Security Now

S١ E١ · ١٨ أغسطس ٢٠٠٥

As the Worm Turns — the first Internet worms of 2005 الحلقة ١

How a never-disclosed Windows vulnerability was quickly reverse-engineered from the patches to fix it and turned into more than 12 potent and damaging Internet worms in three days. What does this mean for the future of Internet security?

S١ E٢ · ٢٥ أغسطس ٢٠٠٥

HoneyMonkeys الحلقة ٢

How Microsoft's "HoneyMonkey" system works, how it finds malicious web sites before they find you, and what Microsoft is doing (and NOT doing) with this valuable security information it is now collecting.

S١ E٣ · ١ سبتمبر ٢٠٠٥

NAT Routers as Firewalls الحلقة ٣

Most people don't think of common NAT routers as hardware firewalls, but ANY NAT router inherently provides terrific security and protection against incoming malicious traffic. Learn how and why this is, and which default settings MUST be changed to lock down the security of your NAT router.

S١ E٤ · ٨ سبتمبر ٢٠٠٥

Personal Password Policy (1) الحلقة ٤

Everyone who uses web-based services such as eBay, Amazon, and Yahoo, needs to authenticate their identity with passwords. Password quality is important since easily guessable passwords can be easily defeated. Leo and I recap a bit from last week's program, then discuss passwords. We suggest an approach that anyone can use to easily create unbreakable passwords.

S١ E٥ · ١٥ سبتمبر ٢٠٠٥

Personal Password Policy (2) الحلقة ٥

Our previous episode (#4), which discussed personal password policies, generated so much great listener feedback, thoughts, ideas, and reminders about things we didn't mention, that we decided to wrap up this important topic with a final episode to share listeners' ideas and to clarify some things we left unsaid.

S١ E٦ · ٢٢ سبتمبر ٢٠٠٥

Mechanical & Electromagnetic Information Leakage الحلقة ٦

Triggered by a recent report of three UC Berkeley researchers recovering text typed at a keyboard (any keyboard) after simply listening to ten minutes of typing, Leo and I discuss the weird realm of "alternative information leakage" — from CRT glowing, to radio emissions, to LEDs lamps on the front of network equipment . . . to a microphone listening to anyone typing.

S١ E٧ · ٢٩ سبتمبر ٢٠٠٥

SPYaWAREness الحلقة ٧

Any contemporary discussion of threats to Internet security must discuss the history, current situation, and future of spyware. Leo and I spend a little more time than usual covering many aspects of this important topic. DON'T MISS the Episode Notes Page for this episode!

S١ E٨ · ٦ أكتوبر ٢٠٠٥

Denial of Service (DoS) Attacks الحلقة ٨

Distributed Denial of Service (DDoS) attacks are occurring with ever-greater frequency every day. Although these damaging attacks are often used to extort high-profile gaming and gambling sites before major gambling events, attacks are also launched against individual users who do something to annoy "zombie fleet masters" while they are online. Some router and firewall vendors claim that their devices prevent DDoS attacks. Is that possible? What can be done to dodge the bullet of a DDoS attack launched against you while you're online?

S١ E٩ · ١٣ أكتوبر ٢٠٠٥

Rootkits الحلقة ٩

This week we discuss "rootkit technology". We examine what rootkits are, why they have suddenly become a problem, and how that problem is rapidly growing in severity. We also discuss their detection and removal and point listeners to some very effective free rootkit detection solutions.

S١ E١٠ · ٢٠ أكتوبر ٢٠٠٥

Open Wireless Access Points الحلقة ١٠

Leo and I examine the security and privacy considerations of using non-encrypted (i.e. 'Open') wireless access points at home and in public locations. We discuss the various ways of protecting privacy when untrusted strangers can 'sniff' the data traffic flowing to and from your online PC.

S١ E١١ · ٢٧ أكتوبر ٢٠٠٥

Bad WiFi Security (WEP and MAC address filtering) الحلقة ١١

Leo and I answer some questions arising from last week's episode, then plow into a detailed discussion of the lack of security value of MAC address filtering, the futility of disabling SSID's for security, and the extremely poor security offered by the first-generation WEP encryption system.

S١ E١٢ · ٣ نوفمبر ٢٠٠٥

Sony's الحلقة ١٢

Leo and I discuss details and consequences of Sony Corporation's alarming "Rootkit" DRM (digital rights management) copy protection scheme. This poorly written software unnecessarily employs classic rootkit technology (see episode #9) to hide from its users after installation. It can not be uninstalled easily, it can be easily misused for malicious purposes, and it has been implicated in many repeated BSOD "blue screen of death" PC crashes.

S١ E١٣ · ١٠ نوفمبر ٢٠٠٥

Unbreakable WiFi Security الحلقة ١٣

Leo and I follow-up on last week's discussion of the Sony Rootkit debacle with the distressing news of "phoning home" (spyware) behavior from the Sony DRM software, and the rootkit's exploitation by a new malicious backdoor Trojan. We then return to complete our discussion of WiFi security, demystifying the many confusing flavors of WPA encryption and presenting several critical MUST DO tips for WPA users.

S١ E١٤ · ١٧ نوفمبر ٢٠٠٥

Virtual Private Networks (VPN): Theory الحلقة ١٤

Leo and I first follow-up on the past two episodes, discussing new developments in the continuing Sony Rootkit DRM drama, and clearing up some confusion over the crackability of WPA passphrases. Then, in this first of our two-part series on VPNs, we discuss the theory of VPN connections and tunnels, explaining how they work and why they represent such a terrific solution for anyone who needs security while they're away from home.

S١ E١٥ · ٢٤ نوفمبر ٢٠٠٥

VPN Secure Tunneling Solutions الحلقة ١٥

Leo and I discuss the use of SSL and SSH encrypted tunneling for providing privacy and security whenever an insecure local network is being used — such as at an open WiFi hotspot or when using a hotel's network. These solutions are not transparent and tend to be configuration intensive. They also require the use of a "server" of some sort at the user's home or office. This makes these approaches less suitable for casual users, but offers a solution for the more technically inclined road warriors.

S١ E١٦ · ١ ديسمبر ٢٠٠٥

Listener feedback Q&A #1 الحلقة ١٦

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world 'application notes' for any of the security technologies we have previously discussed.

S١ E١٧ · ٨ ديسمبر ٢٠٠٥

PPTP and IPSec VPN Technology الحلقة ١٧

In our continuing exploration of VPN technology for protecting network users on networks they don't control, Leo and I discuss the oldest "original" VPN protocols: Industry standard IPSec, and Microsoft's own PPTP and L2TP/IPSec. We examine and explain the trouble with interconnecting Windows machines to third-party VPN routers and examine the many reasons these older technologies are probably not optimal for on-the-go road warriors.

S١ E١٨ · ١٥ ديسمبر ٢٠٠٥

Hamachi Rocks! الحلقة ١٨

This week Leo and I discuss and describe the brand new, ready to emerge from a its long development beta phase, ultra-secure, lightweight, high-performance, highly-polished, multi-platform, peer-to-peer and FREE! personal virtual private networking system known as "Hamachi". After two solid weeks of testing and intense dialog with Hamachi's lead developer and designer, I have fully vetted the system's security architecture and have it running on many of my systems. While I am travelling to Toronto this week, Hamachi is keeping my roaming laptop securely and directly connected to all of my machines back home. Don't miss this one!

S١ E١٩ · ٢٢ ديسمبر ٢٠٠٥

VPNs Three: Hamachi, iPig, and OpenVPN الحلقة ١٩

Leo and I wrap up our multi-week, in-depth coverage of PC VPN solutions by discussing some aftermath of the zero-configuration Hamachi system; introducing "iPig," a very appealing new zero-configuration VPN contender; and describing the many faces of OpenVPN, the "Swiss army knife" of VPN solutions.

S١ E٢٠ · ٢٩ ديسمبر ٢٠٠٥

A SERIOUS new Windows vulnerability — and Listener Q&A الحلقة ٢٠

On December 28th a serious new Windows vulnerability has appeared and been immediately exploited by a growing number of malicious web sites to install malware. Many worse viruses and worms are expected soon. We start off discussing this and our show notes provides a quick necesary workaround until Microsoft provides a patch. Then we spend the next 45 minutes answering and discussing interesting listener questions.

S١ E٢١ · ٥ يناير ٢٠٠٦

The Windows MetaFile (WMF) Vulnerability الحلقة ٢١

Leo and I discuss everything known about the first serious Windows security exploits of the New Year, caused by the Windows MetaFile (WMF) vulnerability. In our show's first guest appearance, we are joined by Ilfak Guilfanov, the developer of the wildly popular -- and very necessary -- temporary patch that was used by millions of users to secure Windows systems while the world waited for Microsoft to respond.

S١ E٢٢ · ١٢ يناير ٢٠٠٦

The Windows MetaFile Backdoor? الحلقة ٢٢

Leo and I carefully examine the operation of the recently patched Windows MetaFile vulnerability. I describe exactly how it works in an effort to explain why it doesn't have the feeling of another Microsoft "coding error". It has the feeling of something that Microsoft deliberately designed into Windows. Given the nature of what it is, this would make it a remote code execution "backdoor". We will likely never know if this was the case, but the forensic evidence appears to be quite compelling.

S١ E٢٣ · ١٩ يناير ٢٠٠٦

GRC's الحلقة ٢٣

Leo and I "close the backdoor" on the controversial Windows WMF Metafile image code execution (MICE) vulnerability. We discuss everything that's known about it, separate the facts from the spin, explain exactly which Windows versions are vulnerable and why, and introduce a new piece of GRC freeware: MouseTrap which determines whether any Windows or Linux/WINE system has 'MICE'.

S١ E٢٤ · ٢٦ يناير ٢٠٠٦

Listener Feedback Q&A #3 الحلقة ٢٤

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world "application notes" for any of the security technologies we have previously discussed.

S١ E٢٥ · ٢ فبراير ٢٠٠٦

How the Internet Works (1) الحلقة ٢٥

Steve talks about the Kama Sutra virus, scheduled to strike tomorrow, and PC World's anti-virus roundup. Then we delve into How the Internet Works, part 1. We'll wrap things up next week.

S١ E٢٦ · ٩ فبراير ٢٠٠٦

How the Internet Works (2) الحلقة ٢٦

Part 2 of Steve's discussion of how the fundamental Internet technologies work. This and the previous episode will provide the foundation for our future podcasts on Internet security issues.

S١ E٢٧ · ١٦ فبراير ٢٠٠٦

How Local Area Networks Work, Part 1 الحلقة ٢٧

Steve continues to lay a foundation on understanding networking. This week, part one of how LANs work. We cover DHCP, Subnet Masks, Routers, and hubs. We'll conclude with part two on episode 29.

S١ E٢٨ · ٢٣ فبراير ٢٠٠٦

Listener Feedback Q&A #4 الحلقة ٢٨

Steve answers your questions on this episide. With further clarification on VPN security, Hamachi, and the answer to the eternal question, which operating system is the most secure.

S١ E٢٩ · ٢ مارس ٢٠٠٦

Ethernet Insecurity الحلقة ٢٩

In this week's marathon edition Steve tackles security issues inherent to Ethernet, including ARP spoofing.

S١ E٣٠ · ١٠ مارس ٢٠٠٦

Cryptographic Issues الحلقة ٣٠

This week Steve takes a look at how cryptography is used and the difficult issues strong crypto raises.

S١ E٣١ · ١٦ مارس ٢٠٠٦

Symmetric Stream Ciphers الحلقة ٣١

This week Steve continues his discussion of crypto with a look at secret decoder rings and one-time pads.

S١ E٣٢ · ٢٣ مارس ٢٠٠٦

Listener Feedback Q&A #5 الحلقة ٣٢

Episode 32 is our monthly question and answer session.

S١ E٣٣ · ٣٠ مارس ٢٠٠٦

Symmetric Block Ciphers الحلقة ٣٣

Part three of Steve's overview of cryptography looks at symmetric block ciphers.

S١ E٣٤ · ٦ أبريل ٢٠٠٦

Public Key Cryptography الحلقة ٣٤

This week Steve explains how public key cryptography works, and we welcome our new sponsor, Astaro! Thanks so much for the support guys.

S١ E٣٥ · ١٣ أبريل ٢٠٠٦

Cryptographic Hashes الحلقة ٣٥

This week Steve talks about how cryptographic hashes work and are used to verify the integrity of files and email. We also talk about email signing and recommend the Gnu Privacy Guard.

S١ E٣٦ · ٢٠ أبريل ٢٠٠٦

Listener Feedback Q&A #6 الحلقة ٣٦

As usual on every fourth episode, Steve answers listener questions.

S١ E٣٧ · ٢٧ أبريل ٢٠٠٦

Crypto Series Wrap-up الحلقة ٣٧

We wrap up our talk about cryptography with a discussion of prime number generation, key recovery, and digital certificates.

S١ E٣٨ · ٤ مايو ٢٠٠٦

Browser Security الحلقة ٣٨

Why is Internet Explorer so insecure? What can you do to secure it? And why is it so hard to make a secure browser? Steve talks about security policy vs. browser flaws, how he uses IE safely, and why Java and Javascript are inherently more secure than ActiveScript and ActiveX.

S١ E٣٩ · ١١ مايو ٢٠٠٦

Buffer Overruns الحلقة ٣٩

Buffer overflows... they're the most common kind of security flaw, but what are they and how do they happen? Finally, how can we protect ourselves from them? Steve explains all.

S١ E٤٠ · ١٨ مايو ٢٠٠٦

Listener Feedback Q&A #7 الحلقة ٤٠

As he does every fourth episode, Steve answers your questions. But first, an update on some recent security news...

S١ E٤١ · ٢٥ مايو ٢٠٠٦

TrueCrypt الحلقة ٤١

The ultimate encryption program, free, open source, strong, and flexible: Truecrypt.

S١ E٤٢ · ١ يونيو ٢٠٠٦

NAT Traversal الحلقة ٤٢

Steve explains the clever technique that Skype and other programs use to end around NAT routers.

S١ E٤٣ · ٨ يونيو ٢٠٠٦

Open Ports الحلقة ٤٣

Ever wonder what a port is? Steve explains what they are and what terms like "stealth ports" and "port sniffing mean." Leo reads a little poetry.

S١ E٤٤ · ١٥ يونيو ٢٠٠٦

Listener Feedback Q&A #8 الحلقة ٤٤

On this episode, one dozen questons and answers

S١ E٤٥ · ٢٢ يونيو ٢٠٠٦

The 'Hosts' File الحلقة ٤٥

This week Steve explains the mysterious HOSTS file - part of Windows, OS X, Linux, and many other operating systems. He talks about how malicious programs may misuse it, and how you can use it to protect yourself.

S١ E٤٦ · ٢٩ يونيو ٢٠٠٦

Router Logs الحلقة ٤٦

This week Steve tells us what to do with the router logs. What a router can (and can't) tell you about your security situation?

S١ E٤٧ · ٦ يوليو ٢٠٠٦

Internet Weaponry الحلقة ٤٧

This week Steve tells us about distributed denial of service attacks and how hackers use IRC botnets to create them.

S١ E٤٨ · ١٣ يوليو ٢٠٠٦

Listener Feedback Q&A #9 الحلقة ٤٨

How big can a HOSTS file get? Does a firewall slow you down? A plan to fight phishers. All on this week's edition of Security Now! with Steve Gibson.

S١ E٤٩ · ٢٠ يوليو ٢٠٠٦

The NETSTAT Command الحلقة ٤٩

How can you tell what your computer is doing on the net? Netstat. This handy program comes with almost all operating systems. On Windows, click Start, then select Command Prompt from the Programs->Accessories menu. To run Netstat, type netstat at the command prompt. For more readable output type netstat -ab.

S١ E٥٠ · ٢٧ يوليو ٢٠٠٦

Virtual Machine History & Technology الحلقة ٥٠

Virtualization, its history and uses in security.

S١ E٥١ · ٣ أغسطس ٢٠٠٦

Vista's Virgin Stack الحلقة ٥١

Will Windows Vista be secure? According to a new study from Symantec, the decision to re-write the networking stack from the ground up means it will be much less secure than XP.

S١ E٥٢ · ١٠ أغسطس ٢٠٠٦

A Busy Week for Security Troubles الحلقة ٥٢

Steve normally answers questions on shows divisible by four, but not this week. There's just too much security news including javascript exploits, Ebay gaming, and the sale of Hamachi.

S١ E٥٣ · ١٧ أغسطس ٢٠٠٦

VMware الحلقة ٥٣

More on Virtualization technology, with a special focus on VMWare's Virtual Appliances.

S١ E٥٤ · ٢٤ أغسطس ٢٠٠٦

Blue Pill الحلقة ٥٤

The Blue Pill demonstrates a serious security concern with the Hypervisor mode in Windows Vista. Steve discusses the threat and arguments against it.

S١ E٥٥ · ٣١ أغسطس ٢٠٠٦

Application Sandboxes الحلقة ٥٥

Sandboxing your browser to keep your system secure.

S١ E٥٦ · ٧ سبتمبر ٢٠٠٦

Listener Feedback Q&A #10 الحلقة ٥٦

Our regular session of questions and answers deals with Vista security, remote access, the HOSTS files, and Zone Alarm.

S١ E٥٧ · ١٤ سبتمبر ٢٠٠٦

Virtual PC versus VMware الحلقة ٥٧

Steve wraps up his rundown of Virtualization programs with a look at Microsoft's free Virtual PC.

S١ E٥٨ · ٢١ سبتمبر ٢٠٠٦

Two New Critical Windows Problems الحلقة ٥٨

Guest: Eric Sites, VP R&D Sunbelt Software Two serious Windows flaws have surfaced today. One, a zero-day exploit, makes it possible for any web site (or HTML email) to take over a Windows machine, even if it's been fully patched. The other is a file corruption error on Windows 2000 NTFS systems introduced by a Microsoft patch.

S١ E٥٩ · ٢٨ سبتمبر ٢٠٠٦

Comparing الحلقة ٥٩

We conclude our coverage of virtual machine software with a review of Parallels - the fastest of the VM programs.

S١ E٦٠ · ٥ أكتوبر ٢٠٠٦

Listener Feedback Q&A #11 الحلقة ٦٠

S١ E٦١ · ١٢ أكتوبر ٢٠٠٦

ISP Privacy and Security الحلقة ٦١

First a review of three more zero day exploits in Windows XP, then a look at what your ISP knows about you and how to protect your privacy.

S١ E٦٢ · ١٩ أكتوبر ٢٠٠٦

Internet Proxies الحلقة ٦٢

How proxy servers work to both speed up access and protect users.

S١ E٦٣ · ٢٦ أكتوبر ٢٠٠٦

MojoPac الحلقة ٦٣

MojoPac software lets you put your entire Windows configuration on a thumbdrive or portable disk and take it with you anywhere. It works surprisingly well, but there are some caveats. Steve reviews.

S١ E٦٤ · ٢ نوفمبر ٢٠٠٦

Listener Feedback Q&A #12 الحلقة ٦٤

S١ E٦٥ · ٩ نوفمبر ٢٠٠٦

Why Is Security So Difficult? الحلقة ٦٥

What makes it so hard to secure Windows? Steve says ultimate security is ultimately impossible.

S١ E٦٦ · ١٦ نوفمبر ٢٠٠٦

Windows Vista Security الحلقة ٦٦

Why the 64-bit version of Windows is both more secure and less compatible. Steve explains why.

S١ E٦٧ · ٢٣ نوفمبر ٢٠٠٦

Kernel Patch Protection الحلقة ٦٧

Microsoft is touting PatchGuard, a new security feature in 64-bit versions of XP and Vista. Steve explains how easy it is to hack, and what it's really for if it's not for deterring hackers.

S١ E٦٨ · ٣٠ نوفمبر ٢٠٠٦

Listener Feedback Q&A #13 الحلقة ٦٨

Our monthly question and answer session goes long - but there's lots of good information.

S١ E٦٩ · ٧ ديسمبر ٢٠٠٦

The Social Implications of Internet Anonymity الحلقة ٦٩

Is there such a thing as anonymity on the Internet? How important is it?

S١ E٧٠ · ١٤ ديسمبر ٢٠٠٦

Achieving Internet Anonymity الحلقة ٧٠

Two interesting implementations of Internet anonymization: The Freenet Project for anonymously storing and transmitting files, and Tor, "the onion router" which can anonymize all your Internet accesses.

S١ E٧١ · ٢١ ديسمبر ٢٠٠٦

SecurAble الحلقة ٧١

Steve's latest free security application is called Securable. It's not quite ready yet, but Steve gives us a preview in this episode.

S١ E٧٢ · ٢٨ ديسمبر ٢٠٠٦

Listener Feedback Q&A #14 الحلقة ٧٢

Our monthly question and answer segment covers TOR details, overheating hard drives, and what happens to your data when you die...

S١ E٧٣ · ٤ يناير ٢٠٠٧

Digital Rights Management (DRM) الحلقة ٧٣

Steve and Leo survey the history and evolution of media property rights and the technologies used to enforce them as they prepare for next week's show: a look at AACS, the most pervasive and invasive system for digital rights management ever created.

S١ E٧٤ · ١٢ يناير ٢٠٠٧

Peter Gutmann on Vista DRM الحلقة ٧٤

Steve and Leo interview Peter Gutmann about his paper A Cost Analysis of Windows Vista Content Protection.

S١ E٧٥ · ١٢ يناير ٢٠٠٧

Vista DRM Wrap-Up & Announcing “SecurAble” الحلقة ٧٥

We wrap up our discussion of the premium content protection features in Vista and announce Steve's newest free security utility: Securable.

S١ E٧٦ · ٢٥ يناير ٢٠٠٧

Listener Feedback Q&A #15 الحلقة ٧٦

Our monthly question and answer segment covers DEP on the Mac, HD-DVD decryption, and email privacy...

S١ E٧٧ · ٣١ يناير ٢٠٠٧

Microsoft on Vista DRM الحلقة ٧٧

Steve and Leo discuss Dave Marsh's response on behalf of Microsoft to Peter Gutmann's paper about Windows Vista Content Protection.

S١ E٧٨ · ٧ فبراير ٢٠٠٧

DEP in Depth الحلقة ٧٨

Hardware Data Execution Protection is one of the best ways to protect your PC from hackers. Steve discusses how it works, how to turn it on, and the possible pitfalls of using it.

S١ E٧٩ · ١٥ فبراير ٢٠٠٧

Backtracking Spoofed Spam eMail الحلقة ٧٩

How do spambots work, why do spammers need them, and the best way to block them and prevent spam.

S١ E٨٠ · ٢٢ فبراير ٢٠٠٧

Listener Feedback Q&A #16 الحلقة ٨٠

Our monthly question and answer segment covers spam spoofing, VPN mysteries, and online backup security...

S١ E٨١ · ١ مارس ٢٠٠٧

Hard Drive Unreliability الحلقة ٨١

Google's massive study of hard drive reliability yields some surprising results. Read more at http://www.grc.com/sn/notes-081.htm

S١ E٨٢ · ٨ مارس ٢٠٠٧

Cyber Warfare الحلقة ٨٢

Steve comments on the Federal Computer Week article Cyber officials: Chinese hackers attack 'anything and everything'.

S١ E٨٣ · ١٥ مارس ٢٠٠٧

UAC in Depth الحلقة ٨٣

A closer look at Vista's User Access Control.

S١ E٨٤ · ٢٢ مارس ٢٠٠٧

Listener Feedback Q&A #17 الحلقة ٨٤

S١ E٨٥ · ٢٩ مارس ٢٠٠٧

Intro to Web Code Injection الحلقة ٨٥

Jikto is a Javascript tool that can take over your computer and use it to find sites with vulnerabilities. We describe it and the cross-site scripting flaws it looks for.

S١ E٨٦ · ٥ أبريل ٢٠٠٧

Cross-Site Scripting الحلقة ٨٦

Updates on the Animated Cursor Vulnerability, a recommendation for security software from eEye, and how the Sony Reader works, plus an in depth discussion of scripting vulnerabilities.

S١ E٨٧ · ١٢ أبريل ٢٠٠٧

SQL Injection Exploits الحلقة ٨٧

Another common attack vector in web software is the SQL injection. Steve explains what it is and how it happens.

S١ E٨٨ · ١٩ أبريل ٢٠٠٧

Listener Feedback Q&A #18 الحلقة ٨٨

S١ E٨٩ · ٢٦ أبريل ٢٠٠٧

Even More Badly Broken WEP الحلقة ٨٩

WEP gets even more insecure with a new cracking technique that's 1000 times faster.

S١ E٩٠ · ٣ مايو ٢٠٠٧

Multifactor Authentication الحلقة ٩٠

Steve explains the theory and practice of multifactor authentication which uses combinations of "something you know," "something you have," and "something you are" to provide stronger remote authentication than traditional, unreliable single-factor username and password authentication.

S١ E٩١ · ١٠ مايو ٢٠٠٧

Marc Maiffret الحلقة ٩١

Guest: Marc Maiffret of eEye Digital Security Marc talks about Windows and Mac security, the coming threat from web applications, and eEye's free, all-in-one protection program, Blink Personal Edition.

S١ E٩٢ · ١٧ مايو ٢٠٠٧

Listener Feedback Q&A #19 الحلقة ٩٢

S١ E٩٣ · ٢٤ مايو ٢٠٠٧

Microsoft Patent Wars الحلقة ٩٣

Steve looks at software patents and the Microsoft challenge to open source software from the point of view of a developer, patent holder, and expert witness in patent cases.

S١ E٩٤ · ٣١ مايو ٢٠٠٧

The Fourth Factor الحلقة ٩٤

We've already talked about the three factors of authentication: something you know (e.g. a password), something you have (a passcard), and something you are (a fingerprint). Now Steve talks about the fourth factor of authentication: someone you know, or who knows you.

S١ E٩٥ · ٧ يونيو ٢٠٠٧

OpenID الحلقة ٩٥

Open ID, how it works and what it means to you (not having to remember so many passwords for starters).

S١ E٩٦ · ١٥ يونيو ٢٠٠٧

Listener Feedback Q&A #20 الحلقة ٩٦

Steve answers listener mail on subjects like authentication and more...

S١ E٩٧ · ٢٢ يونيو ٢٠٠٧

Operation: Bot Roast الحلقة ٩٧

The FBI says it has uncovered one million computers that are being used by hackers without their owners' knowledge. Today Steve talks about BotNets and the FBI's Operation Bot Roast.

S١ E٩٨ · ٢٨ يونيو ٢٠٠٧

Internet Identity Metasystems الحلقة ٩٨

Steve continues our discussion of authentication with a look at Internet identity metasystems.

S١ E٩٩ · ٥ يوليو ٢٠٠٧

Trusted Platform Module (TPM) الحلقة ٩٩

The Trusted Platform Module - a hardware solution to security now shipping on many computers.

S١ E١٠٠ · ١٢ يوليو ٢٠٠٧

Listener Feedback Q&A #21 الحلقة ١٠٠

Your questions, Steve's answers as we complete 100 consecutive weeks of shows!

S١ E١٠١ · ١٩ يوليو ٢٠٠٧

Are You Human? الحلقة ١٠١

Steve looks at Captcha and Re-Captcha - the pros and cons of trying to distinguish humans from robots, with a side look at Alan Turing and Jeff Hawkins's On Intelligence.

S١ E١٠٢ · ٢٦ يوليو ٢٠٠٧

Listener Mailbag #1 الحلقة ١٠٢

Our first mailbag episode with 20 questions and comments from our listeners.

S١ E١٠٣ · ٢ أغسطس ٢٠٠٧

PayPal Security Key الحلقة ١٠٣

A closer look at the Paypal Security Key with Michael Vergara, Director of Account Protections at Paypal.

S١ E١٠٤ · ٩ أغسطس ٢٠٠٧

Listener Feedback Q&A #22 الحلقة ١٠٤

For 16Kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written - Spinrite 6.

S١ E١٠٥ · ١٦ أغسطس ٢٠٠٧

Firewall LeakTesting الحلقة ١٠٥

Steve, the creator of the original leak test program, talks about leak testing and how hackers work to get around them.

S١ E١٠٦ · ٢٣ أغسطس ٢٠٠٧

Listener Mailbag #2 الحلقة ١٠٦

Our second mailbag episode with a dozen questions and comments from our listeners.

S١ E١٠٧ · ٣٠ أغسطس ٢٠٠٧

PIP & Even More Perfect Passwords الحلقة ١٠٧

Steve looks at Verisign's Personal Identity Provider, an OpenID service that works with the Paypal token, and talks about updates to his Perfect Password page.

S١ E١٠٨ · ٦ سبتمبر ٢٠٠٧

Listener Feedback #23 الحلقة ١٠٨

S١ E١٠٩ · ١٣ سبتمبر ٢٠٠٧

GRC's eCommerce System الحلقة ١٠٩

Steve talks about developing his in-house E-Commerce system, and how he solved some issues other e-commerce system handle poorly. We also talk about the pleasures of assembly language programming.

S١ E١١٠ · ٢٠ سبتمبر ٢٠٠٧

Listener Feedback #24 الحلقة ١١٠

Our regular mailbag episode with a dozen questions and comments from our listeners, plus an extra one for fun.

S١ E١١١ · ٢٧ سبتمبر ٢٠٠٧

OpenID Precautions الحلقة ١١١

Steve responds to criticisms of the OpenID system and offers some issues to consider when you use it.

S١ E١١٢ · ٤ أكتوبر ٢٠٠٧

Listener Feedback #25 الحلقة ١١٢

S١ E١١٣ · ١١ أكتوبر ٢٠٠٧

Roaming Authentication الحلقة ١١٣

How do you solve the problem of secure access to data on the road? Steve shows how he tackled roaming authentication at grc.com and proposes a general solution for everyone.

S١ E١١٤ · ١٨ أكتوبر ٢٠٠٧

Listener Feedback #26 الحلقة ١١٤

Our regular mailbag episode with a dozen questions and comments from our listeners including our Great Idea of the Week...

S١ E١١٥ · ٢٥ أكتوبر ٢٠٠٧

Perfect Paper Passwords الحلقة ١١٥

Following up on Episode 113, Roaming Authentication, Steve proposes a great way to strengthen remote access using Perfect Paper Passwords.

S١ E١١٦ · ١ نوفمبر ٢٠٠٧

Listener Feedback #27 الحلقة ١١٦

S١ E١١٧ · ٨ نوفمبر ٢٠٠٧

Even More Perfect paper Passwords الحلقة ١١٧

Perfect Paper Passwords version two!

S١ E١١٨ · ١٥ نوفمبر ٢٠٠٧

Listener Feedback #28 الحلقة ١١٨

S١ E١١٩ · ٢٢ نوفمبر ٢٠٠٧

PayPal and DoubleClick الحلقة ١١٩

Why does Paypal secretly send you through Doubleclick to get to some of its web pages? Steve explains how third-party cookies can violate your privacy and what to do about it.

S١ E١٢٠ · ٢٩ نوفمبر ٢٠٠٧

Listener Feedback #29 الحلقة ١٢٠

S١ E١٢١ · ٦ ديسمبر ٢٠٠٧

Is Privacy Dead? الحلقة ١٢١

Is it possible to preserve your privacy in the digital age? It's certainly worth trying.

S١ E١٢٢ · ١٣ ديسمبر ٢٠٠٧

Listener Feedback #30 الحلقة ١٢٢

Our regular mailbag episode with a dozen questions and comments from our listeners...

S١ E١٢٣ · ٢٠ ديسمبر ٢٠٠٧

Jungle Disk الحلقة ١٢٣

Steve interviews Dave Wright of JungleDisk, a data storage optimization product for Amazon's S3...

S١ E١٢٤ · ٢٧ ديسمبر ٢٠٠٧

Listener Feedback #31 الحلقة ١٢٤

S١ E١٢٥ · ٣ يناير ٢٠٠٨

Symmetric Ciphers الحلقة ١٢٥

Steve further elaborates on symmetric ciphers, the workhorses of encryption.

S١ E١٢٦ · ١٠ يناير ٢٠٠٨

Listener Feedback #32 الحلقة ١٢٦

Steve discusses Treewalkdns.com, OpenDNS, Rijndael encryption Flash animation, Ironkey, and Opera mini security FAQ.

S١ E١٢٧ · ١٧ يناير ٢٠٠٨

Corporate Security الحلقة ١٢٧

Steve talks about the challenges of corporate IT security policy and enforcement and the inherent tension between IT security staff and employees.

S١ E١٢٨ · ٢٤ يناير ٢٠٠٨

Listener Feedback #33 الحلقة ١٢٨

Steve talks about the remote code execution exploit of the Microsoft Windows TCP/IP vulnerability and answers your questions.

S١ E١٢٩ · ٣١ يناير ٢٠٠٨

Windows SteadyState الحلقة ١٢٩

Steve discusses how network administrators can protect their systems using Windows SteadyState.

S١ E١٣٠ · ٧ فبراير ٢٠٠٨

Listener Feedback #34 الحلقة ١٣٠

S١ E١٣١ · ١٤ فبراير ٢٠٠٨

FREE CompuSec الحلقة ١٣١

Microsoft's Super Patch Tuesday, Macintosh updates, Adobe Acrobat exploit, Firefox patch, Vista SP-1, and more.

S١ E١٣٢ · ٢١ فبراير ٢٠٠٨

Listener Feedback #35 الحلقة ١٣٢

S١ E١٣٣ · ٢٨ فبراير ٢٠٠٨

TrueCrypt v5.0 الحلقة ١٣٣

Steve explores whole-drive encryption and details the release of TrueCrypt 5.0.

S١ E١٣٤ · ٦ مارس ٢٠٠٨

Listener Feedback #36 الحلقة ١٣٤

S١ E١٣٥ · ١٣ مارس ٢٠٠٨

IronKey الحلقة ١٣٥

Guest: Dave Jevans, CEO of IronKey Steve interviews Dave Jevans of IronKey.

S١ E١٣٦ · ٢٠ مارس ٢٠٠٨

Listener Feedback #37 الحلقة ١٣٦

S١ E١٣٧ · ٢٧ مارس ٢٠٠٨

RAM Hijacks الحلقة ١٣٧

Steve breaks down the concept of dynamic RAM hijacking raised by the recent Princeton study.

S١ E١٣٨ · ٣ أبريل ٢٠٠٨

Listener Feedback #38 الحلقة ١٣٨

S١ E١٣٩ · ١٠ أبريل ٢٠٠٨

Network Congestion الحلقة ١٣٩

The logistics of network congestion, network neutrality and prioritized packets.

S١ E١٤٠ · ١٧ أبريل ٢٠٠٨

Listener Feedback #39 الحلقة ١٤٠

S١ E١٤١ · ٢٤ أبريل ٢٠٠٨

RSA Conference 2008 الحلقة ١٤١

ClamAV security flaw, ICQ vulnerability, Opera and more.

S١ E١٤٢ · ١ مايو ٢٠٠٨

Listener Feedback #40 الحلقة ١٤٢

S١ E١٤٣ · ٨ مايو ٢٠٠٨

YubiKey الحلقة ١٤٣

Leo and I delve into the detailed operation of the YubiKey, the coolest new secure authentication device I discovered at the recent RSA Security Conference. Our special guest during the episode is Stina Ehrensvrd, CEO and Founder of Yubico, who describes the history and genesis of the YubiKey, and Yubico's plans for this cool new technology.

S١ E١٤٤ · ١٥ مايو ٢٠٠٨

Listener Feedback #41 الحلقة ١٤٤

S١ E١٤٥ · ٢٢ مايو ٢٠٠٨

Secunia's PSI الحلقة ١٤٥

The free vulnerability scanner and update management tool Secunia PSI.

S١ E١٤٦ · ٢٩ مايو ٢٠٠٨

Listener Feedback #42 الحلقة ١٤٦

S١ E١٤٧ · ٥ يونيو ٢٠٠٨

Microsoft's Baseline Security Analyzer الحلقة ١٤٧

Two useful but lesser-known Microsoft security utilities.

S١ E١٤٨ · ١٢ يونيو ٢٠٠٨

Listener Feedback #43 الحلقة ١٤٨

S١ E١٤٩ · ١٩ يونيو ٢٠٠٨

ISP Betrayal الحلقة ١٤٩

An overview of next-generation behavioral tracking and profiling systems.

S١ E١٥٠ · ٢٦ يونيو ٢٠٠٨

Listener Feedback #44 الحلقة ١٥٠

S١ E١٥١ · ٣ يوليو ٢٠٠٨

Phracking Phorm الحلقة ١٥١

How third parties are gaining footholds in ISP facilities in order to access your data.

S١ E١٥٢ · ١٠ يوليو ٢٠٠٨

Listener Feedback #45 الحلقة ١٥٢

S١ E١٥٣ · ١٧ يوليو ٢٠٠٨

DePhormed Politics الحلقة ١٥٣

More on the privacy threat from the Phorm system.

S١ E١٥٤ · ٢٤ يوليو ٢٠٠٨

Listener Feedback #46 الحلقة ١٥٤

S١ E١٥٥ · ٣١ يوليو ٢٠٠٨

Bailiwicked Domain Attack الحلقة ١٥٥

The nuts and bolts of DNS and the DNS cache poisoning attacks.

S١ E١٥٦ · ٧ أغسطس ٢٠٠٨

Listener Feedback #47 الحلقة ١٥٦

S١ E١٥٧ · ١٤ أغسطس ٢٠٠٨

DNS — After the Patch الحلقة ١٥٧

A follow-up on the serious, and somewhat still present, DNS protocol spoofability flaw.

S١ E١٥٨ · ٢١ أغسطس ٢٠٠٨

Listener Feedback #48 الحلقة ١٥٨

S١ E١٥٩ · ٢٨ أغسطس ٢٠٠٨

Vista Security Bypass الحلقة ١٥٩

Black Hat Conference revelations, where Vista's security improvements fall short, and more.

S١ E١٦٠ · ٤ سبتمبر ٢٠٠٨

Listener Feedback #49 الحلقة ١٦٠

S١ E١٦١ · ١١ سبتمبر ٢٠٠٨

Google's Chrome الحلقة ١٦١

Steve drills down to determine the security levels offered by Google Chrome.

S١ E١٦٢ · ١٨ سبتمبر ٢٠٠٨

Listener Feedback #50 الحلقة ١٦٢

S١ E١٦٣ · ٢٥ سبتمبر ٢٠٠٨

GoogleUpdate & DNS Security الحلقة ١٦٣

The benefits, challenges, and nuances of secure DNS.

S١ E١٦٤ · ٢ أكتوبر ٢٠٠٨

SockStress الحلقة ١٦٤

Steve explains yet another security flaw in the TCP stack.

S١ E١٦٥ · ٩ أكتوبر ٢٠٠٨

Listener Feedback #51 الحلقة ١٦٥

Airport security checks and balances, white knuckle Disney adventures, and the limits of spyware infestations?

S١ E١٦٦ · ١٦ أكتوبر ٢٠٠٨

Cross-Site Request Forgery الحلقة ١٦٦

Steve tells you why you must always explicitly log out from banking and other important sites.

S١ E١٦٧ · ٢٣ أكتوبر ٢٠٠٨

Listener Feedback #52 الحلقة ١٦٧

S١ E١٦٨ · ٣٠ أكتوبر ٢٠٠٨

ClickJacking الحلقة ١٦٨

Steve discusses clickjacking, aka UI redressing, which tricks users into unintended web-based actions.

S١ E١٦٩ · ٦ نوفمبر ٢٠٠٨

Listener Feedback #53 الحلقة ١٦٩

S١ E١٧٠ · ١٣ نوفمبر ٢٠٠٨

The TKIP Hack الحلقة ١٧٠

Why you shouldn't worry about the TKIP crack.

S١ E١٧١ · ٢٠ نوفمبر ٢٠٠٨

Listener Feedback #54 الحلقة ١٧١

S١ E١٧٢ · ٢٧ نوفمبر ٢٠٠٨

Sandboxie الحلقة ١٧٢

Steve and Leo return to take a much closer look at "Sandboxie", an extremely useful, powerful, and highly recommended Windows security tool they first mentioned two years ago. This time, after interviewing Sandboxie's creator, Ronen Tzur, Steve explains why he is totally hooked and why Leo is wishing it was available for his Macs.

S١ E١٧٣ · ٤ ديسمبر ٢٠٠٨

Listener Feedback #55 الحلقة ١٧٣

S١ E١٧٤ · ١١ ديسمبر ٢٠٠٨

Sandbox Limitations الحلقة ١٧٤

The limitations of sandboxing in preventing the negative impacts of malware.

S١ E١٧٥ · ١٨ ديسمبر ٢٠٠٨

Listener Feedback #56 الحلقة ١٧٥

S١ E١٧٦ · ٢٥ ديسمبر ٢٠٠٨

Drop My Rights الحلقة ١٧٦

How to use Microsoft's little-known DropMyRights utility for safer browsing.

S١ E١٧٧ · ١ يناير ٢٠٠٩

Breaking SSL, PDP-8's & UltraCapacitors الحلقة ١٧٧

Breaking SSL, PDP-8s, and Ultracapacitors. Full show notes are available at grc.com.

S١ E١٧٨ · ٨ يناير ٢٠٠٩

Listener Feedback #57 الحلقة ١٧٨

S١ E١٧٩ · ١٥ يناير ٢٠٠٩

Cracking Security Certificates الحلقة ١٧٩

How security certificates are created and signed, what they do for us, and the MD5 hash.

S١ E١٨٠ · ٢٢ يناير ٢٠٠٩

Listener Feedback #58 الحلقة ١٨٠

S١ E١٨١ · ٢٩ يناير ٢٠٠٩

Crypto Rehash الحلقة ١٨١

Steve gives an overview of the major concepts and components of encryption.

S١ E١٨٢ · ٥ فبراير ٢٠٠٩

Listener Feedback #59 الحلقة ١٨٢

S١ E١٨٣ · ١٢ فبراير ٢٠٠٩

Modes of Encryption الحلقة ١٨٣

Windows Update, IE7 Problems, ActiveX and Windows 7 issues, SQL attacks, and more.

S١ E١٨٤ · ١٩ فبراير ٢٠٠٩

Listener Feedback #60 الحلقة ١٨٤

S١ E١٨٥ · ٢٦ فبراير ٢٠٠٩

Cryptographic HMACs الحلقة ١٨٥

MSFT Autorun updates, FreeBSD telnetd, IE7 critical exploit, Acrobat Reader, and more.

S١ E١٨٦ · ٥ مارس ٢٠٠٩

Listener Feedback #61 الحلقة ١٨٦

S١ E١٨٧ · ١٢ مارس ٢٠٠٩

Windows Autorun-around الحلقة ١٨٧

Past and recent problems with Windows Autorun.

S١ E١٨٨ · ١٩ مارس ٢٠٠٩

Listener Feedback #62 الحلقة ١٨٨

S١ E١٨٩ · ٢٦ مارس ٢٠٠٩

Internet Explorer 8 الحلقة ١٨٩

Internet Explorer 8 speed benchmarks, cookies, Compatibly Mode, Smart Screen filter, DEP, and more.

S١ E١٩٠ · ٢ أبريل ٢٠٠٩

Listener Feedback #63 الحلقة ١٩٠

S١ E١٩١ · ٩ أبريل ٢٠٠٩

GhostNet الحلقة ١٩١

A look into GhostNet, the alleged Chinese cyber-spying network.

S١ E١٩٢ · ١٦ أبريل ٢٠٠٩

Listener Feedback #64 الحلقة ١٩٢

This mailbag episode discusses new Firefox plugins, Conficker, buffer overflow, and more.

S١ E١٩٣ · ٢٣ أبريل ٢٠٠٩

Conficker الحلقة ١٩٣

Steve analyzes Conficker, the sophisticated worm that has spread to more than 10 million PCs worldwide.

S١ E١٩٤ · ٣٠ أبريل ٢٠٠٩

Listener Feedback #65 الحلقة ١٩٤

This mailbag episode covers Conficker, Windows process control, NeXT, Ironkey, and more.

S١ E١٩٥ · ٧ مايو ٢٠٠٩

The SSL/TLS Protocol الحلقة ١٩٥

Steve describes the Internet's most-used security protocol, SSL, now evolved into TLS.

S١ E١٩٦ · ١٤ مايو ٢٠٠٩

Listener Feedback #66 الحلقة ١٩٦

This mailbag episode includes SSL/TLS, worms-resistant NATs, PDF JavaScript, nuclear power stations running Windows, and more.

S١ E١٩٧ · ٢١ مايو ٢٠٠٩

Windows 7 Security الحلقة ١٩٧

Security changes, additions and enhancements to Microsoft Windows 7.

S١ E١٩٨ · ٢٨ مايو ٢٠٠٩

Listener Feedback #67 الحلقة ١٩٨

This mailbag episode includes FASM, scripts, sockets, SSL/TLS, HTTPS, Windows 7's XP mode, and more.

S١ E١٩٩ · ٤ يونيو ٢٠٠٩

The Geek Atlas, IPv6 & a non-VPN الحلقة ١٩٩

A good book, the IPv6 protocol, and Steve's secure TCP idea that doesn't use a VPN tunnel.

S١ E٢٠٠ · ١١ يونيو ٢٠٠٩

Listener Feedback #68 الحلقة ٢٠٠

In this mailbag episode we discuss IPv6, Non-VPNs, Microsoft ClickOnce, expired SSL certificates, and more.

S١ E٢٠١ · ١٨ يونيو ٢٠٠٩

SecureZIP الحلقة ٢٠١

The operation, features, and security of PKWARE?s free SecureZIP file archiving and encrypting utility.

S١ E٢٠٢ · ٢٥ يونيو ٢٠٠٩

Listener Feedback #69 الحلقة ٢٠٢

In this mailbag episode we discuss SecureZip, WPA/WPA2, home-grown VPNs, foreign ATMs, and more.

S١ E٢٠٣ · ٢ يوليو ٢٠٠٩

Boyer & Moore الحلقة ٢٠٣

Steve tells of the Bob Boyer and J Strother Moore algorithm for finding a substring in a buffer.

S١ E٢٠٤ · ٩ يوليو ٢٠٠٩

Listener Feedback #70 الحلقة ٢٠٤

S١ E٢٠٥ · ١٦ يوليو ٢٠٠٩

Lempel & Ziv الحلقة ٢٠٥

An examination of Lempel-Ziv data compression, one of the most prevalent computer algorithms of all time.

S١ E٢٠٦ · ٢٣ يوليو ٢٠٠٩

Mega Security News Update الحلقة ٢٠٦

Security updates in Windows Office, IAS, Virtual PC, Virtual Server, msvid control, and more.

S١ E٢٠٧ · ٣٠ يوليو ٢٠٠٩

Listener Feedback #71 الحلقة ٢٠٧

Steve answers questions on AES-256, iPhone security, TrueCrypt, Firefox privacy, and more.

S١ E٢٠٨ · ٦ أغسطس ٢٠٠٩

Listener Feedback #72 الحلقة ٢٠٨

Steve answers questions on SSL encryption, 3g security, Trojans, VPNs as infection vectors, and more.

S١ E٢٠٩ · ١٣ أغسطس ٢٠٠٩

Vitamin D الحلقة ٢٠٩

A rare off-topic discussion about Steve's research into vitamin D.

S١ E٢١٠ · ٢٠ أغسطس ٢٠٠٩

Listener Feedback #73 الحلقة ٢١٠

Security news and listeners' questions...

S١ E٢١١ · ٢٧ أغسطس ٢٠٠٩

Voting Machine Hacking الحلقة ٢١١

Steve covers the security implications of electronic voting machines.

S١ E٢١٢ · ٣ سبتمبر ٢٠٠٩

Listener Feedback #74 الحلقة ٢١٢

Steve answers questions on iPIG VPN, Flash cookies, firewalls, parents' passwords, and more.

S١ E٢١٣ · ١٠ سبتمبر ٢٠٠٩

Cracking GSM Cellphones الحلقة ٢١٣

The inherent insecurities of GSM, the pseudo-random bitstream cipher protecting data on billions of phones.

S١ E٢١٤ · ١٧ سبتمبر ٢٠٠٩

Listener Feedback #75 الحلقة ٢١٤

Steve addresses feedback on GSM security, cookies, router admin passwords, proxy servers, and more.

S١ E٢١٥ · ٢٤ سبتمبر ٢٠٠٩

Security Maxims الحلقة ٢١٥

Steve and Leo talk about various security maxims, what they mean, why you should follow them, and more.

S١ E٢١٦ · ١ أكتوبر ٢٠٠٩

Listener Feedback #76 الحلقة ٢١٦

Leo and Steve talk about Microsoft Security Essentials, your questions, and more.

S١ E٢١٧ · ٨ أكتوبر ٢٠٠٩

The Fundamentally Broken Browser Model الحلقة ٢١٧

How SSLs can be spoofed in man-in-the-middle attacks.

S١ E٢١٨ · ١٥ أكتوبر ٢٠٠٩

Listener Feedback #77 الحلقة ٢١٨

S١ E٢١٩ · ٢٢ أكتوبر ٢٠٠٩

Badly Broken Browsing الحلقة ٢١٩

Why patches are impossible, the Total (In)security virus, and why writing software shouldn't be too easy.

S١ E٢٢٠ · ٢٩ أكتوبر ٢٠٠٩

Listener Feedback #78 الحلقة ٢٢٠

S١ E٢٢١ · ٥ نوفمبر ٢٠٠٩

The Oxymoron of “JavaScript Security” الحلقة ٢٢١

The problem with Javascript and security. Guest John Graham-Cumming says it's the "elephant in your browser."

S١ E٢٢٢ · ١٢ نوفمبر ٢٠٠٩

Listener Feedback #79 الحلقة ٢٢٢

We've got the latest security news, including an SSL hack, plus eight great questions from you and Steve's answers...

S١ E٢٢٣ · ١٩ نوفمبر ٢٠٠٩

A security vulnerability in SSL الحلقة ٢٢٣

Steve explains how a serious exploit in SSL works.

S١ E٢٢٤ · ٢٦ نوفمبر ٢٠٠٩

Listener Feedback #80 الحلقة ٢٢٤

Security news, including the NSA's contributions to Windows 7, iPhone bot nets, plus Steve answers your questions.

S١ E٢٢٥ · ٣ ديسمبر ٢٠٠٩

“Same Origin” Troubles الحلقة ٢٢٥

Apple fixes security flaws, Ford SYNC SDK, black screen of death, same origin troubles, and more.

S١ E٢٢٦ · ١٠ ديسمبر ٢٠٠٩

Listener Feedback #130 الحلقة ٢٢٦

Digital voting goes open source, patch Tuesday news, and Steve answers your questions.

S١ E٢٢٧ · ١٧ ديسمبر ٢٠٠٩

Cyberwarfare الحلقة ٢٢٧

Steve covers what may be the future of conflict, Cyberwarfare.

S١ E٢٢٨ · ٢٤ ديسمبر ٢٠٠٩

Listener Feedback #82 الحلقة ٢٢٨

Steve responds to questions covering Skype spam, SSL cracking, unencrypted UAV video feeds, free SSL certificates, and more.

S١ E٢٢٩ · ٣١ ديسمبر ٢٠٠٩

The Rational Rejection of Security Advice الحلقة ٢٢٩

A hard look at the costs and benefits of following all security advice.

S١ E٢٣٠ · ٧ يناير ٢٠١٠

Listener Feedback #83 الحلقة ٢٣٠

This week's questions cover packet flow, hijacking DNS queries, router DNS, Patch Tuesday, and more.

S١ E٢٣١ · ١٤ يناير ٢٠١٠

Mega Security Update & CES Observations الحلقة ٢٣١

Steve catches up with a mega security update, then gives us some of his favorite (wacky) products from CES.

S١ E٢٣٢ · ٢١ يناير ٢٠١٠

Listener Feedback #84 الحلقة ٢٣٢

Steve answers listener questions about live Linux CDs, TrueCrypt RAM encryption, resetting Thomson modem passwords, and more.

S١ E٢٣٣ · ٢٨ يناير ٢٠١٠

Let's Design a Computer (part 1) الحلقة ٢٣٣

Steve explains how computers work by designing one from first principles.

S١ E٢٣٤ · ٤ فبراير ٢٠١٠

Listener Feedback #85 الحلقة ٢٣٤

Internet Explorer as a file system, using Live CDs for security, and Steve takes on the iPad...

S١ E٢٣٥ · ١١ فبراير ٢٠١٠

Machine Language الحلقة ٢٣٥

For 16kpbs versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

S١ E٢٣٦ · ١٨ فبراير ٢٠١٠

Listener Feedback #86 الحلقة ٢٣٦

More flash vulnerabilities, security updates, fake security software, Steve answers your questions, and more.

S١ E٢٣٧ · ٢٥ فبراير ٢٠١٠

Indirection: The Power of Pointers الحلقة ٢٣٧

An introduction to the use of "indirection" in computer science, security news, and more.

S١ E٢٣٨ · ٤ مارس ٢٠١٠

Listener Feedback #87 الحلقة ٢٣٨

Steve answers your questions about webcam privacy, unencrypted data in ram, and more.

S١ E٢٣٩ · ١١ مارس ٢٠١٠

Stacks, Registers & Recursion الحلقة ٢٣٩

How stacks, registers and recursion are interrelated, the latest security news, and more.

S١ E٢٤٠ · ١٨ مارس ٢٠١٠

Listener Feedback #88 الحلقة ٢٤٠

Patch Tuesday, Opera vulnerabilities, the RSA conference, RealDVD, and more.

S١ E٢٤١ · ٢٥ مارس ٢٠١٠

Hardware Interrupts الحلقة ٢٤١

Steve continues his talk on the foundational technologies of computing. This week: how computers do more than one thing at a time using interrupts.

S١ E٢٤٢ · ١ أبريل ٢٠١٠

Listener Feedback #89 الحلقة ٢٤٢

Critical updates from Microsoft and Apple, good news for Gmail security, and a warning for nudists...

S١ E٢٤٣ · ٨ أبريل ٢٠١٠

State Subversion of SSL الحلقة ٢٤٣

Firefox updates, vulnerabilities in .PDFs, Steve's iPad review, SSL/TLS, and more.

S١ E٢٤٤ · ١٥ أبريل ٢٠١٠

Listener Feedback #90 الحلقة ٢٤٤

Microsoft security updates, the FCC's jurisdiction on bandwidth shaping, Java flaws, iPhone OS security, the state of SSL security, and more.

S١ E٢٤٥ · ٢٢ أبريل ٢٠١٠

The Security of Open vs CLosed الحلقة ٢٤٥

Steve and Leo seriously examine the proven comparative security of open versus closed source and development software, and open versus closed execution platforms.

S١ E٢٤٦ · ٢٩ أبريل ٢٠١٠

Listener Feedback #91 الحلقة ٢٤٦

Stolen Google source code, GSM hacked, photocopy machine hard drive security, your questions, and more.

S١ E٢٤٧ · ٦ مايو ٢٠١٠

The “Multi”-verse الحلقة ٢٤٧

Opera vulnerabilities, Adobe PDF insecurities, malware from the US Treasury, Steve joins Twitter, and more.

S١ E٢٤٨ · ١٣ مايو ٢٠١٠

The Portable Dog Killer الحلقة ٢٤٨

Patch tuesday, laptop camera surveillance, Yahoo! messenger worm, and more.

S١ E٢٤٩ · ٢٠ مايو ٢٠١٠

Listener Feedback #92 الحلقة ٢٤٩

Shockwave issues, Mozilla's plug-in check, weaponized email, hacking cars, your questions, and more.

S١ E٢٥٠ · ٢٧ مايو ٢٠١٠

Operating Systems الحلقة ٢٥٠

Manually updating IrfanView and Free Download Manager, Google wifi litigation, how operating systems work, and more.

S١ E٢٥١ · ٣ يونيو ٢٠١٠

Listener Feedback #93 الحلقة ٢٥١

Tabnabbing, Adobe security rumors, iPad data plan changes, your questions, and more.

S١ E٢٥٢ · ١٠ يونيو ٢٠١٠

RISCy Business الحلقة ٢٥٢

Adobe zero-day, overwrought iPad security news, the evolution of computing architectures, and more.

S١ E٢٥٣ · ١٧ يونيو ٢٠١٠

Listener Feedback #94 الحلقة ٢٥٣

Mac update, AT&T hijinks, another zero-day vulnerability from Microsoft, Adobe delays pdf fix, your questions, and more.

S١ E٢٥٤ · ٢٤ يونيو ٢٠١٠

What We'll Do for Speed الحلقة ٢٥٤

The 25 year legacy of unbelievably complex technologies used in microprocessors to maximize performance.

S١ E٢٥٥ · ١ يوليو ٢٠١٠

Listener Feedback #95 الحلقة ٢٥٥

Out of cycle Acrobat and Reader updates, Firefox improvements, flawed SSL study, internet kill switch, your questions, and more.

S١ E٢٥٦ · ٨ يوليو ٢٠١٠

LastPass الحلقة ٢٥٦

Steve thoroughly evaluates LastPass, explains why high-security passwords are necessary, and tells us how LastPass makes storing those passwords secure.

S١ E٢٥٧ · ١٥ يوليو ٢٠١٠

Listener Feedback #96 الحلقة ٢٥٧

Chrome update, ClearCloud DNS, Microsoft and Russian camaraderie, LastPass, your questions, and more.

S١ E٢٥٨ · ٢٢ يوليو ٢٠١٠

Five Years of Vulnerabilities الحلقة ٢٥٨

Windows shell worm in the wild, Security Essentials 2.0 beta, Secunia's 5-year analysis, and more.

S١ E٢٥٩ · ٢٩ يوليو ٢٠١٠

Listener Feedback #97 الحلقة ٢٥٩

Firefox mega security update, WPA2 broken?, .LNK viruses in the wild, infected Dell motherboards, your questions and more.

S١ E٢٦٠ · ٥ أغسطس ٢٠١٠

DNS Rebinding الحلقة ٢٦٠

Windows .LNK vulnerability fixed, Google's WiFi "overcollection" in the UK, news from Blackhat, DNS rebinding, and more.

S١ E٢٦١ · ١٢ أغسطس ٢٠١٠

Listener Feedback #98 الحلقة ٢٦١

PayPal discontinues their virtual credit card service, RIM placing servers in Saudi Arabia, Firefox v4 updates silently, your questions and more.

S١ E٢٦٢ · ١٩ أغسطس ٢٠١٠

Strict Transport Security الحلقة ٢٦٢

Apple fixes the jailbreak hole, trojans on Android, Strict Transport Security (STS), and more.

S١ E٢٦٣ · ٢٦ أغسطس ٢٠١٠

Listener Feedback #99 الحلقة ٢٦٣

Out-Of-Cycle update from Adobe, Apple security update, binary planting, Spanair 2008 crash, your questions, and more.

S١ E٢٦٤ · ٢ سبتمبر ٢٠١٠

Side-Channel Privacy Leakage الحلقة ٢٦٤

Consequences of the web not being designed for privacy, including non-consensual user tracking.

S١ E٢٦٥ · ٩ سبتمبر ٢٠١٠

Listener Feedback #100 الحلقة ٢٦٥

Fix-It for .dll hijack, danger from applications changing the working directory, first successful 64-bit Windows root kit, your questions, and more.

S١ E٢٦٦ · ١٦ سبتمبر ٢٠١٠

Inside OAuth الحلقة ٢٦٦

Microsoft's 2nd Tuesday update, new 0-day vulnerabilities in Adobe, Firefox fixes, "Stuxnet" worm, delegated access through OAuth, and more.

S١ E٢٦٧ · ٢٣ سبتمبر ٢٠١٠

Listener Feedback #101 الحلقة ٢٦٧

Flash update, Microsoft ASP .NET problem, HDCP master key leak, Twitter "OnMouseover" XSS flaw, your questions, and more.

S١ E٢٦٨ · ٣٠ سبتمبر ٢٠١٠

CryptoSystem Backdoors الحلقة ٢٦٨

New 0-day for Windows, HDCP decryption software, Stuxnet & Iran, COICA, cryptography systems and backdoors for law enforcement, and more.

S١ E٢٦٩ · ٧ أكتوبر ٢٠١٠

Listener Feedback #102 الحلقة ٢٦٩

Adobe Acrobat patched, RIM and India going 'round & 'round, Comcast VS. Bot, and more.

S١ E٢٧٠ · ١٤ أكتوبر ٢٠١٠

The Evercookie الحلقة ٢٧٠

Microsoft breaks Patch Tuesday update record, Facebook adds OTPs and remote signout, What is The Evercookie?, and more.

S١ E٢٧١ · ٢١ أكتوبر ٢٠١٠

Listener Feedback #103 الحلقة ٢٧١

Microsoft reports on Java exploits, new Adobe Reader will sandbox, feedback from MSRT, your questions, and more.

S١ E٢٧٢ · ٢٨ أكتوبر ٢٠١٠

Firesheep الحلقة ٢٧٢

Mozilla and Real Player updates, Firefox 0-day, Wall Street Journal tracking and privacy series, session hijacking for the rest of us, and more.

S١ E٢٧٣ · ٤ نوفمبر ٢٠١٠

Listener Feedback #104 & The FireStorm الحلقة ٢٧٣

Firesheep firestorm, Flash 0-day exploit in the wild, another iPhone lock screen bypass, your questions, and more.

S١ E٢٧٤ · ١١ نوفمبر ٢٠١٠

Benchmarking DNS الحلقة ٢٧٤

Second Tuesday updates, critical Outlook fix, Android risks, Google expands "bug bounty", GRC's DNS Benchmark, and more.

S١ E٢٧٥ · ١٨ نوفمبر ٢٠١٠

Listener Feedback #105 الحلقة ٢٧٥

Big Apple update, IE6/7 0-day unpatched, infected Chinese cell phones, Stuxnet's probable target, your questions, and more.

S١ E٢٧٦ · ٢٥ نوفمبر ٢٠١٠

Testing DNS Spoofability الحلقة ٢٧٦

Safari update, HTTPS Everywhere, FBI wants to wiretap the Internet, comprehensive DNS spoofability test, and more.

S١ E٢٧٧ · ٢ ديسمبر ٢٠١٠

Listener Feedback #106 الحلقة ٢٧٧

New WIndows kernel vulnerability, Wikileaks siprnet, Vitamin D findings, your questions, and more.

S١ E٢٧٨ · ٩ ديسمبر ٢٠١٠

Tag Me (with RFID) الحلقة ٢٧٨

Windows 7 SP1 reaches RC level, Google Chrome v8.0 released, What is SHIELD?, How to keep track of people using RFID tags, and more.

S١ E٢٧٩ · ١٦ ديسمبر ٢٠١٠

Listener Feedback #107 الحلقة ٢٧٩

Microsoft's December security updates, backdoor in BSD, WikiLeaks DDoS, your questions, and more.

S١ E٢٨٠ · ٢٣ ديسمبر ٢٠١٠

Bluetooth الحلقة ٢٨٠

OpenBSD discredits backdoor, weak net neutrality, compromised site warnings from Google, Bluetooth in depth, and more.

S١ E٢٨١ · ٣٠ ديسمبر ٢٠١٠

The Portable Dog Killer, Encore الحلقة ٢٨١

An encore presentation of an enlightening story from Steve's past.

S١ E٢٨٢ · ٦ يناير ٢٠١١

Listener Feedback #108 الحلقة ٢٨٢

Microsoft acknowledges IE problem, hacking GSM phones, Stuxnet update, your questions, and more.

S١ E٢٨٣ · ١٣ يناير ٢٠١١

Bluetooth Hacking الحلقة ٢٨٣

Cross Fuzz, warrantless cell phone searches, Obama's "Unified Internet Identity", flavors of bluetooth hacking, and more.

S١ E٢٨٤ · ٢٠ يناير ٢٠١١

Listener Feedback #109 الحلقة ٢٨٤

Israel and US teamed up on Stuxnet, global IPv6 test coming, your questions, and more.

S١ E٢٨٥ · ٢٧ يناير ٢٠١١

Fuzzy Browsers الحلقة ٢٨٥

Google awards first "Elite" security award, Facebook SSL and HTTPS, unprivileged work e-mail, stress testing browsers, and more.

S١ E٢٨٦ · ٣ فبراير ٢٠١١

Listener Feedback #110 الحلقة ٢٨٦

Gingerbread data disclosure vulnerability, SourceForge hack, IPv4 depletion, zero-day attacks no more, your questions, and more.

S١ E٢٨٧ · ٩ فبراير ٢٠١١

BitCoin CryptoCurrency الحلقة ٢٨٧

Firefox adds "Do Not Track", Verizon alters web content, McAfee on Mobile Malware, BitCoin, and more.

S١ E٢٨٨ · ١٧ فبراير ٢٠١١

Listener Feedback #111 الحلقة ٢٨٨

A critical Microsoft vulnerability, The differences between open and closed source software, A number of questions around BitCoin, and more.

S١ E٢٨٩ · ١٧ مارس ٢٠١١

Proxied Surfing الحلقة ٢٨٩

After catching up with the week's security updates and other security-related news, Steve and Leo discuss the many modes of operation of "Proxied Web Surfing" which are used to bypass firewalls and Internet filters, aid free speech, and alter the contents of web pages retrieved from the Internet.

S١ E٢٩٠ · ٣ مارس ٢٠١١

Listener Feedback #112 الحلقة ٢٩٠

Windows 7 service pack 1 is out, Apple's Thunderbolt security, Facebook's HTTPS security turns itself off, and more.

S١ E٢٩١ · ١٠ مارس ٢٠١١

Stuxnet الحلقة ٢٩١

The anatomy of Stuxnet, plus Pwn2Own is underway meaning updates from Apple, Google, Microsoft, and more.

S١ E٢٩٢ · ١٧ مارس ٢٠١١

Listener Feedback #113 الحلقة ٢٩٢

The consequences of Pwn2Own, Issues around the Japanese earthquake, reverse DNS, and more.

S١ E٢٩٣ · ٢٤ مارس ٢٠١١

IE9 الحلقة ٢٩٣

Internet Explorer 9, RSA Security comprimised, India versus Blackberry, and more.

S١ E٢٩٤ · ٣١ مارس ٢٠١١

Listener Feedback #114 الحلقة ٢٩٤

Fraudulent SSL certificates, RSA SecurID breach update, Real Player vulnerability, your questions, and more.

S١ E٢٩٥ · ٧ أبريل ٢٠١١

The Comodo SSL Breach الحلقة ٢٩٥

RSA SecurID Break-in, YubiHSM, Epsilon security breach, DNT gets traction, and more.

S١ E٢٩٦ · ١٤ أبريل ٢٠١١

Listener Feedback #115 الحلقة ٢٩٦

64 fixes from Microsoft, Another Flash exploit, Wordpress hacked, your questions, and more.

S١ E٢٩٧ · ٢١ أبريل ٢٠١١

Pass-Sentences?? الحلقة ٢٩٧

iOS location tracking, Pass phrase security, Dropbox authentication, and more.

S١ E٢٩٨ · ٢٨ أبريل ٢٠١١

Listener Feedback #116 الحلقة ٢٩٨

Sony Playstation Network breach, Mobile tracking, Disc Drive steganography, your emails, and more.

S١ E٢٩٩ · ٥ مايو ٢٠١١

Going Random (1) الحلقة ٢٩٩

Firefox and Chrome updates, Apple tracks differently, Bin Laden's security, relying on randomness, and more.

S١ E٣٠٠ · ١٢ مايو ٢٠١١

Listener Feedback #117 الحلقة ٣٠٠

Reasons you should change your Facebook password right now, Zero Day, a new Do Not Track bill, and more.

S١ E٣٠١ · ١٩ مايو ٢٠١١

Going Random (2) الحلقة ٣٠١

DIY Malware kite for Mac, Protect IP act, Achieving true randomness, and more.

S١ E٣٠٢ · ٢٦ مايو ٢٠١١

Listener Feedback #118 الحلقة ٣٠٢

Mac Defender malware, Sony's continuing security woes, Android vulnerability patched by Google, your questions, and more.

S١ E٣٠٣ · ٢ يونيو ٢٠١١

Password Haystacks الحلقة ٣٠٣

Making passwords memorable AND uncrackable, More on Mac Defender, Lockheed Martin breach, and more.

S١ E٣٠٤ · ٩ يونيو ٢٠١١

Listener Feedback #119 الحلقة ٣٠٤

RSA SecurID token replacement, Sony breaches continue, your questions, and more.

S١ E٣٠٥ · ١٦ يونيو ٢٠١١

Ghostery الحلقة ٣٠٥

Website surveillance monitoring and blocking, IMF breach, commercial bank fraud liability, and more.

S١ E٣٠٦ · ٢٣ يونيو ٢٠١١

Listener Feedback #120 الحلقة ٣٠٦

Malware stealing Bitcoins, Dropbox security, WordPress hacked, your questions, and more.

S١ E٣٠٧ · ٣٠ يونيو ٢٠١١

The Future of Identity الحلقة ٣٠٧

LulzSec says farewell, cost of Citigroup attack, National Institute of Standards and Technology, and more.

S١ E٣٠٨ · ٧ يوليو ٢٠١١

Listener Feedback #121 الحلقة ٣٠٨

Dropbox TOS update, Microsoft's Skype intercept patent, evaluating LulzSec, your questions, and more.

S١ E٣٠٩ · ١٤ يوليو ٢٠١١

How the Internet Works, Part 1 الحلقة ٣٠٩

Steve explains how the internet works with three basic principles, plus security updates, security news, and more.

S١ E٣١٠ · ٢١ يوليو ٢٠١١

Listener Feedback #122 الحلقة ٣١٠

iOS updates, careers in computer security, randomness in cryptography, your questions, and more.

S١ E٣١١ · ٢٨ يوليو ٢٠١١

Anatomy of a Security Mistake الحلقة ٣١١

Apple iOS Certificate, Passware, dissecting the crypt_blowfish bug, and more.

S١ E٣١٢ · ٤ أغسطس ٢٠١١

Listener Feedback #123 الحلقة ٣١٢

We find a way to keep Tor from being censored, KISSmetrics's sneaky cookie and your questions answered by Steve.

S١ E٣١٣ · ١١ أغسطس ٢٠١١

How The Internet Works: ICMP & UDP الحلقة ٣١٣

Adobe patches galore, a deep look at ICMP and UDP, and more.

S١ E٣١٤ · ١٨ أغسطس ٢٠١١

Listener Feedback #124 الحلقة ٣١٤

Tons of Firefox news, Gizmodo off the hook, lot's of questions, and more.

S١ E٣١٥ · ٢٥ أغسطس ٢٠١١

Off The Grid الحلقة ٣١٥

Caesar Cipher, Playfair Cipher, going off the grid and more.

S١ E٣١٦ · ١ سبتمبر ٢٠١١

Listener Feedback #125 الحلقة ٣١٦

Google's fraudulent SSL Certificate, Pakistan bans encryption software, your questions, and more.

S١ E٣١٧ · ٨ سبتمبر ٢٠١١

TCP Part 1 – Getting Connected الحلقة ٣١٧

DigiNotar mega-update, DNS hack of NetNames, TCP demystified, and more.

S١ E٣١٨ · ١٥ سبتمبر ٢٠١١

Listener Feedback #126 الحلقة ٣١٨

More on DigiNotar, GlobalSign security breach, your questions, and more.

S١ E٣١٩ · ٢٢ سبتمبر ٢٠١١

Certificate Authority (CA) Trust - Time to Change it? الحلقة ٣١٩

DigiNotar bankruptcy, SSL weakness discovered, alternatives to the CA Hierarchy Model, and more.

S١ E٣٢٠ · ٢٩ سبتمبر ٢٠١١

Listener Feedback #127 الحلقة ٣٢٠

Kindle Fire and the Silk browser, MySQL breach, your questions, and more.

S١ E٣٢١ · ٥ أكتوبر ٢٠١١

The Beauty of B.E.A.S.T. الحلقة ٣٢١

HTC not sandboxing Android data, phishing on the rise, Browser Exploit Against SSL/TLS, and more.

S١ E٣٢٢ · ١٢ أكتوبر ٢٠١١

Listener Feedback #128 الحلقة ٣٢٢

Fighter drone's malware infection, Germany deliberately installing malware on traveller's computers, your questions and Steve's answers.

S١ E٣٢٣ · ١٩ أكتوبر ٢٠١١

TCP Pt.2 - Attacking TCP الحلقة ٣٢٣

Details on the Silk browser, Google encrypted search, TCP attacks, and more.

S١ E٣٢٤ · ٢٦ أكتوبر ٢٠١١

Listener Feedback #129 الحلقة ٣٢٤

Two Internets, Stuxnet variant "DuQu", Spanning Tree Protocol, your questions, and more.

S١ E٣٢٥ · ٢ نوفمبر ٢٠١١

TCP Pt.3 - Necessary Refinements الحلقة ٣٢٥

Certificate authorities compromised, BT to block Newzbin, Mac OSX Bitcoin mining malware, "Bytes in Flight", and more.

S١ E٣٢٦ · ٩ نوفمبر ٢٠١١

Listener Feedback #81 الحلقة ٣٢٦

DuQu worm, remote code execution kernel vulnerability, Adobe abandons Flash for mobile, your questions, and more.

S١ E٣٢٧ · ١٦ نوفمبر ٢٠١١

Internet Privacy Update الحلقة ٣٢٧

Firefox 8, SOPA, Kindle Fire first look, and more.

S١ E٣٢٨ · ٢٣ نوفمبر ٢٠١١

Listener Feedback #131 الحلقة ٣٢٨

SOPA, SCADA hacked, Kindle Fire extended review, your questions, and more.

S١ E٣٢٩ · ٣٠ نوفمبر ٢٠١١

Browser ID الحلقة ٣٢٩

Comparing Mozilla's BrowserID to other security technologies, Android malware, Malvertising, and more.

S١ E٣٣٠ · ٧ ديسمبر ٢٠١١

Listener Feedback #132 الحلقة ٣٣٠

DNSCrypt Beta for Mac, Zeus banking trojan, Carrier IQ, your questions, and more.

S١ E٣٣١ · ١٤ ديسمبر ٢٠١١

Mega Security News Update الحلقة ٣٣١

Microsoft, Adobe, and Carrier IQ security news, and more.

S١ E٣٣٢ · ٢١ ديسمبر ٢٠١١

Listener Feedback #133 الحلقة ٣٣٢

Background updates of IE, more on Carrier IQ, your questions, and more.

S١ E٣٣٣ · ٢٨ ديسمبر ٢٠١١

Science Fiction Holiday Special الحلقة ٣٣٣

Firefox 9, SOPA, Sci-Fi movie and book recommendations, and more.

S١ E٣٣٤ · ٤ يناير ٢٠١٢

Listener Feedback #134 الحلقة ٣٣٤

Microsoft's Out-Of-Cycle patch, FISA constitutionality, your questions, and more.

S١ E٣٣٥ · ٩ يناير ٢٠١٢

Wi-Fi Protected (In)Security الحلقة ٣٣٥

Simple Secure Wifi isn't very secure, password recovering charger, WPA cracker, and more.

S١ E٣٣٦ · ١٨ يناير ٢٠١٢

Listener Feedback #135 الحلقة ٣٣٦

Zappos customer data breach, Slow Motion DDoS, your questions, and more.

S١ E٣٣٧ · ٢٥ يناير ٢٠١٢

WPS: A Troubled Protocol الحلقة ٣٣٧

Forcing laptop decryption, GPS tracking now requires a warrant, DNS poisoning, and more.

S١ E٣٣٨ · ١ فبراير ٢٠١٢

Listener Feedback #136 الحلقة ٣٣٨

Google's privacy policy changes, Region's lost 401k data, pcAnywhere source stolen years ago, your questions, and more.

S١ E٣٣٩ · ٨ فبراير ٢٠١٢

“ScriptNo” for Chrome الحلقة ٣٣٩

NSTIC update, webcam nightmare, a NoScript-like extension for Chrome, and more.

S١ E٣٤٠ · ١٥ فبراير ٢٠١٢

Listener Feedback #137 الحلقة ٣٤٠

SSL's public key encryption, pcAnywhere, Google Wallet, your questions, and more.

S١ E٣٤١ · ٢٢ فبراير ٢٠١٢

Can “Anonymous” Take Down the Internet? الحلقة ٣٤١

The iOS cookie incident, whether Anonymous might take down the Internet, and more.

S١ E٣٤٢ · ٢٩ فبراير ٢٠١٢

Listener Feedback #138 الحلقة ٣٤٢

HTML video copy protection, protection against forced decryption, Yubico "Nano", your questions, and more.

S١ E٣٤٣ · ٦ مارس ٢٠١٢

HTTP & SPDY الحلقة ٣٤٣

LulzSec leader betrays Anonymous , how a site can know your social networks, comparing HTTP to SPDY, and more.

S١ E٣٤٤ · ١٤ مارس ٢٠١٢

Listener Feedback #139 الحلقة ٣٤٤

6th annual Pwn2Own, Microsoft's noisy 2nd Tuesday, Wikipedia transfer from GoDaddy complete, your questions, and more.

S١ E٣٤٥ · ٢١ مارس ٢٠١٢

Buffer Bloat الحلقة ٣٤٥

Buffer Bloat on the internet, NSA Super-Super Computer Center, Apache Server Status information leakage, and more.

S١ E٣٤٦ · ٢٨ مارس ٢٠١٢

Listener Feedback #140 الحلقة ٣٤٦

Ten great answers and questions, buffer bloat, security news, and more.

S١ E٣٤٧ · ٤ أبريل ٢٠١٢

iOS Password Mis-Managers الحلقة ٣٤٧

Global Payments card processor breach, Apple holds security key for iCloud, iPhone passcode exploit, and more.

S١ E٣٤٨ · ١١ أبريل ٢٠١٢

Listener Feedback #141 الحلقة ٣٤٨

Flashback infects 670,000 Macs, safety of Safari password storage, Windows Defender Offline, your questions, and more.

S١ E٣٤٩ · ١٩ أبريل ٢٠١٢

Cloud Solutions الحلقة ٣٤٩

Steve gathers up all the cloud storage solutions and gives us his review.

S١ E٣٥٠ · ٢٥ أبريل ٢٠١٢

Twitter Feedback Q&A #142 / Cloud Security الحلقة ٣٥٠

During this special Q&A episode, Iyaz and I host an entirely Twitter-driven Q&A episode, caused by the flurry of interest created by last week's focus upon Cloud Storage Solutions. After catching up with the week's security-related events, we zip through 21 tweets, then focus upon and examine the security architecture of one controversial and popular cloud storage provider: Backblaze.

S١ E٣٥١ · ٢ مايو ٢٠١٢

Three Hybrid Cloud Solutions الحلقة ٣٥١

After catching up with the week's news and Twitter feedback, Leo and I closely examine three remote cloud storage solutions whose Crypto was done COMPLETELY right, Offering full TNO (Trust No One) security. And one of them makes me (Steve) wish I were a Mac user!

S١ E٣٥٢ · ٩ مايو ٢٠١٢

Listener Feedback #143 الحلقة ٣٥٢

S١ E٣٥٣ · ١٦ مايو ٢٠١٢

DMARC - eMail Security الحلقة ٣٥٣

After catching up with the week's news, Steve and Leo look at the state of the slow but sure and steady progress being made to tighten up the Internet's eMail security. Since spoofing and phishing continue to be huge problems, these problems continue to command the attention of the Internet's largest commerce, financial, and social networking domains. The good news is: There's good reason for hope!!

S١ E٣٥٤ · ٢٣ مايو ٢٠١٢

Listener Feedback #144 الحلقة ٣٥٤

S١ E٣٥٥ · ٣٠ مايو ٢٠١٢

Poking Holes in TCP الحلقة ٣٥٥

Steve and Leo tackle two new and interesting threats to Internet security. First, the newly discovered “Flame” / “Flamer” / “Skywiper” malware dwarfs Stuxnet and Duqu in capability and complexity. Then they examine the work of two University of Michigan researchers who have detailed a collection of new ways to attack the TCP protocol. They inject malicious content into innocent web pages and add malicious links to online chats.

S١ E٣٥٦ · ٦ يونيو ٢٠١٢

Listener Feedback #145 الحلقة ٣٥٦

S١ E٣٥٧ · ١٣ يونيو ٢٠١٢

Flame On! الحلقة ٣٥٧

This week, after catching up with a large amount of the week’s news, Leo and I carefully examine two major new discoveries about the Windows Flame worm.

S١ E٣٥٨ · ٢٠ يونيو ٢٠١٢

Listener Feedback #146 الحلقة ٣٥٨

S١ E٣٥٩ · ٢٧ يونيو ٢٠١٢

Coddling Our Buffers الحلقة ٣٥٩

After catching up with a few items of security and privacy news, Leo and I return to the Internet's "Buffer Bloat" problem to share the new solution “CoDel” (pronounced “coddle”) that has been developed by several of the Internet's original and leading technologists and designers.

S١ E٣٦٠ · ١١ يوليو ٢٠١٢

Listener Feedback #147 الحلقة ٣٦٠

S١ E٣٦١ · ١٨ يوليو ٢٠١٢

Paul Vixie & DNS Changer الحلقة ٣٦١

After catching up with the week's security news, Leo and I take a close look at the recent “DNS Changer” malware, the FBI's role in the “takedown” of the malicious servers, and the expert technical assistance provided by Paul Vixie, one of the pioneers and principal developers of the Internet's Domain Name System (DNS).

S١ E٣٦٢ · ٢٥ يوليو ٢٠١٢

Listener Feedback #148 الحلقة ٣٦٢

S١ E٣٦٣ · ١ أغسطس ٢٠١٢

Ali Baba's Cave الحلقة ٣٦٣

After catching up with an eventful week of security news, Leo and I explore a variant of the story of “Ali Baba's Cave” as a means for clearly explaining the operation and requirements of cryptographic Zero-Knowledge Interactive Proofs.

S١ E٣٦٤ · ٨ أغسطس ٢٠١٢

Mat Honan's Very Bad Weekend الحلقة ٣٦٤

After catching up with an eventful week of security news, Leo and I describe and explore the details of the “epic hack” that recently befell well-known technology writer Mat Honan.

S١ E٣٦٥ · ١٥ أغسطس ٢٠١٢

Listener Feedback #149 الحلقة ٣٦٥

S١ E٣٦٦ · ٢٢ أغسطس ٢٠١٢

Password Cracking Update: The Death of “Clever” الحلقة ٣٦٦

After catching up with a collection of miscellaneous and interesting security-related news, Leo and I take a close look at the long-term consequences of the many massive password leakages which have occurred. The upshot? Hackers are getting MUCH better at cracking passwords, and “clever” techniques can no longer be regarded as safe.

S١ E٣٦٧ · ٢٩ أغسطس ٢٠١٢

What a Busy Week! الحلقة ٣٦٧

We have so much security news and information to cover this week that we didn’t have time to take questions from our listeners. What we have, instead, is a LOT of interesting news about the new Java vulnerabilities, new TNO cloud storage solutions, and lots more.

S١ E٣٦٨ · ٥ سبتمبر ٢٠١٢

Listener Feedback #150 الحلقة ٣٦٨

S١ E٣٦٩ · ١١ سبتمبر ٢٠١٢

Internet Identity Update الحلقة ٣٦٩

After catching up with an eventful week of security news, Leo and I step back for an overview and discussion of the slowly evolving state of the art in Internet Identity Authentication.

S١ E٣٧٠ · ١٩ سبتمبر ٢٠١٢

Mark Russinovich & Other News الحلقة ٣٧٠

We begin the week with a visit with our distinguished guest, Mark Russinovich, late of Sysinternals and now with Microsoft. Mark joins us to chat about the release of his second security thriller, “Trojan Horse,” and to share some of his view of the security world.

S١ E٣٧١ · ٢٦ سبتمبر ٢٠١٢

Listener Feedback #151 الحلقة ٣٧١