Down the Security Rabbithole Podcast (DtSR)

In this episode...

• A quick walk-through of Rob’s talk (“Hacker ghost stories”), and why it’s completely relevant today
• Simple things that work
  • blocking java (externally)
  • effectively blocking “uncategoriz…

In this episode...

• A join Ponemon Institute & IBM Security study shows that, surprise surprise, developers are "neglecting security"
  • The study only looked at mobile apps and app developers
  • Less than hal…

In this episode...

• What about public safety, where do we draw the line on open research?
• Self-regulation? Disclosure? What are our options…
• What makes a researcher? We discuss
• “Chilling security research…

In this episode...

• Friend and security researcher Chris Roberts steps into it... 
  • A poorly-conceived tweet, followed by mass hysteria
  • Most everyone talking about this is missing the point entirely
  • Of cou…

In this episode...

• Where do you even start with “threat intelligence”?
• Ryan talks about context, and why it’s *the* most important thing when it comes to threat intel
• How does a SME make use of a “luxur…

In this episode...

• TrueCrypt security audit results are good news, right? 
  • Why are some of the most depended-upon 
  • http://arstechnica.com/security/2015/04/truecrypt-security-audit-is-good-news-so-why-al…

In this episode...

• Jon Callas gives a little of his background and his current role
• We talk through why cryptography is so hard, and so broken today
• Jon overviews compatibility, audit and making cryptog…

Remember folks, as you listen reach out to us on Twitter and hit the hashtag #DtSR to continue the conversation, and speak your mind! Let's hear what your take is on the stories we discuss...maybe yo…

In this episode...

• Michael C and the team talk bout "going back to basics" and the need for security fundamentals
• Michael C talks a little about why we (security professionals) fail at fixing problems …

In this episode--

• Law firm hit and crippled by ransomware, decides it's not paying the ransom.
  • They aren't quite sure what got encrypted
  • But they have backups...
  • ..and data was likely not exfiltrated
  • http…

In this episode...

• We learn the origins of "RSnake" as told by Rob himself
• Rob gives us a peek into the dark side, from his contacts and experiences
• We discuss the black-hat economy as it's verticalized…

In this episode--

• Would you be OK with your credit card company tracking you, to decrease fraud rates? Visa wants to track your smartphone.
  • http://triblive.com/business/headlines/7774328-74/visa-card-f…

In this episode

• Traveler's Insurance files suit against a web developmeent company for failing to provide adequate security, resulting in a breach of one of its customers
  • http://www.law360.com/articles…

Topics covered

• Massive breach at American Health Insurer Anthem - from the "haven't we done this once before?" department as Queen - Another One Bites the Dust plays in the background
  • https://gigaom.co…

This is the 7th installment (call it a rebirth) of the MicroCast. Short and to the point, Michael and James talk about the phrase breached companies use - "We take your security seriously..."

 .. join…

Fans - If you haven't booked your ticket for InfoSec World 2015 in sunny Orlando, FL check this out. Register using our code CLD15/RABBIT for 15% off.

If you want a chance to go for FREE, listen to Ep…

** There is a special gift for our listeners in this episode, from our friends at InfoSec World 2015! Listen to find out how you can go for free.

 We have a promo code!

CLD15/RABBIT – 15% off for “Down…

In this episode...

• The blog post that started it all - http://blog.norsecorp.com/2014/11/10/the-new-reality-in-security-offense-always-wins-and-defense-always-loses/
• Vince, tells us what he means by "O…

Welcome to a new year of the Down the Security Rabbithole Podcast! We are kicking off this year with a guest on this morning's program, Phil Beyer joined us to talk about the last few weeks that have…

Hi everyone! Welcome to the very first episode of the Down the Security Rabbithole Podcast for 2015! On this opening episode, Jeff Man joins us to talk truth to power on PCI-DSS and shatters myths fo…