Down the Security Rabbithole Podcast (DtSR)

Topics covered

• Community health systems and UPS Stores breached - an analysis and contrast of the two breaches, the data, and the common message
  
  • http://regmedia.co.uk/2014/08/18/community_health_system…

In this episode

• Jason tells us why he isn't hating on compliance
• Jason talks about how security people are often the source of the issues
• Jason gives us his perspective on compliance-driven security
• Jaso…

Topics covered

• Survey shows CISOs still struggle for respect (from business peers)
  • http://www.cio.com/article/2460165/security/cisos-still-struggle-for-respect-from-peers.html
• Hold Security uncovers 1.2…

In this episode

• Who is J.W. Goerlich (redux from episode - 
• How did he get to where he is now?
• How does the security executive deal with the "moving finish line"?
• JW discusses how 'security' people can b…

Topics covered

• Certificate pinning back in the spotlight with the GMail iOS app having some difficulties, but there is a bigger issue here. We discuss.
  • http://securityaffairs.co/wordpress/26577/hacking…

In this episode

• Jim Tiller - a few things you probably didn't know?
• In the last 15 years, what has changed, and what hasn't?
• Why isn't security moving forward?
• "Complexity is the camouflage for bad guys"…

Topics covered

• Florida Information Protection Acf of 2014 is in the books, and it brings "sweeping changes" to the data breach disclosure process in Florida. Good thing or bad? You decide
  • http://www.sc…

In this episode

• Who is Dan Geer (just in case you live in a cave and don't know)
• Dan's definition of security - "The absence of unmitigatable surprise"
• What exactly is the pinnacle goal of security engi…

Topics covered

• Your server may have a hardware flaw that exposes your baseband management interface to the world - http://arstechnica.com/security/2014/06/at-least-32000-servers-broadcast-admin-passwo…

In this episode

• What exactly is "GRR"?
• What sorts of things can GRR do?
• What is a hunt, and how does it scale across tens of thousands of machines?
• How does GRR "hide" from malware?
• How does GRR keep some…

Note: I want to thank Will Gragido for stopping by this morning to talk over the news with us. Always great to have someone with a fresh perspective, I hope you enjoy the show.

Topics Covered

• Don't li…

My apologies for some of the skips in this episode - we had some difficulty with the recording and ultimately I hope it doesn't take away from Joe's wonderful message.

Thanks for your patience.

In this…

Note: Today, Kim Halavakoski joined us on the show to provide perspective all the way from Finland! We appreciate his international addition to the show, and hope the listeners enjoy the added brainp…

In this episode

• Jeff explains the background of the relationship between the US government, ICANN and IANA
• What is the ITU and why is this $0 contract handoff to the ITU such a big deal?
• What impact did…

Announcements:

• I want to thank Circle City Con as a sponsor for the show! I have one more ticket to give away ... so watch the #DtR hashtag on Twitter!
• Thanks to special guest Philip Beyer for sitting …

In this episode

• Dan gives us the reality of living in what is commonly termed "the post-breach" world
• Dan and Robin talk through the explosion in the numbers of malware samples
• We discuss the different …

Topics dicussed

• Microsoft has issued a patch for the massive MS IE flaw - for WindowsXP! - http://arstechnica.com/security/2014/05/microsofts-decision-to-patch-windows-xp-is-a-mistake/
• Is Open Source S…

In this episode

• We discuss some of the new techniques auto insurance companies are using to custom-tailor rates to drivers
• Our guest discusses some of the capabilities of the widgets available
• Our guest…

Topics discussed

• The big story - "Heartbleed"
  • http://www.csoonline.com/article/2142626/security-leadership/how-you-need-to-respond-to-heartbleed-and-how-you-can-explain-it-to-others.html
  • http://www.csoo…

In this episode

• Advanced Threat Actors - more or less a threat right now than before? (how much is hype?)
• Advanced Persistent Threat - is it really THAT advanced? (a "what" or a "who"?)
• The distinction …