Liquidmatrix Security Digest Podcast

Episode 0x6C

I'm bringing Six Cee Back...

Oh yeah, bad joke from the start.

Upcoming this week...

1. Lots of News
2. Breaches?
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. VirusTotal pitches a fit^Wethical stance
  2. Another attack against the SWIFT network but the attack was stopped althought SWIFT is now warning its members
• DERP/Cybers
• 1. Honey... it may look like I'm looking at Pornhub but this midget porn is an essential part of my bug hunting
  2. SYMANTEC... this is not how you do malware analysis safely
  3. Nice guy tells Indian bank about their app that could have let him steal all the monies
  4. Unintended Consequences of DMCA on Medical Implants Michigan ok with wrenches, not ok with computers
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Personal Warrant Canary
  2. Poor man Windows Security Metrics
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Everywhere
  2. James: - Vegas Baby!
  3. Ben: - Toronto
  4. Matt: - Fleeing Trump... Welcome to Canada Matt
  5. Wil: - Bermuda Triangle
  6. Other LSD Writers: - Dunno. Bill and Chris?
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: insert crickets.wav

Creative Commons license: BY-NC-SA

Episode 0x6B

SIX BEEEEEEEEEEEEE

Ben, Wil, and Dave provide entertainment value that is also questionable.

Upcoming this week...

1. Lots of News
2. Breaches?
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Facebook bug bounty hacker finds that he wasn't the first there (Tech details) (Trey's talk on sharing incident details)
  2. Jericho et. al run some numbers on the VZDBIR (Michael Roytman's response)
  3. There was irony, and then there was getting the message out
  4. I love Gooooold
• DERP/Cybers
• 1. Brazilian judge is scared of the internet ruining Brazilian telco's
  2. Idiot grounds his own flight and runins everyone's day
  3. Kernreaktor Malware Scheiße!!!!
  4. Canadian infrastructure keeps getting hacked
• Mailbag
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. How to hack 2FA
  2. Required reading
  3. OpenSSL
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Interop, RMISC, HackMiami, NolaCon, Securityfest, Infosecurity EU,
  2. James: - On a plane
  3. Ben: - work then off to Vancouver for work
  4. Matt: - I think he's on the phone.
  5. Wil: - Locking himself away this weekend to work on his OSCP training.
  6. Other LSD Writers: - 
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: worst. segue. ever

Creative Commons license: BY-NC-SA

Episode 0x6A

All about the VZ-DBIR

Ok. Not completely weekly. And sorry Mom that we missed last week. We'll get it together.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Verizon's 2016 Data Breach Investigations Report
  2. How Hacking Team got hacked (with a detailed writeup from Phisher himself)
  3. U.K. official confirms surveillance bill would let cops force companies to decrypt data
  4. Katie Seeks Advice... I mean... #insidejoke Download ISO/IEC 29147 Vulnerability Disclosure
  5. How iMessage distributes security to block “phantom devices”
• Breaches
• 1. Philipines got hacked... yes, a whole country ... by a 23 year old student
  2. ... and Mexico
  3. A Bangladeshi bank got popped for (almost) a billion (more analysis) (technical analysis)
• SCADA / Cyber, cyber... etc
• 1. UBER META DATA US or something like that (Uber says gave U.S. agencies data on more than 12 million users)
  2. US Special Forces Are 'Dropping Cyberbombs' on ISIS
• DERP
• 1. Four hundred MILLION vulnerable Androids are out there
  2. Microsoft sues US government over 'unconstitutional' cloud data searches
  3. The FBI paid more than $1 million to crack the San Bernardino iPhone
  4. Jeff Moss talks about grooming presidents
• Mailbag
• 1. Making security a big "P" Profession
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Sadlock Bug
  2. Listen to Paul @dcept905 when he says interesting things on Twitter
  3. DevOps Days Austin
  4. Setting up a home malware lab
  5. Spy Chief Complains That Edward Snowden Sped Up Spread of Encryption by 7 Years
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Interop, RMISC, HackMiami, NolaCon, SecurityFest, InfosecurityEU, CircleCityCon
  2. James: - Not much until Vegas... As far as I know.
  3. Ben: - A Cyber Insurance conference. Listening. yes... really
  4. Matt: - DevOps Days Austin, DFIR Summit, Vegas
  5. Wil: - CBC Calgary
  6. Other LSD Writers: - Shrug, Dunno.
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: Hey Ergodan - watch this you despotic little arsehole this

Creative Commons license: BY-NC-SA

Episode 0x69

Still Weekly!

Still difficult to get everyone together for a recording but damn, we're trying. Keep sending in your questions to mailbag@liquidmatrix.org and if you see one of us at a conference, ask nicely and we'll give you a sticker!

