Drunken Security News - Episode 343

FromSecurity Weekly Podcast Network (Video)

Start listening View podcast show

Drunken Security News - Episode 343

FromSecurity Weekly Podcast Network (Video)

ratings:

Length:

34 minutes

Released:

Sep 5, 2013

Format:

Podcast episode

Description

You got Paul and Larry this week as they take you through all the fun that is hacking geolocators, Java 6, getting sudo on an OSX machine, and a great story from the pentesting field by Larry. Plus a whole lot more!

Released:

Sep 5, 2013

Format:

Podcast episode

Titles in the series (100)

Security news, interviews, how-to technical segments. For security professionals by security professionals. We Hack Naked.

Skip carousel

Interview with Bruce Potter and JP Bourget - Episode 335: We have JP Bourget and Bruce Potter on the show to announce their ball busting ride across the USA, CycleOverride . CycleOverride is planning a series of rides over the coming years that revolve around information security and fundraising for... by Security Weekly Podcast Network (Video)
15 min listen
OWASP Top 10 (2013) with Dave Wichers: The OWASP Top Ten is an awareness document for web application security, representing broad consensus about the most critical web application security risks as determined by the OWASP community. The OWASP Top 10 is one of the earliest and longest... by Security Weekly Podcast Network (Video)
24 min listen
Interview with Ira Winkler - Episode 343: Ira Winkler, CISSP is President of Secure Mentem. Ira is one of the foremost experts in the human elements of cyber security and is known for the extensive espionage and social engineering simulations that he has conducted for Fortune 500 companies... by Security Weekly Podcast Network (Video)
33 min listen
Interview with Schuyler Towne - Episode 338: Schuyler Towne is on a mission to recover as much information as possible about the lock-related patents that were lost to the patent office fire of 1836. His primary interest is in the history and the story of the creators of the lost locks, but his... by Security Weekly Podcast Network (Video)
21 min listen
Hack naked TV 56ish: In this episode we talk about the importance of being able to detect insider threats. by Security Weekly Podcast Network (Video)
8 min listen
Interview with Onapsis - Episode 338: Selena Proctor, Alex Horan and Mariano Nunez join us from Onapsis. by Security Weekly Podcast Network (Video)
52 min listen
Hack Naked TV Episode 57: In this episode we talk about Prism, M$, HIPAA and Panic!!! In the financial sector!! Links for this episode: http://tinyurl.com/HNTV-HIPAA-Costs http://tinyurl.com/HNTV-Financial-collapse http://tinyurl.com/HNTV-MS-NSA by Security Weekly Podcast Network (Video)
9 min listen
Drunken Security News - Episode 341: Trying to wake up sleeping babies through hacking the baby monitor. Fire in the studio. Male to male plugs. Updating your pooty...and firefox. Fun ways to log in to your Leap Motion controlled Windows box and the iLO authentication bypass. Plus more... by Security Weekly Podcast Network (Video)
40 min listen
Tech Segment with Pete Finnigan - Episode 345: Pete Finnigan works as an independent Oracle security consultant for his own company PeteFinnigan.com Limited . Pete specializes in performing detailed Oracle security IT Health checks against Oracle databases using a detailed methodology developed by... by Security Weekly Podcast Network (Video)
17 min listen
BruCon Matt - Episode 343: Matt is a long time volunteer of BruCon and is going to let us know all the great things in store for 2013. by Security Weekly Podcast Network (Video)
15 min listen
Interview with Vivek Ramachandran: Vivek Ramachandran is a world renowned security researcher and evangelist. His expertise includes computer and network security, exploit research, wireless security, computer forensics, embedded systems security, compliance and e-Governance. He is the... by Security Weekly Podcast Network (Video)
53 min listen
Drunken Security News - Episode 344: Want to try to scam John Strand? That might not be the best of ideas. Burp got updated, Rsnake's "joke", opting out to watch porn, 5 Guys Burgers on security and maybe a new way to prevent CSRF. by Security Weekly Podcast Network (Video)
40 min listen
Interview with Troy Hunt - Episode 339: Troy is a Software architect and Microsoft MVP, you'll usually find him writing about security concepts and process improvement in software delivery on his blog. He also has a free e-book out "OWASP Top 10 for .NET developers" by Security Weekly Podcast Network (Video)
38 min listen
Hack Naked TV Episode 59: In this episode we talk about pwnedlist and how many companies are compromised and don't even know it. We also talk about how one should not throw stones in glass houses. by Security Weekly Podcast Network (Video)
11 min listen
