Down the Security Rabbithole Podcast (DtSR)

Hey everyone! We're almost done with 2014 and another new year is right around the corner. We thought this was the perfect time to sit back, relax a little and reflect on the year that was...and boy …

In this episode

Attorney and CFAA expert Shawn Tuma joins us to talk about the US vs. Salinas case where Mr. Salinas was threatened with 440 years in jail, and now plead down to a misdemeanor. Prosecu…

Topics covered

• The unfolding case of the Sony Pictures Entertainment breach
  • http://blog.wh1t3rabbit.net/2014/12/when-press-aids-enemy.html
  • http://www.thedailybeast.com/articles/2014/12/12/shocking-new-r…

In this episode

• Michelle explains to us what Enterprise Architecture is, and what it isn't
• Michelle gives her take on how both security and enterprise architecture both support each other
• We discuss the…

Topics covered

• Sony Pictures is having a very, very bad couple of days - and it could keep getting worse.
  • http://www.theverge.com/2014/11/24/7277451/sony-pictures-paralyzed-by-massive-security-compromi…

In this episode

• We revisit the 'human' side of hacking
• Chris tells us all about the Defcon CTF his team has hosted
• We discuss the role human nature plays in social engineering, or "Why the bad guys alwa…

Note: The hashtag for the show on Twitter has changed, please connect with us using #DtSR going forward. Thanks!

Topics covered

• Update: Home Depot breach (Hint: apparently it was a 3rd party entry poi…

In this episode

• Adam and Dmitri discuss what is (and what isn't) threat intelligence
• We discuss strategic, tactical and operational security intelligence
• Who is using threat intelligence, and how?
• Adam t…

In this episode

• Jeff explains a little bit about who Norse is, and why they were potentially targeted with a DDoS
• We discuss what a DDoS is, how it becomes effective, and what methods/tools attackers u…

Topics covered

• Banks urging shoppers not to avoid breached retailers - Companies that get breached impact card holders minimally, at least as far as we can tell, right?
  • http://www.kcentv.com/story/2688…

In this episode

• Chris attempts to explain the consternation with 'security research' right now
• Kevin gives his perspective and why he doesn't quite understand why people don't see they're "breakin' the…

Topics covered

• The FBI paid a visit to the "researcher" who revealed (and tinkered with) the hacked Yahoo! servers - we discuss the various aspects of this case, which we've been going round and round…

In this episode

• Ron gives us a brief history of Tenable and TVM for the enterprise
• Ron answers "How do you make network security obtainable and defendable?"
• We discuss TVM as a fundamental principle to …

Topics covered

• The petition on WhiteHouse.gov titled "Unlock public access to research on software safety through DMCA and CFAA reform" and ...well we talk about it with an attorney and some necessary…

Thank you to Shawn Tuma - an attorney specializing in CFAA and a good friend of our show - for stopping by and lending his expertise on this episode. If you enjoy Shawn's insights, consider following…

In this episode

• DREAMR: What is it, and why is it so important to Enterprise Security today?
• Examples of aligning business and security requirements and winning hearts & minds
• How does a security organi…

Topics covered

• Hacker flees US for non-extradition country - why?
  • http://blog.erratasec.com/2014/09/hacker-weev-has-left-united-states.html
  • http://www.newrepublic.com/article/117477/andrew-weev-auernhei…

In this episode

• Separating the hype from reality of the Chinese hacking threat
• The escalation of economic tensions between US & China, over hacking
• What is the advice for the enterprise regarding state-…

Topics covered

• Apple has been making news, issuing guidance, and refuting a hack - all around iCloud
  
  • http://www.padgadget.com/2014/09/03/apple-warns-developers-not-to-store-health-data-in-icloud/
  • http:/…

In this episode

• We discuss the largest challenges in the state government sector
• Brian discusses balancing the need for openness versus security/secrecy
• Phil talks about the challenge of balancing polic…