Security In Five

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

OWASP Number 8 - Cross Site Forgery Requests

TuneIn Radio -

Episode 125 - OWASP Top 10 - A8 - Cross Site Request Forgery Dec 05, 2017

Show notes

The OWASP Top 10 series continues on to number 8, Cross Site Script Forgery. This vulnerability is about how applications take input and requests and about how they could be forged to be sent elsewhere. Verify the calls or randomize the code to help avoid this hole. This episode breaks it down.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 124 - The Apple Security Failure Shows Us To Stay Up To Date On Patches Dec 04, 2017

Show notes

Apple released a new version/upgrade to their operating system called High Sierra. In addition to all the new features they accidentally removed the password from the 'root' account. Anyone could get full administrative rights to any Mac without entering a password. Whoopsie. This episode goes into the event and why we need to stay on top of updates and patches.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 123 - Tools, Tips and Tricks - Malwarebytes Dec 01, 2017

Show notes

The starting point for any malware scan is a tool called Malwarebytes. This episode goes into the reason why I always start with Malwarebytes on machines that are infected or start to behave oddly. It easy, it free, it works and that's why Malwarebytes is this week's TTT episode topic.

***

All my TTT episodes are not sponsored. These are 100% my opinion and in no way motivated because I am compensated or asked.

***

Malwarebytes website - https://www.malwarebytes.com/

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 122 - Top 10 Security Tips For Your Network - 5 - Encrypt Your Data Nov 30, 2017

Show notes

The Top 10 Security Tips For Your Network continues with number 5, Encrypt Your Data. Encryption is the knee jerk response to any security even by the public. Encryption is not the sole answer to everything and there are many aspects of it you need to be aware of before you deploy it. This episode goes into the pros and things to watch out for when you encrypt and why you should in most cases.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 121 - Personal Security Tips For Holiday Shopping Nov 29, 2017

Show notes

The holiday season is upon us and that means more trips to the stores and more purchases online. This also means the bad guys are increasing their patrols to steal, defraud and get your data. This episode lays out tips that you can can to strengthen your security when you are out shopping in a store or online. How to avoid crimes of opportunity and keep your property safe.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

OWASP A7 - Missing Function Level Access Control

TuneIn Radio -

Episode 120 - OWASP Top 10 - A7 - Missing Function Level Access Control Nov 28, 2017

Show notes

The OWASP Top 10 series continues and we're up to number 7. This one is called Missing Function Level Access Control and talk about protecting the inner functions of an application from being called by the approved users. Just because a user logged in doesn't mean they can call any function in the application they want. his episode breaks this control down.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 119 - Uber Was Hacked And Covered It Up For A Year, Scary Nov 27, 2017

Show notes

Uber was the recent hack that was made public. 57 million records of riders and drivers. The data stolen for the riders was name and email, no passwords, payment info or locations. The drivers had more sensitive data stolen that included their driver's license numbers.

Instead of notifying the proper authorities and public releases, they paid the hackers $100,000 to delete the data, allegedly, and keep it quiet. This is a scary approach. 57 million people's data was in the hands of a criminal and it was covered up. This episode goes into the dangerous slippery slope of handling breaches this way.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 118 - Tools, Tips and Tricks - WinDirStat, Disk Space Manager Nov 24, 2017

Show notes

Hard drive space is becoming a problem again with the ever increasing mobile devices. Why? We need a place to back them up. All those photos, videos and app fit on your phone but on your PC space can be a problem.

WinDirStat for Windows and Disk Inventory X for Mac helps you get control of your hard drive space. You can easily see what is taking up the most space and help you quickly manage and delete unwanted files from PCs and external hard drives. You can also use it to manage your cloud drives like Dropbox, Box, OneDrive and so on if they are installed as folders on your PC.

Here is a blog post I wrote about these tools to help you step through the use - https://binaryblogger.com/2016/05/23/using-windirstat-manage-cloud-drive-space/

Download Links -

WinDirStat For Windows - https://windirstat.net/

Disk Inventory X For MacOS - http://www.derlien.com/

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2

TuneIn Radio -

Episode 117 - Top 10 Security Tips For Your Network - 4 - Cyber Rules For Your Employees Nov 22, 2017

Show notes

Continuing with the Top 10 Security Tips For Your Network mini-series we are up to number four. This tips talk about creating cyber rules for your employees. How you need to set the expectations of use and more importantly communicating the 'why' the rules and guidelines are in place. Awareness is power.

Be aware, be safe.

------------------------------------

Twitter @binaryblogger - https://www.twitter.com/binaryblogger

iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2