Interview with Richard Stiennon: Richard Stiennon, security expert and industry analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He relaunched the security blog ThreatChaos.com and is the founder of IT-Harvest. by Security Weekly Podcast Network (Video)
49 min listen
Interview with Whitfield Diffie - Episode 341: Dr. Diffie is a pioneer of public-key cryptography and was VP of Information Security and Cryptography at ICANN. He is author of Privacy on the Line: The Politics of Wiretapping and Encryption by Security Weekly Podcast Network (Video)
50 min listen
Interview with Kati Rodzon and Mike Murray: Kati Rodzon is the manager of Security Behavior Deisgn for MAD Security. Her last nine years have been spent studying psychology and ways to modify human behavior. From learning about the power of social pressure on groups, to how subtle changes in... by Security Weekly Podcast Network (Video)
36 min listen
Drunken Security News - Episode 340: All things Black Hat, DefCon. Making $15,000 to $20,000 per hour. Hijacking a Prius. Vulnerable printers. More SCADA hacking. Hacking toilets. by Security Weekly Podcast Network (Video)
66 min listen
Drunken Security News - Episode 342: From the Bradley Manning sentencing to DDOSing your former employer, the guys at PSW cover all the interesting stories of the week. by Security Weekly Podcast Network (Video)
32 min listen
Tech Segment: Bro IDS: Bro is a passive, open-source network traffic analyzer and was originally developed by Vern Paxson, who continues to lead the project now jointly with a core team of researchers and developers at the International Computer Science Institute in... by Security Weekly Podcast Network (Video)
37 min listen
Interview with Matt Bergin - Episode 337: Matt "Level" Bergin, age twenty four, works for CORE Security as a Senior Security Consultant where his day job consists of discovering, exploiting, and mitigating vulnerabilities in their client’s network environments. Before joining... by Security Weekly Podcast Network (Video)
29 min listen
Tech Segment with Allison Nixon - Episode 341: Denying Service to DDOS Protection Services by Security Weekly Podcast Network (Video)
22 min listen
Interview with Phil Young - Episode 342: Philip Young, aka Soldier of Fortran, is a mainframe phreak! His love of mainframes goes back to when he watched Tron, wide eyed, for the first time. Though it would be decades until he actually got his hands on one he was always interested in their... by Security Weekly Podcast Network (Video)
37 min listen
Stories of the Week - Episode 346: Before the gang heads off for Derby Con, we still have the stories of the week. Paul, Greg and Patrick are here to talk about Shodan searches, Dropbox opening your docs, 10 things to never say during a presentation and a whole lot more! by Security Weekly Podcast Network (Video)
40 min listen
Stories and Rants of the Week - Episode 347: The team goes off on some pretty big tangents this week and does a lot more rambling than actual discussion of stories. However, they did get in talk about DerbyCon, the Yahoo bug bounty and a couple of hacks this week. If you're not hardcore... by Security Weekly Podcast Network (Video)
45 min listen
Interview with Jaime Filson - Episode 347: Jaime enjoys long walks on the beach while his computer equipment is busy fuzzing software, cracking passwords, or spidering the internet. He's also the creator of the gitDigger project as well as staff of DEFCON's wireless village. by Security Weekly Podcast Network (Video)
18 min listen
Enumerating a Domain using ADSI in PowerShell: Carlos Perez is also known as @DarkOperator, He spends his time reverse engineering, and practicing PowerShell Kung-Fu. Known by his motto "Shell is only the Beginning". by Security Weekly Podcast Network (Video)
21 min listen
Tech Segment: Threat Analytics with Ty Miller - Episode 340: Ty Miller is CEO and Founder of Threat Intelligence , has had many TV appearances, radio interviews, print newspaper and magazine articles, and regular online commentary & BlackHat Trainings. Ty Miller's experience not only covers penetration... by Security Weekly Podcast Network (Video)
23 min listen
Episode 350: Interview with Jayson Street: Jayson E. Street is an author of “Dissecting the hack: The F0rb1dd3n Network” from Syngress. Also creator of dissectingthehack.com He has also spoken at DEFCON, DerbyCon, UCON and at several other ‘CONs and colleges on a variety of... by Security Weekly Podcast Network (Video)
27 min listen
Interview with Rich Mogull - Episode 345: Rich has twenty years experience in information security, physical security, and risk management. He is the founder of Securosis and specializes in data security, application security, emerging security technologies, and security management. by Security Weekly Podcast Network (Video)
53 min listen

