andrewallen/podroll

@threatpost: Robert Hansen on Privacy and Google

Thu, 11 Mar 2010 11:35:28 -0800

Digital Underground podcast with Dennis Fisher

You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

Dennis Fisher talks with security researcher Robert “Rsnake” Hansen about how online privacy became such a mess, Google’s effect on personal privacy and the virtual impossibility of using the Internet without using Google’s services.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@2600: Off The Hook show for March 10, 2010

oth@2600.com (Emmanuel Goldstein et.al.) — Wed, 10 Mar 2010 17:00:00 -0800

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@threatpost: Paul Judge on Twitter Crime and Web Security

Wed, 10 Mar 2010 12:08:37 -0800

Digital Underground podcast with Dennis Fisher

You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s new report on Twitter phishing trends, search engine poisoning, Web security and what can be done about the spam pandemic.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@mckeay: The Network Security Podcast, Episode 188

Tue, 09 Mar 2010 20:10:15 -0800

Can you hear that? That’s the sound of air escaping as we all finally recover from the RSA conference. Rich and Martin are back, and Zach… never left (but did celebrate a birthday last week). We do a quick recap of RSA and then dig into the security news… much of which had nothing to do with the conference. Weird.

Network Security Podcast, Episode 188, March 9, 2010
Time: 32:01

Show Notes:

Great coverage of Martin’s RSA panel on disclosure. One of the first with an actual user on the panel.

Government declassifies parts of the Comprehensive National Cybersecurity Initiative.

Police get webcam pictures in school spy cases.

Experts dismiss end to end encryption claims. Bunch of gross generalizations.

Oops- Vodaphone distributes infected phone.

… and Energizer distributes malware in USB battery software.

Tonight’s music:

@pauldotcom: PaulDotCom Security Weekly - Episode 189 - March 5, 2010

psw@pauldotcom.com — Tue, 09 Mar 2010 04:31:59 -0800

Episode 189 Show Notes

Top ten tips to socially engineer management into implementing security the right way, plus all sorts of interesting stories including the "porn detection stick"!

Hosts: Larry "HaxorTheMatrix" Pesce, Paul "PaulDotCom" Asadoorian, John Strand, Mick Douglas, Carlos "Dark0perator" Perez

Audio Feeds:

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@mckeay: RSAC2010: Sourcefire

Mon, 08 Mar 2010 19:20:34 -0800

Snort was one of the first security tools I ever used. When I was working in a small computer lab years ago, I set up a Snort sensor just to see what was there. And there was a lot in that particular environment. I’ve used it many times since then and I found out at RSA that the first Sourcefire implementation I performed is still in place, basically unchanged since I left. This is why I always take the opportunity to talk to Marty Roesch at Sourcefire if I can at RSAC. This time I got a chance to talk to him about the omnipresent APT (he prefer’s using the term APA, coined by @nselby and others), the security existential crisis, the work Sourcefire is doing with Immunet, the Cloud and Sourcefire’s virtual appliances. All that noise you hear in the background is the Securosis Recovery Breakfast.

NSP-RSAC2010-Sourcefire.mp3

@mckeay: RSAC2010: ISC2

Mon, 08 Mar 2010 06:32:19 -0800

I’ve been a member of the International Information Systems Security Certification Consortium [(ISC)2] for nearly a decade; I passed my CISSP test in November of 2002 and don’t have to worry much about CPE’s until at least 2011. So when I was offered an opportunity to talk to Hord Tipton, Executive Director of the (ISC)2, I didn’t hesitate to take them up on the offer. We started off easy, talking about what’s new at the (ISC)2, and the Safe & Secure Online Program. Then we moved on to the harder questions, like “What have you done for me lately?” and “What are you doing about people who shouldn’t be CISSP’s in the first place?” The (ISC)2 is never going to make all of us who are certified happy, and that they are taking some steps to address concerns about unqualified practitioners, but it’d be nice if they were a little more public about it. Oh, and you’ll hear at the end that the (ISC)2 definitely accepts listening to podcasts for CPE’s. I forgot to ask about producing them.

NSP-RSAC2010-ISC2.mp3

@mckeay: RSAC2010: Kaspersky Lab

Sun, 07 Mar 2010 17:46:34 -0800

It’s hard doing interviews on the showroom floor at RSAC. Even the relatively quiet places are incredibly noisy when you get right down to it. The good thing is it hopefully masked the worst of my mispronunciation of Roel Schouwenberg’s name. Roel is the Senior Anti-Virus Researcher at Kaspersky Lab and spent some time talking to me in the Threat Post booth on the showroom floor at RSA 2010. We started off talking about the omnipresent APT, moved into slicing apart signature-based AV and end up on organized crime and what the future may bring.

NSP-RSAC2010-KasperskeyLab.mp3

@mckeay: RSAC2010: Astaro Internet Security

Sun, 07 Mar 2010 08:46:20 -0800

Jan Hichert, CEO of Astaro Internet Security, and I met in one of the quieter hallways of the 2010 RSA Convention. Of course, ‘quiet’ is a relative term when it comes to RSA, but the audio came out acceptable in any case. We talked about several of the new products Astaro is offering this year, including Astaro Mail Archiving, Astaro Wireless Security and Astaro RED. We finished the conversation talking about Jack Daniel’s new position at Astaro, social media and Security BSides. I think Astaro is one of the few security companies that actually get social media, in large part thanks to Jack.

NSP-RSAC2010-AstaroSecurity.mp3

@mckeay: RSAC2010: F-Secure

Sat, 06 Mar 2010 07:22:37 -0800

While I’m sure Mikko Hypponen, Chief Research Officer at F-Secure, is getting as tired as hearing the term APT* as the rest of us are, he had some insight into what’s really happening with this threat and the fact that it’s not something new, it’s just the acknowledgment that it’s happening that’s new. He’s been seeing similar attacks going on for nearly six years, what’s changed is the recognition and public attention to the threat that’s something new. He believes that the organized crime component of malware will be moving to smart phones as the criminals realize that it’s easier to make money quickly and easily from phones than the complicated hoops they have to jump through to make money from computers.

NSP-RSAC2010-FSecure.mp3

* I’m with @CSOAndy who believe the A in APT should stand for Adaptive, not Advance. It’s much more descriptive of what’s really happening.

@mckeay: RSAC2010: Panda Security

Sat, 06 Mar 2010 06:11:52 -0800

I caught up with Pedro Bustamante, Senior Research Analyst from Panda Security, for a brief interview about what his company is doing in 2010. Panda recently received ICSA Lab certification of their cloud AV product, which required some retooling of the ICSA processes. Panda is releasing a new, free, no-registration version of their product as well as an upgraded version of their existing anti-virus that includes many of the features that Panda customers have been asking for. We talked about a new USB vaccine Panda is releasing which ‘inoculates’ a USB drive by writing an unalterable file to the drive before a virus can. Finally we discussed the sheer amount of data Panda is collecting and how much of it they’re able to process automatically. But there does, and always will, remain a small fraction of a percent of the data that has to be inspected by human beings to catch the new and the interesting that malware writers are creating.

NSP-RSAC2010-PandaSecurity.mp3

@humanhacker: Using Persuasion on the Mindless Masses

Fri, 05 Mar 2010 19:18:31 -0800

Join the Social-Engineer.org team as we discuss the topics of persuasion and mindlessness with Harvard psychologist and world renowned persuasion expert, Ellen Langer.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@riskybusiness: Risky Business #142 -- Special guest H D Moore talks fun with NTP

Thu, 04 Mar 2010 21:46:57 -0800

Risky Business is hosted by the team at Virtual.Offis in Sydney but sponsored, this week, by Tenable Network Security.

This week's feature guest is H D Moore, who'll be joining us to talk about some fun stuff he's been doing with NTP. Believe it or not you can use NTP to do massive recon on the Intertubez. H D has built a database of millions of hosts by querying NTP boxens. It's cool.

Tenable Network Security CEO Ron Gula joins us in this week's sponsor interview, and Adam "Beardy McUNIXguy" Boileau drops in to discuss the week's news.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@riskybusiness: RB2: SPONSOR PODCAST: Big security vendors jump into PCLM?

Wed, 03 Mar 2010 19:35:58 -0800

This is a sponsored podcast. Symantec sponsors the RB2 podcast so once a month we get one of their staff on the line to talk about industry trends, malware... whatever, really!

And today we're speaking with Vincent Weafer, Symantec's director of security response. Regular listeners of Risky.Biz podcasts would have heard me tonking on a LOT about patch management lately, and in particular the moves by large security vendors like McAfee, Trend and Symantec into that space.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@2600: Off The Hook show for March 3, 2010

oth@2600.com (Emmanuel Goldstein et.al.) — Wed, 03 Mar 2010 17:00:00 -0800

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@mckeay: RSAC2010: ICSA Labs

Wed, 03 Mar 2010 06:58:01 -0800

One of the things I don’t believe we see enough of in the security field is independent testing. Vendors of all stripes make claims about what their products do, and without independent testing it’s hard to tell if they’re the cream of the crop or a bad apple. ICSA Labs is one of the few companies that do the sort of testing that’s needed to provide the information to tell the two extremes apart. I took a few minutes to sit down with Andy Hayter of ICSA Labs to talk about anti-virus testing, education of consumers and a new initiative to use the testing ICSA does in the real world. For the sake of transparency, ICSA is a part of Verizon, the company I work for as well.

NSP-RSAC2010-ICSALabs.mp3

@tenablesecurity: Tenable Network Security Podcast - Episode 25

Tue, 02 Mar 2010 12:11:57 -0800

Welcome to the Tenable Network Security Podcast - Episode 25

Announcements

Two new blog posts have been released titled "Implementing Perimeter Intrusion Detection" and SecurityCenter 4 Introduction". Also, Nessus 4.2.1 was released with support for Solaris and some significant performance enhancements.
Come see us at RSA - Booth #956! I, Ron Gula, Renaud Deraison and many others from Tenable will be there demonstrating SecurityCenter 4.0 along with Nessus 4.2, the latest Passive Vulnerability Scanner and the Log Correlation Engine.
The webinar performed on February 25, 2010 titled, "Finding and Stopping Advanced Persistent Threats" in which Tenable CEO Ron Gula and Tenable CSO Marcus Ranum discussed strategies for preventing, finding and eliminating advanced persistent threats in enterprise networks is available for download.

You can provide feedback to this podcast and all of our social media outlets by visiting our discussions forum and adding messages to the "Tenable Social Media" thread. I would love to hear your feedback, questions, comments and suggestions! I put up a call for ideas on new Nessus videos, so please give us your feedback!

We're hiring! - Visit the web site for more information about open positions, there are currently 7 open positions listed!

You can subscribe to the Tenable Network Security Podcast on iTunes!

Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make various announcements, Nessus plugin statistics and more!

Stories

Detecting the TDSS/TDL3/Tidserv rootkit with Nessus (Login Required) - This is really great usage of an audit file! It searches the Windows registry for keys associated with the rootkits and alerts on it. This is the rootkit that was causing the "Blue Screen Of Death" problems when users applied some of the recent Microsoft patches. Nessus ProfessionalFeed customers can download the audit file and use it to detect this rootkit in your environment before applying the patches from Microsoft.
New Internet Explorer Vulnerability - This is perhaps one of my favorite vulnerability write-ups in a long time. First it states, "a user on the target system needs to be convinced to press the F1 key in response to a pop up dialog box on a specifically prepared website" and then goes on to say "As of now all users need to remember is to not press F1 when they are accessing websites." Can we just remove the F1 key from the keyboard?
SCADA Devices on Verizon and Other Wireless Networks - This is interesting, as I have been doing some of my own research in this area. Many SCADA security tactics rely on the so-called "air-gapped" network. This usually does not work out so well when stuff needs to actually talk to other stuff. So slowly they creep onto the network, but since the assumption is that it's "Air-gapped" no one really bothers to look for these devices on the network. Also, since it's a "harmless" embedded system people will assume that they do not have to secure it, so they leave default passwords. This is just a bad combination! Take time to secure everything in your environment and apply your security strategy to all systems, even the embedded ones.
GuestStealer Information Wrapup - This is a great summary post of all of the information surrounding the guest stealing vulnerability released at Shmoocon. Nessus was used to detect a directory traversal vulnerability that lead to multiple vulnerabilities in VMware systems that could allow an attacker access to download the entire collection of guest operating systems on the host. Nessus has new checks that look for this specific vulnerability as well.

Download Tenable Podcast Episode 25

@mckeay: RSAC2010: Mark Bower, Voltage Security

Tue, 02 Mar 2010 08:47:59 -0800

As a PCI QSA, one of the big technologies I’m looking at this show is end-to-end encryption (E2EE). So it’s no surprise that my first interview of RSA 2010 is with Mark Bower, the Director of Information Protection Solutions at Voltage Security. We talk about what E2EE is, how it will affect merchants and what we might be seeing in the future from Voltage SecureData Payments POS SDK. I hope that we’ll see adoption of Voltage’s SDK or something very similar in the coming year, we need to help merchants protect cardholder data as close to the point it enters their network as possible.

NSP-RSAC2010-VoltageSecurity.mp3

@securabit: SecuraBit EP51 – Malware Detection With Sunbelt Software

Tue, 02 Mar 2010 08:44:12 -0800

SecuraBit EP51 – Malware Detection With Sunbelt Software

Listen in as we discuss Sunbelt Software’s CWSandbox and other products, along with in-depth malware detection and analysis!

#BSidesSF – Tuesday/Wednesday, March 2-3, 2010 @ 10am – 5pm
#BSidesAustin – Saturday, March 13, 2010
#BSidesBOS – Saturday/Sunday, April 24-25, 2010
Chat with us on IRC at irc.freenode.net #securabit

Hosts:
Anthony Gartner – @anthonygartner
Christopher Mills – @thechrisam
Chris Gerling – @chrisgerling
Jason Mueller – @securabit_jay
Andrew Borel – @andrew_secbit

Guests:
Brian Jack – Sunbelt Software
Chad Loeven – Sunbelt Software

Links:

http://www.sunbeltsoftware.com/

http://www.sunbeltsoftware.com/Malware-Research-Analysis-Tools/Sunbelt-CWSandbox/

http://www.securitybsides.com/

@pauldotcom: PaulDotCom Security Weekly - Episode 188 Part 2 - February 25, 2010

psw@pauldotcom.com — Mon, 01 Mar 2010 10:33:15 -0800

Episode 187 Show Notes

Part 2: DNS sub-domain brute forcing & Penetration

We discuss when penetration is important, how to talk to management, coolest WRT54G hack, and a technical segment on DNS sub-domain brute forcing.

188 Part 2 - Direct Audio Download

Hosts: Larry "HaxorTheMatrix" Pesce, Paul "PaulDotCom" Asadoorian, John Strand, Mick Douglas, Carlos "Dark0perator" Perez

Audio Feeds:

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@pauldotcom: PaulDotCom Security Weekly - Episode 188 Part 1 - February 25, 2010

psw@pauldotcom.com — Mon, 01 Mar 2010 10:27:32 -0800

Episode 187 Show Notes

Part 1: "Freedom TM"

The PaulDotCom crew interviews Daniel Suarez to discuss his new book Freedom TM, security, privacy, socialogy, and more!

Hosts: Larry "HaxorTheMatrix" Pesce, Paul "PaulDotCom" Asadoorian, John Strand, Mick Douglas, Carlos "Dark0perator" Perez

Audio Feeds:

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@cigital: Show 047 – An Interview with Greg Morrisett

Sun, 28 Feb 2010 08:43:13 -0800

On the 47th episode of The Silver Bullet Security Podcast, Gary calls in from Leuven, Belgium to chat with childhood friend and security expert Greg Morrisett. Greg is the Allen B. Cutting Professor of Computer Science and Associate Dean for Computer Science and Engineering in the School of Engineering and Applied Sciences at Harvard University. Gary and Greg discuss the relationship between security and programming languages, why the choice of a good programming language (and/or VM) is more important than code review, sensor networks and security, information control, and Gary and Greg’s most embarrassing moment from adolescence.

@threatpost: T.J. Campana on the Waledac Botnet Takedown

Fri, 26 Feb 2010 06:38:40 -0800

Digital Underground podcast with Dennis Fisher

You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

Dennis Fisher and Ryan Naraine talk with Microsoft’s T.J. Campana about the company’s work to disrupt and take down the Waledac botnet and the other work being done by Microsoft’s Digital Crimes Unit.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@riskybusiness: RB2: When is a hack a hack?

Thu, 25 Feb 2010 20:37:52 -0800

In this podcast we chat to a solicitor who specialises in IT. His name is Erhan Karabardak and he's with the firm Cooper Mills in Melbourne.

Erhan mostly specialises in technology-related stuff, and I wanted to get his thoughts on this so-called hacking scandal engulfing the corridors of power in New South Wales.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a

@threatpost: Previewing RSA Conference 2010

Thu, 25 Feb 2010 12:30:36 -0800

Dennis and Ryan preview the RSA Conference 2010 with their friend Tim Whitman, the head of the security practice at Schwartz Communications.

You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

http://feeds.andrewallen.co.uk/andrewallen/podroll, digital fingerprint: f9522c4eac241a6898424d24dd2b321a