Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 247: Uber Breach Unpacked Oct 13, 2022

Show notes

A recent high-profile breach of Uber's systems led to widespread data loss. Join our experts as we unpack the specifics of how this attack came about.

Root Causes 246: Google Chrome Root Program Announced Oct 03, 2022

Show notes

Google Chrome recently announced the formation of its trusted root program. It may be surprising to learn that the world's most popular browser has existed for more than a decade without its own root program. In this episode we explain why that is the case, why Chrome is launching a root program now, and the implications of this announcement.

Root Causes 245: One Time Passcode as a Liability Sep 29, 2022

Show notes

A recent article from Brian Krebs advances the idea that using OTP MFA may actually be a liability to security. In this episode we explain the reasoning behind this characterization.

Root Causes 244: PwC Survey Reports Cyber Security as Biggest Risk to Companies Sep 26, 2022

Show notes

A recent survey from PwC reports that cyber threats are no longer solely the domain on the CISO but instead have become every senior executive's concern. We dive deep into these survey results and talk about they correlate with our own experiences, IT skills gaps, and feeding the podcasting beast.

Root Causes 243: Which Came First, the BRs or the EVGs? Sep 20, 2022

Show notes

Many people don't realize that the CA/Browser Forum's Baseline Requirements actually came LATER THAN the Extended Validation Guidelines. In this episode we explain how this seemly backward turn of events came about and what it says about how online trust has evolved over the past few decades.

Root Causes 242: Let's Encrypt Founder Peter Eckersley Passes Sep 16, 2022

Show notes

Electronic Frontier Foundation member and Let's Encrypt co-founder Peter Eckersley passed away recently at a young age. In this episode we pay respect to Peter's memory and his many contributions, including ACME, Certbot, and Let's Encrypt.

Root Causes 241: Is China Outspending the West in Quantum Computing? Sep 12, 2022

Show notes

A December 2021 report appears to indicate that China as vastly outspending Western countries in quantum computing. In this episode we examine this claim, including the role of private industry as opposed to government funding, the importance of international cooperation, and the vast implications of winning the race for quantum computing.

Root Causes 240: Hyundai Production Private Key Found in How-to Manual Sep 06, 2022

Show notes

A white hat researcher recently defeated a production automobile's PKI by searching for the private key on Google. Join us as we describe the implementation error making this possible and how it might have come about.

Root Causes 239: Post-quantum Cryptography Candidate SIKE Defeated Aug 28, 2022

Show notes

NIST's round four post-quantum crypto candidate SIKE (Supersingular Isogeny Key Encapsulation) has been defeated and is now out of consideration. In this episode we explain isogeny cryptography, why NIST is seeking additional candidates, and why failures of this kind are expected and healthy for PQC.

Root Causes 238: Tim's Big Phishing Adventure Aug 15, 2022

Show notes

In a personally unprecedented occurrence, Tim's identity as a Sectigo executive is being used in a "waterholing" phishing scam intended to raid job seekers' bank accounts. We describe what is going on, how we found out, and the challenges in combatting such an attack.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected