Episode 371: They Never Learn

FromTechSNAP

Start listening View podcast show

Episode 371: They Never Learn

FromTechSNAP

ratings:

Length:

44 minutes

Released:

Jun 7, 2018

Format:

Podcast episode

Description

Microsoft puts a data center under the ocean, and they might be onto something. The Zip Slip vulnerability sneaks into your software, and VPNFilter turns out to be more complicated than first known.
Plus the mass exploit of Drupalgeddon2 continues, we break down why, a batch of questions, and more.

Released:

Jun 7, 2018

Format:

Podcast episode

Titles in the series (100)

Systems, Network, and Administration Podcast. Every two weeks TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a portion of the show to answer audience questions, discuss best practices, and solving your problems.

Skip carousel

Episode 191: Celebrity Bugs | TechSNAP 191: 2014 has been the year of the celebrity bugs, we take a look at the new trend of giving security vulnerabilities names & logos & ask who it truly benefits. Plus practical way to protect yourself from ATM Skimmers, how they work & much more! by TechSNAP
114 min listen
Episode 203: TurboHax | TechSNAP 203: Lenovo & Google are victims of DNS hijacking, we’ll share the details, Everyone wants you to secure your data, just not from them & how Turbotax profits from Cyber tax fraud! Plus a great batch of your questions, a fantastic round up & much, much more! by TechSNAP
107 min listen
Episode 210: SMBTrapped in Microsoft | TechSNAP 210: Researches find an 18 year old bug in Windows thats rather nasty, we’ve got the details. A new perspective on the bug bounty arms race & the security impact of Wifi on a plane. Plus great feedback, a bursting round up & much much more! by TechSNAP
84 min listen
Episode 193: Don’t Fire IT | TechSNAP 193: More and more data breaches are leading to blackmail but the stats don’t tell the whole story. We’ll explain. Plus the latest in the Sony hack, and the wider reaction. Plus a great batch of emails & much, much more! by TechSNAP
93 min listen
Episode 237: A Rip in NTP | TechSNAP 237: The OpenZFS summit just wrapped up and Allan shares the exciting new features coming to the file system, researchers warn about flaws in NTP & of course we've got some critical patches. Plus a great batch of questions, a rockin' round up & much more! by TechSNAP
126 min listen
Episode 192: Signed by Sony | TechSNAP 192: If we could rebuild the Internet from scratch, what would we change? It’s more than just a thought experiment. We’ll share the details about real world research being done today! Plus we dig through the Sony hack, answer a ton of great question & a rocki by TechSNAP
102 min listen
Episode 201: Group Problemcy | TechSNAP 201: A 20 year old design flaw in Windows has just been patched & it requires some major re-working of the software. Attackers compromise Forbes.com & why Facebook’s new ThreatExchange platform could be a great idea. by TechSNAP
94 min listen
Episode 230: Trojan Family Ties | TechSNAP 230: Rooting your Android device might be more dangerous than you realize, why the insurance industry will take over InfoSec & the NSA prepares for Quantum encryption. Plus some great questions, a fantastic roundup & more! by TechSNAP
70 min listen
Episode 194: Best Of TechSNAP 2014 | TechSNAP 194: We look back at this year in TechSNAP. Allan shares his war stories, TrueCrypt shuts down, Heartbleed happens & more! by TechSNAP
101 min listen
Episode 205: An Uber Mess | TechSNAP 205: Using encryption is a good thing, but its just the start, we’ll explain. Plus how one developer totally owned the Uber app. Then it’s a great batch of your questions & our answers! by TechSNAP
64 min listen
Episode 217: An Encryptioner's Conscience | TechSNAP 217: The sad state of SMTP encryption, a new huge round of flaws has been found in consumer routers & the reviews of Intel’s new Broadwell desktop processors are in! Plus some great questions, a huge round-up & much, much more! by TechSNAP
105 min listen
Episode 214: Venomous Floppy Legacy | TechSNAP 214: We explain the Venom vulnerability, what the impact is & the steps major providers are taking to protect themselves. Plus strategies to mitigate Cyber Intrusions, a truly genius spammer, great questions, a huge round up & more! by TechSNAP
110 min listen
Episode 196: Sony’s Hard Lessons | TechSNAP 196: We reflect on the lessons learned from the Sony Hack & discuss some of the tools used to own their network. Plus a overview of what makes up a filesystem, a run down of the Bacula backup system & much more! by TechSNAP
106 min listen
Episode 200: Your TechSNAP Story | TechSNAP 200: A new major security breach at a large health insurance firm could expose 10s of millions, a phone phishing scam anyone could fall for & we celebrate our 200th episode with your TechSNAP stories. Then its a storage spectacular Q&A & much, much more! by TechSNAP
99 min listen
