulnerability issue</a> that's been the hot topic everywhere in terms of detection and defense.  Thanks to guest Chris Wilson for his invaluable insight into the snort signature we were provided by alexkirk in #snort on irc.freenode.net.</p> <p>We also discussed detection of encrypted traffic on a network, and some of the implications of it.</p> <p><a mce_href="http://media.libsyn.com/media/securabit/securabyte002.mp3" href="http://media.libsyn.com/media/securabit/securabyte002.mp3" title="SecuraByte Episode 2">Direct link to the mp3 is here.</a></p> <p>Apologies for Chris Wilson's audio, his speakers were on unbeknown-st to us, and I cleaned it up as best I could. :)</p> <p>Also, the stickers are finally in!  <a mce_href="http://securabit.com/securabit-t-shirts-and-stickers/" href="http://securabit.com/securabit-t-shirts-and-stickers/" title="T-Shirts and Stickers!">Get your T-Shirts and stickers here!</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4c0fOIwf-JM:z-Y41a32PTs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4c0fOIwf-JM:z-Y41a32PTs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4c0fOIwf-JM:z-Y41a32PTs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4c0fOIwf-JM:z-Y41a32PTs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4c0fOIwf-JM:z-Y41a32PTs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4c0fOIwf-JM:z-Y41a32PTs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4c0fOIwf-JM:z-Y41a32PTs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=4c0fOIwf-JM:z-Y41a32PTs:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=4c0fOIwf-JM:z-Y41a32PTs:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/4c0fOIwf-JM" height="1" width="1" alt=""/> 20:39 yes signatures,dns,snort chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/securabyte002.mp3http://traffic.libsyn.com/securabit/securabyte002.mp3?dest-id=18154 Tue, 22 Jul 2008 16:59:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/R4ytRNXBL7c/securabytep01.mp3 <span lang="EN"><p>Today we introduce a new portion of the show: Securabytes. Securabytes are unannounced episodes, they could be last minute interviews or just more beer induced security speak. So, without further ado, here is the first Securabyte from the Securabit Podcast.</p> <p>"Introducing haiku-DNS: [laughing corruption collapsing kittens gallop nectars forgiving] = usa.gov" - Chris</p> <p>Wesley McGrew of McGrew Security, Martin McKeay of the Network Security Blog / Podcast, and some guy name Joel joined me (Rob Fuller) last night to discuss the DNS vulnerability leakage that happened about quitting time yesterday (7/21). We discuss the leak, how the vulnerability works, mitigating, and the potential it has on mass scales. Every one of the gentlemen that joined us, and we here at Securabit urge you to patch as soon as possible. If you need further information, please check the following links:</p> <p>Direct link to this episode:</p> <p><a href="http://media.libsyn.com/media/securabit/securabytep01.mp3"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://media.libsyn.com/media/securabit/securabytep01.mp3</span></font></font></u></a></p> </span><font size="2"><span lang="EN"><p>Check to see if you are vulnerable: <a href="http://www.doxpara.com/"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://www.doxpara.com/</span></font></font></u></a></p> </span></font><font size="2"><span lang="EN"><p>In depth explanation of the vulnerability: <a href="http://www.mcgrewsecurity.com/?p=151"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://www.mcgrewsecurity.com/?p=151</span></font></font></u></a></p> </span></font><font size="2"><span lang="EN"><p>More supporting links:</p> <p><a href="http://www.mckeay.net/2008/07/21/patch-dns-now/"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://www.mckeay.net/2008/07/21/patch-dns-now/</span></font></font></u></a></p> </span></font><font size="2"><span lang="EN"><p><a href="http://www.matasano.com/log/mtso/"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://www.matasano.com/log/mtso/</span></font></font></u></a></p> </span></font><font size="2"><span lang="EN"><p><a href="http://www.doxpara.com/?p=1176"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://www.doxpara.com/?p=1176</span></font></font></u></a></p> </span></font><font size="2"><span lang="EN"><p><a href="http://blogs.zdnet.com/security/?p=1520"><u><font color="#0000ff" size="2"><font color="#0000ff" size="2"><span