More Episodes from Security Weekly Podcast Network (Video)

Skip carousel

How GenAI Can Improve SecOps - Ely Kahn - ESW #359: We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some... by Security Weekly Podcast Network (Video)
30 min listen
Your TV Is Scanning You - PSW #826: This week the crew discusses: When TVs scan your network, bad things can happen, PuTTY is vulnerable, Crush FTP, vulnerabilities that will never be fixed, CVEs are for vulnerabilities silly, you can test for easily guessable passwords too, FlipperZero... by Security Weekly Podcast Network (Video)
110 min listen
TikTok, Flowmon, Cisco, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland - SWN #381: TikTok, Flowmon, Arcane Door, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
38 min listen
Threat Modeling and Understanding Inherent Threats - Adam Shostack - ESW #359: This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the... by Security Weekly Podcast Network (Video)
45 min listen
Autonomous - I don't think that word means what you think it means - ESW #359: A clear pattern with startups getting funding this week are "autonomous" products and features. Automated detection engineering Autonomously map and predict malicious infrastructure ..."helps your workforce resolve their own security issues... by Security Weekly Podcast Network (Video)
44 min listen
Advising The President On Cyber-Physical Resilience - Philip Venables - PSW #826: On February 27, 2024, PCAST (President’s Council of Advisors on Science and Technology) sent a report to the President with recommendations to bolster the resilience and adaptability of the nation’s cyber-physical infrastructure resources. Phil... by Security Weekly Podcast Network (Video)
61 min listen
Robofly, CRUSHFTP, Github, Palo Alto, MITRE, Fancy Bear, Deepfakes, Aaran Leyland... - SWN #380: Robofly, CRUSHFTP, Github, Palo Alto, MITRE, Fancy Bear, Deepfakes, Aaran Leyland, and more, on this Edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
37 min listen
Unraveling the "Materiality" Mystery: A CISO's Guide to SEC Compliance - Mike Lyborg - BSW #347: The new SEC Cyber Security Rules require organizations to be ready to report cyber incidents. But what do you actually need to do? Mike Lyborg, Chief Information Security Officer at Swimlane, joins Business Security Weekly to discuss how to prepare.... by Security Weekly Podcast Network (Video)
30 min listen
Sustainable Funding of Open Source Tools - Simon Bennetts, Mark Curphey - ASW #282: How can open source projects find a funding model that works for them? What are the implications with different sources of funding? Simon Bennetts talks about his stewardship of Zed Attack Proxy and its journey from OWASP to OpenSSF to an Open Source... by Security Weekly Podcast Network (Video)
39 min listen
XZ & Open Source, PuTTY's Private Keys, LeakyCLI, LLMs Writing Exploits - ASW #282: CISA chimes in on the XZ Utils backdoor, PuTTY's private keys and maintaining a secure design, LeakyCLI and maintaining secure secrets in CSPs, LLMs and exploit generation, and more! Show Notes: by Security Weekly Podcast Network (Video)
38 min listen
What does DoD’s CMMC Requirement Mean for American Businesses - Edward Tuorinsky - BSW #347: Since 2016, we been hearing about the impending impact of CMMC. But so far, it's only been words. That looks to be changing. Edward Tourinsky, Founder & Managing Principal at DTS, joins Business Security Weekly to discuss the coming impact of CMMC... by Security Weekly Podcast Network (Video)
35 min listen
Crazy money and crazy outcomes - cybersecurity acquisitions in all shapes and sizes - ESW #358: This week, Adrian and Tyler discuss some crazy rumors - is it really possible that a cloud security startup valued at over $8 billion in November 2021 just got bought for $200 million??? Some healthy funding for Cyera and Cohesity ($300m and $150m,... by Security Weekly Podcast Network (Video)
66 min listen
Win 95, LastPass, Kubernetes, Sandworm, Bloomtech, Frontier, 911, Aaran Leyland... - SWN #379: Win 95, Cheat Lab, LastPass, Kubernetes, Sandworm, Bloomtech, Frontier, 911, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
35 min listen
From Hackers to Streakers - How Counterintelligence Teams are Protecting the NFL - Joe McMann - ESW #358: Protecting a normal enterprise environment is already difficult. What must it be like protecting a sports team? From the stadium to merch sales to protecting team strategies and even the players - securing an professional sports team and its brand is... by Security Weekly Podcast Network (Video)
41 min listen
Hacker Heroes - Winn Schwartau - PSW #825: Pioneering the Cyber Battlefield: A Deep Dive with Winn Schwartau, Cybersecurity Luminary Get ready for an extraordinary episode as we sit down with Winn Schwartau, a true pioneer and luminary in the world of cybersecurity. Winn's impact on the field... by Security Weekly Podcast Network (Video)
66 min listen
PCI 4.0 - PSW #825: Version 4.0 of the Payment Card Industry Data Security Standard (PCI DSS) puts greater emphasis on application security than did previous versions of the standard. It also adds a new “customized approach” option that allows merchants and other... by Security Weekly Podcast Network (Video)