Episode 228: Export Grade Vulnerabilities | TechSNAP 228: Lenovo & HP are caught injecting malware even after you format the drive, Ubiquiti Networks is socially engineered out of 46 million & are we entering the era of Security Research Prohibition? We debate. Plus your questions, the roundup & much, much more! by TechSNAP
72 min listen
Episode 226: Solving the Flash Plague | TechSNAP 226: Adobe is making changes to Flash to mitigate 0day exploits, with help from Google. Chrysler recalls 1.4M vehicles due to a software flaw, we go inside the “Business Club” cyber crime gang. Plus a great batch of questions, the roundup & more! by TechSNAP
84 min listen
Episode 197: Patch and Notify | TechSNAP 197: Been putting off that patch? This week we’ll cover how an out of date Joomla install led to a massive breach, Microsoft and Google spar over patch disclosures, picking the right security question & more! by TechSNAP
121 min listen
Episode 219: OPM Data too Valuable to Sell | TechSNAP 219: Kaspersky labs has been hacked, we’ll tell you why it looks like a nation state was the attacker, why OPM data is too valuable sell & the real situation with LastPass. Plus some great questions, our answers & a rocking round up. by TechSNAP
104 min listen
Episode 202: SuperFishy Mistake | TechSNAP 202: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections, we’ll break down how this is possible, the danger that still exists & more. Plus the story of a billion dollar cyber heist anyone could pull off, the Equation group & much more! by TechSNAP
72 min listen
Episode 199: Internet of Problems | TechSNAP 199: The internet of dangerous things is arriving but what about taking care of the devices we already have? Plus details on critical updates from Adobe, the surprising number of Gas Stations vulnerable to exploitation via the internet & much, much more! by TechSNAP
85 min listen
Episode 195: Cloudy With a Chance of SSL | TechSNAP 195: We go inside the epic takedown of SpamHaus, then we break down why CloudFlare’s Flexible SSL is the opposite of security. Followed by a great batch of questions, our answers & much much more! by TechSNAP
69 min listen
Episode 227: Oracle's EULAgy #oraclefanfic | TechSNAP 227: Oracle really doesn’t want you to reverse engineer their products but they may have just released the Kraken, we’ll explain. A massive drop of 35 fixes in one day, great feedback and follow up, a rockin roundup & much, much more! by TechSNAP
74 min listen
Episode 198: Dude Where's My Card? | TechSNAP 198: Adobe has a bad week, with exploits in the wild & no patch. We’ll share the details. Had your credit card stolen? We’ll tell you how. Plus the harsh reality for IT departments, a great batch of questions, our answers & much much more! by TechSNAP
105 min listen
Episode 204: Ghost of Crypto Past | TechSNAP 204: We’ll break down the technical baggage that led to the new FREAK SSL flaw & the security ramifications of top executives using personal email accounts… Plus why just need to stop hiding file extensions. Plus some great feedback & much, much more! by TechSNAP
98 min listen
Episode 222: ZFS does not prevent Stupidity | TechSNAP 222: From hacking to hacked, hacking team gets owned & what gets leaked is the best part, we’ll share the details. Plus, a new OpenSSL vulnerability revealed, Apple tweaks their two factor authentication.. Your questions, our answers & much much more! by TechSNAP
83 min listen
Episode 206: Two Factor Falsification | TechSNAP 206: Microsoft takes 4 years to fix a nasty bug, how to bypass 2 factor authentication in the popular ‘Authy’ app. Hijacking a domain with photoshop, hardware vs software RAID revisited, tons of great questions, our answers & much much more! by TechSNAP
100 min listen
Episode 208: Any Cert Will Do | TechSNAP 208: Why boring technology might be the better choice, Google revokes & China chokes, why you want to create an account at irs.gov before crooks do it for you. Plus your great IT questions, a rocking round up & much, much more! by TechSNAP
83 min listen
Episode 221: Ripping me a new Protocol | TechSNAP 221: Amazon has a new TLS implementation & the details look great, we’ll share them with you. The technology that powers the NSA’s XKEYSCORE you could have deployed yourself. Some fantastic questions, a big round up & much, much more! by TechSNAP
108 min listen
Episode 213: Blame as a Service | TechSNAP 213: Why a stolen healthcare record is harder to track than you might think, Security pros name their must have tools & blame as a service, the new Cybersecurity hot product. Plus great questions, a huge Round Up & much, much more! by TechSNAP
98 min listen
Episode 207: Lunch Lady Lockdown | TechSNAP 207: Reverse Engineering Incentives to Improve Security. New Jersey school district computers held for ransom & the flash bug that lives on from 2011 with a twist! Plus some great networking questions, drone powered Internet & more! by TechSNAP
87 min listen

More Episodes from TechSNAP

Skip carousel

430: All Good Things: It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS. by TechSNAP
52 min listen
429: Curious About Caddy: Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC. by TechSNAP
31 min listen
428: RAID Reality Check: We dive deep into the world of RAID, and discuss how to choose the right topology to optimize performance and resilience. by TechSNAP
36 min listen
427: Gigahertz Games: Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop. by TechSNAP
51 min listen
426: Storage Stories: We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording. by TechSNAP
31 min listen
425: Ryzen Gets Real: We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root. by TechSNAP
33 min listen
424: AMD Inside: Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won. by TechSNAP
28 min listen
423: Hopeful for HAMR: We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC. by TechSNAP
30 min listen
422: Multipath Musings: We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP. by TechSNAP
24 min listen
421: Firewall Fun: We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family. by TechSNAP
25 min listen
420: Choose Your Own Compiler: Compiling the Linux kernel with Clang has never been easier, so we explore this alternative compiler and what it brings to the ecosystem. by TechSNAP
24 min listen
419: Nebulous Networking: From classifying cats to colorizing old photos we share our top tips and tools for starting your machine learning journey. Plus, learn why Nebula is our favorite new VPN technology, and how it can help simplify and secure your network. by TechSNAP
34 min listen
418: 5G Fundamentals: As the rollout of 5G finally arrives, we take some time to explain the fundamentals of the next generation of wireless technology. by TechSNAP
34 min listen
417: Machine Learning Magic: We explore the rapid adoption of machine learning, its impact on computer architecture, and how to avoid AI snake oil. by TechSNAP
26 min listen
416: I.T. Phone Home: Ubiquiti's troublesome new telemetry, Jim's take on the modern Microsoft, and why Project Silica just might be the future of long term storage. by TechSNAP
28 min listen
415: It's All About IOPS: We share our simple approach to disk benchmarking and explain why you should always test your pain points. by TechSNAP
34 min listen
414: Rooting for ZFS: We dive into Ubuntu 19.10's experimental ZFS installer and share our tips for making the most of ZFS on root. by TechSNAP
42 min listen
413: The Coffee Shop Problem: We peer into the future with a quick look at quantum supremacy, debate the latest DNS over HTTPS drama, and jump through the hoops of HTTP/3. by TechSNAP
32 min listen
412: Too Good To Be True: It's TechSNAP story time as we head out into the field with Jim and put Sure-Fi technology to the test. by TechSNAP
35 min listen
411: Mobile Security Mistakes: We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets. by TechSNAP
30 min listen
410: Epyc Encryption: It's CPU release season and we get excited about AMD's new line of server chips. Plus our take on AMD's approach to memory encryption, and our struggle to make sense of Intel's Comet Lake line. by TechSNAP
50 min listen
409: Privacy Perspectives: We examine why it's so difficult to protect your privacy online and discuss browser fingerprinting, when to use a VPN, and the limits of private browsing. by TechSNAP
39 min listen
408: Apollo's ARC: We take a look at the amazing abilities of the Apollo Guidance Computer and Jim breaks down everything you need to know about the ZFS ARC. by TechSNAP
35 min listen
407: Old School Outages: Jim shares his Nagios tips and Wes chimes in with some modern monitoring tools as we chat monitoring in the wake of some high-profile outages. by TechSNAP
43 min listen
406: SACK Attack: A new vulnerability may be the next 'Ping of Death'; we explore the details of SACK Panic and break down what you need to know. by TechSNAP
44 min listen
405: Update Uncertainty: We explore the risky world of exposed RDP, from the brute force GoldBrute botnet to the dangerously worm-able BlueKeep vulnerability. by TechSNAP
31 min listen
404: Prefork Pitfalls: We turn our eye to web server best practices, from the basics of CDNs to the importance of choosing the right multi-processing module. by TechSNAP
34 min listen
403: Keeping Systems Simple: We’re back from LinuxFest Northwest with an update on all things WireGuard, some VLAN myth busting, and the trade-offs of highly available systems. by TechSNAP
47 min listen
402: Snapshot Sanity: We continue our take on ZFS as Jim and Wes dive in to snapshots, replication, and the magic on copy on write. by TechSNAP
32 min listen
401: Everyday ZFS: Jim and Wes sit down to bust some ZFS myths and share their tips and tricks for getting the most out of the ultimate filesystem. by TechSNAP
48 min listen

Related podcast episodes

Skip carousel

Daily & Week in Review: Responsible disclosure & why the cool miscreants are on Twitter.: Daily & Week in Review: Responsible disclosure & why the cool miscreants are on Twitter. by CyberWire Daily
21 min listen
Patch Tuesday notes. Skype DLL hijacking vulnerability. Olympic Destroyer malware described. Lazarus Group newly active. BitGrail heist? Cyber Valentine.: Patch Tuesday notes. Skype DLL hijacking vulnerability. Olympic Destroyer malware described. Lazarus Group newly active. BitGrail heist? Cyber Valentine. by CyberWire Daily
20 min listen
Malicious apps, a clever botnet, and cryptojacking. Patch notes. EU copyright regulations. Congress still doesn't like the cut of ZTE's or Huawei's jib. Tesla sues a former employee.: Malicious apps, a clever botnet, and cryptojacking. Patch notes. EU copyright regulations. Congress still doesn't like the cut of ZTE's or Huawei's jib. Tesla sues a former employee. by CyberWire Daily
21 min listen
324: Microsoft Certifications Just Got Easier? (Not What You Think!): Don, Dan & Sophie kick off this week's episode with some Microsoft news: the tech giant is pulling the plug on WordPad, as well as making some of their certification exams open book! In other tech news, we finally have an answer to the age old question: is a carrier pigeon faster than the internet? Moving on to security news, the FBI dismantles Qakbot - but not before it took millions in ransom. LogicMonitor customers fall victim to hackers due to default passwords. And to wrap up the show: an unknown attacker gives free Sourcegraph access to the masses. by Technado
59 min listen
Funding, SentinelOne/Wiz rumors, Layoffs, NordVPN's skunkworks, ChatGPT Enterprise - ESW #330: There's still serious, late stage funding for compelling tech in cybersecurity, SpyCloud proves with it's $110M Series D. We discuss the SentinelOne/Wiz merger rumors. Sadly layoffs and even company failures are still occurring, thought Tyler thinks... by Security Weekly Podcast Network (Video)
66 min listen
Funding, SentinelOne/Wiz rumors, Layoffs, NordVPN's skunkworks, ChatGPT Enterprise - ESW #330: There's still serious, late stage funding for compelling tech in cybersecurity, SpyCloud proves with it's $110M Series D. We discuss the SentinelOne/Wiz merger rumors. Sadly layoffs and even company failures are still occurring, thought Tyler thinks... by Enterprise Security Weekly (Video)
66 min listen
049| Ransomware 2.0, with Mikko Hypponen by Cyber Security Sauna
32 min listen
Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits solicited. Ransomware trends. Seven years for UPMC hacker. Plenty of Candy Corn coming. by CyberWire Daily
25 min listen
Meltdown and Spectre arose from engineering for speed—most chips are affected. Bogus security apps kicked out of Google Play. Iran's Internet crackdown. Indications of a guilty plea in NSA leak case.: Meltdown and Spectre arose from engineering for speed—most chips are affected. Bogus security apps kicked out of Google Play. Iran's Internet crackdown. Indications of a guilty plea in NSA leak case. by CyberWire Daily
18 min listen
February 9, 2021: A look at Iranian spyware operations Florida water treatment plant hacked to distribute harmful chemicals Microsoft to add 'nation-state activity alerts' to Defender Thanks to our episode sponsor Altitude Networks Remember that time when someone at... by Cyber Security Headlines
7 min listen
June 29, 2021: Windows 11 CPU confusion continues EA ignored domain vulnerabilities for months Ransomware increasingly hiding in VMs Thanks to our episode sponsor, Keyavi 7 in 10 white-collar employees in the U.S. are still working remotely. Virtual teams boomed in... by Cyber Security Headlines
7 min listen
Espionage phishing in unfamiliar places. OT vulnerabilities. LemonDuck’s rising fortunes. Data exposure. Kubernetes advice from NSA and CISA. Meng Wanzhou’s extradition. by CyberWire Daily
37 min listen
Vault7 leak: Brutal Kangaroo toolkit. Data breach and ransomware updates. Notes on code audit requirements.: Vault7 leak: Brutal Kangaroo toolkit. Data breach and ransomware updates. Notes on code audit requirements. by CyberWire Daily
22 min listen
December 28, 2021: Study looks at ransomware market share Researchers find abundant toolkits to get around 2FA Shutterfly hit with ransomware Thanks to our episode sponsor, Lookout Complexity is the enemy of security. With an integrated Zero Trust platform, Lookout... by Cyber Security Headlines
6 min listen
Greek and Turkish hacktivists swap defacements. Process Doppelgänging in the wild. GDRP is coming (like winter, for you Game of Thrones fans.) Profiling infosec enthusiasts.: Greek and Turkish hacktivists swap defacements. Process Doppelgänging in the wild. GDRP is coming (like winter, for you Game of Thrones fans.) Profiling infosec enthusiasts. by CyberWire Daily
20 min listen
Technado, Ep. 297: Microsoft Urges Windows 11 Users to Upgrade Their Hardware: Catch up on the cybersecurity and tech news of the week with Don, Dan, and Sophie as they cover the latest. This week in tech, Microsoft rolled out a feature to dissuade users from using Windows 11 on unsupported CPUs, Ubuntu flavors will no longer support Flatpak installs out-of-the-box, and VMware’s Bitnami began packaging apps for Arm CPUs. In security news this week, Dutch police apprehended 3 hackers involved in the theft and extortion of tens of millions of people’s data. In this week’s “Who Got Pwned?” segment, media conglomerate News Corp revealed that the hackers responsible for its 2022 breach had been in the system since early 2020. Finally, in Deja-News this week we talk about LastPass once again, but this time it’s a new breach. A LastPass employee's home computer was hacked, resulting in a decrypted company vault being compromised. by Technado
50 min listen
Whole Foods breached. Illusion gap and Windows Defender. Exposed AWS S3 buckets. Equifax incident response. Reality Winner proceedings.: Whole Foods breached. Illusion gap and Windows Defender. Exposed AWS S3 buckets. Equifax incident response. Reality Winner proceedings. by CyberWire Daily
22 min listen
Phishing, cryptojacking, and commodity malware. New supply chain security measures. And have you heard about this Black Friday thing?: Phishing, cryptojacking, and commodity malware. New supply chain security measures. And have you heard about this Black Friday thing? by CyberWire Daily
22 min listen
