Jan 24, 2012, Episode 245

datasecurityblog — Tue, 24 Jan 2012 21:13:37 +0000

Episode 245 of The CyberJungle is about 27 minutes long. You can hear it by clicking on the flash player below. The interview with Mr. Tantry CEO of FoxTechnology on server protection after the Zappos Breach starts at about 15min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 245 via the flash player:

Interview

Subhash Tantry, CEO of FoxT on server access security in the wake of the Zappos Breach. More of the FoxT ServerControl app mentioned in the interview can be found here.

Tales From The Dark Web

Why malware, keylogging, webcams and young women don’t mix: The Hacker (sic) is Watching, from GQ magazine

Our Take on This Weeks News

Ira Victor appeared on The Tom Sullivan TV program on Fox Business TV on January 21, 2011 about the InfoSec impact of SOPA/PIPA. Here is an excerpt from The Tom Sullivan nationally syndicated radio program.

Judge: Americans can be forced to decrypt their laptops. Read the coverage from Declan McCullagh at cnet.

Wrap

BBC Worldwide set to launch major new Doctor Who game: The Eternity Clock

January 17, 2011 – Episode 244

datasecurityblog — Tue, 17 Jan 2012 23:17:00 +0000

Episode 244 of The CyberJungle is about 30 minutes long. You can hear it by clicking on the flash player below. The interview with M1ster_E on the CyberMilitia begins at about 16min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 244 via the flash player:

Interview

M1ster_E on the CyberMilitia. Join this Reddit area to help fight members of the Dark Web

Our Take On This Week’s News

Zappos Breach Illustrate the Need for Stronger Password Rules

Malware stole City College of San Francisco data for years

Tales From The Dark Web

Spam Emails Link To QR Codes

Wrap

The Qualcomm Tricorder X PRIZE

Jan 10, 2012, Episode 243: InfoSec Coverage at CES2012

datasecurityblog — Tue, 10 Jan 2012 19:37:10 +0000

Episode 243 of The CyberJungle is about 31 minutes long. You can hear it by clicking on the flash player below. The interview with Mr. Nixon an engineer from OnStar begins at about 15min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 243 via the flash player:

Interview

Tim Nixon Executive Director for Infotainment and OnStar Engineering, talks data security and digital forensics from the floor of CES2012 in Las Vegas. The communications contact at OnStar is: Scott Fossguard, scott.fosgard (at) gm.com or phone him on 1-313-665-3142

Tales From The Dark Web

New attack uses AJAX to by-pass anti-malware

Our Take on This Weeks News

A new major flaw in consumer-grade WiFi routers. Read more on ArsTechnica, and LifeHacker

Stratfor breach might lead to leap-frog enterprise breaches . Matthijs R. Koot’s email forensic analysis of the pre-breach vs. fake vs. post breach authentic Stratfor email may be found here.

Did a California city order staff to commit spoliation?

Wrap

Shot in the arm for LinuxMint

December 19, 2011 – Episode 242

datasecurityblog — Mon, 19 Dec 2011 20:04:39 +0000

Episode 242 of The CyberJungle is about 25 minutes long. You can hear it by clicking on the flash player below. The interview with Sean Morrissey of Katana Forensics begins at about 13min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 242 via the flash player:

Interview

Sean Morrissey of Katana Forensics launches LaternLite iOS Forensics tool this week

Our Take On This Week’s News

Forensic innovator Jonathan Grier has developed tools that use statistical analysis of file access data to reconstruct timelines. According to Mr. Gerier, his method can be used to determine what, if data was exfiltrated from the system. Read more in: Detecting data theft using stochastic forensics.

Excellent work by c|net’s Elinor Mills on the software by CarrierIQ that some have labeled as an illegal “root kit.” Read: Sprint disabling Carrier IQ on phones.

Tales From The Dark Web

Passwords hard coded into industrial control systems – What could possibly go wrong?

Wrap

New job opportunity for those with Photoshop forensics skills? US watchdog bans photoshopping in cosmetics ads. Wow, and I thought all those models had perfect faces and perfect bodies all of the time…

December 12, 2011 – Episode 241

datasecurityblog — Mon, 12 Dec 2011 21:04:21 +0000

Episode 241 of The CyberJungle is about 27 minutes long. You can hear it by clicking on the flash player below. The interview begins at about 14min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 241 via the flash player:

Interview

New tracking intensive adware zeros in on facebook and google users. We talk with attorney Terry Ross of the law firm of Crowell and Moring about the potential legal fall-out. Here is the blog site mentioned in the interview.

Our Take On This Week’s News

The posting on Freelancer.com for the malware writer was removed by Freelancer.

December 2011 Patch Tuesday Preview by Qualys

Tales From The Dark Web

Were Subway sandwich customers that didn’t pay cash victims of a wide-spread point of sale attack?

Wrap

How one highly paid head hunter lost his head, and is his six figure job with an accidental email reply.

Dec 2, 2011, Episode 238: A blackeye for Download.com? Nmap developer Fyodor says site bundling malware with his security software

datasecurityblog — Tue, 06 Dec 2011 04:35:06 +0000

Episode 240 of The CyberJungle is about 37 minutes long. You can hear it by clicking on the flash player below. The first interview with Fyodor, creator of NMAP begins at about 6:45min. The second interview with Joe Weiss of Applied Control Software begins at about 20:00min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 240 via the flash player:

Tales From The Dark Web

A blackeye for Download.com? Nmap developer Fyodor says site bundling malware with his security software. By-pass download.com by getting Nmap here.

Our Take on This Weeks News (abbreviated due to a longer Tales From The Dark Web)

Security Research by Dan Rosenberg – CarrierIQ: The Real Story

Interview

Joe Wiess, Managing Partner with Applied Control Systems. Read his blog postings on the alleged SCADA services vendor breach at the ControlGlobal.com blog.

November 29, 2011 – Episode 239

datasecurityblog — Tue, 29 Nov 2011 16:14:28 +0000

Episode 239 of The CyberJungle is about 30 minutes long. You can hear it by clicking on the flash player below. The interview with Dr. Karen Paullet on being a cyber expert witness begins at about 13min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 239 via the flash player:

Interview

Dr. Karen Paullet on being a cyber expert witness

Our Take On This Week’s News

He Said She Said: The battle of the SCADA experts in water pump row

A new, low-cost way to find open wifi connections

How to keep your access point slightly more private

Tales From The Dark Web

Social Engineering used to catch a cybercriminal

Wrap

Pirated software hard drive as art?

November 15, 2011 – Episode 238

datasecurityblog — Tue, 15 Nov 2011 17:00:22 +0000

Episode 238 of The CyberJungle is about 21 minutes long. You can hear it by clicking on the flash player below. The first interview (with Sean Morrissey of Katana Forensics) begins at about 03min. The second interview (with Ryan Washington of AR-Forensics) begins at about 10min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 238 via the flash player:

We break from our normal programming schedule. The CyberJungle went to the Paraben Forensics Innovator’s Conference last week. We have special extended coverage with Ryan Washington of AR-Forensics, on so-called “anti-forensics” techniques. And, Sean Morrissey, CEO of Katana Forensics gives us his take on Apple’s moves against a well-respected security researcher.

October 7, 2011 – Episode 237

datasecurityblog — Mon, 07 Nov 2011 05:17:31 +0000

Episode 237 of The CyberJungle is about 36 minutes long. You can hear it by clicking on the flash player below. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 237 via the flash player:

We break with our normal programming schedule. With the release of the DefCon Social Engineering Report, we have special extended coverage with Chris Hadnagy of Social-Engineer.com.

Here is the link to the DefCon Social Engineering Report mentioned in this segment.

October 31, 2011 – Episode 236

datasecurityblog — Mon, 31 Oct 2011 15:39:12 +0000

Episode 236 of The CyberJungle is about 29 minutes long. You can hear it by clicking on the flash player below. The interview begins at about 13min. You may download the file directly – great for listening on many smartphones. Or, you may go to the listening options page and browse for other ways to hear the show.

To listen to Episode 236 via the flash player:

Interview

The author of Black Hawk Down, Mark Bowden. The CyberJungle talk about his new book, Worm: The First Digital World War.

Our Take On This Week’s News

Researchers find major security holes in the Amazon cloud. Read more at h-online.com .

Ubuntu Linux for ARM heads to smartphones/tablets. Read more at ZDnet

Tales From The Dark Web

Spam scams behind the mask of a legitimate looking network news site. Here is the link, but DO NOT go there on a non-high security system, there may be malware on this domain, as it appears to be controlled by spammer: http://www.news13i.com/ [Cut and paste at your own risk]

Wrap

John McCarthy, who some have called the Godfather of PKI, 1927-2011 . Read more at the MIT Press Log