Liquidmatrix Security Digest Podcast (lsd_podcasts)

Episode 0x76

Ready for a surprise thing? Yup. We found spare time and did a thing. Here's the thing. You get to spend a whole lot of time listen to security old farts.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Rogers Outage - the CRTC letter and An analysis on the BGP route withdrawal
  2. Why Bug Bounty Programs are Failing
  3. CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks
• Breaches
• 1. Yeah. You've been Shanghai'd - maybe?
• SCADA / Cyber, cyber... etc
• 1. SCADA market to reach 13+ Billion in 4 years - will any of it be secure?
  2. Uber won't get prosecuted for their 2016 breach, but...
• DERP
• 1. Oldie but goodie - Elon's plane being tracked is a security issue... and Drake tries to make it better and fails so miserably... derp.
• Mailbag
• 1. You guys are not good at segways... or segues
     
     https://www.merriam-webster.com/dictionary/segue
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Awesome Security (tools and stuff)
  2. Samsung has a thing that sounds like a backdoor but actually isn't
  3. As Microsoft blocks Office macros, hackers find new attack vectors
• Closing Thoughts
• 1. Seacrest Says: Seacrest says see you at band camp

Creative Commons license: BY-NC-SA

Episode 0x75

10th Anniversary Special

We should have something snappy here, but we're old and out of belt-onions

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Whats changed in infosec since we last talked?
  2. Coinbase highlighting the risk of centralizing a decentralized system
  3. Great podcast from Odd Lots - the ponzinomics of cryptocurrency
  4. New Vulnerability Database Catalogs Cloud Security Issues
  5. Data breach at US ambulance billing service Comstar exposed patients’ healthcare information
• Breaches
• 1.  
  2. In Canada... largest breach settlement
• SCADA / Cyber, cyber... etc
• 1. Wired knows shit.
  2. Deep fake remote IT job applicants
• DERP
• 1.  
• Mailbag
• 1. It's been a rough couple of years. We missed a lot. Some friends departed. How are y'all handling things? ~a long time listener
     
     
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. I'm hiring
  2. Me too
  3. Risk Disconnect in the Cloud
  4. Supply chain Levels for Software Artifacts
  5. https://jobs.cisco.com/We're hiring at Cisco
• Closing Thoughts
• 1. Seacrest Says: Dave qualifies for senior AARPdiscounts now

Creative Commons license: BY-NC-SA

Episode 0x74

Quarantine 2020 Edition

All the late shows are doing the "I phoned in from home" why shouldn't we?

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. coronavirus insider trading
  2. fixing vulns at scale
  3. US authorities battle surge in coronavirus scams, from phishing to fake treatments
  4. Coronavirus Sets the Stage for Hacking Mayhem
• Breaches
• 1. Princess Cruises Confirms Data Breach
  2. Rogers had a woopsie
• SCADA / Cyber, cyber... etc
• 1. Hackers Promise 'No More Healthcare Cyber Attacks' During COVID-19 Crisis
• DERP
• 1. Stupid shit that vendors say due to Coronavirus (THIS)
• Mailbag
• 1. So... what about actually doing this podcast a little more often? Signed: The Internet
     
     What do you mean our RSS feed didn't update? What do you mean RSS is dead?
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. cyentia 2020 information risk insights study
  2. On Making Work Less Remote: How the Heroku Team Works Together
  3. HBR has some thoughts on newly remote teams too
  4. automated reasoning about AWS security
  5. s3 thinger
  6. https://twitter.com/JSTOR/status/1240306471168028674?s=20Get bent JSTOR
• Closing Thoughts
• 1. Seacrest Says: There's finally a word for what we do... On-nomi

Creative Commons license: BY-NC-SA

Episode 0x73

Surprise! Happy Holidays

Are you having a happy holiday? Listen to us and you'll have a happy holiday.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Comparison of DNS resolvers  Stylish Norton Core Router
  2. Russian wessels messing with underwater internets  Submarine Cable Map
  3. Keeper Security learns about The Striesand Effect
  4. Russian hackers targeted more than 200 journalists globally
• Breaches
• 1. Internet Hijacking
  2. Free Credit Monitoring from Nissan Finance Canada!
• SCADA / Cyber, cyber... etc
• 1. VMWare has bugs. Who knew?
• DERP
• 1. The person that thought we our recent fail panel was unprofessional
  2. Screenshot kernel patch
• Mailbag
• 1. So... what about actually doing this podcast a little more often? Signed: The Internet
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Enpass
  2. Pineapple Fund
  3. Die Hard at the Theatre
  4. Magic Leap is real... ish
  5. Has no link.
• Closing Thoughts
• 1. Seacrest Says: Where the fuck is Matt? Has anyone seen Matt?

Creative Commons license: BY-NC-SA

Episode 0x72

SPECIAL ELECTION EDITION

Vote Dave... please?

Upcoming this week...

1. We yammer about stuff with no real direction or point.

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• SCADA / Cyber, cyber... etc
• 1. ETERNALBLUE was being used before wannacry
• DERP
• 1. Hacking Mar-A-Largo... Kinda? Is this legal?
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. https://securityheaders.io/
  2. https://www.gofundme.com/crunch-medical-fund
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. Advertising - pay the bills...
  2. 1. Thinking about SecTor this November? Be sure to use the code "liquidmatrix2017" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2017expo" will get you in for $0
     1. Seacrest Says: I can't even remember... something about Kelly.
  3. Closing Thoughts

Creative Commons license: BY-NC-SA

Episode 0x71

Um... We're back?

