Special Security Geek Edition: Interview with Marsh Ray, Discoverer of SSL Flaw

For Thursday November 5th, we depart from our regular format for those with an advanced understanding of information security technologies. This episode is a one-topic special edition, providing coverage of a major man-in-the-middle flaw discovered in the SSL protocol (see, we told you it was for security geeks).

We will return to our regular format of the latest news on data security, privacy, and the law with Episode 78.  Episode 78 is scheduled to post Sunday night /Monday morning, November 8th, 2009 at ~12.01am Greenwich Mean Time. That is our regularly scheduled show posting time.

On Episode 77:  Conversation with Marsh Ray, discoverer of the new SSL flaw

–> Stream This Special Episode Show with our Built-In Flash Player:

–> Scroll down to see links and show notes for this week’s show

–> Stream, subscribe or download Episode 77 – Listen or subscribe to the feed to automatically get the latest episode sent to you to your Google, Yahoo, iTunes, or other popular sites.

–>Tune into the show directly on iTunes, you can also subscribe to the program on iTunes.

–> A simple way to listen to the show from with stricter firewalls: Listen from Odeo. This site works better if you are behind a more restrictive enterprise firewall.

Please visit our sponsors, and be sure to let them know you heard about them on The Data Security Podcast:

  • Vipre Anti-Virus, the complete Antimalware solution by Sunbelt Software. If you TRY the enterprise version, you get the home version forFREE! Go to: http://www.testdrivevipre.com .
  • GamaSec Web App Scans: Spots cyber-hazards on your web site, and has advanced zero-day protection. GET YOUR FREE BASIC WEB APP SCAN, plus a special offer just for listeners to The Data Security Podcast. Go here to sign up, and add the offer code: Podcast.
  • SonicWall;  Get the super fast UTM firewall that’s rated Five Stars (the Best rating) by Secure Computing MagazineData Clone Labs is the premier SonicWall Medallion Partner for all your security needs.
  • DeviceLock; Software that controls, manages and helps encrypt USB drives and other removable media. Get a free trial on their site, and be sure to let them know you heard about them on The Data Security Podcast.

Show Notes for Episode 77 of the Data Security Podcast

Breaking news with an extended interview with Marsh Ray,  Senior Software Developer and Engineer with multi-factor security company PhoneFactor.

SSL lock engaged, but is the connection secure?

SSL lock engaged, but is the connection secure?

Marsh Ray discovered a major security flaw in the SSL protocol.   SSL is the most widely used encryption protocol on the internet.

Marsh Ray keeps a blog at extendedsubset.com.  He works for PhoneFactor, where you can read more about this vulnerability in SSL.

2 Responses to “Special Security Geek Edition: Interview with Marsh Ray, Discoverer of SSL Flaw”

  1. […] to an interview featuring Marsh Ray (one of the […]

  2. leanne (smart) diedricks Says:

    I was a bride’s maid in Marsh and Addey’s wedding many years ago. I was proud of them then and I am proud now. What an incredible discovery! I can’t even fathom the intellegence of his find. All I can say is WOW.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: