TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    News

    Liquidmatrix Security Digest Podcast

    The Liquidmatrix Security Digest Podcast – Information Security News and Commentary from Professionals.

    Advertise
    • Apple Podcasts
    • Google Play
    • Spotify
    Latest Episodes:
    Liquidmatrix Security Digest Podcast - Episode 7E Jul 26, 2024

    Episode 0x7E

    The one after the outage...

    We keep talking about how it's amazing that this is still happening and it really is. But I think we're done with that talk now. I was having a conversation with a CTO at another cloud service provider and he had a poster on his home office wall... "Consistency is what transforms average into excellent." Thanks for being a consistent listener / viewer!

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of (approximately) 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

        • News and Commentary
          1. North Korean Spy Hired by KnowBe4
          2. Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine
          3. Walkin... walking away. Wiz doesn't need Googley Money.
        • Breaches
          1. Over 3,000 GitHub accounts used by malware distribution service
          2. Meta nukes massive Instagram sextortion network of 63,000 accounts
        • SCADA / Cyber, cyber... etc
          1. CrowdStrike CSO Apology. This is how you do this. Much Respect.
        • Mailbag
          1. Dear Liquidmatrix I'm fighting with DNS records and SSL certificates and I'm losing my mind. Why is this stuff still so difficult in 2024? Is there anything you can do to help? Love, a frustrated guy
        • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
          1. First round of the Sector.ca briefings were released this week. Yes, The Canadian edition of the Fail Panel is back for the 12th time!
          2. Anyone can Access Deleted and Private Repository Data on GitHub
        • Upcoming Appearances: -- more gratuitous self-promotion
          1. Dave: - Obviously not here. We don't know where he is. Assume something about the Militant Wing of the Girl Guides.
          2. Jamie: - PTO Countdown is real. I'm not obsessing about it... but... I am.
          3. Matt: - My calendar is screwed. Wheeeeeee
        • Advertising - pay the bills...
          1. Vulnerable U - The other place you can learn from Matt
        • Closing Thoughts
          1. Seacrest Says: You're not the boss of me. I can say whatever I want. It makes me happy to be a butterfly.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 7D Jul 23, 2024

    Episode 0x7D

    It's just a dream...

    There's a lot going on as we head into summer here in the northern hemisphere. I think it's pretty cool but also worry a little bit that we're staying too focused on the wrong things. You ever have the feeling that you've bought into the wrong game?

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of (approximately) 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

          • News and Commentary
            1. AT&T Breach and Continuing Snowflake Saga Nearly all AT&T cell customers call and text records breached
            2. The Dark Web - See your The Dark Web footprint for free!
            3. US sanctions alleged Russian hackers who claimed attacks on US water facilities
          • Breaches
            1. Hollywood Fears of a Major Hack Are Growing Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages
          • DERP
            1. Chromium browser? Google knows more about you than you want.
          • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
            1. How to tell if you've been hacked - Great techcrunch article
            2. Meshtastic - distributed comms for when the centralized system goes down
            3. CloudFlare State of AppSec - 22 min from PoC to exploit. 7% of all traffic is DDoS. 1/3 of all Internet traffic is bots.
            4. North Korean Hackers Update BeaverTail Malware to Target MacOS Users
          • Upcoming Appearances: -- more gratuitous self-promotion
            1. Dave: - Summer camp, this fall: Singpore, Ireland, Portugal
            2. Jamie: - (insert Griswoldian music here)
            3. Matt: - Thanks for everyone who came to SnooSec. Summer Camp!
          • Advertising - pay the bills...
            • Vulnerable U - The other place you can learn from Matt
          • Closing Thoughts
            • Seacrest Says: These kids - they keep growing up damn them. Also, get off my lawn!!

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 7C Jul 11, 2024

    Episode 0x7C

    Yup, this is a habit now.

    It's all fun and games until somehow you find yourself actually planning and not doing that whole "maybe we will, maybe we won't" thing. It's happening. We're back and making a habit of this!

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of (approximately) 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

        • News and Commentary
          1. Russia forces Apple to remove dozens of VPN apps from App Store Dark Money tied to war on Apple's encryption
          2. OpenAI had an oopsie and forgot to mention it... But they're also just plain making mistakes at the basics too
          3. Hackers reverse-engineer Ticketmaster’s barcode system to unlock resales on other platforms
        • Breaches
          1. The human cost of breaches at Hospitals - this one is awful
          2. Sightline Security for non-profits
        • SCADA / Cyber, cyber... etc
          1. A really good assessment of the great Rogers outage of 2022
        • DERP
          1. DON'T LIE ABOUT YOUR BREACHES DAMMIT
        • Mailbag
          1. Dear Liquidmatrixes, What's the deal with The Cloud? I really like hugging my servers and I give them special names, how do you hug a cloud? Even better, how do I secure it? Thanks all y'all. Legacy Folk. Just sign up for CloudSLAW
        • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
          1. Ollama - run some great LLMs on your laptop
          2. Microsoft Midnight Blizzard Saga Continues
          3. Eight Nations Issue Warning About Speed Of Chinese Hackers’ Operations
        • Upcoming Appearances: -- more gratuitous self-promotion
          1. Dave: - Global News talking about Ticketmaster yesterday
          2. Matt: - SnooSec NYC
          3. Jamie: - Starlink terminal connection end point... SOMEWHERE.
        • Advertising - pay the bills...
          1. Vulnerable U - Mattjay's other news. Sign up or else.
        • Closing Thoughts
          • Seacrest Says: I'm Europe now, very fine. Not worry about my doing well.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 7B Jul 05, 2024

    Episode 0x7B

    Penta-pod!

    Five down, we should probably do some more. It seems like people enjoy these things. Or at least our subscribers say so. Why don't you tell your friends!

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of (approximately) 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

        • News and Commentary
          1. No flaws like the old flaws. It's time to MOVEit, MOVEit... AGAIN
          2. RockYou2024: 10 billion passwords leaked in the largest compilation of all time
        • Breaches
          1. Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers
          2. Neiman Marcus confirms data breach, claims Snowflake account was hacked
        • SCADA / Cyber, cyber... etc
          1. A group of Rabbit R1 jailbreakers found a massive security flaw
        • DERP
          1. regreSSHion - you're supposed to hold on to this until August. Also, cute name and logo is so 10 years ago (Heartbleed was TEN YEARS AGO)
        • Mailbag
          1. Hei Liquidmatrix, Are you going to be keeping it up? Especially as it is now summer time. ~Your friends from the blue and yellow furniture store
        • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
          1. I did a podcast for work with another CISO who isn't a curmudgeon. You might enjoy.
          2. TeamViewer: Hackers copied employee directory and encrypted passwords
        • Upcoming Appearances: -- more gratuitous self-promotion
          1. Dave: - Summer Camp, Singapore in October, IRISCON and Websummit in November
          2. James: - The other end of a Starlink connection... in a forest. :)
        • Advertising - pay the bills...
          1. MattJay's Vulnerable U - he's got more subscribers than we do. And he's got sponsors and shit.
        • Closing Thoughts
          1. Seacrest Says: I'm on a vacation. Leave me alone.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 7A Jun 28, 2024

    Episode 0x7A

    4-peat 4-peat!

    Turns out this is actually habit forming. The weekly venting/ranting is excellent for the spirit! Hope you're able to vent as well. Feel free to scream while listening - it's not weird at all.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of (approximately) 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

          • News and Commentary
            1. Biden bans Kaspersky - effective July 20. FINALLY.
            2. Stolen test data and NHS numbers published by hospital hackers Information is beautiful - World's Biggest Data Breaches & Hacks
          • Breaches
            1. The City of Hamilton breach continues. It's a farce. My property tax dollars going to no good purpose at all. Ongoing since Feb 25, no sign that they're any closer to getting the majority of systems up and running - and $5 million out of the door. Sigh. The number of systems remaining offline is incredible. I'm pretty sure I could put together a crack team of 5 who could spend evenings and weekends for less than a month to knock out all of this list without extending our recruiting pool past Hamilton and Burlington. Sheesh.
            2. Car Dealerships Nationwide Hit by Massive Cyberattack—What It Means for You
          • SCADA / Cyber, cyber... etc / DERP COMBO!!!
            1. An Open Letter to Security Vendors - John Masserini (2015)
            2. Vendor Rebuf - Andy Ellis (2017)
            3. 10 Rules for Cybersecurity Salespeople - Mark Weatherford (2018)
            4. Advice to cybersecurity companies selling to CISOs - Patricia Titus (2020)
          • Mailbag
            1. Dearest Liquidmatrix, It was so good to hear Jamie lose his ever-lovin' mind last episode. Dave alluded to being cranky during the brieflies. Can you please un-mute him and let us all hear him lose his mind for this episode? THANKS! ~The Entire Internet
          • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
            1. Amazing how far software defined radio has come lately - go do some learnin' on your RTL-SDR things
            2. Hackers claim to have carried off an enormous data heist on AMD, selling info on employee and customer information, future products and specs
          • Upcoming Appearances: -- more gratuitous self-promotion
            1. Dave: - Summer camp. (also, we will be adding GUESTS in the near future)
            2. James: - I'm trapped between Google Workspace, Slack, Jira, Salesforce, and Github. I can't find my way out. Help
          • Advertising - pay the bills...
            1. MattJay's Vulnerable U - he's got more subscribers than we do. And he's got sponsors and shit.
            2. Brawndo, the Thirst Mutilator. It's what plants crave.
          • Closing Thoughts
            1. Seacrest Says: Inserting an old recording of Matt from early episode.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 79 Jun 14, 2024

    Episode 0x79

    We have no idea what's going on either...

    But we're going to keep doing this as long as we can manage to schedule the appointment in our calendars and also show up...

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

        • News and Commentary
          1. Apple's AI Announcements - Private Cloud Compute
          2. But is it ok that there's no money going back and forth... so we are the product?
          3. Snowflake to Close Hacking Probe Into Attack Targeting Clients
        • Breaches
          1. Chinese hackers breached 20,000 FortiGate systems worldwide
        • DERP
          1. Major Data Breach
        • New Section: Jamie Yells at Clouds
          1. PLG motion with Enterprise Customers and pushing your AI Feature Set - I'm tired of getting the requests to turn it on and it comes with vague pricing issues. Seriously... so tired. If you want to sell to your Enterprise Customers, how about you have a conversation with the person who signs the OF instead of the people who can't. ARGH.
        • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
          1. Bambu Lab Second Anniversary Sale - join us in the melty plastic revolution!
          2. Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout
          3. China state hackers infected 20,000 Fortinet VPNs, Dutch spy service says
        • Upcoming Appearances: -- more gratuitous self-promotion
          1. Dave: - In will be speaking at the CIO Summit in Toronto
          2. James: - Still the forest. I need a break so bad, July can't get here soon enough.
          3. Matt: - Europe - I'M ON A BREAK -- then Vegas...
        • Closing Thoughts
          1. Seacrest Says: Have you made your plans for the Solstice? Go long or go short - depends on your latitude.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 78 Jun 07, 2024

    Episode 0x78

    Surprise AGAIN

    So... y'all thought it was a flash in the pan... well... we're happy to disappoint you with a brand new episode of the Liquidmatrix Security Digest Podcast. Hold on, it's going to be a wild ride.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

      • News and Commentary
        1. Snowflake (not)breach
        2. Surprise, the Canadian Government agency that is supposed to watch for mis- and dis- information says it's happening. And the Members of Parliament are arguing about the validity of the statements. :|
        3. PandaBuy pays ransom to hacker only to get extorted again
      • Cyber, cyber... etc
        1. So Matt. You hate Chrome. It's all spyware. What's the point?
      • Mailbag
        1. Ahoy there, First time mailer, long time listener - I see that you've got the skull thing going on, can I ask you about where the cross bones went? Inquiring minds would like to know. ~ Pirate Steve
      • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
        1. Go back and watch some of the old stuff... it's all still so valid it hurts.
        2. Microsoft Total Recall
        3. Vengeful Club Penguin Hackers Reportedly Steal 2.5 GB of Disney’s Data
      • Upcoming Appearances: -- more gratuitous self-promotion
        1. Dave: - Toronto CIO Conference
        2. James: - I'm looking forward to an appearance in the forest camping because I'm pretty much completely peopled out.
        3. Matt: - Some podcasts and maybe a summer camp appearance.
      • Advertising - pay the bills...
        • Vulnerable U
      • Seacrest Says: It's not the AI. It's not the AI. It's the AI. Sorry.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 77 Jun 02, 2024

    Episode 0x77

    I'm not cool and neither are you.

    Ok, so it's been a long time - but we're good :) August 1st 2022 was our last show. The next one is scheduled now for sometime in 2026.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. finishing it off with DERPs/Mailbag (or Deep Dive)
    4. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

        • News and Commentary
          1. ICQ will Shut Down SOOOOON
          2. Hackers are using AI to find software bugs - but there is a downside
        • Breaches
          1. Your Mom.
        • DERP
          1. Salesforce / Slack AI situation and how it's been handled
        • Mailbag
          1. So... Y'all going to actually keep this up? For real this time? ~a concerned patron
        • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
          1. Dave: I haz a new job! (a word about hiring market)
          2. Jamie: Hey, me too but at the same company. Working my way through the collision of responsibilities.
        • Upcoming Appearances: -- more gratuitous self-promotion
          1. Dave: - Gartner DC
          2. James: - You just missed me at Open Source Data Infrastructure Toronto Meetup. I'm trying to avoid doing anything like actual work for the next little while.
        • Closing Thoughts
          1. Seacrest Says: Be Vulnerable - it's good for U

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 76 Aug 02, 2022

    Episode 0x76

    Ready for a surprise thing? Yup. We found spare time and did a thing. Here's the thing. You get to spend a whole lot of time listen to security old farts.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Rogers Outage - the CRTC letter and An analysis on the BGP route withdrawal
      2. Why Bug Bounty Programs are Failing
      3. CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks
    • Breaches
      1. Yeah. You've been Shanghai'd - maybe?
    • SCADA / Cyber, cyber... etc
      1. SCADA market to reach 13+ Billion in 4 years - will any of it be secure?
      2. Uber won't get prosecuted for their 2016 breach, but...
    • DERP
      1. Oldie but goodie - Elon's plane being tracked is a security issue... and Drake tries to make it better and fails so miserably... derp.
    • Mailbag
      1. You guys are not good at segways... or segues https://www.merriam-webster.com/dictionary/segue
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Awesome Security (tools and stuff)
      2. Samsung has a thing that sounds like a backdoor but actually isn't
      3. As Microsoft blocks Office macros, hackers find new attack vectors
    • Closing Thoughts
      1. Seacrest Says: Seacrest says see you at band camp

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 75 Jul 01, 2022

    Episode 0x75

    10th Anniversary Special

    We should have something snappy here, but we're old and out of belt-onions

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Whats changed in infosec since we last talked?
      2. Coinbase highlighting the risk of centralizing a decentralized system
      3. Great podcast from Odd Lots - the ponzinomics of cryptocurrency
      4. New Vulnerability Database Catalogs Cloud Security Issues
      5. Data breach at US ambulance billing service Comstar exposed patients’ healthcare information
    • Breaches
      1. In Canada... largest breach settlement
    • SCADA / Cyber, cyber... etc
      1. Wired knows shit.
      2. Deep fake remote IT job applicants
    • DERP
    • Mailbag
      1. It's been a rough couple of years. We missed a lot. Some friends departed. How are y'all handling things? ~a long time listener
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. I'm hiring
      2. Me too
      3. Risk Disconnect in the Cloud
      4. Supply chain Levels for Software Artifacts
      5. https://jobs.cisco.com/We're hiring at Cisco
    • Closing Thoughts
      1. Seacrest Says: Dave qualifies for senior AARPdiscounts now

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 74 Mar 20, 2020

    Episode 0x74

    Quarantine 2020 Edition

    All the late shows are doing the "I phoned in from home" why shouldn't we?

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. coronavirus insider trading
      2. fixing vulns at scale
      3. US authorities battle surge in coronavirus scams, from phishing to fake treatments
      4. Coronavirus Sets the Stage for Hacking Mayhem
    • Breaches
      1. Princess Cruises Confirms Data Breach
      2. Rogers had a woopsie
    • SCADA / Cyber, cyber... etc
      1. Hackers Promise 'No More Healthcare Cyber Attacks' During COVID-19 Crisis
    • DERP
      1. Stupid shit that vendors say due to Coronavirus (THIS)
    • Mailbag
      1. So... what about actually doing this podcast a little more often? Signed: The Internet What do you mean our RSS feed didn't update? What do you mean RSS is dead?
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. cyentia 2020 information risk insights study
      2. On Making Work Less Remote: How the Heroku Team Works Together
      3. HBR has some thoughts on newly remote teams too
      4. automated reasoning about AWS security
      5. s3 thinger
      6. https://twitter.com/JSTOR/status/1240306471168028674?s=20Get bent JSTOR
    • Closing Thoughts
      1. Seacrest Says: There's finally a word for what we do... On-nomi

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 73 Dec 25, 2017

    Episode 0x73

    Surprise! Happy Holidays

    Are you having a happy holiday? Listen to us and you'll have a happy holiday.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Comparison of DNS resolvers Stylish Norton Core Router
      2. Russian wessels messing with underwater internets Submarine Cable Map
      3. Keeper Security learns about The Striesand Effect
      4. Russian hackers targeted more than 200 journalists globally
    • Breaches
      1. Internet Hijacking
      2. Free Credit Monitoring from Nissan Finance Canada!
    • SCADA / Cyber, cyber... etc
      1. VMWare has bugs. Who knew?
    • DERP
      1. The person that thought we our recent fail panel was unprofessional
      2. Screenshot kernel patch
    • Mailbag
      1. So... what about actually doing this podcast a little more often? Signed: The Internet
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Enpass
      2. Pineapple Fund
      3. Die Hard at the Theatre
      4. Magic Leap is real... ish
      5. Has no link.
    • Closing Thoughts
      1. Seacrest Says: Where the fuck is Matt? Has anyone seen Matt?