PS: The Security Intern joins us tonight - sorry you all can't see her commentary on the rest of the Liquidmatrix crew.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Badlock Bug Site Get out your Sad Trombones everyone. Steve Ragan Fulfils Curmudgeon Role - Badlock Hype Tero Hänninen calls bullshit in a simple way Network World notes that Microsoft doesn't think it's Logo-worthy
2. Eset et al. Take down Mumblehard Linux/BSD botnet
3. Breaking Google Captcha
4. Investigating the Potential for Miscommunication Using Emoji
5. California lawmakers take step toward outlawing 'ransomware'
• Breaches
1. Security Flaws found in 3 state health insurance websites (THANKS OBAMA)
2. Petya Ransomware Encryption Defeated
• SCADA / Cyber, cyber... etc
1. Lockheed Martin - Integrated Infrastructure: Cyber Resiliency in Society
2. OMGee - Canada is vulnerable, eh?
3. FBI Claims that businesses have lost $2.3 Billion to Email Scams from October 2013 to February 2016
• DERP
1. Maynor Fixes All The Maps - MaxMind and Default Locations in GeoIP
2. Misconfigure your way to Panama Success
• Mailbag
1. Compliance is the Naturopathy of Information Security - DISCUSS.
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Random MAC addresses not enough...
2. Integrating Bro IDS with the Elastic Stack
3. Dealing with Digital Death
4. Automating thought leadership
5. Scan Onion Services for Security Issues
6. Submit to the SecTor CFP!Early acceptance deadline is Sunday April 17 - final deadline is August 14th
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - NAB Show, Interop, RMISC, HackMiami, NolaCon
2. James: - Desperately working on new material for Blackhat Cloud Security Training
3. Ben: - Vogon poetry reading
4. Wil: - Remedial HTML for beginners (Cue Jamie's rant here)
5. Other LSD Writers: - Really?
• Advertising - pay the bills...
1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Next Week - because we'll be here next week!
1. We'll be discussing the idea of making cyber a regulated profession. Send us your thoughts. Also, California, what's up with that?
• Closing Thoughts
1. Seacrest Says: Cause, baby, now we got badlock

Creative Commons license: BY-NC-SA

Episode 0x68

Weekly Monthly Somethignly

At least a few of the boys are back to whine, bitch and moan.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Whatsapp integrates whisper systems AXOLOTL here's a whitepaper (but they still collects the metadata) so stick with Signal if you don't like NSA
2. Who Has Access - to unscrew your Google Drive mess. Medium article by CEO
3. Panama papers: China censors online discussion
• DERP
1. I ate the evidence
2. Nest to permanently brick Revolv smart home devices 1,400 Vulnerabilities to Remain Unpatched In Medical Supply System
• Mailbag

1. What's your opinion about the Tor and Cloudflare mud slinging?
   
   

   - Not Matthew Prince
   
   links: Cloudflare slings mud and Tor calls shenanigans

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Random TED Talk - because I haven't been paying attention
2. Canadian government has opened consultation on Data Breach Notification and Reporting Regulations
3. GPG signed git commits
4. China's 'Great Firewall' blocks its creator
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - ATLSECCON, NAB, Interop, RMISC, HackMiami, NolaCon
2. James: - Probably nothing until Vegas
3. Ben: - No One Knows (locked in a SOC2 closet at work)
4. Matt: - at a hipster beard salon NEAR YOU
5. Wil: - CBC Calgary Bitches
6. Other LSD Writers: - 
7. Closing Thoughts
1. Seacrest Says: I've run amok

Creative Commons license: BY-NC-SA

Episode 0x67

The One With The Stunt Double

Hey, James here. The boys recorded this one without me and managed to really munge up the audio. My apologies. For what it's worth, this is what happens when Dave and Wil are in charge.

Upcoming this week...

1. Lots of News
2. Breaches
3. finishing it off with DERPs/Mailbag (or Deep Dive)
4. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. FBI say "You don't need to know how we hacked you, because you're a dirty dirty pedo."
2. December DNS Root attack get's curiouser and curiouser... Slick Heatmap of the traffic source analysis.
3. Security and small thermal exhaust ports
• Derps
1. Anonymous Hacks
2. Weeve... I get it but you're being an ass...
3. CNBC shares your password with it's ad networks and a google spreadsheet.
4. VNC Roulette (why is this still news?)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. "OpenBSD 5.9 is out. Now with more W^X and Xen.
2. "Securityfest CFP open
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - ATLSECCON, NAB Show, Interop, RMISC, HackMiami, NolaCon
2. James: - Nowhere - except for going to Seattle again. Oh, and Vegas.
3. Ben: - Nowhere
4. Matt: - Where souls go for destruction
5. Wil: - Well... CBC Calgary is Go (And other assorted projects... MakeFashion, c0wsec)
6. Other LSD Writers: - There is no Other Writers
7. Closing Thoughts
1. Seacrest Says: "VNC, VNC Everywhere!"

Creative Commons license: BY-NC-SA

Episode 0x66

The One Where Ben and Jamie Aren't At RSAC

So the rest of the gang are out playing in either San Fran or Calgary. You get what's left over - actual security professionals doing actual security work.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Pentagon Admits, Only a Bug Bounty Will Work US Companies Prefer China over Pentagon, Generals try Cybering Harder
2. John McAfee doesn't computer
• Breaches
1. Internet of Crap - now with Patriot Missiles in Turkey
• SCADA / Cyber, cyber... etc
1. 1Password loopback vuln ... but wait, a rationale response from the vendor
2. DROWNing!!!
3. A little late but congress says no to Flowers By Irene
• DERP
1. UK Minister Compares Adblocking to Piracy. Fails at Internet
2. Ad networks have a vulnerability again
• Mailbag

1. Dear Liquidmatrix,

   How come you're not at RSAC with the cool kids?

   Signed,

   Cool Kids

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. I was in Engadget. Read about it.
2. Incident response methodologies
3. Closing Thoughts
1. Seacrest Says: good luck with the post RSAC conflu

Creative Commons license: BY-NC-SA

Episode 0x65

Ben and Matt Screw Up HTML

Thanks Matt-Dave, this is Ben-Jamie for episode 0x65 (82 for those of you not good with the hexa-ma-decimal) and we're down a bunch of peope tonight but that's okay because we're super committed (except Wil, he's doing who knows what somewhere). Tonight we've got a lot of news about vulns and then a brief stroll through the cybers, derps and mailbags before calling it a night. Hey Matt, what's in the news?

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. glibc - Set fire to the rain
2. Google's advisory on glibc vuln
3. Cisco's firewall doesn't... you know... firewall and it's a pretty nasty vuln affecting millions of ASA deployments making it ripe for worm fodder. The vuln was discovered by Exodus Intel. Predictably the mass scanning started , and Qualys made some pretty good points about this vuln. Notably, Cisco has released an IDS signature back in November; but how does that help an admin who gets the alert. This mitigation probably didn't work.
• SCADA / Cyber, cyber... etc
1. Fireeye vuln let's you whitelist malware
2. Apple Encryption Bomb Dropped
3. Trail of Bits Technical Deep Dive on Apple Encryption
• DERP
1. Fake Download Buttons Be Gone!
2. 3rd Party JavaScript in Major Banks Login Forms
• Mailbag

1. Hi-Di-Ho
   Have you thought about doing a livestream?
   
   Mr. Hanky

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Docker's Security Upgrades
2. AWS Lambda WAF awesomeness
3. Mimikatz defense
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - RSA!
2. James: - Nowhere - except for going to Seattle next week
3. Ben: - Nowhere
4. Matt: - RSA!
5. Wil: - in his trailer between takes
6. Other LSD Writers: - There is no Other Writers
7. Closing Thoughts
1. Seacrest Says: Eggplant 2 - Mother approved

Creative Commons license: BY-NC-SA

Episode 0x64

FIVE Golden Digests...

Yup, back again. Actually a thing. There's even some people here to talk to you about security things. And whining. Also, fuck you Skype.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Dridex Malware Platform installing Avira
2. Let's encrypt has crossed 500K
3. SANS Securing the Human Newsletters And use Gophish to test them out...
4. Job hunting? White House seeking a CISO
• SCADA / Cyber, cyber... etc
1. Obama gonna make it rain $19 billion cybers
2. ENISA Cyber Europe 2016
3. Hacker doxxes 20k FBI agents
• DERP
1. VTech: "Not our bad..." ¯\_(ツ)_/¯
2. Microsoft doesn't understand what "no" means
3. Avast decides to pull a Comodo
4. Your backups should be in a separate cloud thingie
5. Alibaba security team fails to notice 99 million brute force attempts - TAO says "you're welcome"
• Mailbag

1. Dear Digestives

   What's the deal with auditors and the woodie they've got for full disk encryption on servers in secured data centers?

   Love you all, but I NEED AN ANSWER NOW

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Archive.org's Malware archive
2. Make all those asshole auditors shut up about O365
3. Specialists Vs. Generalists by some guy named Nick
4. Pamela Anderson is in a movie about the singularity
5. RSA Parties List 2016

• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - RSA, CSA Summit 2016 (Slovenia), FIRST ...25th?
2. James: - I work. A lot.
3. Ben: - Also works. A lot.
4. Matt: - There is no Matt.
5. Wil: - Doesn't work so much... Rehearsing for Radioheaded (again...), more CBC news coming...
6. Other LSD Writers: - There is no Other Writers
7. Closing Thoughts
1. Seacrest Says: Eggplant

Creative Commons license: BY-NC-SA

Episode 0x63

May The Forth Be With You!

Dave's here. Wil's here. Matt's here. Ben's here. I'm here. There's a guest (or two) HOLY CRAP IT'S A REGULARLY SCHEDULED LIQUIDMATRIX PODCAST. Also, Dave claims he's fixed the website - we'll see how that goes.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Lessons Learned from the Java Deserialization Bug ( Apache Nose Job that Ben mentioned - everything old is new again)
2. Let's talk a bit about privacy on Tor
3. Baby Monitors live in New York!
4. 2016 Social Security Blogger Award Voting is Open Now
5. Security Firm Norse Corp. Imploding Threat Butt
• Breaches
1. Let's just assume that there have been some.
• SCADA / Cyber, cyber... etc
1. The Muricans are invading Canada's all bran fibre (h/t @ultramegaman)
2. Israel got hacked by the NSA and James Bond
3. Go get your prescriptions from these guys
• Curmudgeon's Corner
1. The latest from Internet Curmudgeons -- tonight Spacerogue - YES THAT SPACEROGUE!
• DERP
1. Developers Accidentially Ship Dropbox and Gmail Logins - Motorola
2. HSBC succesfully defends against DDoS but is offline
3. Security researcher finds 'backdoor' to MediaTek processors
4. Tavis wrecks Comodo
• Mailbag

1. Gentlemen,

   First let me say how happy I am that the Liquidmatrix podcast is pushing out new episodes in 2016. I look forward to listening more.

   That said I find I must take exception to the "Mailbag" commentary in Episode 61.

   <rant>

   What definition of "enterprise" are you using?

   I will heartily endorse that Matt is an "awesome" hacker and that the toolkit he is building at the startup he's at is likely totally awesome. But in what world is a startup also an enterprise?

   Startups use homebrew and open source systems because they are cash-short and it makes more business sense (meaning a combination of financial, risk, compliance, and resource sense) to build versus buy.

   But any true enterprise CISO that used a SIEM built by one of their team members is (using the language of the kids today) “smoking crack”.

   Why? Allow me to expand the thought.. Assume Matt works for me at an $8B company and I adopted the SIEM platform he developed versus using MSSP or SIEM…

   1. As the company grows the amount of time Matt will need to spend building connectors and enhancing the system will continue to grow. Matt will need to take time away from actual security (which is what I hired him for in the first place) and act more like a developer than a security staff member. Is that the best use of his limited time? I doubt it.
   2. Some compliance regimes (yeah, I know, I can hear the complaints now but at the enterprise level this stuff matters) require systems you rely on for security to “have support”. I’m not a development shop! I do security for a company that makes widgets! Crap – now I have a finding in my external audit and my PCI assessor is twitching.
   3. What happens when Matt gets bored (and he will – all good hackers do after a period of time) and leaves the company? Who’s going to support this thing? Now I have to go find an equally awesome hacker (not an easy prospect these days) and hope they can support this now critical piece of security infrastructure. There is a very real possibility that the system will degrade into a useless piece of crap before I can find someone to take over… That’s potentially devastating as I have *nothing* to fall back on.

   Are you seriously asking me to sign up for this amount of risk? REALLY?

   </rant>

   Homebrew and open source security tools have their place and properly used are likely viable solutions in the startup/SMB space. Use in a true enterprise, IMO, is likely going to add so much risk that the cash expense of $VENDORPRODUCT is very much worth it.

   Keep up the good podcast work, y’all. I look forward to more episodes.

   Martin Fisher

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Michael Geist on the TPP
2. Internet Link Tester / Validator w/ Raspberry Pi (or any Linux)
3. Maximum Absorbency Garment
4. Bill Clinton has used email once or twice. Nope just twice.
5. Safe Harbour 2 is here
6. Google's Vulnerability Reward Program paid out more than $2 million in 2015
• Liquidmatrix Staff Projects -- gratuitous self-promotion
1. Messages from our Sponsors
2. We really need to have more projects
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - RSA, ATLSECCON, NAB, Interop, Bill's thong shop
2. James: - Currently nothing till Vegas.
3. Ben: - At home
4. Matt: - RSA? Maybe? Come buy me beer during SXSW
5. Wil: - Waiting to take OSCP...
6. Other LSD Writers: - Apparently bloggering...
7. Closing Thoughts
1. Seacrest Says: Out.

Creative Commons license: BY-NC-SA