January 24, 2022: Ukraine attack update: experts find strategic similarities with NotPetya Molerats use Google Drive and Dropbox as attack infrastructure Senators introduce bill to protect satellites from getting hacked Thanks to our episode sponsor, deepwatch ... by Cyber Security Headlines
8 min listen
Delegated Identity in the Cloud by The Cloudcast
39 min listen
CrashOverride implicated in Ukraine grid hack—possibly as a proof-of-concept. Hack-induced Gulf diplomatic troubles continue. New malware strains, exploits appear.: CrashOverride implicated in Ukraine grid hack—possibly as a proof-of-concept. Hack-induced Gulf diplomatic troubles continue. New malware strains, exploits appear. by CyberWire Daily
16 min listen
Mapping Unsolvable Problems to Unattainable Solutions: All links and images for this episode can be found on CISO Series ( We're busting out the Cyber Defense Matrix to see what our security program we'll never be able to achieve. This episode is hosted by me, (), producer of CISO Series and... by CISO Series Podcast
35 min listen
December 27, 2021: Rook ransomware is yet another spawn of the leaked Babuk code Russia fines Google $100m over "illegal" content Fake Christmas Eve termination notices used as phishing lures Thanks to our episode sponsor, Lookout Complexity is the enemy of security.... by Cyber Security Headlines
7 min listen
An overview of threat actors, two proofs of concept, and an IoT botnet bothers the cloud. Patch Tuesday notes. And control yourself, sir. by CyberWire Daily
24 min listen
Technado, Ep. 193: Vigilante’s Adam Durrah by Technado
55 min listen
Operation Cloudhopper. Chrysaor spyware. Microsoft to upgrade Office security. Notes from SeaAirSpace. High school hacking.: Operation Cloudhopper. Chrysaor spyware. Microsoft to upgrade Office security. Notes from SeaAirSpace. High school hacking. by CyberWire Daily
16 min listen
020: Phishing for Donald Trump: Gizmodo's attempt to reveal Donald Trump's administration ineptitude when it comes to cybersecurity fails to impress. Mac users are warned that the HandBrake DVD-ripping app has been compromised by malware. And will the US Army insist IT security professionals spend months ironing their bedsheets..? by Smashing Security
31 min listen
Episode 82. Uh-oh Spring... you got some serious competition from Micronaut!: So the internet is all raging about this (not so little) framework that is doing it all. Created with a "cloud-first" mentality, @Micronautfw is aiming to be your next Spring Boot! And, oh gosh, how easy they are making it. We dive into what makes... by Java Pub House
60 min listen
June 15, 2021: Interpol shuts down thousands of fake pharmacies Chip shortage could lead to counterfeit chip crisis Windows 10 support ends in 2025 Thanks to our episode sponsor, Keyavi 7 in 10 white-collar employees in the U.S. are still working remotely. Virtual... by Cyber Security Headlines
7 min listen
Introducing CYBER: A Hacking Podcast by MOTHERBOARD: Hacking. Hackers. Disinformation campaigns. Encryption. The Cyber. This stuff gets complicated really fast, but Motherboard spends its time embedded in the infosec world so you don't have to. CYBER is coming next week, and will help you understand... by CYBER
1 min listen

Discover this podcast and so much more

Episode 371: They Never Learn

Episode 371: They Never Learn

Description

Titles in the series (100)

More Episodes from TechSNAP

Related podcast episodes