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 72 May 22, 2017

    Episode 0x72

    SPECIAL ELECTION EDITION

    Vote Dave... please?

    Upcoming this week...

    1. We yammer about stuff with no real direction or point.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • SCADA / Cyber, cyber... etc
      1. ETERNALBLUE was being used before wannacry
    • DERP
      1. Hacking Mar-A-Largo... Kinda? Is this legal?
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. https://securityheaders.io/
      2. https://www.gofundme.com/crunch-medical-fund
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. Advertising - pay the bills...
        1. Thinking about SecTor this November? Be sure to use the code "liquidmatrix2017" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2017expo" will get you in for $0
        1. Seacrest Says: I can't even remember... something about Kelly.
      3. Closing Thoughts

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 71 Mar 09, 2017

    Episode 0x71

    Um... We're back?

    I think it's called falling off the wagon. We did that. We should get back on the wagon. Why is it always a wagon?

    Upcoming this week...

    1. /dev/random

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • We totally forgot show-notes

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest TV - mini0x1E Nov 18, 2016

    Samy Kamkar - PoisonTap - https://samy.pl/poisontap/

    RCMP want an iphone unlocker - http://www.cbc.ca/news/investigates/police-power-privacy-encryption-1.3856375

    Discussion paper - https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/ntnl-scrt-grn-ppr-2016-bckgrndr/index-en.aspx

    Liquidmatrix Security Digest TV - mini0x1D Nov 17, 2016

    More Travels With Dave...

    Liquidmatrix Security Digest TV - mini0x1C Nov 16, 2016

    Reporting on the infosec implications of Walt Disney World...

    https://disneyworld.disney.go.com/ https://www.wired.com/2015/03/disney-magicband/

    http://www.nytimes.com/1998/08/20/technology/roller-coasters-take-a-ride-from-wild-to-wired.html http://www.rockwellautomation.com/global/industries/entertainment/overview.page http://dsicontrols.com/amusement.html

    Liquidmatrix Security Digest TV - mini0x1B Nov 15, 2016

    Dave is actually alive. We have video proof.

    Liquidmatrix Security Digest TV - mini0x1A Nov 14, 2016

    No notes.

    Liquidmatrix Security Digest TV - mini0x19 Nov 12, 2016

    https://2016.pycon.ca/en/

    Liquidmatrix Security Digest TV - mini0x18 Nov 11, 2016

    Russian Hacker group responsible for DNC Hack is at it again - https://krebsonsecurity.com/2016/11/russian-dukes-of-hackers-pounce-on-trump-win/

    Russian banks getting hit back by DDoS Attack - https://themoscowtimes.com/news/ddos-attack-hits-russian-banks-56077

    Liquidmatrix Security Digest TV - mini0x17 Nov 10, 2016

    (Ben didn't do show notes)

    Liquidmatrix Security Digest TV - mini0x16 Nov 10, 2016

    MS16-137 - https://g-laurent.blogspot.ca/2016/11/ms16-137-lsass-remote-memory-corruption.html?m=1

    Liquidmatrix Security Digest TV - mini0x15 Nov 10, 2016

    Tesco was breached - https://www.google.ca/amp/www.bbc.co.uk/news/amp/37907441

    The grugq on Security, Cyber, and Elections - https://medium.com/@thegrugq/security-cyber-and-elections-part-1-cd04de8ed125#.9dtgkxkut

    Liquidmatrix Security Digest TV - mini0x14 Nov 10, 2016

    http://www.mprnews.org/story/2016/11/07/npr-how-hostile-nation-could-disrupt-election

    Liquidmatrix Security Digest TV - mini0x13 Nov 10, 2016

    Nobody knew what CSIS was up to - http://www.cbc.ca/beta/news/politics/what-you-need-to-know-about-csis-metadata-1.3837104

    Liquidmatrix Security Digest TV - mini0x12 Nov 10, 2016

    Matthew Keys is in jail for not giving up a source - http://arstechnica.com/tech-policy/2016/11/speaking-from-prison-incarcerated-reporter-maintains-innocence/

    Go Secure botnet analysis - https://gosecure.net/2016/11/02/exposing-the-ego-market-the-cybercrime-performed-by-the-linux-moose-botnet/

    Blackhat EU talks - https://www.blackhat.com/eu-16/

    getting root on wemos - https://www.invincealabs.com/blog/tag/wemo/

    Liquidmatrix Security Digest TV - mini0x11 Nov 10, 2016

    Quebec police spied on multiple journalists - https://www.engadget.com/2016/11/03/quebec-canada-cops-monitor-journalists/

    Canadian intelligence agency gets hands slapped - http://www.cbc.ca/news/politics/csis-metadata-ruling-1.3835472

    EMET EOL announced - https://blogs.technet.microsoft.com/srd/2016/11/03/beyond-emet/

    Liquidmatrix Security Digest Podcast - Episode 70 Nov 10, 2016

    Episode 0x70

    Dave Doesn't Exist

    We've been unable to capture Dave on video yet despite turning out a absolutely epic amount of video material. We think it's because he doesn't actually exist. Do not even get me started on the hipster beard and hipster actor. Those two. Sigh. In any case...

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Surveillance of reporters has chilling effects
      2. Great series of articles from Rich Mogull on Cloud Security Your Cloud Consultant Probably Sucks How to Start Moving to Cloud Seven Steps to Secure Your AWS Root Account
    • Breaches
      1. Github responsible disclosure
      2. haveibeenpwned - NSA edition (a written message from the Shadow Brokers)
    • SCADA / Cyber, cyber... etc
      1. White hat Marai
      2. UK gov investing mucho Brexit dollars in cyber security
    • DERP
      1. Don't do illegal searches of CPIC (especially if you're a police officer)
    • Mailbag
      1. What's with google disclosing vulns without patches? (thanks to Ed)
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Macbook Pro review
      2. Ten Securosis Years
      3. Let's Encrypt Crowdfunding campaign
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - invading Sweden
      2. James: - VACATION!
      3. Ben: - still work
      4. Matt: - beard
      5. Wil: - hipster
      6. Other LSD Writers: - whaaaaaaa?
    • Closing Thoughts
      1. Seacrest Says: Dave loves swedish meatballs

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest TV - mini0x10 Nov 03, 2016

    Typed JSON - https://tonyarcieri.com/introducing-tjson-a-stricter-typed-form-of-json

    Liquidmatrix Security Digest TV - mini0x0F Nov 02, 2016

    http://www.cbc.ca/beta/news/canada/toronto/woman-toronto-police-database-unauthorized-searches-1.3830541

    http://www.cbc.ca/beta/news/canada/calgary/gerard-brand-calgary-police-trial-breach-trust-1.3829644

    Liquidmatrix Security Digest TV - mini0x0E Nov 01, 2016

    Google talks about disclosing 0days - https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html

    Finically regulator loses some records - https://www.engadget.com/2016/10/31/us-comptroller-data-breach/

    Liquidmatrix Security Digest TV - mini0x0D Oct 31, 2016

    I need a new computer. Or maybe I just want one.

    1. Owen Williams writes on Medium Apple just told the world it has no idea who the mac is for and I'm not entirely sure I disagree.
    2. Rui Carmo
    Liquidmatrix Security Digest TV - mini0x0C Oct 30, 2016

    Good morning!

    Coming to you live from O'Reilly Security in NYC. Well, the breakfast buffet anyways.

    1. Great 101 article from Ars Technica How security flaws work: SQL Injection
    2. The always eloquent friend of the show / my friend Violet Blue cuts to the bone with the awesome phrase "Infosec smarty-pantses" in her article on That Time Your Smart Toaster Broke The Internet Note that @gattaca's toaster doesn't obey him either
    3. Twitter does dumb shit again and pisses off long term users Hiding Usernames In @Replys
    4. DMCA exemption list finally updated and has a great list covered exemptions from The Register

    Tune in tomorrow for a SPOOOKY story from me still in NYC.

    Liquidmatrix Security Digest TV - mini0x0B Oct 30, 2016
    Liquidmatrix Security Digest TV - mini0x0A Oct 28, 2016

    Australia's Blood Service's exposed lots of personal data - https://www.troyhunt.com/the-red-cross-blood-service-australias-largest-ever-leak-of-personal-data/

    Liquidmatrix Security Digest TV - mini0x09 Oct 27, 2016

    Machine Learning Appsec testing - http://www.slideshare.net/babaroa/code-blue-2016-method-of-detecting-vulnerability-in-web-apps

    Mozilla doesn't trust Ernst & Young audits of CAs - https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/

    Liquidmatrix Security Digest Podcast - Episode 6F Oct 26, 2016

    Episode 0x6F

    THE CENTENNIAL!

    We are happy to announce that we've got a full show... with only two hosts. But hey - it's number 100(decimal)

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Apple Introduces What It Calls an Easier to Use Portable Music Player
      2. MEDSEC gets independent confirmation of their findings... St Jude is still suing
      3. New ISO Standard Is an Anti-Bribery Game-Changer
    • Breaches
      1. Vera Bradley POS Breach
    • SCADA / Cyber, cyber... etc
      1. Modbus eavesdropper from B+B SmartWorx
      2. Senators get involved in IoT
      3. Dan Kaminsky on DNS and rate limiting
    • DERP
      1. HAMAS complains about video cameras
      2. California DMV thinks "INFOS3C" is a dirty word
      3. Apple Doxes Self -- MBP w/TouchID
    • Mailbag
      1. TALK ABOUT BSIDESTO AND SECTOR
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Liquidmatrix TV
      2. learn stuff for free from experts
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Claims to have 5 more conferences this year. Wife still doesn't expect him home for dinner anytime soon
      2. James: - O'Reilly Security NYC and then WDW!
      3. Ben: - work
      4. Matt: - Unknown. Hiding behind his beard.
      5. Wil: - Unknown. Check CBC Calgary
      6. Other LSD Writers: - There are others?
    • Advertising - pay the bills...
      1. Thinking about SecTor this November 2017?Check back with us for codes.
    • Closing Thoughts
      1. Terry Bradshaw Says: 100 (decimal) BABY WOOO!!! 100

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest TV - mini0x08 Oct 26, 2016

    UNENCRYPTED SCADA PAGERS!!! http://arstechnica.com/security/2016/10/nuclear-plants-leak-critical-alerts-in-unencrypted-pager-messages/ (watch Jamie and Dave's head explode when they read that)

    MS threat modelling tool - https://www.microsoft.com/en-us/download/details.aspx?id=49168

    Liquidmatrix Security Digest TV - mini0x07 Oct 25, 2016

    Yet another - this is LSD TV mini0x07.

    Talking about the Defense again.

    Oh, and Ben's got a link for you - http://mooc.fi/courses/2016/cybersecurity/

    Liquidmatrix Security Digest TV - mini0x06 Oct 24, 2016

    Hangzhou Xiongmai recalls IoT devices - http://www.reuters.com/article/us-cyber-attacks-manufacturers-idUSKCN12O0MS

    Comodo CA relies on broken OCR and issues certs incorrectly - https://bugzilla.mozilla.org/show_bug.cgi?id=1311713

    Using Rowhammer on Android - http://arstechnica.com/security/2016/10/using-rowhammer-bitflips-to-root-android-phones-is-now-a-thing/

    Liquidmatrix Security Digest TV - mini0x05 Oct 23, 2016

    Hyper scale defenses (https://youtu.be/90kxsEOSZQ8), scaring the Russians (http://www.cbc.ca/beta/news/technolog...) and rigged elections in the Philippines (http://thestandard.com.ph/mobile/arti...) -- turns out its very old news which popped up in my news feed and I can't read dates

    Liquidmatrix Security Digest TV - mini0x04 Oct 22, 2016

    Mini episode #4: crazy TLDs and DDoS on Dyn.

    https://twitter.com/kpyke/status/789156391726387200 https://www.dynstatus.com/incidents/5r9mppc1kb77 https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/amp/ https://youtu.be/90kxsEOSZQ8

    Liquidmatrix Security Digest TV - mini0x03 Oct 21, 2016

    Friday's episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks Yahoo! and Boards of Directors and Linux privilege escalation and Wikileaks and HE JUST KEEPS TALKING.

    Liquidmatrix Security Digest TV - mini0x02 Oct 21, 2016

    The SECOND episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks data exfiltration.

    Liquidmatrix Security Digest TV - mini0x01 Oct 21, 2016

    In this first episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro walks you through SecTor 2016.

    Liquidmatrix Security Digest Podcast - Episode 6E Oct 20, 2016

    Episode 0x6E

    IT LIVES (Live from SecTor 2016)

    All five LSDP's in one room at the same time. It actually happened.

    Upcoming this week...

    1. Catching Up!

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • LIVE FROM SECTOR!!!
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
    • Closing Thoughts
      1. Seacrest Says: Eventually we will return. Maybe.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 6D Jun 27, 2016

    Episode 0x6D

    We've been gone for a month, we've been drunk since we left

    hej till våra lyssnare i Sverige

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Etherium TheDAO attack simplified
      2. People who have been victim of workplace violence, harrasment and sexual assault Isis agora lovecruft Alison Macrina Violet Blue Nick Farr
      3. "Consent, it's as simple as tea" if you haven't seen it Canadian Association of Sexual Assult Centers Women Against Violence Against Women Ontario Coalition of Rape Crisis Centers Central Alberta Sexual Assult Center VictimLink BC page on Sexual Assult Rape, Abuse & Incest National Network (USA)
      4. DHS seeks to ask foreign visitors their social media accounts
    • Breaches
      1. All your gotomypc are belong to us
    • DERP
      1. Comodo are the good guys, seriously (not seriously)
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. The Intercept's comparison of instant messaging applications (And the EFF's scorcard is soon to be updated)
      2. Mooltipass
      3. Intel Corp. Said to Weigh Sale of Cyber-Security Unit, FT Says
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - BSidesLV, DEF CON, Black Hat, Energysec, HTCIA, Security Congress...
      2. James: - Vegas. Sigh.
      3. Ben: - Coding my ass for SECTOR building G.Tool
      4. Matt: - Keeping banker's hours.
      5. Wil: - BSidesLV, DEF CON, Burning Man...
      6. Other LSD Writers: - Who?
    • Advertising - pay the bills...
      1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
    • Closing Thoughts
      1. Seacrest Says: I don't have to outrun you... I just have to outrun the other short guys

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 6C May 18, 2016

    Episode 0x6C

    I'm bringing Six Cee Back...

    Oh yeah, bad joke from the start.

    Upcoming this week...

    1. Lots of News
    2. Breaches?
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. VirusTotal pitches a fit^Wethical stance
      2. Another attack against the SWIFT network but the attack was stopped althought SWIFT is now warning its members
    • DERP/Cybers
      1. Honey... it may look like I'm looking at Pornhub but this midget porn is an essential part of my bug hunting
      2. SYMANTEC... this is not how you do malware analysis safely
      3. Nice guy tells Indian bank about their app that could have let him steal all the monies
      4. Unintended Consequences of DMCA on Medical Implants Michigan ok with wrenches, not ok with computers
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Personal Warrant Canary
      2. Poor man Windows Security Metrics
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Everywhere
      2. James: - Vegas Baby!
      3. Ben: - Toronto
      4. Matt: - Fleeing Trump... Welcome to Canada Matt
      5. Wil: - Bermuda Triangle
      6. Other LSD Writers: - Dunno. Bill and Chris?
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
    • Advertising - pay the bills...
      1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
    • Closing Thoughts
      1. Seacrest Says: insert crickets.wav

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 6B May 05, 2016

    Episode 0x6B

    SIX BEEEEEEEEEEEEE

    Ben, Wil, and Dave provide entertainment value that is also questionable.

    Upcoming this week...

    1. Lots of News
    2. Breaches?
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Facebook bug bounty hacker finds that he wasn't the first there (Tech details) (Trey's talk on sharing incident details)
      2. Jericho et. al run some numbers on the VZDBIR (Michael Roytman's response)
      3. There was irony, and then there was getting the message out
      4. I love Gooooold
    • DERP/Cybers
      1. Brazilian judge is scared of the internet ruining Brazilian telco's
      2. Idiot grounds his own flight and runins everyone's day
      3. Kernreaktor Malware Scheiße!!!!
      4. Canadian infrastructure keeps getting hacked
    • Mailbag
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. How to hack 2FA
      2. Required reading
      3. OpenSSL
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Interop, RMISC, HackMiami, NolaCon, Securityfest, Infosecurity EU,
      2. James: - On a plane
      3. Ben: - work then off to Vancouver for work
      4. Matt: - I think he's on the phone.
      5. Wil: - Locking himself away this weekend to work on his OSCP training.
      6. Other LSD Writers: -
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... Wil posted two)
    • Advertising - pay the bills...
      1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
    • Closing Thoughts
      1. Seacrest Says: worst. segue. ever

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 6A Apr 27, 2016

    Episode 0x6A

    All about the VZ-DBIR

    Ok. Not completely weekly. And sorry Mom that we missed last week. We'll get it together.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Verizon's 2016 Data Breach Investigations Report
      2. How Hacking Team got hacked (with a detailed writeup from Phisher himself)
      3. U.K. official confirms surveillance bill would let cops force companies to decrypt data
      4. Katie Seeks Advice... I mean... #insidejoke Download ISO/IEC 29147 Vulnerability Disclosure
      5. How iMessage distributes security to block “phantom devices”
    • Breaches
      1. Philipines got hacked... yes, a whole country ... by a 23 year old student
      2. ... and Mexico
      3. A Bangladeshi bank got popped for (almost) a billion (more analysis) (technical analysis)
    • SCADA / Cyber, cyber... etc
      1. UBER META DATA US or something like that (Uber says gave U.S. agencies data on more than 12 million users)
      2. US Special Forces Are 'Dropping Cyberbombs' on ISIS
    • DERP
      1. Four hundred MILLION vulnerable Androids are out there
      2. Microsoft sues US government over 'unconstitutional' cloud data searches
      3. The FBI paid more than $1 million to crack the San Bernardino iPhone
      4. Jeff Moss talks about grooming presidents
    • Mailbag
      1. Making security a big "P" Profession
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Sadlock Bug
      2. Listen to Paul @dcept905 when he says interesting things on Twitter
      3. DevOps Days Austin
      4. Setting up a home malware lab
      5. Spy Chief Complains That Edward Snowden Sped Up Spread of Encryption by 7 Years
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Interop, RMISC, HackMiami, NolaCon, SecurityFest, InfosecurityEU, CircleCityCon
      2. James: - Not much until Vegas... As far as I know.
      3. Ben: - A Cyber Insurance conference. Listening. yes... really
      4. Matt: - DevOps Days Austin, DFIR Summit, Vegas
      5. Wil: - CBC Calgary
      6. Other LSD Writers: - Shrug, Dunno.
    • Liquidmatrix Products and Services - We do some stuff. Seriously.
      1. LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)
    • Advertising - pay the bills...
      1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
    • Closing Thoughts
      1. Seacrest Says: Hey Ergodan - watch this you despotic little arsehole this

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 69 Apr 13, 2016

    Episode 0x69

    Still Weekly!

    Still difficult to get everyone together for a recording but damn, we're trying. Keep sending in your questions to mailbag@liquidmatrix.org and if you see one of us at a conference, ask nicely and we'll give you a sticker!

    PS: The Security Intern joins us tonight - sorry you all can't see her commentary on the rest of the Liquidmatrix crew.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Badlock Bug Site Get out your Sad Trombones everyone. Steve Ragan Fulfils Curmudgeon Role - Badlock Hype Tero Hänninen calls bullshit in a simple way Network World notes that Microsoft doesn't think it's Logo-worthy
      2. Eset et al. Take down Mumblehard Linux/BSD botnet
      3. Breaking Google Captcha
      4. Investigating the Potential for Miscommunication Using Emoji
      5. California lawmakers take step toward outlawing 'ransomware'
    • Breaches
      1. Security Flaws found in 3 state health insurance websites (THANKS OBAMA)
      2. Petya Ransomware Encryption Defeated
    • SCADA / Cyber, cyber... etc
      1. Lockheed Martin - Integrated Infrastructure: Cyber Resiliency in Society
      2. OMGee - Canada is vulnerable, eh?
      3. FBI Claims that businesses have lost $2.3 Billion to Email Scams from October 2013 to February 2016
    • DERP
      1. Maynor Fixes All The Maps - MaxMind and Default Locations in GeoIP
      2. Misconfigure your way to Panama Success
    • Mailbag
      1. Compliance is the Naturopathy of Information Security - DISCUSS.
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Random MAC addresses not enough...
      2. Integrating Bro IDS with the Elastic Stack
      3. Dealing with Digital Death
      4. Automating thought leadership
      5. Scan Onion Services for Security Issues
      6. Submit to the SecTor CFP!Early acceptance deadline is Sunday April 17 - final deadline is August 14th
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - NAB Show, Interop, RMISC, HackMiami, NolaCon
      2. James: - Desperately working on new material for Blackhat Cloud Security Training
      3. Ben: - Vogon poetry reading
      4. Wil: - Remedial HTML for beginners (Cue Jamie's rant here)
      5. Other LSD Writers: - Really?
    • Advertising - pay the bills...
      1. Thinking about SecTor this October? Be sure to use the code "liquidmatrix2016" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2016expo" will get you in for $0
    • Next Week - because we'll be here next week!
      1. We'll be discussing the idea of making cyber a regulated profession. Send us your thoughts. Also, California, what's up with that?
    • Closing Thoughts
      1. Seacrest Says: Cause, baby, now we got badlock

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 68 Apr 06, 2016

    Episode 0x68

    Weekly Monthly Somethignly

    At least a few of the boys are back to whine, bitch and moan.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Whatsapp integrates whisper systems AXOLOTL here's a whitepaper (but they still collects the metadata) so stick with Signal if you don't like NSA
      2. Who Has Access - to unscrew your Google Drive mess. Medium article by CEO
      3. Panama papers: China censors online discussion
    • DERP
      1. I ate the evidence
      2. Nest to permanently brick Revolv smart home devices 1,400 Vulnerabilities to Remain Unpatched In Medical Supply System
    • Mailbag

      1. What's your opinion about the Tor and Cloudflare mud slinging?

        - Not Matthew Prince links: Cloudflare slings mud and Tor calls shenanigans

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Random TED Talk - because I haven't been paying attention
      2. Canadian government has opened consultation on Data Breach Notification and Reporting Regulations
      3. GPG signed git commits
      4. China's 'Great Firewall' blocks its creator
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - ATLSECCON, NAB, Interop, RMISC, HackMiami, NolaCon
      2. James: - Probably nothing until Vegas
      3. Ben: - No One Knows (locked in a SOC2 closet at work)
      4. Matt: - at a hipster beard salon NEAR YOU
      5. Wil: - CBC Calgary Bitches
      6. Other LSD Writers: -
      7. Closing Thoughts
        1. Seacrest Says: I've run amok

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 67 Apr 01, 2016

    Episode 0x67

    The One With The Stunt Double

    Hey, James here. The boys recorded this one without me and managed to really munge up the audio. My apologies. For what it's worth, this is what happens when Dave and Wil are in charge.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. finishing it off with DERPs/Mailbag (or Deep Dive)
    4. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. FBI say "You don't need to know how we hacked you, because you're a dirty dirty pedo."
      2. December DNS Root attack get's curiouser and curiouser... Slick Heatmap of the traffic source analysis.
      3. Security and small thermal exhaust ports
    • Derps
      1. Anonymous Hacks
      2. Weeve... I get it but you're being an ass...
      3. CNBC shares your password with it's ad networks and a google spreadsheet.
      4. VNC Roulette (why is this still news?)
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. "OpenBSD 5.9 is out. Now with more W^X and Xen.
      2. "Securityfest CFP open
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - ATLSECCON, NAB Show, Interop, RMISC, HackMiami, NolaCon
      2. James: - Nowhere - except for going to Seattle again. Oh, and Vegas.
      3. Ben: - Nowhere
      4. Matt: - Where souls go for destruction
      5. Wil: - Well... CBC Calgary is Go (And other assorted projects... MakeFashion, c0wsec)
      6. Other LSD Writers: - There is no Other Writers
      7. Closing Thoughts
        1. Seacrest Says: "VNC, VNC Everywhere!"

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 66 Mar 03, 2016

    Episode 0x66

    The One Where Ben and Jamie Aren't At RSAC

    So the rest of the gang are out playing in either San Fran or Calgary. You get what's left over - actual security professionals doing actual security work.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Pentagon Admits, Only a Bug Bounty Will Work US Companies Prefer China over Pentagon, Generals try Cybering Harder
      2. John McAfee doesn't computer
    • Breaches
      1. Internet of Crap - now with Patriot Missiles in Turkey
    • SCADA / Cyber, cyber... etc
      1. 1Password loopback vuln ... but wait, a rationale response from the vendor
      2. DROWNing!!!
      3. A little late but congress says no to Flowers By Irene
    • DERP
      1. UK Minister Compares Adblocking to Piracy. Fails at Internet
      2. Ad networks have a vulnerability again
    • Mailbag

      1. Dear Liquidmatrix,

        How come you're not at RSAC with the cool kids?

        Signed,

        Cool Kids

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. I was in Engadget. Read about it.
      2. Incident response methodologies
      3. Closing Thoughts
        1. Seacrest Says: good luck with the post RSAC conflu

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 65 Feb 17, 2016

    Episode 0x65

    Ben and Matt Screw Up HTML

    Thanks Matt-Dave, this is Ben-Jamie for episode 0x65 (82 for those of you not good with the hexa-ma-decimal) and we're down a bunch of peope tonight but that's okay because we're super committed (except Wil, he's doing who knows what somewhere). Tonight we've got a lot of news about vulns and then a brief stroll through the cybers, derps and mailbags before calling it a night. Hey Matt, what's in the news?

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. glibc - Set fire to the rain
      2. Google's advisory on glibc vuln
      3. Cisco's firewall doesn't... you know... firewall and it's a pretty nasty vuln affecting millions of ASA deployments making it ripe for worm fodder. The vuln was discovered by Exodus Intel. Predictably the mass scanning started , and Qualys made some pretty good points about this vuln. Notably, Cisco has released an IDS signature back in November; but how does that help an admin who gets the alert. This mitigation probably didn't work.
    • SCADA / Cyber, cyber... etc
      1. Fireeye vuln let's you whitelist malware
      2. Apple Encryption Bomb Dropped
      3. Trail of Bits Technical Deep Dive on Apple Encryption
    • DERP
      1. Fake Download Buttons Be Gone!
      2. 3rd Party JavaScript in Major Banks Login Forms
    • Mailbag

      1. Hi-Di-Ho Have you thought about doing a livestream? Mr. Hanky

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Docker's Security Upgrades
      2. AWS Lambda WAF awesomeness
      3. Mimikatz defense
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - RSA!
      2. James: - Nowhere - except for going to Seattle next week
      3. Ben: - Nowhere
      4. Matt: - RSA!
      5. Wil: - in his trailer between takes
      6. Other LSD Writers: - There is no Other Writers
      7. Closing Thoughts
        1. Seacrest Says: Eggplant 2 - Mother approved

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 64 Feb 10, 2016

    Episode 0x64

    FIVE Golden Digests...

    Yup, back again. Actually a thing. There's even some people here to talk to you about security things. And whining. Also, fuck you Skype.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Dridex Malware Platform installing Avira
      2. Let's encrypt has crossed 500K
      3. SANS Securing the Human Newsletters And use Gophish to test them out...
      4. Job hunting? White House seeking a CISO
    • SCADA / Cyber, cyber... etc
      1. Obama gonna make it rain $19 billion cybers
      2. ENISA Cyber Europe 2016
      3. Hacker doxxes 20k FBI agents
    • DERP
      1. VTech: "Not our bad..." ¯\_(ツ)_/¯
      2. Microsoft doesn't understand what "no" means
      3. Avast decides to pull a Comodo
      4. Your backups should be in a separate cloud thingie
      5. Alibaba security team fails to notice 99 million brute force attempts - TAO says "you're welcome"
    • Mailbag

      1. Dear Digestives

        What's the deal with auditors and the woodie they've got for full disk encryption on servers in secured data centers?

        Love you all, but I NEED AN ANSWER NOW

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Archive.org's Malware archive
      2. Make all those asshole auditors shut up about O365
      3. Specialists Vs. Generalists by some guy named Nick
      4. Pamela Anderson is in a movie about the singularity
      5. RSA Parties List 2016
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - RSA, CSA Summit 2016 (Slovenia), FIRST ...25th?
      2. James: - I work. A lot.
      3. Ben: - Also works. A lot.
      4. Matt: - There is no Matt.
      5. Wil: - Doesn't work so much... Rehearsing for Radioheaded (again...), more CBC news coming...
      6. Other LSD Writers: - There is no Other Writers
      7. Closing Thoughts
        1. Seacrest Says: Eggplant

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 63 Feb 03, 2016

    Episode 0x63

    May The Forth Be With You!

    Dave's here. Wil's here. Matt's here. Ben's here. I'm here. There's a guest (or two) HOLY CRAP IT'S A REGULARLY SCHEDULED LIQUIDMATRIX PODCAST. Also, Dave claims he's fixed the website - we'll see how that goes.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Lessons Learned from the Java Deserialization Bug ( Apache Nose Job that Ben mentioned - everything old is new again)
      2. Let's talk a bit about privacy on Tor
      3. Baby Monitors live in New York!
      4. 2016 Social Security Blogger Award Voting is Open Now
      5. Security Firm Norse Corp. Imploding Threat Butt
    • Breaches
      1. Let's just assume that there have been some.
    • SCADA / Cyber, cyber... etc
      1. The Muricans are invading Canada's all bran fibre (h/t @ultramegaman)
      2. Israel got hacked by the NSA and James Bond
      3. Go get your prescriptions from these guys
    • Curmudgeon's Corner
      1. The latest from Internet Curmudgeons -- tonight Spacerogue - YES THAT SPACEROGUE!
    • DERP
      1. Developers Accidentially Ship Dropbox and Gmail Logins - Motorola
      2. HSBC succesfully defends against DDoS but is offline
      3. Security researcher finds 'backdoor' to MediaTek processors
      4. Tavis wrecks Comodo
    • Mailbag

      1. Gentlemen,

        First let me say how happy I am that the Liquidmatrix podcast is pushing out new episodes in 2016. I look forward to listening more.

        That said I find I must take exception to the "Mailbag" commentary in Episode 61.

        What definition of "enterprise" are you using?

        I will heartily endorse that Matt is an "awesome" hacker and that the toolkit he is building at the startup he's at is likely totally awesome. But in what world is a startup also an enterprise?

        Startups use homebrew and open source systems because they are cash-short and it makes more business sense (meaning a combination of financial, risk, compliance, and resource sense) to build versus buy.

        But any true enterprise CISO that used a SIEM built by one of their team members is (using the language of the kids today) “smoking crack”.

        Why? Allow me to expand the thought.. Assume Matt works for me at an $8B company and I adopted the SIEM platform he developed versus using MSSP or SIEM…

        1. As the company grows the amount of time Matt will need to spend building connectors and enhancing the system will continue to grow. Matt will need to take time away from actual security (which is what I hired him for in the first place) and act more like a developer than a security staff member. Is that the best use of his limited time? I doubt it.2. Some compliance regimes (yeah, I know, I can hear the complaints now but at the enterprise level this stuff matters) require systems you rely on for security to “have support”. I’m not a development shop! I do security for a company that makes widgets! Crap – now I have a finding in my external audit and my PCI assessor is twitching.3. What happens when Matt gets bored (and he will – all good hackers do after a period of time) and leaves the company? Who’s going to support this thing? Now I have to go find an equally awesome hacker (not an easy prospect these days) and hope they can support this now critical piece of security infrastructure. There is a very real possibility that the system will degrade into a useless piece of crap before I can find someone to take over… That’s potentially devastating as I have *nothing* to fall back on.

        Are you seriously asking me to sign up for this amount of risk? REALLY?

        Homebrew and open source security tools have their place and properly used are likely viable solutions in the startup/SMB space. Use in a true enterprise, IMO, is likely going to add so much risk that the cash expense of $VENDORPRODUCT is very much worth it.

        Keep up the good podcast work, y’all. I look forward to more episodes.

        Martin Fisher

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Michael Geist on the TPP
      2. Internet Link Tester / Validator w/ Raspberry Pi (or any Linux)
      3. Maximum Absorbency Garment
      4. Bill Clinton has used email once or twice. Nope just twice.
      5. Safe Harbour 2 is here
      6. Google's Vulnerability Reward Program paid out more than $2 million in 2015
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. Messages from our Sponsors
      2. We really need to have more projects
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - RSA, ATLSECCON, NAB, Interop, Bill's thong shop
      2. James: - Currently nothing till Vegas.
      3. Ben: - At home
      4. Matt: - RSA? Maybe? Come buy me beer during SXSW
      5. Wil: - Waiting to take OSCP...
      6. Other LSD Writers: - Apparently bloggering...
      7. Closing Thoughts
        1. Seacrest Says: Out.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 62 Jan 27, 2016

    Episode 0x62

    The Return of Dave?

    Well, we weren't kidding folks. This is number 3 inside of a month. If you include the special "Blast From The Past" Episode 0x40 Live from SecTor 2014, that's FOUR episodes in a month. Wooooooooo. Now, time to talk security. But first, a moment for Abe.

    Upcoming this week...

    1. Lots of News
    2. SCADA / Cyber, cyber... etc.
    3. finishing it off with DERPs/Mailbag (or Deep Dive)
    4. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Amazon Customer Service Backdoor
      2. Bug in Linux Kernel... Patch now The gory details from Perception Point
      3. ISO 27017: A New Standard to Learn
      4. Update from last week: Actual PDF of Trustwave lawsuit
      5. Canada Discovers It's Under Attack by Dozens of State-Sponsored Hackers
    • SCADA / Cyber, cyber... etc
      1. Pentagon to save the power grid
    • DERP
      1. Reporter thinks SHODAN is creepy.
      2. FBI Runs Child Porn Sites
      3. Apple can read (Backed Up) iMessages
      4. NY and California Politicians DON'T MATH
    • Mailbag

      1. @mattjay I'd like to hear you talk for an hour on browser stuff, really.

        — Icon0clast (@Icon0clast) January 21, 2016
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. POCIIGTFO x10 is out.
      2. @beaker (Chris Hoff) dispenses wise words
      3. If you use OS X - lots of defaults write commands
      4. SSH Logins to Slack
      5. WhatsApp will add encryption indicators so you know your chats are safe
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Will be at RSA, probably in the lobby of the W
      2. James: - Wednesday January 27th - TASK. Unknown thereafter
      3. Ben: - Hiding.
      4. Matt: - Will be at RSA, probably in the lobby of the W (near Dave)
      5. Wil: - On CBC Calgary (26:50 or so)
      6. Other LSD Writers: - Can't login to post a story either
      7. Closing Thoughts
        1. Seacrest Says: Jolly Ranchers Make Me Squee

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 40 Jan 26, 2016

    Episode 0x40

    BLAST FROM THE PAST

    I lost this recording - sorry. But I found it so it's all good.

    Despite being more than a year old, the entire episode is relevant. Still. (Because InfoSec).

    Listen in as Dave, Ben, and James discuss the infosec job, career, education, professional development quagmire with a live audience interjecting with questions and non-canned laughter.

    Closing Thoughts

    Seacrest Says: Where we're going, we don't need roads...

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 61 Jan 20, 2016

    Episode 0x61

    THERE IS NO DAVE, ONLY ZUUL

    Twice in two weeks. It's almost like we're making this thing a thing. Of course it'd be nice if Dave would fix the website so I could post there. At least libsyn and iTunes still work.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Adblock Plus just got uninvited from the ininternet-advertising industry's big conference
      2. Yahoo 10k bug bounty
      3. Affinity Gaming sues Trustwave
      4. AWS Enterprise Accelerator - Compliance -- Standardized Architecture for NIST 800-53 on the AWS Cloud
    • SCADA / Cyber, cyber... etc
      1. Firm Sues Cyber Insurer Over $480K Loss
      2. Ukraine power hacked by someone? But too soon for attribution.
    • DERP
      1. Griefer hacks baby monitor, terrifies toddler with spooky voices
      2. RSA Conference Keynote Speakers
      3. RBC doesn't respond to security vuln
      4. LastPass LostPass ShmostPass
    • Mailbag

      1. Hi LSD

        Why do we keep buying shitty enterprise security products? Can't we be awesome hackers and build our own cool shit?

        Enterprise Guy

        Mentioned: Elastalert, OS Query, Talk Slides
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Topic of Interest: Key Management
      2. OpenSSH 0-Day
      3. Fast Incident Response
      4. I'm still hiring
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Hiding.
      2. James: - TASK January: Docker and Home Automation Security 2016-01-27 at Metro Hall in Toronto
      3. Ben: - Hiding from plumbers
      4. Matt: - South by Infosec
      5. Wil: - Slumming in Calgary, being a socialist.
      6. Other LSD Writers: - Hiding. Scared of the wilderness.
      7. Closing Thoughts
        1. Seacrest Says: Elon Musk, please land my rocket

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 60 Jan 13, 2016

    Episode 0x60

    Mid-Season Cliffhanger

    Short paragraph containing introductory material and a thanks to listeners (if reasonable)

    Upcoming this week...

    1. Lots of News
    2. SCADA / Cyber, cyber... etc.
    3. finishing it off with DERPs/Mailbag (or Deep Dive)
    4. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. TrendMicro security fails TrendMicro also asks: What About Canada, Eh?
      2. Juniper ScreenOS VPN traffic possibly snoopable... and admin access backdoored. But... They are patching it. And Fortinet as well?
      3. We can read encrypted emails on BlackBerry devices, Dutch team says
      4. Microsoft Drops Support for IE Older Than 11
      5. Cyber Insurers Dictating Cybersecurity Standards?
    • SCADA / Cyber, cyber... etc
      1. Steal your keys from your doorbell... Forget the Doorbell - APT the Surveillance Camera
      2. Project GRIDSTRIKE
      3. Reid Wightman Explains Why VFD Mfg Companies Are Stupid
      4. SCADAPASS ALL THE PASSWORDS
    • DERP
      1. T-Mobile. Dude. You suck.
      2. Canadian company helps with oppression... again
      3. And again... And again...
      4. So here's The State of The Onion...
      5. So run a Node or donate.
      6. (Unsure DERP delivery...) Let's Encrypt certs used to hide malware transmission.
    • Mailbag

      1. Dear Liquid-whatever-your-name-is,

        Seriously, what the shit.

        Is this a thing again?

        Signed The People

        <!#-- random tag-->

        Also, how come large enterprises don't get small startup security?

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. <!-- Wil -->Using Massscan to push poetry
      2. <!-- Jamie -->Urban Dictionary Goes Infosec
      3. <!-- Matt -->Intro to DFIR
      4. <!-- Cylon -->I'm hiring again (I swear the last guy survived that incident)
      5. Closing Thoughts
        1. Seacrest Says: Are you really back? REALLY!?!!
    <!-- The copyright notice -->

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 51 May 28, 2015

    Episode 0x51

    Not Dead

    Yup, we're still a thing. Scheduling is hard. Look forward to more of these with less than a full cast of characters. It happens.

    Upcoming this week...

      1. Just some general ranting. It's what we've got.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

      • Closing Thoughts
        1. Seacrest Says: Do this again sometime, eh?
      Creative Commons license: BY-NC-SA
    Liquidmatrix Security Digest Podcast - Episode 50 Jan 16, 2015

    Episode 0x50

    Revenge of the Fourth

    We've been around, just not... you know... around. It's best that you do not think about what happened to episodes that were not published.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Home routers take down Sony, Microsoft, Kerbs... you're next
      2. Google won't fix old vulns (but it's not their fault)
      3. JJX talks about Year 1 -- And it's my first year too!
      4. 3 Problems With UK PM Cameron's Crypto Proposal
    • SCADA / Cyber, cyber... etc
      1. There's vulns in the hermit kingdom's glorious OS
      2. And a crazy web browser
      3. South Korea smokes a doobie and says North Korea has computers
    • DERP
      1. Don't enjoy respawning cookies? Don't use our service
      2. Adsense didn't watch Matt Jay's talk on malvertising
      3. Marriott Agrees to Stop Blocking Guest WiFi Devices
    • Mailbag
      1. Hi guysWhere the fuck have you been sincerely the internet of thingersWe told you already!
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Keystroke Sniffer inside a USB Wallwart
      2. What Happens When You Install the Top 10 Download Dot Com Apps
      3. I'm hiring!
      4. I'm hiring!
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. We'll get back to you when we have projects again. In the mean time, find us here:
        1. Dave: - #jeSuisCharlie
        2. James: -
        3. Ben: - Bed
        4. Wil: - Anywhere that is nowhere.
        5. Other LSD Writers: - Anyone else notice that Bill Brenner posts to LSD ALL THE TIME?
      2. Wrapping up...
        1. NyQuil - you giant fucking Q
      3. Closing Thoughts
        1. Seacrest Says: Who the fuck is Seacrest.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 3F Jul 17, 2014

    Episode 0x3F

    Last one before Summer Security Camp

    Pretty much everyone is drowning under piles of wtf and omfg diaf. But we promised you we'd be back and this time we're pretending we care.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Police Dog Sniffs Out Child Porn Hard Drives
      2. News about the news - the WaPo launches it's own wiki-leaks-esque platform
      3. Rogers Releases New Policy on Disclosing Subscriber Information
      4. UN human rights report blows apart governments’ pro-surveillance arguments
    • Breaches
      1. HotelHippo.com Closes after Data Leak
      2. Lastpass doesn't think it got breached
    • SCADA / Cyber, cyber... etc
      1. Senate "Intelligence Committee" approves cybersecurity bill.
      2. If you read Boing Boing, the NSA considers you a target for deep surveillance
      3. The NSA Revelations All in One Chart
    • DERP
      1. Congress in middle of Hollywood copyright clash with Silicon Valley from listener Marco Tietz
    • Mailbag / Deep Dive
      1. We're coming up to Summer Security Camp in Vegas. Some thoughts on how to survive - and even prosper - while retaining your mind.
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Plain Text Offenders - one of many Tumblrs to follow
      2. Putting the TOR back in Torrent
      3. Telehash
      4. Australian bill will put journos in prison for 10 years for reporting leaks
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Speaking at RSA Asia next week, Attending Black Hat/Defcon (goon) and BSidesLV, BSides Cape Breton as keynote and will be speaking at 44CON, Sector and BSides Toronto is coming.
      2. James: - Blackhat, DEF CON, Derbycon, BSides Toronto, Sector - dunno where else... somewhere I suppose
      3. Ben: - Staying at home - cause baby
      4. Matt: - If you see me, call me. I'm lost. Perhaps I'll be in Las Vegas.
      5. Wil: -
      6. Other LSD Writers: - We added another one. Trying to clean up our image. Say hi to Bill - yes, that Bill.
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
    • Closing Thoughts
      1. Seacrest Says: Viva Las Vegas!!!!

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 3E Jul 04, 2014

    Episode 0x3E

    HAPPY $COUNTRY JULY PAID DAY OFF

    We're back. Reasons shall be enumerated. And so forth.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. cryptolocker extortionists use bitcoin for less traceable blackmail payments, extortion payments visible in the blockchain till it goes through a mixer. crime pays
      2. Harper - Canada needs NSA lite because protesters
      3. More details on the Hacking Team spying software.
      4. Los Angeles Police Department Kept User ID and Password to “Big Data Policing” Software on Office Whiteboard, Incidentally Broadcast to CNN Viewers During Interview (UK gov/World Cup)
    • Breaches
      1. Benjamin F. Edwards Co. Discloses Data Breach Affecting Customers
      2. DDoS Attack Puts Code Spaces Out of Business
      3. Feedly Suffers Extortion Related DDoS Attack
    • SCADA / Cyber, cyber... etc
      1. The Akamai State of the Internet Report
      2. Deloitte Global Defense Outlook 2014
      3. OpenSSL roadmap - we're going faster now
    • DERP
      1. Austria prosecutes a TOR node operate - forgets about other common carriers
      2. CASL means no more security notifications
      3. Microsoft steals no-ip's domain
    • Mailbag

      1. Hi guys, Where the fuck have you been? Sincerely, The Internet PS Can we have your domain name if you're not using it anymore?

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Awesome Sysadmin: A curated list of sysadmin resources
      2. Goals are for losers
      3. iOS 8 is Randomizing MAC Addresses
      4. Passwords
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Speaking at RSA Asia, Defcon, Black Hat, BSidesLV, Speaking at BSides Cape Breton, Speaking at 44CON, BSides Toronto, Speaking at Sector
      2. James: - Lots of work travel, Black Hat, DEF CON, BSidesLV, BSides Toronto, Speaking at Sector
      3. Ben: - Diaper changing
      4. Matt: - Seacrest OUT
      5. Wil: - Maybe painting the bathroom before DefCon and Burning Man.
      6. Other LSD Writers: - At least someone is blogging
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
    • Closing Thoughts
      1. Seacrest Says: "Look at that subtle off-white coloring. The tasteful thickness of it. Oh, my God. It even has a watermark."

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 3D Apr 10, 2014

    Episode 0x3D

    My Heart Bleeds for Windows XP

    Well this is certainly an exciting week around these here parts. I reckon we've not seen this much marketeering since the APT1 days of ought 13. Goodness gracious I'm not a huge fan of this crap.

    Do not listen to this podcast at more than 1.5x speed while operating a motor vehicle or heavy equipment. Your face may melt according to some studies conducted by a Murican we know.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Classified NSA Work Mucked Up Security For Early TCP/IP
      2. EU court acts like a government of the people
      3. Trey Ford talks sense around XP EOL/EOSupport
    • Breaches
      1. Heart Bleed!!! and some demo and a PoC!!!! With an awesome quote by Mr. Fancy Pants And donate some money to the cause you lazy bitches Also, update your Tor nodes and relays... and while you're updating your OpenSSL
      2. Bad CRA
      3. How I hacked your router
    • SCADA / Cyber, cyber... etc
      1. GoGo helps the feds
    • DERP
      1. US Pushes Canada to Weaken Privacy Legislation
      2. The Brits love them some XP good
      3. bank drops out of Trustwave lawsuit
    • Mailbag
      1. Hi Are we now cool with Cyber? Not Jamie
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Plug and play in/with your Tesla...
      2. Yeah. So, not really interested in Dropbox anymore.
      3. Evilgrade
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Star Alliance Hostage
      2. James: - Wait what?
      3. Ben: - Suit.
      4. Matt: - Beard.
      5. Wil: - Actor. and cleaning up his laundry
      6. Other LSD Writers: - Blogging? (WTF IS BLOGGING????)
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
    • Closing Thoughts
      1. Seacrest Says: Aviator is already configured to check for revoked certificates. Nyahhhhhhhh.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 3C Mar 27, 2014

    Episode 0x3C

    You Got Breached.

    And in other news... April 8 is coming up FAST.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. ErrataSec may have witnessed SHOTGIANT in action... more likely the CIA though...
      2. Trustwave gets sued
      3. Are You An Expert?
    • Breaches
      1. Hackers compromise EA website, use it to steal Apple IDs (report)
      2. Security certification group EC-Council’s website defaced with Snowden passport
    • SCADA / Cyber, cyber... etc
      1. Full Disclosure is dead, long live full disclosure
      2. XP eternal p0wnage
    • DERP
      1. Wil hasn't seen 80's movies
      2. How not to write an API
      3. (ANTI-DERP) who to handle a vuln
      4. (ANTI-DERP) who to handle a vuln #2
    • Mailbag

      1. Dear Liquidmatrix People

        Did you forget that you have a podcast? What's up with that shit?

        Love, The Internet

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Aviator is awesome and it should be part of your Mom's day to day.
      2. All the places you can MFA
      3. Control System Port List
      4. MozDef
      5. Mylar
      6. Frida
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Massively distributed diaper changing operations.
      2. James: - Interop next week, BSides of Various Cities and then Summer Security Camp
      3. Ben: - Work
      4. Matt: - Aviating
      5. Wil: - Not drinking coffee... It's beer in the mug...
      6. Other LSD Writers: - That Sistrunk Guy won't write about Aegis.
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
    • Closing Thoughts
      1. Seacrest Says: If you ever want to see these liquidmatrix bastards again, follow my instructions carefully

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 3B Jan 23, 2014

    Episode 0x3B

    We Have Quorum!

    Getting tired of hearing about the latest $problem. Can we do something different with our cognitive surplus?

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

      • News and Commentary
        1. Facebook Awards Largest Bug Bounty To Date for Remote Code Execution Vulnerability - $33,500
        2. Gang Rigged Gas Pumps with Bluetooth Enabled Card Skimmers
        3. US Courts uphold that you need an actual reason to search people's stuff
        4. F-35 Fighter Plans Intercepted In Shipping Container Destination: Iran
      • Breaches
        1. 20 million Korean learn about a trusted insider the hard way (and then the executives own it completely)
        2. It wasn't just Target (and the obligatory Krebs)
        3. Is Your Twitter Password Secure?
      • SCADA / Cyber, cyber... etc
        1. VSAT terminals are on the internetz ready for the p0wn
        2. CSEC Current Issues: Questions and Answers
      • DERP
        1. Network solutions ripping customers off to make them more secure
        2. Snapchat, still not fixing the problem ... but they do implement a bot stopping captcha system... ... that gets broken the same day
        3. The first rule of a totalitarian government is you don't talk about hacking (just like an oppresive wannabe theocracy)
      • Mailbag

    We're reaching a tipping point around the concept of Privacy. Here's a few examples to discuss:

      1. Rating Obama’s NSA Reform Plan: EFF Scorecard Explained
      2. MPAA & ICE Confirm They Interrogated A Guy For Wearing Google Glass During A Movie
      3. 79-year-old census resister has no regrets after conditional discharge
      4. Google outed me
      5. Here We Go Again: Canadian Recording Industry Calls on Government To Regulate the Internet
      6. TrueCrypt's Plausible Deniability is Theoretically Useless
      7. Another Six Weeks: Muting vs. Blocking and the Wolf Whistles of the Internet
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Switch to HTTPS Now, For Free
      2. RSA Conference Parties
      3. WhiteHat Aviator for Windows Alpha
      4. NF Tables (die die die IPTables)
      5. Predicting attacks (cyber!)
      6. ISO 30111 - vulnerability handling process
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Never To Be Seen Again
      2. James: - BSidesSF, RSA, etc. Sigh.
      3. Ben: - Putting his office tchochkes in a box
      4. Matt: - Hiding behind his lustrous facial hair, speaking at AppSec California and BSidesSF/RSA/Metricon/etc.
      5. Wil: - Too Pretty (♫ I'm too sexy for this show, too sexy for this show, so sexy it hurts... I'm an actor, you know what I mean and I do my little turn on the catwalk... ♫)
      6. Other LSD Writers: - Promised to write up S4 and hasn't
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
    • Closing Thoughts
      1. Seacrest Says: The NSA is in bed with EVERYONE - including me.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 3A Jan 09, 2014

    Episode 0x3A

    We Can Do Better

    Before we get too far into things this week, I want to draw special attention to Rich Mogull's $500 Cloud Security Screwup posting. Truly awe inspiring and an example of Doing Infosec Right - admitting that you screwed up and getting on with the solution rather than the very common response which would include hiding what happened and hoping no one finds out that it was you who were the screwup. We should all act more like this. Moving along...

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Five Product Security Questions Nobody At CES Wants You To Ask. Because, you know, internets.
      2. Mandiant gets bought by FireEye
      3. Infographic: New ISO 27001:2013 - What Has Changed?
      4. Find security flaw, go to jail?
    • Breaches
      1. Former TIAA-CREF Worker Gets 6 Years for Selling IDs
      2. OpenSSL Defacement - Not a Hypervisor Thing
      3. Riverside Health System 4-year-long HIPAA Breach
      4. Thank Goodness for the NSA! - a fable
      5. Yahoo infects people with Malware and makes the bitcoin
    • SCADA / Cyber, cyber... etc
      1. Several European manufacturers spawn NSA-proof Android “cryptophones”
      2. NSA denials
    • DERP
      1. UK ‘Porn Filter’ Blocks Legitimate File-Sharing Services
    • Mailbag
      1. We receive some of the most batcrap crazy emails here at LSD. What's the right response to people who don't just have a tinfoil hat, but are opting for the full ensemble?
      2. Dear Mailbag I'm thinking about not speaking at RSA because of the NSAs, what do you think? Hugs Mikko H. (not the other Mikko guy)
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Crypto Hardening guide for Sysadmins
      2. Penetration Testing Lab Contents Mindmap
      3. sigcheck now with Virus total
      4. Wordpress plugin exploit data
      5. Skipfish Scanner Used In Financial Sector Attacks
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Shmoocon, SOURCE, Infosec EU, BSides London, HITB EU, Secure360, FIRST...
      2. James: - At Shmoocon (with a cool surprise), then RSA (sad trombone)
      3. Ben: - N/A
      4. Matt: - behind the beard
      5. Wil: - Gave up, is a car dealer now
      6. Other LSD Writers: - huh?
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! Or do the math and figure out if 5% off a course would be a better deal with "Liquidmatrix_5"
    • Closing Thoughts
      1. Seacrest Says: My Voice Is My Passport, Verify Me

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 39 Jan 05, 2014

    Episode 0x39

    Auld Lang Syne

    The Syrian Liberation Army would like to thank Liquidmatrix for their use of Skype.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. finishing it off with DERPs/Mailbag (or Deep Dive)
    4. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Unencrypted Windows Error Crash Reports a Treasure for NSA
      2. RSA gave it (Dual EC DRBG) up to the NSA (also turns out Dual EC DRBG was always key escrow)
      3. Cash machines robbed with infected USB sticks
    • Breaches
      1. Target get's p0wnied ...and so do their customers
      2. The Doctor Who website (also known as the BeeBeeCee) was allegedly hacked
      3. Snapchat infoleak
      4. WaPo gets hacked... again (and the last was again)
      5. Skype social media presence get's hacked
      6. OpenSSL defaced
    • DERP
      1. The Danes aren't nice to hackers
      2. RSA's lame denial of their NSA involvement
    • Mailbag

      1. Happy new year LM crew!

        Did you watch the 30c3 keynote by Jacob Applebaum or read the piece in Der Spiegel? I'm honestly not sure how to reconcile this with my view of how I thought the infosec world worked. Should I start drinking?

        Turns out I'm not paranoid guy

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Seiki 39" 3840x2160 (@30Hz) JUST DO IT.
      2. GitHub implements Forward Secrecy
      3. How to block Java payloads properly
      4. Flash Proxies for TOR
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Hiding from the Ice Storm
      2. James: - Shmoocon, RSA, not sure past that...
      3. Ben: - Hiding from Dave
      4. Matt: - Texas. 'Nuff said. AppSec California, RSA
      5. Wil: - Texas North. (aka Calgary)
      6. Other LSD Writers: - New Orleans.
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      2. Seacrest Says: Happy birthday Alex Hutton, we hope your unicorn birthday wishes come true

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 38 Dec 02, 2013

    Episode 0x38

    Dreidel Turkey Dreidel Peter Mackay!!!

    Can't do HTML, can't follow the instructions on how to write an introductory paragraph welcoming our listeners to the show notes that no one reads. Gotta love the stunt team.

    Upcoming this week...

    1. Lots of News
    2. Breaches, anti-derps!!
    3. It's Chanukah!!!
    4. and many turkeys are now dead
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Someone's been MiTMing the internets... Bruce Schnier thinks Ars Technica had an okay write up about it... And more reporting on Renesys's original research on it. (and a little more)
      2. Japan is awesome, told NSA no thanks because it believed the request was illegal
      3. Canada's Bill C-13 is a Trojan Horse (and Michael Geist weighs in too) (and the Ontario privacy commissioner does comment on it)
    • Breaches
      1. Health Canada doesn't understand privacy (and the bad things start happen)
      2. Clearport Mercantile exchange (and the 450,000 daily contracts they process) got p0wned
      3. EU is not good with the Wifi
    • Anti-derps
      1. Anti-DERP - Diffie is awesome! so is newegg (but sadly the lost - which sucks)
      2. Anti-DERP - konami button press sequence is not a hack (it's a metaphor)
      3. Anti-DERP - Mom takes on revenge porn site, a creepy hacker and Anonymous to the rescue
    • Mailbag
      1. Hi Guys: 0x37 was good -- thanks!

        During recording the podcast one of youse (Ben?) wanted to determine the version of Silverlight installed on a browser. I make Rapid7's browserscan the home page for all of my browsers. It displays a nice list of the plugins currently installed & enabled in your browser. The list includes the plugin's installed version, the currently available version and -- when appropriate -- a Red Download Button in case you want to download the latest version.

        cheers, Mark
        1. Rapid 7's Browserscan
        2. Qualys
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Amber Baldet's DefCon 21 talk on Suicide Risk Assesment and Intervention Tactics.
      2. Dan Geer speaks more wisdom... go read it now
      3. Awesome hack - private LCD
      4. BIPS suffers Bitcoin heist
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Attending Bluehat and Hushcon to close out the year.
      2. James: - Chicago, we think
      3. Ben: - nowhere in particular
      4. Matt: - Turkey coma
      5. Wil: - On location. He's looking for representation so get him while he's still cute...
      6. Other LSD Writers: - MIA
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      2. Seacrest Says: Tell Peter Mackay everything

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 37 Nov 24, 2013

    Episode 0x37

    Two Guys !HTML

    It's completely unreasonable for me to ask that they come up with a short pithy paragraph to start off the show notes. Of course, I'm fairly certain that no one refers to these notes anyways.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. GitHub undergoing a massive automated brute force attack GitHub blog post announcement
      2. Police set poor example by paying $750 CryptoLocker ransom
      3. China get's more with the censorship
      4. Silverlight users beware (That means you Netflix watchers)
    • Breaches
      1. Cupid Media dating website exposes 42 million plaintext passwords Krebs reporting on it.
      2. Dave Maclure's email gets breached
    • SCADA / Cyber, cyber... etc
      1. FBI says the .gov has been breached lots
      2. Stuxnet's twin
    • DERP
      1. Jeremy Hammond gets nailed with a 10 year sentence
      2. LG Smart TVs logging USB filenames and viewing info to LG servers
      3. Idiot steals NATO data to prove a point - goes to jail
    • Mailbag / Deep Dive
      1. Dear Liquidmatrix Why won't they PATCH THE VULNS!!!!???? So many vulns!!!! unpatched vulns survivor
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Hacker Opsec
      2. Go Dave Kennedy Go!
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - At a Chiropracter near you!
      2. James: - In the United States
      3. Ben: - Cyloning
      4. Matt: - Possibly Seattle soon and AppSec California
      5. Wil: - Acting!
      6. Other LSD Writers: - What's that again?
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      2. Seacrest Says: Rob Ford is my homeboy

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 36 Nov 14, 2013

    Episode 0x36

    Which part of WEEKLY is this?

    There's a chance that you'll learn something during this romp through the wonderful world of infosec. Or something.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Homeland Security Has to Explain Why and When It Can Kill Cell Networks
      2. GitHub DERPS Are Why We Can't Have Nice Things
      3. Cyber-arms dealer APT APT APT (fun stuff about cve-2013-3906)
      4. Toyota's killer firmware: Bad design and its consequences
      5. Obligatory Rob Ford Story... Hacker Destructo Needed.
    • SCADA / Cyber, cyber... etc
      1. More Stuxnet CyberDerping.
      2. FBI Posts Bad Craigslist Casual Encounters Ad
    • DERP
      1. Enabling the Snowdens? Users like you and me (or, at least, people who work at the NSA)
      2. Humblebraging is still not cool... MacRumors attacker says "Relax guys"
    • Mailbag
      1. Friend of the show @JimmyVo asks: @myrcurial Definitely beyond 140 chr answer but how would you train up SIEM/SOC analysts?
      2. The Liquidmatrix Crew respondeth thusly:DO THESE THINGS.
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. ErrataRob's isowall
      2. Google Inactive Account Manager
      3. WhiteHat Hiring A Ruby Dev
      4. Why Korea uses internet exploder
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - In the YYZ Air Canada lounge.
      2. James: - Probably no where until Shmoocon.
      3. Ben: - Dancing on the ceiling.
      4. Matt: - Hiding behind a beard. AppSec trip canceled :(
      5. Wil: - On stage, probably acting, or probably in one of his drunken stupors.
      6. Other LSD Writers: - Someone forgot to feed them.
    • Advertising - pay the bills...
      1. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      2. Seacrest Says: Skype is teh suck. Scotch saveth thee.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 35 Oct 31, 2013

    Episode 0x35

    Halloween!

    We're all dressed up and ready to scare you as long as you promise to give us candy. Well, as many of us as will actually show up. Busy lives are busy.

    Upcoming this week...

    1. Breaches
    2. SCADA / Cyber, cyber... etc.
    3. finishing it off with DERPs/Mailbag (or Deep Dive)
    4. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • Breaches - the BIG one
      1. Snowden says "You're all owned"... basically. NSA is inside Google and Yahoo datacenters worldwide.
      2. How to Get Ahead at the NSA - What the NSA can and can not spy on.
      3. Google in 2010 on China and surveillance
      4. Canadians sue their own government over domestic spying
    • SCADA / Cyber, cyber... etc
      1. DRAFT Guidelines for Smart Grid Cybersecurity
    • DERP
      1. LinkedIn Intro: Data, Meet Security Issues
    • Mailbag
      1. The Cybersecurity Industry is Hiring, But Young People Aren't Interested
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Halloween idea: biometric breaking face makeup using CV Dazzle.
      2. University student asks Nicholas Percoco to perform a "Personal Pen-test" and is blown away by what is found out.
      3. Ben to @JimmyVo you are dead to me
      4. Lavabit and Silent Circle try to fix email
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Where ISN'T Dave?
      2. James: - Hackfest!
      3. Ben: - Will come out in the spring - infosec bear!
      4. Matt: - AppSecUSA in November
      5. Wil: - Going as his defeated sense of "self worth" for halloween. It's a pretty lame costume.
      6. Other LSD Writers: - We're not sure - with new found fame, Chris Sistrunk isn't talking to us anymore
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. BSides Jackson (Mississippi)
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: I'm not available anymore, because Texas. Please leave your message at the tone.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 34 Oct 29, 2013

    Episode 0x34

    Just the two of us

    Another week, another attempt at a full house for the show.

    Upcoming this week...

    1. Lots of News
    2. Breaches
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. CryptoSeal VPN shuts down rather than give up crypto keys to NSA
      2. Court order is an inside attacker
    • Breaches
      1. Hacker stole $100,000 from Users of California based ISP using SQL Injection
      2. Premptive Breach: Complete Persistent Compromise of NETGEAR, D-Link and Tenda (But not Dick Cheney)
    • SCADA / Cyber, cyber... etc
      1. Bug Hunters find 25 ICS SCADA vulnerabilities
    • DERP
      1. Bluetooth sniffing
      2. Verizon
      3. Experian sold consumer data to id theft service
    • Mailbag
      1. I really loved your live session at SecTor! You guys are all so dreamy! - Alex Hutton
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. A graphical explanation of Rijndael (warning Shockwave)
      2. "Call yourself a hacker and lose your 4th amendment rights" - Not entirely true but definitely worth the read
    • Liquidmatrix Staff Projects --
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - will be playing another round of where's Waldo / Carmen Sandiego
      2. Matt: - LASCON This Friday 10/25, OWASP AppSecUSA in November
      3. James: - Hackfest in November
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. BsidesJackson (Mississippi)
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Random Kids in the Hall Clip

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 33 Oct 11, 2013

    Episode 0x33

    Liquidmatrix Live at SecTor 2013

    In a literal first, the entire Liquidmatrix Podcast crew were in the same room at the same time. After nearly 18 months of (kinda) weekly Skype sessions, finally we did a live recording with all of us together. It's only a half hour, but we had a great time!

    1. Upcoming this week...
    2. We didn't even bother with show notes. Seriously. Just listen, it's good stuff.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Attending HITB Malaysia, Deepsec in Austria. And finally speaking at Hackfest in Quebec City.
      2. James: - Speaking at Hackfest.
      3. Ben: - Hanging out with his other toaster friends
      4. Matt: - Glossy eyed boy in love
      5. Wil: - Hacking banks across state lines
      6. Other LSD Writers: - wait? There are other writers?
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 32 Oct 03, 2013

    Episode 0x32

    Getting the Band Together?

    Another week, another attempt at a full house for the show.

    1. Upcoming this week...
    2. Lots of News
    3. non-infosec stuff
    4. Breaches
    5. SCADA / Cyber, cyber... etc.
    6. finishing it off with DERPs/Mailbag (or Deep Dive)
    7. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. SilkRoad seized. Dread Pirate Roberts arrested. Tor hidden service de-anonymised?
      2. Silent Circle moves away from NIST approved ciphers
      3. Sometimes, 7 milliseconds is REALLY important
    • Breaches
      1. ALL THE BREACHES!!!!
    • SCADA / Cyber, cyber... etc
      1. UK gets the cybers
    • DERP
      1. John McAfee copies Occupy.here and TOR
      2. Cyber warrior crush!
    • Mailbag
      1. Hi I'm a middle aged infosec dude who's hit a slump in his career and thinking about going to the USA to pursue infosec awesomeness. I'm torn between good beer, healthcare and no republicans vs the possibility of all the cyber I could ever want. Help me please, I need advice!!! PJ McGuff, Ontario
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Whistleblowers and the Crypto-Anarchist Underground: An Interview with Andy Greenberg
      2. ESXi 5.5 drops limits on RAM and Physical CPU
      3. 101 Free Tools for VMWare Administrators
      4. An awkward hug for our own Mr Arlen
      5. Old people make riskier and more inconsistent decisions
      6. Bittorrent chat!
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Attending HITB Malaysia, Deepsec in Austria, and bsidesTO. Panelist at SecTor. And finally speaking at Hackfest in Quebec City.
      2. James: - Speaking at SecTor and Hackfest, Panelist at SecTor (twice), and speaking at bSidesTO
      3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
      4. Matt: - Still on his honeymoon...
      5. Wil: - Trying to cut weight before new headshots, but will be at SecTor.
      6. Other LSD Writers: - wait? There are other writers?
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. BSides Toronto!!!!
      3. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).SecTor 2013
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      5. Random Kids in the Hall Clip - French Canadian Trappers

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Briefing 005 Sep 30, 2013

    Episode -- SB005

    CON FLU!

    CON FLU! It's awesome. Dave has it. Teehee.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News Briefs -- NO NEWS THIS WEEK
      1. HOST Has An Opinion
        1. Go to DerbyCon
      2. Parting Notes -- a few one-liners...
        1. Also go to SecTor next week.
        2. And bSidesTO this weekend.
      3. Liquidmatrix Staff Projects -- gratuitous self-promotion
        1. The Security Conference Library
        2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
        3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      4. Upcoming Appearances: -- more gratuitous self-promotion
        1. Dave: - Attending HITB Malaysia, speaking at Deepsec in Austria, and bsidesTO. Panelist at SecTor, speaking at Hackfest in Quebec City... And finally, I'll be attending Blackhat one way or the other.
        2. James: - Speaking at bSidesTO, SecTor and Hackfest, Panelist at SecTor (twice)
        3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
        4. Matt: - Still on his honeymoon... And will be speaking at SecTor
        5. Wil: - Getting playa out of his areas... But will be at SecTor
        6. Other LSD Writers: - Wait... there are "writers"? What deviousness is this?
      5. Advertising - pay the bills...
        1. Hackfest registration is open
        2. BSides Toronto!!!!
        3. SecTor 2013
        4. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).
        5. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Briefing 004 Sep 23, 2013

    Episode -- SB004

    With Dave Away Minions Play

    Dave is at the ISC2 Security Congress in Chicago right now and muttered something about really bad hotel wifi. Not sure whether it's the hotel or the wifi that is bad. I did not the correlation between expensive hotel and really bad wifi. Wonder if Hutton has modeled that yet.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News Briefs
      1. @nickdepetrillo, @thegrugq, @quine, @erratarob and a laundry list of the infosec who's who offer a bounty for a biometric hack against Apple's new scanner
      2. Charlatan hijacks iPhone 5S fingerprint hack contest, fools press
      3. CCC uses traditional biometric smackdown techniques - and wins.
      4. From the annals of Schneier: Google knows passwords
      5. RSA to customers: Trust not the encryptions
      6. HOST Has An Opinion
        1. Focusing on the wrong thing.
      7. Parting Notes -- a few one-liners...
        1. Turing machine in Excel
        2. Did you know that there's a new Microsoft Surface? Do you care?
      8. Liquidmatrix Staff Projects -- gratuitous self-promotion
        1. The Security Conference Library
        2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
        3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      9. Upcoming Appearances: -- more gratuitous self-promotion
        1. Dave: - Attending Security Congress in Chicago, Derbycon, HITB Malaysia, Deepsec in Austria, and bsidesTO. Panelist at SecTor. And finally speaking at Hackfest in Quebec City.
        2. James: - Speaking at Derbycon, bSidesTO, SecTor and Hackfest, Panelist at SecTor (twice)
        3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
        4. Matt: - Still on his honeymoon... And will be speaking at SecTor
        5. Wil: - Getting playa out of his areas... But will be at SecTor
        6. Other LSD Writers: - Wait... there are "writers"? What deviousness is this?
      10. Advertising - pay the bills...
        1. Hackfest registration is open
        2. BSides Toronto!!!!
        3. SecTor 2013
        4. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).
        5. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 31 Sep 19, 2013

    Episode 0x31

    Tinfoil Hats for EVERYONE

    Short paragraph containing introductory material and a thanks to listeners (if reasonable)

    Upcoming this week...

    1. Lots of News
    2. Paranoia / NSA
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag (or Deep Dive)
    5. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Fingerprints as passwords: New iPhone Touch ID
      2. Skipping Ben's turn because he's really impressed about upcoming stories.
      3. Certification WTF: Payment Card Industry Professional (PCIP)
      4. WordPress < 3.6.1 PHP Object Injection
    • Paranoia / NSA -- AKA "The BIG Breech of 2013"
      1. The NSA is a customer of VUPEN
      2. NIST says maybe don't use the ECC random bit thingie
      3. Wireless firms agree to give Ottawa ability to monitor calls, phone data
      4. No telco ever challenged NSA data collection
      5. New NSA Leak Shows MITM Attacks Against Major Internet Services
      6. EZpass is tracking you
      7. NSA Hacks Belgium
      8. NSA slurped bank records and credit card data
      9. Canada handed over control of crypto standard setting to the NSA
      10. NSA phone program is all legit
      11. FISA courts joining the FOIA party late
    • SCADA / Cyber, cyber... etc
      1. Today Cyber means War but back in the 1990s...
      2. Hacker Group in China linked to big cyber-attacks
      3. Brazil and Argentina make a cyber pinkie pact
    • DERP
      1. Anonymous Cop Pens Bizarre Editorial Calling for 'End of Anonymity on the Internet,' Says All Internet Posters Should be Forced to Register with the Government for 'Public Safety'
      2. Twitter does link scraping
      3. PERMANENT DERP AWARD: At this point, the award goes to all of us chumps who continue to let the people we elected stay elected. They have violated our trust.
    • Mailbag and/or Deep Dive

      1. Hey LSD-P

        I hope that you remember to check your dead-drop and got this coded message. I need to know what I should do to ensure that the winners of popularity contests do not have too much insight into my private life. It's not that I have anything to hide, just that they do not need any more access than a judge would permit them.

        Nervously,Your Friend

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Crypthook
      2. ShmooCon CFP - Pay attention to the Proceedings
      3. Binary Risk Assessment
      4. FreedomBox
      5. The First Few Months of Penetration Testing: What they don't teach you in School - Alex Fernandez-Gatti
      6. MOV is turing complete
      7. Meredith Patterson at 28c3 - The language of insecurity
      8. SimpleRisk: Enterprise Risk Management Simplified
      9. Browser fuzzing: introducing bamboo.js
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances -- more gratuitous self-promotion
      1. Dave: - Attending Security Congress in Chicago, Derbycon, HITB Malaysia, Deepsec in Austria, and bsidesTO. Panelist at SecTor. And finally speaking at Hackfest in Quebec City.
      2. James: - Speaking at Derbycon, bSidesTO, SecTor and Hackfest, Panelist at SecTor (twice)
      3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
      4. Matt: - Still on his honeymoon... And will be speaking at SecTor
      5. Wil: - Getting playa out of his areas... But will be at SecTor
      6. Other LSD Writers: - Chris Sistrunk speaking at EnergySec right now.
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. BSides Toronto!!!!
      3. SecTor 2013
      4. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).
      5. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      6. Seacrest Says: oh jeremiah!!!

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Briefing 003 Sep 16, 2013

    Episode -- SB003

    Thrice is NICE

    Super hackers, spies and a couple of old guys. Welcome to the third installment of the Security Briefing.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News Briefs
      1. Argentina arrests teen hacker who netted $50,000 a month
      2. NSA gets data from Germany’s domestic security agency - reports
    • HOST Has An Opinion
      1. Exam Protection. Really. CISSP issues. :) because Dave can't talk about it
    • Parting Notes -- a few one-liners...
      1. Firewall Management Essentials: Change Management
      2. The end of kindness: Weev and the cult of the angry young man
      3. The Road Warrior's Lament: In Search Of The Perfect Carry-On
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Attending Security Congress in Chicago, Derbycon, HITB Malaysia, Speaking at Deepsec in Austria and maybe bsidesTO. Panelist at SecTor (twice). And finally speaking at Hackfest in Quebec City.
      2. James: - Speaking at Derbycon, SecTor and Hackfest, Panelist at SecTor (twice), and either attending or speaking at bSidesTO
      3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
      4. Matt: - Still on his honeymoon...
      5. Wil: - Getting playa out of his areas...
      6. Other LSD Writers: - Chris Sistrunk speaking at EnergySec in a couple of weeks.
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. BSides Toronto!!!!
      3. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).SecTor 2013
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Briefing 002 Sep 10, 2013

    Episode -- SB002

    Twice is Nice

    Here's another week of the Liquidmatrix Briefing. Dave figured out that things work better when he has minions. Stay tuned for the regular gang of fools doing the full round-table - we accept our erratic nature.

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News Briefs
      1. Vulnerability bureaucracy: Unchanged after 12 years
      2. Crypto prof asked to remove NSA-related blog post
      3. ZMap: Fast Internet-wide Scanning and Its Security Applications (22nd USENIX Security Symposium)
      4. Downloading ZMap
      5. Dave Has An Opinion
        1. It's time to plan to fail.
      6. Parting Notes -- a few one-liners...
        1. Republic of India has published all of their standards, including Infosec... and ISO 27000 series - for FREE
        2. Safe and Secure Online - Internet Safety for Kids from (ISC)^2
        3. Installing Dropbox? Prepare to lose ASLR.
        4. "Here Be Dragons", Keeping Kids Safe Online
      7. Liquidmatrix Staff Projects -- gratuitous self-promotion
        1. The Security Conference Library
        2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
        3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      8. Upcoming Appearances: -- more gratuitous self-promotion
        1. Dave: - Attending Derbycon, HITB Malaysia and bsidesTOspeaking at Security Congress in Chicago, Deepsec in Austria. Panelist at SecTor (twice). And finally speaking at Hackfest in Quebec City.
        2. James: - Speaking at Derbycon, SecTor and Hackfest, Panelist at SecTor (twice), and either attending or speaking at bSidesTO
        3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
        4. Matt: - Still on his honeymoon...
        5. Wil: - Getting playa out of his areas...
        6. Other LSD Writers: - Chris Sistrunk speaking at EnergySec in a couple of weeks.
      9. Advertising - pay the bills...
        1. Hackfest registration is open
        2. BSides Toronto!!!!
        3. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value). SecTor 2013
        4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 30 Sep 10, 2013

    Episode 0x30

    Getting the band back together...

    Because you know, it *IS* a weekly podcast afterall.

    1. Upcoming this week...
    2. Lots of News
    3. Kittens
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag
    6. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. TOR crypto might not be all that
      2. CSEC Commissioner: Canadians May Have Been Illegally Targeted in Surveillance Activities
      3. Canadian Universities Navigate Learning Curve for New Copyright Rules
    • SCADA / Cyber, cyber... etc
      1. Speculation on Bullrun (more NSA funtime)
      2. Zee germans say the NSAs can hack our berries and iThingies
    • DERP
      1. Parallels pulls head into ass
      2. and just keeps pulling
      3. HP laptops comes with built in audio eavesdropping feature
    • Mailbag

      1. Hi LSD People

        I'd like to be able to cross borders digitally naked. Do you have any suggestions for someone who doesn't want to have his data "reviewed for my pleasure"?

        Thanks, Naked Computer Nerd

        Ben has some ideas... and honestly, it should be pretty easy to run with some of the less esoteric ideas?

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Watch this video of a "drone's eye view" of Burning Man and look for Wintr
      2. MDM for free yaknow.
      3. Don't succumb to security nihlism
    • Liquidmatrix Staff Projects -- gratuitous self-promotion
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
    • Upcoming Appearances: -- more gratuitous self-promotion
      1. Dave: - Attending Security Congress in Chicago, Derbycon, HITB Malaysia, Deepsec in Austria, and bsidesTO. Panelist at SecTor (twice). And finally speaking at Hackfest in Quebec City.
      2. James: - Speaking at Derbycon, SecTor and Hackfest, Panelist at SecTor (twice), and either attending or speaking at bSidesTO
      3. Ben: - Panelist (with Dave, James and Mike Rothman) for SecTor 2013's return of the (canadian) fail panel
      4. Matt: - Still on his honeymoon... he's appearing in the materimonial chamber
      5. Wil: - Getting playa out of his areas...
      6. Other LSD Writers: - Chris Sistrunk speaking at EnergySec in a couple of weeks.
    • Advertising - pay the bills...
      1. Hackfest registration is open
      2. BSides Toronto!!!!
      3. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).SecTor 2013
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      5. Seacrest Says: I'm in vegas for my honeymoon - we figured why not after the Elvis wedding

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Briefing 001 Sep 03, 2013

    Episode SB001

    Something New Is Tried

    Be gentle, this "security briefing" is a new format.

    Hi folks, Dave here. I've set up a new short security news briefing format for a weekly update in addition to our main podcast. This is just a test balloon for this week. I plan to get it smoother for next week.

    1. Starting off this week...
    2. News news news...

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 1 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News Briefs
        1. Microsoft and Google to sue over US surveillance requests
        2. An IT Flaw Has Let Unauthorized Users Exploit Army PCs for Years
        3. UK asked N.Y. Times to destroy Snowden material
        4. Unpatched Mac bug gives attackers “super user” status by going back in time
    • Parting Notes --
      1. NIST releases draft of security framework
      2. Akamai gets FedRAMP approval
      3. Innovation And The Law Of Unintended Consequences
    • Liquidmatrix Staff Projects
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      4. Upcoming Appearances: Dave will be attending Security Congress, in Chicago then on a plane to Derbycon, HITB in Malaysia, Deepsec in Austria and Hackfest in Quebec City. James will be speaking at Hackfest in Quebec. James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel. And Wil is going to be a dirty hippy out in the desert at Burning Man, but back and showered in time for BSidesTO and SecTor.
      5. Hackfest registration is open
      6. BSides Toronto!!!!
      7. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).SecTor 2013
    • In Closing
      1. Word of the Week -- cyberrrrific
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 2f Aug 25, 2013

    Episode 0x2F

    things happen

    Anyone else think that it would be nice if life had a bit of regularity?

    1. Upcoming this week...
    2. Lots of News
    3. Kittens
    4. Breaches
    5. SCADA / Cyber, cyber... etc.
    6. finishing it off with DERPs/Mailbag and
    7. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Researcher's say Tor targeted by malware that phones home to the NSA... Or not maybe...
      2. Lavabit shuts down, cuts off nose to spite NSA's face Silent Circle follows suit
      3. Hitting The Panic Button
    • Breaches
      1. wifi baby monitors a bit hackable (surprise!!!!)
      2. Visa's alert of possible data breach impacts Rivermark Credit Union members
    • SCADA / Cyber, cyber... etc
      1. US promises not to spy on the German - will stay besties for eva until some pops the 99 red balloons (again)
    • DERP
      1. Source: New York Times Website Hit by Cyber Attack
      2. IAB urges people to stop “Mozilla from hijacking the Internet”
    • Mailbag

      1. Noob Advice?

        I just recently started listening to the podcast as I'm only now discovering the infosec field, so first off, I'd like to say thank you for making this resource freely available.

        Now for my question; I am an incoming college freshman (Computer Science) and am at a sort of crossroads. If I wanted to put myself in the best possible position for a successful career in the infosec field, is the military a viable option? I have the option of joining ROTC in school, and I would have to commit to this if I decided to peruse that path. My long term goal would be to work for an intelligence agency in the federal government.

        If I was to leave the military or not pursue federal work, do most private companies hire employees with active duty military experience?

        Or would remaining a civilian throughout school present me with more opportunities?

        -Shane

        Non-Noob Response

        The answer is absolutely. Active duty military is a plus when getting hired. I would suggest finding a profession that you like and can enjoy such as intelligence, networking, or information security jobs inside the service. I for one wouldn't be where I am today without the help of being in the military. Gave me the focus, experience, and opportunity to break through in the private sector.

        Dave Kennedy - SET, TrustedSec, Derbycon, Awesome

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Stay tuned for "The Myrcurial Fund"
      2. PoC||GTFO
      3. Hacking mifare cards
      4. Every Important Person In Bitcoin Just Got Subpoenaed By New York's Financial Regulator
    • Liquidmatrix Staff Projects
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      4. Upcoming Appearances: Dave will be attending Derbycon, in Chicago, Hackfest in Quebec City and AppSecUSA in NY. James will be speaking at Derbycon and Hackfest in Quebec. James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel. And Wil is going to be a dirty hippy out in the desert at Burning Man, but back and showered in time for BSidesTO and SecTor.
      5. Hackfest registration is open
      6. BSides Toronto!!!!
      7. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).SecTor 2013
    • In Closing
      1. Word of the Week -- cyber-spatula
      2. Movie Review -- The Nutty Professor 2
      3. everyday is CTF! go set up a team
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      5. Seacrest Says: the lost episode 2E was legen.... wait for it.... wait for it... wait for it...

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 2D Jul 11, 2013

    Episode 0x2D

    Nobody loves us.

    It's all about us this week. Well, not really. It's more about getting the world to get off the crazy train.

    1. Upcoming this week...
    2. Lots of News
    3. Kittens
    4. Breaches
    5. SCADA / Cyber, cyber... etc.
    6. finishing it off with DERPs/Mailbag and
    7. There will NOT be a DEEP DIVE
    8. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. The web is a bad bad place
      2. SSL: Intercepted today, decrypted tomorrow (or why you need to use PFS) (but PFS TLS has a peformance impact)
      3. The Future of Civil Disobedience Online
      4. OECD complaint against finfisher
      5. The personal side of taking on the NSA: emerging smears
    • Breaches
      1. Facebook exposes itself
      2. Opera's breach lady sings
      3. 47k student teachers in Florida exposed
    • SCADA / Cyber, cyber... etc
      1. So you want to be a CIP consultant.
      2. Australia decides not to be American
    • DERP
      1. South Korea misidentifies China as cyberattack origin
    • Mailbag

      1. Hi,

        Greetings!

        Would you be interested to reach out to your target market for your Marketing Initiatives like Email Marketing, Tele Marketing, Direct Mailing and Fax Campaigns?

        Our list comes with the following information such as: First Name, Last Name, Title, Email, Tele-phone Number, Mobile Number, Company, Current Address, Country State/Province, City, Zip Code, Employee size, Sales; SIC Code/Industry, NAICS and Web Address.

        If you are interested please send me your target audience and geographical area, so that I can get back to you with exact counts and list details.

        Best Regards,

        Linda

        Lead Generation

    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Burp trips and tricks PDF
      2. Cyanogen mod gets secure messaging
      3. Running a Hackerspace
      4. Raspberry Pi bot tracks hacker posts to vacuum up passwords and more
      5. MITM via PPTP
      6. Hacking monopoly
      7. Pentagon's failed flash drive ban policy: A lesson for every CIO
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James Training (with Rich Mogull) and Matt Speaking at BHUSA. Dave now will be writing for CSO Online and will be attending Black Hat, DEF CON, Secure Asia in Manila and Security Congress 2013 in Chicago and Hackfest in Quebec City. Matt and Wil will be at Blackhat/DEF CON and James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel.
    • In Closing
      1. Word of the Week -- Cyberlympics - I think it means CTF, but I'm not sure. Check it out here.
      2. Movie Review -- Firewall! Because you know that Harrison Ford can type 120 words per minute.
      3. everyday is CTF! go set up a team
      4. Hackfest registration is open
      5. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      6. Use discount code liquidmatrix-2013 to receive 10% off the registration price. Can't attend the full conference? Use code liquidmatrix-expo2013 to gain free access to the expo ($50 value).SecTor 2013
      7. Seacrest Says: Good night Kitten

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 2C Jun 18, 2013

    Episode 0x2C

    This is the 49th time!

    All I can hear is the voice of Edward R. Rooney saying "Nine Times"... well, that and the 49th parallel (which is 6 parallels north of where 3/5ths of the gang is hanging out). No one reads the notes so I know that I'm just talking to myself here. It's probably bad when you start talking to yourself. Perhaps.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. There will be a DEEP DIVE
    7. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. OWASP Top 10 for 2013 is out
      2. What the NSA doesn’t have: iMessages and FaceTime chats
      3. Woz: This is not my America
      4. This is some cold ass James Bond shit (Countries are upset) (they even setup fake internet cafes)
      5. NSA leaks hint Microsoft may have lied about Skype security
    • Breaches
      1. Head of U.S. Nuclear Security Agency hacked by "Guccifer"
    • SCADA / Cyber, cyber... etc
      1. @c7five tweets on Cyberwar
      2. US FDA calls on medical device makers to focus on cybersecurity
      3. Trove of medical devices found to have password problems
    • DERP
      1. Zamfoo gets a derp for responsible fail disclosure (also in the mailbag from Graham S) (and a reddit thread)
      2. TSA agent tells teen to 'cover herself'
      3. Sys-admin selfies courtesy of The Grugq
    • Mailbag

      1. I'd like to start by saying that I thoroughly enjoy your podcast. It's a great combination of security news, comedy, and tragedy. It's great, keep it up. I'm emailing about your podcast to you rather than posting on the appropriate Facebook page, as I find email to be a preferred method of communication. I hope that's okay.

        Now, my question. I'm a young, ambitious Engineer who finds the topic of Network Security to be exciting and interesting. I work in a network security team in a large company and I am always trying to expand my skills and abilities. Simply put, I'm wondering what advice you have for an inspiring individual in this industry. Also, what resources did you rely on when you were starting out. What resources do you find to be the most valuable now?

        Specifically I struggle with finding friends, co-workers, or online buddies that share the same career interests and passion. After I spend a day troubleshooting a particular security issue I want to have a group of individuals I can spit ball ideas with. I find myself feeling like I am in a silo. This is particularly odd because I know for a fact that the world is full of brilliant network security minds. I'm thinking of attending one of the upcoming security conferences this year just to make some like minded friends. It's just annoying/expensive because I'd likely have to fly to the US. Any guidance that you could provide would be helpful.

        Anonymous By Request

    • The Deep Dive -- SETEC ASTRONOMY
      1. We Should All Have Something To Hide
    • Briefly -- NO ARGUING OR DISCUSSION ALLOWED
      1. Disconnect raises 3.5mil
      2. Pimp My Own Matt - Doing a webinar 6/20
      3. CycleOverRide - Security Nerds on Wheels
      4. Sixth Annual Movie-Plot Threat Contest Semifinalists
      5. Hardvard Business Review talks infosec
      6. I'm hiring
      7. Loon
      8. How to make The Internet (from The IT Crowd)
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James Training (with Rich Mogull) and Matt Speaking at BHUSA. Dave is attending Black Hat, DEF CON, Secure Asia in Manila and Security Congress 2013 in Chicago. Matt and Wil will be at Blackhat/DEF CON and James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel.
    • In Closing
      1. Word of the Week -- Cybercentrifuge: vendors spinning stories fast enough to refine uranium. @jack_daniel
      2. Movie Review -- Time to see Hackers again. And read The Conscience of a Hacker again. Trust me.
      3. everyday is CTF! go set up a team
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      5. Seacrest Says: Double ROT13 is NSA proof

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 2B Jun 11, 2013

    Episode 0x2B -- Or !2b

    Nothin that we can't fix

    Infosec news is pretty light this week. Let's have a good start for year two of Liquidmatrix Security Digest Podcast.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. There will be a DEEP DIVE
    7. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Microsoft seizes malware search domains
      2. Jude says child porn suspect does not need to decrypt his files... Or maybe yes he does.
      3. The Chinese hack Israel
      4. Hetzner web hosting service hacked
    • Breaches / Cyber / DERP
      1. Wired says NSA is on all Verizon calls
      2. Meet PRISM and 9 big internet companies
      3. EFF's handy timeline
      4. Tech Companies Concede to Surveillance Program
      5. Boundless Informant: the NSA's secret tool to track global surveillance data
      6. Director of National Intelligence declassifies PRISM info to clear up 'inaccuracies'
      7. Why Canadians Should Be Demanding Answers About Secret Surveillance Programs
      8. It's in Canada too - Data-collection program got green light from MacKay in 2011
      9. Whistleblower / future rendition candidate
      10. Why Prism kills Cloud (wow, wtf is wrong w/ people)
      11. More Links
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Google Upping their XSS Bounty on a few key domains. $7,500
      2. Let's all weigh in on how these thugs are steeling cars...
      3. Modern IE - browsers + HTML = weirdness
      4. Bradley Manning trial transcripts
      5. Using lotsa data to make web apps secure
      6. No security without maturity
      7. O Hai - I haz new job
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James Training (with Rich Mogull) and Matt Speaking at BHUSA. Dave will be speaking at SC Congress Toronto and attending Black Hat, DEF CON, Secure Asia in Manila and Security Congress 2013. Matt and Wil will be at Blackhat/DEF CON and James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel.
    • In Closing
      1. Movie Review Enemy of the State
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: Hi NSA, I didn't mean all those things I said about you in private

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 2A Jun 04, 2013

    Episode 0x2A -- Happy One Year Later

    And we still suck at scheduling

    Despite efforts to the contrary... we're still not good at this. We should be getting better.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. There will be a DEEP DIVE
    7. And there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. IE 10 Most Secure Browser according to NSS Labs ....Really?
      2. Privacy commissioner baffled about gas plant emails
      3. Google says 7 days!
      4. The Canadian Government's Embarrassing Opposition to Security Breach Disclosure Legislation (actual details on the opposition)
    • Breaches
      1. Drupal
      2. France learns e-voting is Haaarrdddd
    • SCADA / Cyber, cyber... etc
      1. BBC: Smart meters need to be harder to hack, experts say
      2. China blamed after ASIO blueprints stolen in major cyber attack on Canberra HQ
      3. Confidential report lists U.S. weapons system designs compromised by Chinese cyberspies
    • DERP
      1. Woman Brags About Hitting Cyclist, Discovers Police Also Use Twitter (a hurr durr)
      2. Twitter is evil!!!
      3. Paypal bounty program FAIL
    • Mailbag

      1. So I was listening to 0x29 and a thought came to me during the part about Moxie and the line that the Saudi recruiter used on him which was the standard refrain of: "You either stand with us, or you stand with the terrorists!" Or "You either stand for surveillance or you stand with the child pornographers."

        Can we not just turn that on its head using their own logic and say: "You either stand for privacy and security or you stand with the human rights abusers."

        Since the people pushing the big brother agenda only chose to use black and white in their pictures of the world, what happens when the colours are reversed?

        Bob

    • The Deep Dive
      1. The Case For A Government Bug Bounty Program
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Facebook Bug Bounty 4500.. Blackhats say worth $800k Google forbids facial recognition in Google Glass for privacy reasons
      2. Wintersmith - another static site generator
      3. The global cyber game
      4. Lahana!!!
      5. Getting started with login verification (Twitter 2FA)
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James Training (with Rich Mogull) and Matt Speaking at BHUSA. Dave will be speaking at SC Congress Toronto and attending Black Hat, DEF CON, Secure Asia in Manila and Security Congress 2013. Matt and Wil will be at Blackhat/DEF CON and James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel.
    • In Closing
      1. Movie Review -- GoldenEye: The answer is always send a SPIKE
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: I can't say Z properly

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 29 May 14, 2013

    Episode 0x29 -- Not just CrO2, but now with Dolby

    Does anyone read show notes?

    So last week had a really annoying failure in the workflow that gets this podcast from a bad Skype conference call to your ears oh precious listener. In this case, it was the failure to apply the noise canceller magic. This means that if you downloaded the podcast from the time that it was posted until I overheard the Liquidmatrix Intern listening to the podcast, you got to hear all of the background noise from each recording. Including Wil's unfortunately loud Bermuda frogs. I can't promise that it won't happen again, mostly because so much of the production workflow is human-based and not automatically awesome like it could be. Sigh. I suppose all of those automation people can't be wrong. Or something.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. But there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Microsoft YouTube app DERP
      2. Bang with Friends Facebook glitch
      3. APPLE MULTIFACTOR FOR TEH CANADAZ!!!!!
      4. PayPal Exec vows to go thermonuclear on passwords.
      5. Data breach leads to lots of many
      6. Privacy Breach on Bloomberg’s Data Terminals
    • Breaches
      1. In Hours, Thieves Took $45 Million in A.T.M. Scheme (also covered by Ars) (and the krebs)
      2. Name.com got p0wned
    • SCADA / Cyber, cyber... etc
      1. The police need an app for that
    • DERP
      1. Saudi's tried to hire Moxie to spy on their citizens mobile app traffic
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Troy Hunt on Clickjacking
      2. Interesting note from David Seah on Procrastination.
      3. Mainframes can be hacked and backdoored
      4. Why certificate revocation doesn't work
      5. Cory Doctrow talking about freedom, society, computers and the internet
      6. Cmdr. Hadfield bids adieu to ISS with “Space Oddity” cover.
      7. Government subpoenas, obtains wide set of AP phone records in investigation
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James Training (with Rich Mogull) at BHUSA. Dave will be at Black Hat, DEF CON, Secure Asia. Matt and Wil will be at Blackhat/DEF CON and James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel.
    • In Closing
      1. Movie Review Big: All about authentication and authorization when biometrics won't work anymore.
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: This is ground control to Major Seacrest...

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 28 May 09, 2013

    Episode 0x28 -- For Reals... it's here.

    I SAID it's a weekly podcast

    Life gets in the way of art. There's five of us, we are operating from 3 time zones and several of us have a whole lot more than just one job, and then parenting duties as well. This negatively contributes to the possibility of getting all of us together at the same time for a recording. We're trying to figure out what to do about it. It may be that we go for more frequent recordings of whomever is available and stuff together the rest of us when we can. Sigh. Or something.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. There will be a DEEP DIVE
    7. But there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Stonesoft bought by McAfee/Intel
      2. How I got here: Hoff
      3. Thotcon / BSidesChicago - Jericho says I did a good job
      4. Is the U.S. Government Recording and Saving All Domestic Telephone Calls?
      5. Systems manager arrested for hacking former employer's network
    • Breaches
      1. Study: Utah Health Breach Could Approach $406M
      2. The Onion Hacked by Syrians and the Onion responds
      3. 1 million dollars (Kreb's said "cyberheist" drink!)
    • SCADA / Cyber, cyber... etc
      1. Many MANY sources: Your inability to understand Google Earth is entertaining
    • DERP
      1. This time, the DERP is on us. With five schedules spread across 3 time zones and about 12 different jobs (not including parenting)... the Liquidmatrix Crew takes the DERP of the week. We promise we will attempt to get back on ye olde horse. Although it may be in the form of us no longer trying to have all hands on deck. What say you dear listener?
      2. Hide a bitcoin miner in your code
      3. vendor just called me, offered "a great solution for cyber defense by securing end points using DoD standards" #salesFail
    • Mailbag / Bizarro Land

      1. Hey,

        I'm stupid busy at work. Can't keep up. People know where I sit. The email. The phone calls. I'm trying to use the damn bathroom now. Please help?

        SRSLYBizzay Secpro

    • DEEP DIVING - Productivity In The Security Hotseat
      1. Interupt driven lifestyle for the win?
      2. Rage Quit
      3. Plan to be interupted - get in earlier or stay later than most of your co-workers
      4. Use a trick to determine how much productive time you have (Carmack and his CD player)
      5. Arrange a "cover" for the day
      6. Emergent Time Planner & Task Order Up
      7. kanban
      8. Trello (free)
      9. Lean Kit (not Free)
      10. Atlassian (jira) Greenhopper ($)
      11. Time Management for System Administrators
      12. Trusted Systems
      13. "Heroes are Zeroes" - Identify and Manage
      14. Failure to document makes you a team liability
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Notch says practice your typing skills
      2. Cyber Observable Expression from MITRE
      3. OpenBSD 5.3 Released.
      4. Teacher 'powerless' to stop ex-girlfriend's cyberstalking
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James Training (with Rich Mogull) at BHUSA. Dave will be at Black Hat, DEF CON (AMFYOYO), Secure Asia. Matt and Wil will be at Blackhat/DEF CON and James, Ben and Dave will be joined by Mike Rothman for SecTor 2013's return of the (canadian) fail panel.
    • In Closing
      1. Movie Review Terminator 2: All your PINs belong in my Atari handheld HSM
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: She sells sea shells on the sea shore.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 27 Apr 11, 2013

    Episode 0x27 -- Wednesday is the new Monday

    It's the podcast that never ends

    We've collected up something like 4 times more stories than we can use. We need to find a sponsor who will pay us to do this twice a week. Anyone got some money they're not using?

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. There will be no DEEP DIVE -- our SCUBA gear is in the shop
    7. But there are weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Kim Jong Un needs a snickers!!!
      2. Linksys Routers Screwed
      3. Bitcoin dDoS destroy world economy... nah (also bitcoin social engineering) (and skype bitcoin mining malware bot)
      4. Security BSides - Rochester
      5. Windows XP Security Updates ending in one year IE6 Countdown Windows XP still maintains 39% overall market share.
      6. Secrets of FBI Smartphone Surveillance Tool Revealed in Court Fight.
      7. DEA Accused Of Leaking Misleading Info Falsely Implying That It Can't Read Apple iMessages
    • Breaches
      1. Vudu resets user passwords after hard drives lost in office burglary
    • SCADA / Cyber, cyber... etc
      1. NIST CyberSecurity Framework Recordings
      2. Anonymous hacks DPRNK Twitter and Flickr
      3. Anonymous launches massive cyber assault on Israel Israel says: "Anonymous doesn't have the skills to damage the country's vital infrastructure" And fixes things up so that Anonymous' C&C plays "Hatikvah"
      4. USAF designates some of their software as CYBERWEAPONS
      5. Apparently there are CYBER-WEAPONS in the Korean Conflict
      6. Fast-Talking Computer Hacker Just Has To Break Through Encryption Shield Before Uploading Nano-Virus
    • DERP
      1. Papa, m'entends tu?
      2. French Government discovers Streisand Effect on Wikipedia (without actually looking up) The Streisand Effect
      3. Interesting to note: The Wikipedia article on The Streisand Effect DOES link to the communication from WIkimedia Foundation.
      4. IRS Doesn’t Deny Snooping Emails Without A Warrant
      5. Dongle-gate - this makes it so much clearer
    • Mailbag / Bizarro Land

      1. Subject:OMG, Arlen was right...

        I thought Jamie was just whining about how bad Blackboard is, but now that I have to use it... IT SUUUUUUCKS. It feels like an application that was rather forward thinking for its time, assuming it was built in 1997!

        I take it back. Anything coded in 1997 would be faster than Blackboard is today.

        Would it be wrong of me to try to find flaws in this thing, to try to get them to make it less... suck?

        Thanks,-Jim

    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Deutsche Telecom SOC big board
      2. Ingress - check it out
      3. Non-SSL active content on SSL pages is blocked by default in FireFox 18
      4. Montreal police arrest a 20 year old woman after she posts a photo of graffiti to her instagram feed
      5. The ATF Wants ‘Massive’ Online Database to Find Out Who Your Friends Are
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- You've asked when and where - that'd be "We don't know yet" and "The week of Blackhat/BSides/DEFCON". You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe (including European Security Bloggers Meetup), Black Hat, DEF CON, Secure Asia. Matt speaking at Adelphi University Cyber Security Educational Panel.
    • In Closing
      1. Movie Review Die Hard 4 - It's a blast. Seriously. Quick, there's a fire sale.
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: I have no mouth with which to scream

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 26 Apr 02, 2013

    Episode 0x26 -- The First Rule...

    Ministry of Information Bulletin: Liquidmatrix is a weekly podcast.

    While we'd like to be able to say that the Ministry of Information is always correct, that would not necessarily be the case. The past few weeks of Infosec have certainly been interesting. The echo chamber is at an all time echo stratosphere and the daily slog of infosec professionals remains at an all time crappiness. Anyone want to join our "Infosec Anonymous" program? Perhaps we should go with a different name: searching "infosec anonymous" gives me about 210,000 results.

    1. Upcoming this week...
    2. Lots of News
    3. SCADA / Cyber, cyber... etc.
    4. finishing it off with DERPs/Mailbag and
    5. THE DEEP DIVE
    6. Our new weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. To hack back or to not hack back The Grugg on Opsec for Hackers (how not get p0wned while p0wning)
      2. The dDoS to end all dDosssses that almost broke the ENTIRE internet, then again maybe not, but maybe sorta it did
      3. Uptime = 16 years = AWESOME. Feature parity with Netware 16 years later = STILL CAN'T HAVE IT.
      4. FBI Pursuing Real-Time Gmail Spying Powers as “Top Priority” for 2013
    • SCADA / Cyber, cyber... etc
      1. DHS Warns of ‘TDos’ Extortion Attacks on Public Emergency Networks
      2. FERC U MAD BRO ???? (PDF)
      3. Cyber Divers take Egypt offline (except it might have been a ship's anchor)
      4. First time that it looks like actual details were stolen
      5. The Reality of Attribution about Cyber Attacks
      6. Cyber Security: The Digital Arms Trade
      7. Cyber RFI for the Space Race
      8. Fukushima Cooling Knocked Offline By... a Rat... that ended badly
    • DERP
      1. Security hole allows anyone to reset an Apple ID with email and DOB
    • Mailbag / Bizarro Land

      1. My official statement of begging for getting onto the Vegas party list. Thank you for your consideration.

        Kris

      2. Hello!

        Any chance I can get a couple of tickets to the party? I'm an infosec "professional" from Vancouver BC. I've met some of you guys at various cons, Hope, Defcon, Derbycon.

        thanks! Kevin

    • The Deep Dive - Security Awareness Training
      1. Is Bruce ALWAYS right?
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Is OwnCloud Good Enough?
      2. Monitoring for humans
      3. Pimp myself - Top 10 Web Hacks
      4. Attempted child abduction thwarted when girl asks stranger for code word
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- We threatened more news. There will be passes distributed. You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, BSidesRochester and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
    • In Closing
      1. Movie Review: Wargames
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: "I kinda really wanted to jump in and slam him!"

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 25 Mar 22, 2013

    Episode 0x25 -- The one with ALL the cybers

    We're not sure why this keeps happening.

    As is the new normal around here, we've spent more time arguing about the show instead of actually doing the show. Add to that Dave's issues with (a)using a computer, and (b)having a decent ISP. It took a whole lot of goofing about to get this episode into the realm of "listenable". But hey, it's done now. Enjoy!

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. THE DEEP DIVE
    7. Our new weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Krebs gets whacked And does some digging
      2. Forbes magazine internet thingy talks about cracking crypto (so does Sophos) (and a lawsuit on the use of RC4 - so another reason to stop using it)
      3. Hacked retailers up in arms over $13 million 'fine', Visa lands up in court
      4. It's Kali Time
      5. MCMC probes The Malaysian Insider over spyware story
    • The Breach Report
      1. Second Factor FTW
      2. Philippines National Telecom Commission Defaced by Anon
      3. CCTV hack wins gamblers $33*10^6 (cue Ocean's 11/12/13)
    • SCADA / Cyber, cyber... etc
      1. You Say: Cyber. I Say: Unsubscribe
      2. North Korea restores Internet access, blames US hackers
      3. Queensland police to use surveillance drones to combat crime ahead of G20 conference
      4. Federal Judge Finds National Security Letters Unconstitutional, Bans Them
      5. NERC 2012 Annual Report (pdf)
      6. Medical device hacking: The 6 lines of code that could bring down a hospital
      7. US Cyber Command Admits Offensive Cyberwarfare Capabilities, Fundamental Shift In US Doctrine
      8. U.S. Demands China Crack Down on Cyberattacks
      9. Who’s Really Attacking Your ICS Devices?
    • DERP
      1. EC-Council goes off the deep end
    • Mailbag / Bizarro Land
      1. Question:

        Anyway, anyway, guys guys guys, come on. I'm in this computer, right. So I'm looking around, looking around, you know, throwing commands at it, I don't know where it is or what it does or anything. It's like, it's like choice, it's just beautiful, okay. Like four hours I'm just messing around in there. Finally I figure out, that it's a bank. Right, okay wait, okay, so it's a bank. So, this morning, I look in the paper, some cash machine in like Bumsville Idaho, spits out seven hundred dollars into the middle of the street.

        That was me. That was me. I did that.

      2. Answer:

        What are you, stoned or stupid? You don't hack a bank across state lines from your house, you'll get nailed by the FBI. Where are your brains, in your ass? Don't you know anything?

    • The Deep Dive - Security Research and the Law
      1. Internet troll “weev” sentenced to 41 months for AT&T/iPad hack.
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. The Matrix in less than 600 bytes of JavaScript
      2. Branching breach impact model
      3. Top 10 Web Hacks of 2012 Webinar (Matt is hosting it with Jeremiah Grossman)
      4. Hackers play Space Invaders on Belgrade billboard, get rewarded with iPads.
      5. Microsoft to push Windows 7 Service Pack 1 to users starting March 19
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- We threatened more news. There will be passes distributed. You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, BSidesRochester and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
    • In Closing
      1. Movie Review Hackers
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: Dave says "screw you Cogeco"

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 24 Mar 12, 2013

    Episode 0x24 -- The Robot Uprising

    You'd think those worthless meatbag humans would be more respectful.

    It looks like we will have a limited incidence of Robots in tonights episode. Of course, nothing in life can be ACTUALLY robot free. That's just silly talk. Also, pro-tip: make grilled cheese sandwiches in the George Foreman after making steak - better than butter.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. THE DEEP DIVE
    7. Our new weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Pwn2Own: IE, Firefox, Chrome and Java go down ...and Adobe Flash, Reader and Oracle Java exploits Chrome hack details (threat post link) Thanks Ben!
      2. Indian .gov puts bounty on botnet takedown
      3. China's internet backbone will have security features (also censorship) (SAVA)
      4. How Facebook Prepared to Be Hacked
      5. Having the MD5 hash of "123456" is probably not the best way to store passwords in your publicly searchable code on github... /via Thierry Zoller. (also don't put your twitter oauth keys in github)
      6. International Womens' Day - Don't forget Admiral Grace
      7. Freeze All The Robots: Put Android ICS in the freezer to break crypto
      8. Harvard sneaks through 16 Deans' email
      9. Deja vote: Iran blocks VPN use ahead of elections
    • The Breach Report
      1. Another bitcoin exchange gets p0wned
      2. Ausie Ausie Ausia Bank Oy Oy Oy (Reserve Bank of Australia gets infected, then found out)
      3. Pakistan .gov gets hacked
    • SCADA / Cyber, cyber... etc
      1. Metasploit releases exploit module for Honeywell ICS that has a patch available
      2. Formal Paper (pdf) from Ralph Langner Bound to Fail: Why Cyber Security Risk Cannot Be "Managed" Away
      3. US Military Advisory Panel Says Nuke a Cyber Attacker
      4. Reasons to depend on Kaspersky for ICS/SCADA operating systems -- EXCELLENT IPv6 STACKS
      5. BP Fights Off Up to 50,000 Cyber-Attacks a Day: CEO
      6. Cyberwar: you lack imagination
    • DERP
      1. TELUS releases qualitive security survey (pdf link) - completely ignores science, math and proper research
      2. Survival of the fittest: Some data-breach victims can't be helped - but they enjoy reacharounds
      3. China points at USA and cries "you're stinky and mean"
    • Mailbag / Bizarro Land

      1. Dear Dudes of the Liquid

        I found a vuln when I was browsing a company's website with w3af? Should I report it?

        Yimmy, Warsaw

    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. From Space Rogue - The Infinite Daft Loop - productivity in a can
      2. Play Donkey Kong as the Princess
      3. Browser sec
      4. Tripwire aquires nCircle
      5. Click to play!!!!
      6. Microsoft preps UPDATE EVERYTHING patch batch
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- We threatened more news. There will be passes distributed. You can beg your way onto the list by sending an email to vegas2013party@liquidmatrix.org.
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early. Email your submission to bsideslv2013@liquidmatrix.org

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, BSidesRochester and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
    • In Closing
      1. Movie Review Moon (it's all about clones - BTW spoiler alert)
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee! And Liquidmatrix_5 for 5% off a course
      4. Seacrest Says: "Here's to a hoopy frood who really knew where his towel was." RIP Douglas Adams

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 23 Mar 07, 2013

    Episode 0x23 -- Post RSA Actual News

    Recovery takes time. There has not been enough time.

    There's really not anything significant to note off the top. There's much going on in the world of infosec. I wish that it weren't as true, but even with the wildness of RSA, the cybers never sleep.

    You might want to stay until the end of the show to hear about a CONTEST and something even cooler...

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. THE DEEP DIVE
    7. Our new weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Miniduke is older than we thought (Miniduke tells time in China)
      2. Cloudflare dDoS post mortem
      3. Google services should not require real names: Vint Cerf
      4. Oracle Issues Emergency Java Update
      5. Wireless brain sensor pack. Future - here we come!
      6. The Lightning Digital AV Adapter Surprise
      7. When will we trust robots?
    • The Breach Report
      1. Evernote Security Notice: Service-wide Password Reset Evernote hacked: Emails, encrypted passwords stolen But it's ok, there will be 2 factor auth someday Critics say Evernote breach was avoidable.
      2. Envelopes mailed to 26k retired government employees in N.C. exposes SSNs
      3. Encrypted laptop, casino reports belonging to federal agency stolen from rental car in Calgary
      4. City of Owen Sound websites offline due to porn hack
    • SCADA / Cyber, cyber... etc
      1. Information Assurance Certification Review Board: Certified SCADA Security Architect (CSSA)
      2. NEWS TO NO ONE: SANS SCADA and Process Control Security Survey - the state of the industry is discouraging
      3. Recent 10-Ks mentioning "cyber" incidents
      4. Canadian Anti-hacking agency slow to learn about Chinese cyberattack
      5. Symantec: work on Stuxnet worm started two years earlier than first thought
      6. SCADA 'Sandbox' Tests Real-World Impact Of Cyberattacks On Critical Infrastructure
    • DERP
      1. Jailed hacker allowed into IT class, hacks prison computers
      2. Nearly Every NYC Crime Involves Cyber, Says Manhattan DA
    • Mailbag / Bizarro Land

      1. Dearest Son,

        Why do you people always talk about "the echo chamber"? What is the echo chamber for?

        Love, Mom

    • Deep Dive -
      1. Government Malware! discuss (Finfisher, Hacking Team)Zero Day Doc
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Recon 2013 CFP opened
      2. APT 1 goes back years
      3. There's a vuln in sudo (yes, that sudo)
      4. Quick and dirty pcap slicing with tshark and friends
    • Liquidmatrix Staff Projects
      1. The Liquidmatrix Vegas Party- More news to follow
      2. The BSidesLV Ticket Give-away-

        Three tickets up for grabs:

        • best original piece of artwork incorporating a security rock star; bonus points for using a unicorn
        • best rap song about a major breach
        • best poem describing a vendor DERP

        Judging will be done by The Liquidmatrix Intern. Mocking will be done by us. I'd suggest you start buying a vote early.

      3. The Security Conference Library
      4. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      5. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      6. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, BSidesRochester and Training (with Rich Mogull) at BHUSA. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
    • In Closing
      1. RIP Stompin' Tom We'll leave a light on.
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee!
      4. Seacrest Says: I'm drinking beer at HouSec bitches!

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 22 Mar 04, 2013

    Episode 0x22 -- RSA is almost over...

    Yes, we all survived, but RSAConflu hurts

    So, 4/5th of Liquidmatrix is hanging out at RSAC this week. And we are really tired and would like to go home. Voices are pretty blown so we apologize for channeling Mike Rothman. It's been an exciting week and… well… thank goodness it's over.

    1. For this week's special episode...
    2. Stupid Vendor tricks
    3. BSidesSF + harrassment
    4. Buzzword Bingo
    5. Speed Dating
    6. We Lost
    7. I've got 99 problems and Rich ain't one
    8. Brian "CyberPotato" Honan

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • No Notes due to SPECIAL REASONS
    • Liquidmatrix Staff Projects
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      4. Upcoming Appearances: James speaking at Thotcon, BSidesChicago, BSidesRochester and secret coolness for Hacker Summer Camp in Vegas. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
    • In Closing
      1. Movie Review: No Review
      2. everyday is CTF! go set up a team
      3. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee!
      4. Seacrest Says: I came for the booth babes and stayed for the bacon licking.

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 21 Feb 21, 2013

    Episode 0x21 -- In which we prepare for RSA

    Are you ready for RSA? Packed 500 business cards and a spare liver?

    There's oh so much to talk about. Things we need to talk about, things we really want to not talk about, things you don't want to hear about.

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. THE DEEP DIVE
    7. Our new weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Facebook unlikes being hacked (Ars Technica) (The Atlantic Wire) (NYT) (BH Consulting) (IBI Times) (Apple too) (watering hole located)
      2. Dutch MP fined for hacking medical system
      3. NASA makes an oopsy with its software update
      4. Kaspersky says "Trust us, we're good with software"
      5. McAfee responds to criticism of AV industry with OpsFail
      6. Telecom NZ cancels 60k Yahoo Xtra passwords amid attack
      7. Exclusive: The Burger King and Jeep Hacker Is Probably This DJ From New England
      8. Obama says share!!!
    • The Breach Report
      1. Mandiant. That is all.
      2. Burger King twitter gets hacked
    • SCADA / Cyber, cyber... etc
      1. Electricity Market 101 - SCADA isn't just about the electricity
      2. Turns out all that airgapping was just theoretical
      3. Cyber Medals for Cyber Warriors
    • DERP
      1. MTV fakes their twotter account being haxored
    • Mailbag / Bizarro Land

      1. Hi,

        I just wondered if the Liquid Matrix team would be interested in commenting on the subject of Digital Forensics with Infrastruture-as-a-Service Cloud environments?

        ....

        Adam Robson

        Answer from the team:

        No

    • Ben Rants
      1. Ben Loses His Mind. Also, would you like a cheap certificate?
    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. Securosis RSA Guide - 2013 Edition
      2. HDCP is dead, really
      3. Ronin
      4. Punk Spider - a searchable reference for web app vulns
      5. Magazine article on Chinese online takedown services gets taken down
      6. RoboPlow
      7. RoboSurgeon (warning - super gross - avoid)
    • Liquidmatrix Staff Projects
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      4. Upcoming Appearances: Ben, Matt James and Dave attending RSA. James and Dave speaking at RSA-e10+. James speaking at Thotcon, BSidesChicago, BSidesRochester and secret coolness for Hacker Summer Camp in Vegas. Dave will be at Secure Dusseldorf, Infosecurity Europe, Black Hat, DEF CON, Secure Asia
    • In Closing
      1. Come find us at RSA!
      2. Movie Review: Live Free or Die Hard (and you thought it was just a cyberwarfare training video)
      3. everyday is CTF! go set up a team
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee!
      5. Seacrest Says: Am I the only one that crapped my pants when I heard a meteor hit russia?

    Creative Commons license: BY-NC-SA

    Liquidmatrix Security Digest Podcast - Episode 20 Feb 13, 2013

    Episode 0x20 -- Can Dave count to 20?

    Special Bonus Episode!

    Since Dave (and a few select others) have problems with actually showing up to recordings, you'll be getting this episode about one day after the much maligned and completely screwed up Episode 0x1F. We are attempting to get back on track and do things the way they should be done. Or something like that. Also, Shmoocon!

    1. Upcoming this week...
    2. Lots of News
    3. Breaches
    4. SCADA / Cyber, cyber... etc.
    5. finishing it off with DERPs/Mailbag and
    6. THE DEEP DIVE
    7. Our new weekly Briefs - no arguing or discussion allowed

    And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out.

    DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work.

    ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good.

    In this episode:

    • News and Commentary
      1. Password Dump stats for January 2013 and December for those curious
      2. LA Post serving Black Holes
      3. WaPo - ‘Fragmentation’ leaves Android phones vulnerable to hackers (some info on malware p0wnage)
      4. NIST 800-53 Rev4 is in Draft read it, comment on it.
      5. DHS declares 100 mile "4th Amendment Free" zone adjacent to US border
      6. Kaspersky update hoses Internet access for Windows XP users.
      7. Canadian Business Groups Lobby For Right To Install Spyware on Your Computer.
      8. The Everyday Agony of the Password
      9. Audacious Hack Exposes Bush Family Pix, E-Mail
    • The Breach Report
      1. Bit9h got hacked!!!!
    • SCADA / Cyber, cyber... etc
      1. Cyber Lobbists
      2. SCADA for the home players - turn the Belkin Wemo into a deathtrap
    • Mailbag / Bizarro Land

      1. Hi LSD crew...just finished 0x1E again and again, well done! Many thanks.

        I am missing a bit the "central topic" what you had in earlier ones. What I mean is like in episode 0x14 about "Hardcore – Recovering from the Disaster you didn’t plan for" or "hiring". This was really interesting and gave some good insight. I understand quite a number of things are "common sense", but still, unfortunately quite a number (of the other?) things are not "common practice" and I think these need to be communicated.

        Cheers guysThomas

    • Discussion - Keeping up with new technical developments

      1. Because Thomas is a good guy, and he actually sent us an entire book of ideas, we're going to use one of them. Keeping up with new technical developments such as RFC 6797 HSTS and how to manage that along with everything else you're supposed to be doing as an information security professional. (Cue Dave talking about the value of CPEs in 3... 2... 1...)

    • Briefly - NO ARGUING OR DISCUSSION ALLOWED
      1. If you permit USB keyboards or mice, you're permitting exfiltration
      2. Log stash book!!!
      3. Payment Card Industry clears up confusion over cloud use.
      4. Dave was on TV. He has many monitors. He is an Internet Security Expert. (fortunately he's not a social media expert)
      5. Not done yet: Oracle to ship revised Java fix on February 19
      6. Jeremiah Grossman's Self Pwnage
      7. Another RoR SQLi vuln
    • Liquidmatrix Staff Projects
      1. The Security Conference Library
      2. Contribute to the Strategic Defense Execution Standard (#SDES) and you'll be Doing Infosec Right in no time.
      3. If you're interested in helping out with openCERT.ca, drop a line to info@openCERT.ca
      4. Upcoming Appearances: James and Dave at RSA e10+, also attending Shmoocon but not speaking, James speaking at Thotcon and Dave will be at RSA, AltSecCon, Secure Dusseldorf, Infosecurity Europe, Black Hat, Defcon, Secure Asia
    • In Closing
      1. We're thinking about doing a live podcast with audience participation - drop us a tweet or a line if you're interested
      2. Movie Review
      3. everyday is CTF! go set up a team
      4. Signing up for a SANS course? Be sure to use the code "Liquidmatrix_150" and save $150 off the course fee!
      5. Seacrest Says: Seacrest Likes Vicodin. SRLSY (but who doesn't - yummy yummy vicodin.... tasty)

    Creative Commons license: BY-NC-SA

      Related Podcasts

      Neurotech Podcast

      1

      Neurotech Podcast News
      This Week In Voice

      2

      This Week In Voice News
      The Brooke Ashley

      3

      The Brooke Ashley Entertainment News
      School’s Over…Now What?

      4

      School’s Over…Now What? Business
      The Virginia Truth – Johnny Depp v Amber Heard

      5

      The Virginia Truth – Johnny Depp v Amber Heard Entertainment News
      Cane & Corey

      6

      Cane & Corey Entertainment News
      footer-logo

      Contact Us

      Toll Free: 844-670-7747

      Links

      • Home
      • Top Charts
      • Networks
      • Apps
      • Independents Podcasts
      • Podcast Advertising
      • Podcast News
      • Contact Us
      • About Us
      • Analytics & Insights

      Stay Connected

        Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights