Liquidmatrix Security Digest Podcast – Episode 19

Episode 0x19 — It’s EARLY – and we like it!

No Matt. But Ben does a great Matt impression. In mashed potatoes.

It’s another week in the wide wonderful world of Infosec. And every day feels like drinking from the firehose of Infosec Reactions. Seriously.

Upcoming this week…

1. Lots of News
2. Breaches
3. SCADAs
4. DERPs!!!
5. and then our discussion topic– You Got Half A Budget Now What?

And if you’ve got commentary, please sent it tomailbag@liquidmatrix.org for us to check out.

DISCLAIMER: It’s not that explicit, but you may want to use headphones if you’re at work.

ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 4 opinionated infosec pros who have sufficient opinions of their own they don’t need to speak for anyone except themselves. Ok? Good.

In this episode:

• News

1. sh# sudo su Matt: “Appsec USA videos are out!” & makeMeASandwich
2. Shylock know’s when you RDP (also knows when you forgot to water the plants)
3. Cyber-forensic-douches are getting ready to support the frivolous lawsuits that movie studios so love.
   Fortunately Michael Geist to the rescue.
4. Real-World Cyber City Used To Train Cyber Warriors
5. Do NOT Order -6 Futures On Swedish Stock Market 
   (with less translation)
6. Hardcoded Administrator Account Opens Backdoor Access To Samsung Printers
7. The Secret to Iranian Drone Technology? Just Add Photoshop
8. Syria: Internet and mobile communication ‘cut off’
• Breaches – The never ending never ending story…
1. Hackers break into IAEA servers, post data online
2. HP says its products sold unknowingly to Syria by partner
3. China Mafia-Style Hack Attack Drives California Firm to Brink
4. Google Romania get’s it’s domain hijacked (the algerians are coming) – Paypal too
• The SCADAs
1. Security Flaw Disclosure Debate Boils Over to SCADA Industry
2. General Electric Pitches an Industrial Internet
• Errata / DERP of the week award
1. BT gets authentication completely and utterly wrong
2. Microsoft Security Essentials loses it’s aV card
• Mailbag / Bizarro Land
1. No one sent us any email. We’re sad.
• Discussion topic – You Got Half A Budget Now What?
1. Is it possible to eat Infosec ramen and generic cola and still survive?
2. Is open source enough?
3. What about restricted items which you must purchase – contractual or regulatory (AV+PCI anyone?)
• In Closing
1. Movie Review MOVIE WATCHING NEWS
2. We do research too – Ben’s running a survey and will publish results. Check it out!
3. The Security Conference Library 
4. If you’re interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
5. Security Blogger Awards 2013…ah hem (not like we’re pandering for votes or anything, we only do that for ISC2 board seats) 🙂
6. everyday is CTF! go set up a team
7. Contribute to the Strategic Defense Execution Standard (#SDES) and you’ll be Doing Infosec Right in no time.
8. Upcoming Appearances: James at SecurityZone in Cali, Colombia
9. Signing up for a SANS course? Be sure to use the code “Liquidmatrix_150” and save $150 off the course fee!
10. Seacrest Says:I’m not here right now, leave a Matt at the beep

Download the MP3

Listen:

Subscribe to us using plain old

Also, we’re now available through

Creative Commons license: BY-NC-SA