Liquidmatrix Security Digest Podcast

The SECOND episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks data exfiltration.

In this first episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro walks you through SecTor 2016.

Episode 0x6E

IT LIVES (Live from SecTor 2016)

All five LSDP's in one room at the same time. It actually happened.

Upcoming this week...

1. Catching Up!

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• LIVE FROM SECTOR!!!
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Closing Thoughts
• 1. Seacrest Says: Eventually we will return. Maybe.

Creative Commons license: BY-NC-SA

Episode 0x6D

We've been gone for a month, we've been drunk since we left

hej till våra lyssnare i Sverige

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Etherium TheDAO attack simplified
  2. People who have been victim of workplace violence, harrasment and sexual assault Isis agora lovecruft Alison Macrina Violet Blue Nick Farr
  3. "Consent, it's as simple as tea" if you haven't seen it Canadian Association of Sexual Assult Centers Women Against Violence Against Women Ontario Coalition of Rape Crisis Centers Central Alberta Sexual Assult Center VictimLink BC page on Sexual Assult Rape, Abuse & Incest National Network (USA)
  4. DHS seeks to ask foreign visitors their social media accounts
• Breaches
• 1. All your gotomypc are belong to us
• DERP
• 1. Comodo are the good guys, seriously (not seriously)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. The Intercept's comparison of instant messaging applications (And the EFF's scorcard is soon to be updated)
  2. Mooltipass
  3. Intel Corp. Said to Weigh Sale of Cyber-Security Unit, FT Says
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - BSidesLV, DEF CON, Black Hat, Energysec, HTCIA, Security Congress...
  2. James: - Vegas. Sigh.
  3. Ben: - Coding my ass for SECTOR building G.Tool
  4. Matt: - Keeping banker's hours.
  5. Wil: - BSidesLV, DEF CON, Burning Man...
  6. Other LSD Writers: - Who?
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: I don't have to outrun you... I just have to outrun the other short guys

Creative Commons license: BY-NC-SA

Episode 0x6C

I'm bringing Six Cee Back...

Oh yeah, bad joke from the start.

Upcoming this week...

1. Lots of News
2. Breaches?
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. VirusTotal pitches a fit^Wethical stance
  2. Another attack against the SWIFT network but the attack was stopped althought SWIFT is now warning its members
• DERP/Cybers
• 1. Honey... it may look like I'm looking at Pornhub but this midget porn is an essential part of my bug hunting
  2. SYMANTEC... this is not how you do malware analysis safely
  3. Nice guy tells Indian bank about their app that could have let him steal all the monies
  4. Unintended Consequences of DMCA on Medical Implants Michigan ok with wrenches, not ok with computers
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Personal Warrant Canary
  2. Poor man Windows Security Metrics
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Everywhere
  2. James: - Vegas Baby!
  3. Ben: - Toronto
  4. Matt: - Fleeing Trump... Welcome to Canada Matt
  5. Wil: - Bermuda Triangle
  6. Other LSD Writers: - Dunno. Bill and Chris?
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: insert crickets.wav

Creative Commons license: BY-NC-SA

Episode 0x6B

SIX BEEEEEEEEEEEEE

Ben, Wil, and Dave provide entertainment value that is also questionable.

Upcoming this week...

1. Lots of News
2. Breaches?
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Facebook bug bounty hacker finds that he wasn't the first there (Tech details) (Trey's talk on sharing incident details)
  2. Jericho et. al run some numbers on the VZDBIR (Michael Roytman's response)
  3. There was irony, and then there was getting the message out
  4. I love Gooooold
• DERP/Cybers
• 1. Brazilian judge is scared of the internet ruining Brazilian telco's
  2. Idiot grounds his own flight and runins everyone's day
  3. Kernreaktor Malware Scheiße!!!!
  4. Canadian infrastructure keeps getting hacked
• Mailbag
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. How to hack 2FA
  2. Required reading
  3. OpenSSL
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Interop, RMISC, HackMiami, NolaCon, Securityfest, Infosecurity EU,
  2. James: - On a plane
  3. Ben: - work then off to Vancouver for work
  4. Matt: - I think he's on the phone.
  5. Wil: - Locking himself away this weekend to work on his OSCP training.
  6. Other LSD Writers: - 
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: worst. segue. ever

Creative Commons license: BY-NC-SA

Episode 0x6A

All about the VZ-DBIR

Ok. Not completely weekly. And sorry Mom that we missed last week. We'll get it together.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
• 1. Verizon's 2016 Data Breach Investigations Report
  2. How Hacking Team got hacked (with a detailed writeup from Phisher himself)
  3. U.K. official confirms surveillance bill would let cops force companies to decrypt data
  4. Katie Seeks Advice... I mean... #insidejoke Download ISO/IEC 29147 Vulnerability Disclosure
  5. How iMessage distributes security to block “phantom devices”
• Breaches
• 1. Philipines got hacked... yes, a whole country ... by a 23 year old student
  2. ... and Mexico
  3. A Bangladeshi bank got popped for (almost) a billion (more analysis) (technical analysis)
• SCADA / Cyber, cyber... etc
• 1. UBER META DATA US or something like that (Uber says gave U.S. agencies data on more than 12 million users)
  2. US Special Forces Are 'Dropping Cyberbombs' on ISIS
• DERP
• 1. Four hundred MILLION vulnerable Androids are out there
  2. Microsoft sues US government over 'unconstitutional' cloud data searches
  3. The FBI paid more than $1 million to crack the San Bernardino iPhone
  4. Jeff Moss talks about grooming presidents
• Mailbag
• 1. Making security a big "P" Profession
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
• 1. Sadlock Bug
  2. Listen to Paul @dcept905 when he says interesting things on Twitter
  3. DevOps Days Austin
  4. Setting up a home malware lab
  5. Spy Chief Complains That Edward Snowden Sped Up Spread of Encryption by 7 Years
• Upcoming Appearances:  -- more gratuitous self-promotion
• 1. Dave: - Interop, RMISC, HackMiami, NolaCon, SecurityFest, InfosecurityEU, CircleCityCon
  2. James: - Not much until Vegas... As far as I know.
  3. Ben: - A Cyber Insurance conference. Listening. yes... really
  4. Matt: - DevOps Days Austin, DFIR Summit, Vegas
  5. Wil: - CBC Calgary
  6. Other LSD Writers: - Shrug, Dunno.
• Liquidmatrix Products and Services - We do some stuff. Seriously.
• 1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
• Advertising - pay the bills...
• 1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Closing Thoughts
• 1. Seacrest Says: Hey Ergodan - watch this you despotic little arsehole this

Creative Commons license: BY-NC-SA

Episode 0x69

Still Weekly!

Still difficult to get everyone together for a recording but damn, we're trying. Keep sending in your questions to mailbag@liquidmatrix.org and if you see one of us at a conference, ask nicely and we'll give you a sticker!

PS: The Security Intern joins us tonight - sorry you all can't see her commentary on the rest of the Liquidmatrix crew.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Badlock Bug Site Get out your Sad Trombones everyone. Steve Ragan Fulfils Curmudgeon Role - Badlock Hype Tero Hänninen calls bullshit in a simple way Network World notes that Microsoft doesn't think it's Logo-worthy
2. Eset et al. Take down Mumblehard Linux/BSD botnet
3. Breaking Google Captcha
4. Investigating the Potential for Miscommunication Using Emoji
5. California lawmakers take step toward outlawing 'ransomware'
• Breaches
1. Security Flaws found in 3 state health insurance websites (THANKS OBAMA)
2. Petya Ransomware Encryption Defeated
• SCADA / Cyber, cyber... etc
1. Lockheed Martin - Integrated Infrastructure: Cyber Resiliency in Society
2. OMGee - Canada is vulnerable, eh?
3. FBI Claims that businesses have lost $2.3 Billion to Email Scams from October 2013 to February 2016
• DERP
1. Maynor Fixes All The Maps - MaxMind and Default Locations in GeoIP
2. Misconfigure your way to Panama Success
• Mailbag
1. Compliance is the Naturopathy of Information Security - DISCUSS.
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Random MAC addresses not enough...
2. Integrating Bro IDS with the Elastic Stack
3. Dealing with Digital Death
4. Automating thought leadership
5. Scan Onion Services for Security Issues
6. Submit to the SecTor CFP!Early acceptance deadline is Sunday April 17 - final deadline is August 14th
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - NAB Show, Interop, RMISC, HackMiami, NolaCon
2. James: - Desperately working on new material for Blackhat Cloud Security Training
3. Ben: - Vogon poetry reading
4. Wil: - Remedial HTML for beginners (Cue Jamie's rant here)
5. Other LSD Writers: - Really?
• Advertising - pay the bills...
1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
• Next Week - because we'll be here next week!
1. We'll be discussing the idea of making cyber a regulated profession. Send us your thoughts. Also, California, what's up with that?
• Closing Thoughts
1. Seacrest Says: Cause, baby, now we got badlock

Creative Commons license: BY-NC-SA

Episode 0x68

Weekly Monthly Somethignly

At least a few of the boys are back to whine, bitch and moan.

Upcoming this week...

1. Lots of News
2. Breaches
3. SCADA / Cyber, cyber... etc.
4. finishing it off with DERPs/Mailbag (or Deep Dive)
5. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. Whatsapp integrates whisper systems AXOLOTL here's a whitepaper (but they still collects the metadata) so stick with Signal if you don't like NSA
2. Who Has Access - to unscrew your Google Drive mess. Medium article by CEO
3. Panama papers: China censors online discussion
• DERP
1. I ate the evidence
2. Nest to permanently brick Revolv smart home devices 1,400 Vulnerabilities to Remain Unpatched In Medical Supply System
• Mailbag

1. What's your opinion about the Tor and Cloudflare mud slinging?
   
   

   - Not Matthew Prince
   
   links: Cloudflare slings mud and Tor calls shenanigans

• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. Random TED Talk - because I haven't been paying attention
2. Canadian government has opened consultation on Data Breach Notification and Reporting Regulations
3. GPG signed git commits
4. China's 'Great Firewall' blocks its creator
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - ATLSECCON, NAB, Interop, RMISC, HackMiami, NolaCon
2. James: - Probably nothing until Vegas
3. Ben: - No One Knows (locked in a SOC2 closet at work)
4. Matt: - at a hipster beard salon NEAR YOU
5. Wil: - CBC Calgary Bitches
6. Other LSD Writers: - 
7. Closing Thoughts
1. Seacrest Says: I've run amok

Creative Commons license: BY-NC-SA

Episode 0x67

The One With The Stunt Double

Hey, James here. The boys recorded this one without me and managed to really munge up the audio. My apologies. For what it's worth, this is what happens when Dave and Wil are in charge.

Upcoming this week...

1. Lots of News
2. Breaches
3. finishing it off with DERPs/Mailbag (or Deep Dive)
4. And there are weekly Briefs - no arguing or discussion allowed

And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

In this episode:

• News and Commentary
1. FBI say "You don't need to know how we hacked you, because you're a dirty dirty pedo."
2. December DNS Root attack get's curiouser and curiouser... Slick Heatmap of the traffic source analysis.
3. Security and small thermal exhaust ports
• Derps
1. Anonymous Hacks
2. Weeve... I get it but you're being an ass...
3. CNBC shares your password with it's ad networks and a google spreadsheet.
4. VNC Roulette (why is this still news?)
• Briefly -- NO ARGUING OR DISCUSSION ALLOWED
1. "OpenBSD 5.9 is out. Now with more W^X and Xen.
2. "Securityfest CFP open
• Upcoming Appearances:  -- more gratuitous self-promotion
1. Dave: - ATLSECCON, NAB Show, Interop, RMISC, HackMiami, NolaCon
2. James: - Nowhere - except for going to Seattle again. Oh, and Vegas.
3. Ben: - Nowhere
4. Matt: - Where souls go for destruction
5. Wil: - Well... CBC Calgary is Go (And other assorted projects... MakeFashion, c0wsec)
6. Other LSD Writers: - There is no Other Writers
7. Closing Thoughts
1. Seacrest Says: "VNC, VNC Everywhere!"

Creative Commons license: BY-NC-SA