I think it's called falling off the wagon. We did that. We should get back on the wagon. Why is it always a wagon?

Upcoming this week...

1. /dev/random

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• We totally forgot show-notes

Creative Commons license: BY-NC-SA

Episode 0x70

Dave Doesn't Exist

We've been unable to capture Dave on video yet despite turning out a absolutely epic amount of video material. We think it's because he doesn't actually exist. Do not even get me started on the hipster beard and hipster actor. Those two. Sigh. In any case...

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Surveillance of reporters has chilling effects
  2. Great series of articles from Rich Mogull on Cloud Security Your Cloud Consultant Probably Sucks How to Start Moving to Cloud Seven Steps to Secure Your AWS Root Account
• Breaches
• 1. Github responsible disclosure
  2. haveibeenpwned - NSA edition (a written message from the Shadow Brokers)
• SCADA / Cyber, cyber... etc
• 1. White hat Marai
  2. UK gov investing mucho Brexit dollars in cyber security
• DERP
• 1. Don't do illegal searches of CPIC (especially if you're a police officer)
• Mailbag
• 1. What's with google disclosing vulns without patches? (thanks to Ed)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Macbook Pro review
  2. Ten Securosis Years
  3. Let's Encrypt Crowdfunding campaign
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - invading Sweden
  2. James: - VACATION!
  3. Ben: - still work
  4. Matt: - beard
  5. Wil: - hipster
  6. Other LSD Writers: - whaaaaaaa?
• Closing Thoughts
• 1. Seacrest Says: Dave loves swedish meatballs

Creative Commons license: BY-NC-SA

Episode 0x6F

THE CENTENNIAL!

We are happy to announce that we've got a full show... with only two hosts. But hey - it's number 100(decimal)

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Apple Introduces What It Calls an Easier to Use Portable Music Player
  2. MEDSEC gets independent confirmation of their findings... St Jude is still suing
  3. New ISO Standard Is an Anti-Bribery Game-Changer
• Breaches
• 1. Vera Bradley POS Breach
• SCADA / Cyber, cyber... etc
• 1. Modbus eavesdropper from B+B SmartWorx
  2. Senators get involved in IoT
  3. Dan Kaminsky on DNS and rate limiting
• DERP
• 1. HAMAS complains about video cameras
  2. California DMV thinks "INFOS3C" is a dirty word
  3. Apple Doxes Self -- MBP w/TouchID
• Mailbag
• 1. TALK ABOUT BSIDESTO AND SECTOR
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Liquidmatrix TV
  2. learn stuff for free from experts
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Claims to have 5 more conferences this year. Wife still doesn't expect him home for dinner anytime soon
  2. James: - O'Reilly Security NYC and then WDW!
  3. Ben: - work
  4. Matt: - Unknown. Hiding behind his beard.
  5. Wil: - Unknown. Check CBC Calgary
  6. Other LSD Writers: - There are others?
• Advertising - pay the bills...
• 1. Thinking about SecTor this November 2017?Check back with us for codes.
• Closing Thoughts
• 1. Terry Bradshaw Says: 100 (decimal) BABY WOOO!!! 100

Creative Commons license: BY-NC-SA

Episode 0x6E

IT LIVES (Live from SecTor 2016)

All five LSDP's in one room at the same time. It actually happened.

Upcoming this week...

1. Catching Up!

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• LIVE FROM SECTOR!!!
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Closing Thoughts
• 1. Seacrest Says: Eventually we will return. Maybe.

Creative Commons license: BY-NC-SA

Episode 0x6D

We've been gone for a month, we've been drunk since we left

hej till våra lyssnare i Sverige

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Etherium TheDAO attack simplified
  2. People who have been victim of workplace violence, harrasment and sexual assault Isis agora lovecruft Alison Macrina Violet Blue Nick Farr
  3. "Consent, it's as simple as tea" if you haven't seen it Canadian Association of Sexual Assult Centers Women Against Violence Against Women Ontario Coalition of Rape Crisis Centers Central Alberta Sexual Assult Center VictimLink BC page on Sexual Assult Rape, Abuse & Incest National Network (USA)
  4. DHS seeks to ask foreign visitors their social media accounts
• Breaches
• 1. All your gotomypc are belong to us
• DERP
• 1. Comodo are the good guys, seriously (not seriously)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. The Intercept's comparison of instant messaging applications (And the EFF's scorcard is soon to be updated)
  2. Mooltipass
  3. Intel Corp. Said to Weigh Sale of Cyber-Security Unit, FT Says
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - BSidesLV, DEF CON, Black Hat, Energysec, HTCIA, Security Congress...
  2. James: - Vegas. Sigh.
  3. Ben: - Coding my ass for SECTOR building G.Tool
  4. Matt: - Keeping banker's hours.
  5. Wil: - BSidesLV, DEF CON, Burning Man...
  6. Other LSD Writers: - Who?
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: I don't have to outrun you... I just have to outrun the other short guys

Creative Commons license: BY-NC-SA