lang="EN">http://blogs.zdnet.com/security/?p=1520</span></font></font></u></a></p> </span></font><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=R4ytRNXBL7c:iSLfcQs3dIA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=R4ytRNXBL7c:iSLfcQs3dIA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=R4ytRNXBL7c:iSLfcQs3dIA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=R4ytRNXBL7c:iSLfcQs3dIA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=R4ytRNXBL7c:iSLfcQs3dIA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=R4ytRNXBL7c:iSLfcQs3dIA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=R4ytRNXBL7c:iSLfcQs3dIA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=R4ytRNXBL7c:iSLfcQs3dIA:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=R4ytRNXBL7c:iSLfcQs3dIA:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/R4ytRNXBL7c" height="1" width="1" alt=""/> 36:35 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/securabytep01.mp3http://traffic.libsyn.com/securabit/securabytep01.mp3?dest-id=18154 Thu, 17 Jul 2008 01:38:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/efmtd7G4FQ8/Securabit_EP06.mp3 <p>On this episode of SecuraBit Chris, Jay, and the crew discuss:</p> <p><a href="http://securosis.com/2008/07/09/more-on-the-dns-vulnerability/" mce_href="http://securosis.com/2008/07/09/more-on-the-dns-vulnerability/" title="DNS Vulnerability">Major DNS vulnerability patched!</a><br/><a href="http://doxpara.com/" mce_href="http://doxpara.com/" title="Check DNS Here">Check your DNS vulnerability status here!</a><br/><a href="http://forums.remote-exploit.org/forumdisplay.php?f=39" mce_href="http://forums.remote-exploit.org/forumdisplay.php?f=39" title="BT3 HD?">BackTrack 3:  Hard Drive?</a><br/><a href="http://pastebin.com/m1523feae" mce_href="http://pastebin.com/m1523feae" title="More BT3 Stuff">More BT3 goodness! (Courtesy of pure_hate)</a><br/>Andy's Trip to Spain!<br/>Various other things, and if you haven't noticed by now.. bloopers!</p> <p>We also want to announce that our T-Shirts have arrived, which you can get <a href="http://securabit.com/securabit-t-shirts-and-stickers/" mce_href="http://securabit.com/securabit-t-shirts-and-stickers/" title="SecuraBit T-Shirts and Stickers!">here!</a>  Stickers will be available very soon!  As always, hit up the forums and start talking security with other professionals, pop into our irc at irc.freenode.net #securabit (cloaks coming soon!), and send any feedback to feedback@securabit.com or through the contact page on the site here!</p> <p><img height="244" width="182" class="alignnone" title="T-Shirts!" mce_src="http://farm4.static.flickr.com/3041/2675252408_8a4ef03a1a.jpg?v=0" src="http://farm4.static.flickr.com/3041/2675252408_8a4ef03a1a.jpg?v=0"/></p> <p>Thanks for listening!<br/></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=efmtd7G4FQ8:Cg7_aV73zbM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=efmtd7G4FQ8:Cg7_aV73zbM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=efmtd7G4FQ8:Cg7_aV73zbM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=efmtd7G4FQ8:Cg7_aV73zbM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=efmtd7G4FQ8:Cg7_aV73zbM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=efmtd7G4FQ8:Cg7_aV73zbM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=efmtd7G4FQ8:Cg7_aV73zbM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=efmtd7G4FQ8:Cg7_aV73zbM:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=efmtd7G4FQ8:Cg7_aV73zbM:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/efmtd7G4FQ8" height="1" width="1" alt=""/> 58:08 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/Securabit_EP06.mp3http://traffic.libsyn.com/securabit/Securabit_EP06.mp3?dest-id=18154 Sun, 29 Jun 2008 21:03:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/z8kX_UG6xhw/securabitepisode5.mp3 On this episode of SecuraBit:<br/><br/>Anthony, Chris, Christopher, Jay, and special guest Rob (mubix) discuss:<br/><br/>Signature based anti-virus dead?<br/>Rubbermaid Botmaster Sentenced<br/>BackTrack3 Final released!<br/>Using Google Earth to crash neighboring pools<br/>Crazed Bovine Traversal<br/>Distributed Honeypot Project<br/><br/>The iTunes link on the front page here works again!!!  Check out the forums, and our IRC at irc.freenode.net #securabit.  Any feedback is welcomed either through the contact form, or at feedback@securabit.com, or on the forums.  Thanks for listening!!<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=z8kX_UG6xhw:AFN8c0oOCtI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=z8kX_UG6xhw:AFN8c0oOCtI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=z8kX_UG6xhw:AFN8c0oOCtI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=z8kX_UG6xhw:AFN8c0oOCtI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=z8kX_UG6xhw:AFN8c0oOCtI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=z8kX_UG6xhw:AFN8c0oOCtI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=z8kX_UG6xhw:AFN8c0oOCtI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=z8kX_UG6xhw:AFN8c0oOCtI:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=z8kX_UG6xhw:AFN8c0oOCtI:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/z8kX_UG6xhw" height="1" width="1" alt=""/> 01:12:21 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/securabitepisode5.mp3http://traffic.libsyn.com/securabit/securabitepisode5.mp3?dest-id=18154 Tue, 17 Jun 2008 22:24:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/nSDYbtZXQTw/securabitep04.mp3 On this episode of SecuraBit, Chris, Jay, Anthony, Andy, and Chris Mills discuss:<br/><br/>    * Integrity of Fax Signatures.<br/>    * Metasploit hacked? Layer 2 VLAN fun.<br/>    * Clever Museum Theft.<br/>    * Ironkey-like USB Flash Drive: DiskGO GUARDIAN.<br/>    * Virus that encrypts your data.<br/>    * Safari Carpet Bombing, and more!<br/><br/>Make sure to hit up our forums, and IRC at irc.freenode.net channel #securabit<br/><br/>Send all feedback to feedback@securabit.com or use the contact page on the site. We apologize for the delay! Thanks for listening!<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=nSDYbtZXQTw:YPjs4Op0VWQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=nSDYbtZXQTw:YPjs4Op0VWQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=nSDYbtZXQTw:YPjs4Op0VWQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=nSDYbtZXQTw:YPjs4Op0VWQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=nSDYbtZXQTw:YPjs4Op0VWQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=nSDYbtZXQTw:YPjs4Op0VWQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=nSDYbtZXQTw:YPjs4Op0VWQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=nSDYbtZXQTw:YPjs4Op0VWQ:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=nSDYbtZXQTw:YPjs4Op0VWQ:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/nSDYbtZXQTw" height="1" width="1" alt=""/> 01:24:25 yes podcast,show,security,releases,forums,encryption,irc,securabit chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/securabitep04.mp3http://traffic.libsyn.com/securabit/securabitep04.mp3?dest-id=18154 Mon, 02 Jun 2008 20:12:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/bLMb_sxfexQ/securabitepisode3.mp3 <p>On this episode of SecuraBit, Chris, Jay, Anthony, Andy, and Chris Mills discuss:</p> <ul><li><a onclick="pageTracker._trackPageview('/outgoing/www.darknet.org.uk/2008/05/tjx-employee-fired-for-trying-to-fix-things/?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://www.darknet.org.uk/2008/05/tjx-employee-fired-for-trying-to-fix-things/" href="http://www.darknet.org.uk/2008/05/tjx-employee-fired-for-trying-to-fix-things/" title="TJ Maxx employee fired for disclosing vulnerability">TJ Maxx employee fired for disclosing vulnerability.</a></li><li><a onclick="pageTracker._trackPageview('/outgoing/www.gamesindustry.biz/articles/encryption-chip-will-end-piracy-open-markets-says-bushnell?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://www.gamesindustry.biz/articles/encryption-chip-will-end-piracy-open-markets-says-bushnell" href="http://www.gamesindustry.biz/articles/encryption-chip-will-end-piracy-open-markets-says-bushnell" title="TPM chip wiill end all piracy">Atari CEO says TPM chips will end all game piracy.</a></li><li><a onclick="pageTracker._trackPageview('/outgoing/www.schneier.com/blog/archives/2SecuraBit_Podcast_-_Google_Notebook008/05/how_to_sell_sec.html?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://www.schneier.com/blog/archives/2SecuraBit Podcast - Google Notebook008/05/how_to_sell_sec.html" href="http://www.schneier.com/blog/archives/2SecuraBit%20Podcast%20-%20Google%20Notebook008/05/how_to_sell_sec.html" title="How to sell security">How to sell security.</a></li><li><a onclick="pageTracker._trackPageview('/outgoing/hackthissite.org/news/view/515?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://hackthissite.org/news/view/515" href="http://hackthissite.org/news/view/515" title="Hackthissite.org call for developers">Hackthissite.org call for developers.</a></li><li><a onclick="pageTracker._trackPageview('/outgoing/news.cnet.com/8301-10784_3-9950451-7.html?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://news.cnet.com/8301-10784_3-9950451-7.html" href="http://news.cnet.com/8301-10784_3-9950451-7.html" title="Large companies paying employees to read internal email">Large companies paying employees to read internal email.</a></li><li><a onclick="pageTracker._trackPageview('/outgoing/rss.slashdot.org/_r/Slashdot/slashdot/_3/301245044/article.pl?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://rss.slashdot.org/~r/Slashdot/slashdot/~3/301245044/article.pl" href="http://rss.slashdot.org/%7Er/Slashdot/slashdot/%7E3/301245044/article.pl" title="Comcast defaced">Comcast loses control of its domain name.</a></li><li>Various geek talk.</li></ul> <p>Going MP3 only on this episode. Thanks for listening!</p> <p>Direct DL: <a onclick="pageTracker._trackPageview('/outgoing/media.libsyn.com/media/securabit/securabitepisode3.mp3?referer=http://securabit.com/wp-admin/edit.php');" mce_href="http://media.libsyn.com/media/securabit/securabitepisode3.mp3" href="http://media.libsyn.com/media/securabit/securabitepisode3.mp3" title="SecuraBit Episode 3 MP3">SecuraBit Episode 3 MP3</a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=bLMb_sxfexQ:0arcNmmGMO0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=bLMb_sxfexQ:0arcNmmGMO0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=bLMb_sxfexQ:0arcNmmGMO0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=bLMb_sxfexQ:0arcNmmGMO0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=bLMb_sxfexQ:0arcNmmGMO0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=bLMb_sxfexQ:0arcNmmGMO0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=bLMb_sxfexQ:0arcNmmGMO0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=bLMb_sxfexQ:0arcNmmGMO0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=bLMb_sxfexQ:0arcNmmGMO0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/bLMb_sxfexQ" height="1" width="1" alt=""/> 01:01:06 no chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/securabitepisode3.mp3http://traffic.libsyn.com/securabit/securabitepisode3.mp3?dest-id=18154 Fri, 16 May 2008 13:01:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/ZPGLwoG0VBw/securabitepisode2.m4a <p><span>On this episode of SecuraBit.  Chris, Jay, and Anthony discuss:</span></p> <ul type="disc"><li class="MsoNormal"><span><a title="Debian and Ubuntu SSH Flaw" href="http://isc.sans.org/diary.html?storyid=4420&rss">Debian and Ubuntu SSH flaw</a> </span></li><li class="MsoNormal"><span><a title="Windows Hibernation File" href="http://www.darknet.org.uk/2008/05/sandman-read-the-windows-hibernation-file/">Open and read the windows hibernation file</a> </span></li><li class="MsoNormal"><span><a title="SSL Netcat" href="http://seclists.org/pen-test/2008/May/0019.html"><font color="#606420">SSL capable Netcat</font></a></span></li><li class="MsoNormal"><span><a title="Google sponsors oCERT" href="http://googleonlinesecurity.blogspot.com/2008/05/contributing-to-open-source-software.html">Google sponsors the oCERT</a></span></li><li class="MsoNormal"><span><a title="Exploit-Me Web App Testing" href="http://securitycompass.com/exploitme.shtml">Exploit-Me web application security testing suite</a></span></li><li class="MsoNormal"><span><a title="Air Force wants a Botnet" href="http://blog.wired.com/27bstroke6/2008/05/air-force-col-w.html">US Air Force wants its own Botnet</a></span></li><li class="MsoNormal"><span><a href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9082158&intsrc=news_ts_head"><font color="#606420">Military computer contractor pleads guilty to ID theft</font></a></span></li><li class="MsoNormal"><span><a title="Japan worker gets "demoted" for Porn" href="http://news.bbc.co.uk/2/hi/asia-pacific/7379742.stm">Japan worker in 780k porn hits gets “Demoted?”</a></span></li><li class="MsoNormal"><span><a title="Gmail as a Spam Bazooka" href="http://ece.uprm.edu/~andre/insert/">Using Gmail as a Spam Bazooka</a></span></li><li class="MsoNormal"><span><a title="Master Information Document" href="http://lifehacker.com/388035/make-a-master-information-document-for-worst-case-scenarios">Creating a Master Information Document</a></span></li><li class="MsoNormal"><span><a title="Data Recovery for Shuttle Columbia Hard Drive" href="http://news.bbc.co.uk/1/hi/business/7393449.stm">Recovery of data from Space Shuttle Columbia HD</a></span></li></ul> <p class="MsoNormal"><span><a title="SecuraBit Episode 2 MP3" href="http://media.libsyn.com/media/securabit/securabitepisode2.mp3">Download the MP3 here</a>.</span></p> <p><span>Please leave feedback either via comments or to <a href="mailto:feedback@securabit.com">feedback@securabit.com</a>.  Thanks for tuning in!</span></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ZPGLwoG0VBw:J8YWTQDTQgs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ZPGLwoG0VBw:J8YWTQDTQgs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ZPGLwoG0VBw:J8YWTQDTQgs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ZPGLwoG0VBw:J8YWTQDTQgs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ZPGLwoG0VBw:J8YWTQDTQgs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ZPGLwoG0VBw:J8YWTQDTQgs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ZPGLwoG0VBw:J8YWTQDTQgs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ZPGLwoG0VBw:J8YWTQDTQgs:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ZPGLwoG0VBw:J8YWTQDTQgs:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/ZPGLwoG0VBw" height="1" width="1" alt=""/> 01:03:46 yes podcast,show,security,securabit chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/securabitepisode2.m4ahttp://traffic.libsyn.com/securabit/securabitepisode2.m4a?dest-id=18154 Sat, 03 May 2008 22:49:00 +0000 http://feedproxy.google.com/~r/Securabit/~3/ja_V0aBBQe0/secureabit2008_5_2episode1.m4a <p>On this episode of SecuraBit Chris, Jay and company discuss:</p> <ul><li><a title="Yubico USB Keyboard" href="http://www.yubico.com/" target="_blank" mce_href="http://www.yubico.com">Yubico</a></li><li><a title="Malicious circuits" href="http://www.engadget.com/2008/05/01/researchers-design-malicious-circuits-warn-of-potential-risk/" target="_blank" mce_href="http://www.engadget.com/2008/05/01/researchers-design-malicious-circuits-warn-of-potential-risk/">Malicious circuitry</a></li><li>Whitelisting/Blacklisting</li><li><a title="How to change MAC address" href="http://www.nthelp.com/NT6/change_mac_w2k.htm" target="_blank" mce_href="http://www.nthelp.com/NT6/change_mac_w2k.htm">MAC addresses and coffee shops</a></li><li>Gamestop and security awareness</li><li>Social Engineering</li><li><a title="Storm Worm Wikipedia" href="http://en.wikipedia.org/wiki/Storm_Worm" target="_blank" mce_href="http://en.wikipedia.org/wiki/Storm_Worm">Storm Worm</a>/<a title="Kraken Worm Ars.Technica" href="http://arstechnica.com/news.ars/post/20080408-new-kraken-worm-evading-harpoons-of-antivirus-programs.html" target="_blank" mce_href="http://arstechnica.com/news.ars/post/20080408-new-kraken-worm-evading-harpoons-of-antivirus-programs.html">Kraken Worm</a></li><li>Fake employers and phishing with monster/careerbuilder/dice</li><li><a title="No Tech Hacking on Amazon" href="http://www.amazon.com/gp/product/1597492159?&camp=212361&creative=380729&linkCode=wey&tag=ihackstuff-20" target="_blank" mce_href="http://www.amazon.com/gp/product/1597492159?&camp=212361&creative=380729&linkCode=wey&tag=ihackstuff-20">Johnny Long's No Tech Hacking</a></li></ul> <p>For any questions or comments email <a href="mailto:feedback@securabit.com" mce_href="mailto:feedback@securabit.com">feedback@securabit.com</a> or post a comment here!</p> <p><a href="http://feeds.feedburner.com/Securabit" mce_href="http://feeds.feedburner.com/Securabit">Download the iTunes format here</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ja_V0aBBQe0:3KArQIHD8l0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ja_V0aBBQe0:3KArQIHD8l0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ja_V0aBBQe0:3KArQIHD8l0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ja_V0aBBQe0:3KArQIHD8l0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/Securabit?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ja_V0aBBQe0:3KArQIHD8l0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ja_V0aBBQe0:3KArQIHD8l0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ja_V0aBBQe0:3KArQIHD8l0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/Securabit?i=ja_V0aBBQe0:3KArQIHD8l0:F7zBnMyn0Lo" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/Securabit?a=ja_V0aBBQe0:3KArQIHD8l0:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/Securabit?d=7Q72WNTAKBA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/Securabit/~4/ja_V0aBBQe0" height="1" width="1" alt=""/> 45:12 clean security,computers,podcasting,information,forensics chris@securabit.com (SecuraBit)SecuraBitSecuraBit is an information security podcast that features some of the biggest names in the industry who come on to talk to us about what they're up to. We also engage in both light and heavy discussion on the latest news and goings on in the community. We aren't intended to be an authoritative source of information if you're writing a paper for some infoseec class inc ollege. Our goal is to bring the community closer together and to help people understand who the movers and shakers are in the industry, as well as to entertain and have fun! We are: Anthony Garther, Chris Gerling, Chris Mills, Jason Mueller, Andrew Borel, and more folks behind the scenes who help us be unique! Please visit our website at http://www.securabit.com and send questions/comments to feedback@securabit.com. You can also find us in IRC at irc.freenode.net #securabit and follow us on twitter at @securabit. Thanks!!http://traffic.libsyn.com/securabit/secureabit2008_5_2episode1.m4ahttp://traffic.libsyn.com/securabit/secureabit2008_5_2episode1.m4a?dest-id=18154 SecuraBitnonadultA show for security professionals.