60 min listen
Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281: There are as many paths into infosec as there are disciplines within infosec to specialize in. Karan Dwivedi talks about the recent book he and co-author Raaghav Srinivasan wrote about security engineering. There's an appealing future to security... by Security Weekly Podcast Network (Video)
35 min listen
Duo, Steganography, Roku, Palo Alto, Putty, Cerebral, IPOs, SanDisk, & Josh Marpet - SWN #378: Duo, Steganography, Roku, Palo Alto, Putty, Cerebral, IPOs, SanDisk, Josh Marpet, and more, on this Edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
34 min listen
Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome’s V8 Sandbox - ASW #281: A Rust advisory highlights the perils of parsing and problems of inconsistent approaches, D-Link (sort of) deals with end of life hardware, CSRB recommends practices and processes for Microsoft, Chrome’s V8 Sandbox increases defense, and more! Show... by Security Weekly Podcast Network (Video)
28 min listen
Generative AI Legal Challenges as SEC Charges Disrupt Journey to CISO Role - BSW #346: In the leadership and communications section, Navigating Legal Challenges of Generative AI for the Board, Winds of Warning? SEC Charges Threaten to Disrupt Role of CISO, 6 Common Leadership Styles — and How to Decide Which to Use When, and more!... by Security Weekly Podcast Network (Video)
26 min listen
From Idea to Success: How to Operationalize a Startup from Zero to Exit - Seth Spergel - BSW #346: Startup founders dream of success, but it's much harder than it looks. As a former founder, I know the challenges of cultivating an idea, establishing product market fit, growing revenue, and finding the right exit. Trust me, it doesn't always end... by Security Weekly Podcast Network (Video)
30 min listen
Combadges, SISENSE, Microsoft, CISA, Lastpass, Palo Alto, Broadband, Aaran and More - SWN #377: Combadges, SISENSE, Microsoft, Malware Next-Gen, Lastpass, Palo Alto, Broadband, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
31 min listen
The AI-est news segment ever, now with even more AI! - ESW #357: This week, Tyler and Adrian discuss Cyera's $300M Series C, which lands them a $1.4B valuation! But is that still a unicorn? Aileen Lee of Cowboy Ventures, who coined the term back in 2013, recently wrote a piece celebrating the 10th anniversary of... by Security Weekly Podcast Network (Video)
67 min listen
Digging Into Supply Chain Security - James McMurry - PSW #824: Jim joins the Security Weekly crew to discuss all things supply chain! Given the recent events with XZ we still have many topics to explore, especially when it comes to practical advice surrounding supply chain threats. Show Notes: by Security Weekly Podcast Network (Video)
64 min listen
Understanding KillNet and Recent Waves of DDoS Attacks - Michael Smith - ESW #357: In the days when Mirai emerged and took down DynDNS, along with what seemed like half the Internet, DDoS was as active a topic in the headlines as it was behind the scenes (). We don't hear about DDoS attacks as much anymore. What happened? Well, they... by Security Weekly Podcast Network (Video)
36 min listen
Why Is Your TV & NAS On The Internet? - PSW #824: Ahoi new VM attacks ahead! HTTP/2 floods, USB Hid and run, forwarded email tricks, attackers be scanning, a bunch of nerds write software and give it away for free, your TV is on the Internet, Rust library issue, D-Link strikes again, EV charging... by Security Weekly Podcast Network (Video)
117 min listen
Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280: We look into the supply chain saga of the XZ Utils backdoor. It's a wild story of a carefully planned long con to add malicious code to a commonly used package that many SSH connections rely on. It hits themes from social engineering and abuse of... by Security Weekly Podcast Network (Video)
32 min listen
Dronepocalypse, Microsoft, DLINK, Home Depot, Phishing, NIST, VenomRat, Josh Marpet - SWN #376: Dronepocalypse, Privacy, Microsoft, DLINK, Home Depot, Phishing, NIST, VenomRat, Josh Marpet, and more, are on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
36 min listen
OWASP Breach, Types of Prompt Injection, Device-Bound Sessions, ASVS & APIs - ASW #280: OWASP leaks resumes, defining different types of prompt injection, a secure design example in device-bound sessions, turning an ASVS requirement into practice, Ivanti has its 2000s-era Microsoft moment, HTTP/2 CONTINUATION flood, and more! Show Notes: by Security Weekly Podcast Network (Video)
29 min listen
Understanding the Cybersecurity Ecosystem, Part 2 - Ross Haleliuk - BSW #345: In this discussion, we focus on vendor/tool challenges in infosec, from a security leader's perspective. To quote our guest, Ross, "running a security program is often confused with shopping". You can't buy an effective security program any more than... by Security Weekly Podcast Network (Video)
30 min listen

Related podcast episodes

Skip carousel

Episode 06: Have You Seen Palmer Luckey? Call This Number!: With the VICE Gaming team hurriedly working behind-the-scenes on a bunch of secret stuff, stuff you’ll learn about soon, we still found time to record another Friday podcast. And in a surprise twist, someone found a table Austin Walker to record on thi... by Waypoint Radio
40 min listen
Technado, Ep. 293: LastPass breach update: It Was Worse Than We Thought: Catch up on the tech news of the week with Don, Dan and Sophie as they cover the latest. This week, Apple introduced OS updates that include hardware security key support, Ubuntu announced that the pro version of the OS is available for up to 5 machines, and used Macbooks in excellent condition are being turned into scrap metal. In this week’s “Doh!” segment, Github was hacked, with hackers getting away with valuable assets. Then, in our “Who Got Pwned?” segment of the week, the US has announced their successful hacking of an infamous cyber-crime gang. To top it all off, the Technado crew discusses that unlike a fine wine, the LastPass breach just keeps getting worse with age. by Technado
51 min listen
#305 - Shrek 4-D Closing, Mardi Gras Dates, Holidays in Detail, and Donkey Kong Coming to Japan! by DIS Unlimited's Universal Show - A Discussion About All Things Universal Orlando
50 min listen
UBMC 167: THE STRANGE CASE OF DR. JEKYLL & MR. HYDE by Uncle Bob's Magic Cabinet
60 min listen
“Mysteries and Martyrs” by Foundation: The Official Podcast
36 min listen
15: We Are Less Than Dust by Equinox
47 min listen
Casually Hardcore Episode 216 - A Backpack full of Awesome. by Casually Hardcore
20 min listen
Episode 166: What to Expect from Apple’s iPhone 13 Fall Event: In the 166th episode, David and Donna unpack all the features we’re expecting from the iPhone 13, Apple Watch Series 7, iPad mini 6, and M1X MacBook Pro. Get your fix of Apple rumors and find out when Apple’s fall iPhone event will likely take place. by iPhone Life Podcast
20 min listen
Our Story So Far Part 1: Fallout 76 updates, Fallout lore & gameplay! by That Fallout Show
123 min listen
53: "Ghosts of Illyria" (SNW S1E3) by Vulcan Hello (Star Trek Discovery, Picard, Strange New Worlds)
45 min listen
OffHeap 60. JDK 16, Spring Native, Micronaut, Microprofile and GraalVM have new releases! Author tags, And Companies blaming Interns (boo!): Hey y'all, well, this episode we dive into tons of fun stuff. There are new toys w/JDK 16, Spring Native and Graal. Essentially, it's a fun time to play with Native and new JDK 16 features (Records are mainstream!). And in a one-two punch, Spring... by Java Off-Heap
92 min listen
Technado, Ep. 273: Wi-Fi 7 Hits 5 Gbps by Technado
45 min listen

Discover this podcast and so much more

Drunken Security News - Episode 343

Drunken Security News - Episode 343

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes