Security Justice » Podcast Special Editions

Select Talks from ISS2009 Now Available for Download

Tom — Sat, 21 Nov 2009 00:15:13 +0000

We have uploaded the audio recording of select talks from the Ohio Information Security Summit that took place October 29-30, 2009 in Cleveland, Ohio. There is a separate RSS feed for these talks located here. If you are using iTunes you can simply use the RSS feed to download all the talks, it’s different then our normal podcast feed. If you want to download individual talks you can download them via the links below or from our Libsyn podcast page here. Thanks to the ISS2009 organizers for putting on a great conference! Here are a list of talks that we recorded ready for download:

Knowledge + Malice = Chaos: When Awareness Doesn’t Work – John O’Leary
Corporate Honeypots: Hackers Can’t Believe What They See - L. Brent Huston
Enterprise Open Source Intelligence Gathering – Tom Eston
Network Security Monitoring and Incident Response – Richard Bejtlich
Anti-Virus is Dead – Dave Kennedy
Radio Reconnaissance and Pen Testing: All Your RF Are Belong to Us – Matt Neely
Vulnerability Management in a Post Apocalytic World – Bill Mathews

Security Justice Special Edition – Interview with Richard Bejtlich (@taosecurity)

Tom — Sun, 08 Nov 2009 01:39:04 +0000

In this special edition of Security Justice we interview Richard Bejtlich at this year’s Ohio Information Security Summit. Richard is the Director of Incident Response for General Electric. Prior to joining GE, Richard operated TaoSecurity LLC as an independent consultant, protected national security interests for ManTech Corporation’s Computer Forensics and Intrusion Analysis division, investigated intrusions as part of Foundstone’s incident response team, and monitored client networks for Ball Corporation.

Richard began his digital security career as a military intelligence officer at the Air Force Computer Emergency Response Team (AFCERT), Air Force Information Warfare Center (AFIWC), and Air Intelligence Agency (AIA). Richard is a graduate of Harvard University and the United States Air Force Academy. He wrote “The Tao of Network Security Monitoring” and “Extrusion Detection,” and co- authored “Real Digital Forensics.” He also writes for his blog (taosecurity.blogspot.com) and TechTarget.com, and teaches for Black Hat.

Thanks again to Richard for being our guest on the show!

Security Justice Special Edition – Jayson Street and Dissecting the hack: the f0rb1dd3n network

Tom — Fri, 30 Oct 2009 14:18:08 +0000

This special edition was recorded during the 7th Annual Ohio Information Security Summit. Jayson Street is the author of a book titled “Dissecting the hack: the f0rb1dd3n network”. Jayson updates us on the recent controversy regarding the plagiarism by the technical editor of the book. You can check out the book review by Wesley McGrew that is mentioned in the podcast. Wesley was also our guest on Episode 18 talking about the book review. Jayson provides an overview of what happened and how the publisher and the security community are working together to move forward and how the revised book will be written. You can find out more about this new community on the dissecting the hack website. We want to thank Jayson for being upfront and honest about the situation and for being our guest on the show!

Oh…and as a bonus we have the very first “cross-over of the streams” with PaulDotCom Security Weekly! Listen to it towards the end of the podcast. Thanks to Paul and Larry for skyping us in!

Security Justice International BBQ Edition – Nick Owen (@wikidsystems)

Tom — Fri, 23 Oct 2009 03:33:51 +0000

This special edition was recorded during our 1st annual International BBQ podcast.

Nick Owen is CEO of WiKID Systems a open source two-factor authentication solution. Nick talks to us about the WiKID solution, how it works and why it’s better then most expensive two-factor authentication solutions. Be sure to check out the rockin’ Python based command line software token for use with WiKID (created by our friends over at Hurricane Labs)!

Nick is also speaking at the Ohio Information Security Summit October 29-30th on “Securing Network Access with Open Source Solutions”.

Thanks again to Nick for being on the show!

Security Justice International BBQ Edition – Chris John Riley (@ChrisJohnRiley) and Robin Wood (@digininja)

Tom — Wed, 21 Oct 2009 01:48:17 +0000

This special edition was recorded during our 1st annual International BBQ podcast.

Chris John Riley is a penetration tester and well known security blogger currently located in Austria. Robin Wood is from the UK and is the creator of many well known open source security projects including Jasager, the Interceptor and KreiosC2. Find out more about Chris on his awesome blog. You can find out more about Robin and his projects on his website. Chris and Robin talk to us about Cider, HAR, blogging, BruCON, security/pentest certifications, metasploit modules, Jasager updates, talks at security conferences and more!

Thanks again to Chris and Robin for being on the show!

Security Justice International BBQ Edition – Frank Breedijk (@autonessus)

Tom — Wed, 07 Oct 2009 01:14:53 +0000

This special edition was recorded during our 1st annual International BBQ podcast.

Frank Breedijk is the creator of AutoNessus which automates regular Nessus scans and provides delta reporting. Frank also talks about good beer, the European hacking scene, HAR, international hacking/privacy laws and more! If you want to find out more about Frank you can find him on Twitter and the CupFighter.net blog.

Thanks again to Frank for being on the show!

Security Justice International BBQ Edition – James Arlen (@myrcurial)

Tom — Fri, 18 Sep 2009 16:37:41 +0000

FINALLY! It’s edited and posted!

This special edition was recorded during our 1st annual International BBQ podcast. This is our second attempt interviewing James Arlen (@myrcurial) who is a Infosec Geek, Hacker, Social Activist, Author, Speaker and Parent. James was recently a speaker at Notacon 6, DEFCON 17 and HAR. You can watch his recent talks on Vimeo. In this interview James talks about hacker pyramid at DEFCON this year, his experience at HAR, his recent speaking engagements, Hackerspaces, hardware hacking and much more.

Oh, don’t forget to check out MiniSoOnCon! MiniSoOnCon is a Southern Ontario Hackerspaces / Makers Mini-Conference October 2nd and 3rd, 2009 in Hamilton, Ontario.

Special thanks to James for his patience in our convoluted editing process (@securid)….

Security Justice Special Edition – Hacking your Car with OpenOtto

Tom — Wed, 13 May 2009 01:41:50 +0000

In this special edition of Security Justice Dave, Tom and Chris interview Tiffany Rad who is one of the co-founders of the OpenOtto project. The goal of the OpenOtto Project is to provide complete free and open access to the networked electronic devices in an automobile. Yes, you can turn your car into a car like Knight Rider (without David Hasselhoff…sorry ladies), create your own “OnStar” and even improve your gas mileage! Here is a short summary of OpenOtto from Tiffany’s blog:

“You don’t have to be David Hasselhoff in Knight Rider to have your car talk to you. OpenOtto is a platform for developing vehicle aware products for the consumer and industrial markets. While it will not ask you how you’re doing this evening, most people don’t realize how much information your car’s computer can tell you. OpenOtto consists of a hardware interface to your car’s OBD II connector as well as an extensible software platform for communicating with all networked electronic devices in the car. Designed for flexibility and scalability, it is easily expandable to future vehicle capabilities.”

Tiffany Rad is president of ELCnetworks, LLC., a technology and business development consulting firm and is also a part-time professor in the computer science department at the University of Southern Maine teaching computer law and ethics.

You can find out more about the OpenOtto project via Tiffany’s blog and the official OpenOtto web site. Thanks again to Tiffany for being a guest on our show. Please send show feedback to feedback[aT]securityjustice.com or comment below.

Security Justice Special Edition – Notacon 2009 with Froggy and Tyger

Tom — Sat, 14 Feb 2009 02:26:14 +0000

This fun special edition episode was recorded last year at the Ohio Linux Fest. The reason it took so long to release was mostly because of the “editing challenges” (Froggy likes to hijack our podcasts) and we wanted to release this at the beginning of 2009 to drum up some hype for Notacon 6 which will be held April 16th – 19th, 2009 in Cleveland Ohio.

Dave and Tom interview two of the Notacon founders, Froggy and Tyger. Froggy and Tyger talk about what Notacon is, some of the cool talks this year and why you need to go! Froggy also gives some details on the new venue and what you can expect this year.

Want more information about Notacon and how to register? Check out the Notacon web site for all the details. Security Justice will be there!

Security Justice Special Edition – ShmooCon 2009 details with Bruce Potter

Tom — Fri, 31 Oct 2008 01:40:02 +0000

In this special edition of Security Justice Dave and Tom interview Bruce Potter founder of the Shmoo Group and ShmooCon.

ShmooCon is February 6th – 8th 2009 at the Wardman Park Marriott in Washington DC. Registration begins November 1st at noon eastern standard time! Check out the ShmooCon website for more details. Bruce talks about some of the background of ShmooCon, the Shmoo Group and of course Shmoo Ball’s and associated launching devices (aka: cannons)! Bruce also talks about some of the new things at this years ShmooCon and the need for new speakers.

Thanks again to Bruce for being our guest on the show!

Security Justice Special Edition – Chris Nickerson from the Tiger Team TV show

Tom — Mon, 20 Oct 2008 01:52:34 +0000

In this special edition of Security Justice Dave and Tom interview Chris Nickerson from the “Tiger Team” TV show which premiered on TruTV late last year. The Tiger Team TV show followed a group of penetration testers as they conducted covert security assessments for a high-end jewelry store and an exclusive car dealership. If you have seen the TV show then you probably remember Chris as the guy driving away with the yellow Lotus after his team successfully gained entry to the car dealership!

Chris is currently the owner of Lares Consulting which is a vendor-independent security consulting firm that helps companies secure electronic, physical, intellectual and financial assets through a unique blend of assessment, testing, and coaching. He is also a frequent speaker at various security conferences, most recently at OWASP NY.

Chris describes what it was like filming the TV show, how the show got started and also talks about interesting things when working with a reality TV show crew! He also talks about how he got into the security industry and some of the interesting things Lares Consulting is doing.

Thanks again to Chris for being our guest on the show!

Security Justice Special Edition – Int Eighty & Remington Forbes from DualCORE

Tom — Wed, 08 Oct 2008 01:21:41 +0000

In this special edition of Security Justice Dave interviews Int Eighty and Remington Forbes from DualCORE. DualCORE is a nerdcore hip hop rap group from Cincinnati Ohio. If you have ever been to ShmooCon, Defcon, Con on the Cob, Ohio Linux Fest, Toorcon, Day-Con or Phreaknic (and other con’s) then you have probably listened to them or seen them live. Critics have said the following about DualCORE:

“In all, their music is more than a collection inside jokes for nerds. It is the culmination of their passion for hip-hop and hacking. We need more music like this.”

“Dual Core … so good you don’t have to be nerdcore to like it.”

“Honestly, there’s nothing that mainstream music has that can top this in music, lyrics, production or overall quality.”

Check out the latest happenings with DualCORE and if you are going to the following con’s…they will be playing live!

October, 11 2008 09:00 PM – Ohio Linux Fest
Columbus Convention Center, Columbus, Ohio 43215 – Free
Playing the OLF after-party again. Woo woo!

October, 11 2008 11:00 PM – Day-Con
33 East Fifth Street, Dayton, Ohio 45402 – TBD

October, 24 2008 08:00 PM – Phreaknic 12
211 N First St, Nashville, Tennessee 37213

You can buy DualCORE’s albums online: Zero-One, Lost Reality, and Super Powers.

Additional links mentioned in the show…Penny Arcade and Lactose Intolerance. Link to DualCORE videos!

Thanks again to DualCORE for being our guest and for providing the great tunes for our podcast!

Please send feedback to feedback [aT] securityjustice.com or comment below. Thanks for listening!

Security Justice Special Edition – Jay Beale of Intelguardians

Tom — Sun, 03 Aug 2008 00:54:08 +0000

In this special edition of Security Justice Dave and Tom interview Jay Beale, co-founder of Intelguardians. Jay is the author of nine books, creator of Bastille Linux (a well known system lockdown and audit tool), and developed the Center for Internet Security’s Unix Scoring Tool. He also focuses his energies on the OVAL project, where he works with government and industry to standardize and improve the field of vulnerability assessment. Jay is a frequent speaker at some of the worlds leading security conferences including Defcon and ShmooCon.

In this podcast Jay talks about the DNS vulnerability and (in Jay’s opinion) why Dan Kaminsky went about releasing the vulnerability the way he did. Jay also talks about his two upcoming talks at Defcon 16:

Owning the Users with The Middler – Saturday, August 9th @ Noon
They’re Hacking Our Clients! Introducing Free Client-side Intrusion Prevention – Sunday, August 10th @ Noon

If you are going to Defcon this year be sure to check out Jay’s talks! Our sponsor DualCore will also be playing live at theSummit EFF/THF Fund Raiser on Thursday, August 7th @ 9pm at the top of the Riviera!

Thanks again to Jay for being a guest on our podcast!

Please send feedback to feedback [aT] securityjustice.com or comment below. Thanks for listening!

Security Justice Special Edition – Fast-Track and BackTrack 3 with Dave Kennedy

Tom — Fri, 25 Jul 2008 19:06:36 +0000

In this special edition of Security Justice…Dave and Matt interview Dave Kennedy of SecureState to talk about the Fast-Track script he developed for BackTrack 3 (the best LiveCD security distribution available).

The Fast-Track tool combines multiple attacks and gives menu driven automation to pentesting. Fast-Track automates several different types of attacks including Metasploit’s “AutoPwn” and MSSQL brute forcing as well as updates for BackTrack 3.

Dave Kennedy will also be speaking on a panel at Defcon 16 titled Black vs. White: The complete life cycle of a real world breach.

Please send feedback to feedback [aT] securityjustice.com or comment below. Thanks for listening!

Security Justice – WWJSD Special Edition

Tom — Tue, 24 Jun 2008 23:03:46 +0000

WWJSD (What Would Jason Scott Do?)
This is a quick talk about our friend Jason Scott. The quick version is if you do dumb things on the net sometimes you see things you wish you hadn’t seen. (Over 140,000+ people have been scared!) Jason, you are our hero!

More information below:

http://ascii.textfiles.com/archives/000278.html

http://ascii.textfiles.com/archives/000645.html

This commentary was made the same night as Episode #2 of the Security Justice podcast.