Security Now

S1 · E1 · 2005년 8월 18일

As the Worm Turns — the first Internet worms of 2005 1화

How a never-disclosed Windows vulnerability was quickly reverse-engineered from the patches to fix it and turned into more than 12 potent and damaging Internet worms in three days. What does this mean for the future of Internet security?

S1 · E2 · 2005년 8월 25일

HoneyMonkeys 2화

How Microsoft's "HoneyMonkey" system works, how it finds malicious web sites before they find you, and what Microsoft is doing (and NOT doing) with this valuable security information it is now collecting.

S1 · E3 · 2005년 9월 1일

NAT Routers as Firewalls 3화

Most people don't think of common NAT routers as hardware firewalls, but ANY NAT router inherently provides terrific security and protection against incoming malicious traffic. Learn how and why this is, and which default settings MUST be changed to lock down the security of your NAT router.

S1 · E4 · 2005년 9월 8일

Personal Password Policy (1) 4화

Everyone who uses web-based services such as eBay, Amazon, and Yahoo, needs to authenticate their identity with passwords. Password quality is important since easily guessable passwords can be easily defeated. Leo and I recap a bit from last week's program, then discuss passwords. We suggest an approach that anyone can use to easily create unbreakable passwords.

S1 · E5 · 2005년 9월 15일

Personal Password Policy (2) 5화

Our previous episode (#4), which discussed personal password policies, generated so much great listener feedback, thoughts, ideas, and reminders about things we didn't mention, that we decided to wrap up this important topic with a final episode to share listeners' ideas and to clarify some things we left unsaid.

S1 · E6 · 2005년 9월 22일

Mechanical & Electromagnetic Information Leakage 6화

Triggered by a recent report of three UC Berkeley researchers recovering text typed at a keyboard (any keyboard) after simply listening to ten minutes of typing, Leo and I discuss the weird realm of "alternative information leakage" — from CRT glowing, to radio emissions, to LEDs lamps on the front of network equipment . . . to a microphone listening to anyone typing.

S1 · E7 · 2005년 9월 29일

SPYaWAREness 7화

Any contemporary discussion of threats to Internet security must discuss the history, current situation, and future of spyware. Leo and I spend a little more time than usual covering many aspects of this important topic. DON'T MISS the Episode Notes Page for this episode!

S1 · E8 · 2005년 10월 6일

Denial of Service (DoS) Attacks 8화

Distributed Denial of Service (DDoS) attacks are occurring with ever-greater frequency every day. Although these damaging attacks are often used to extort high-profile gaming and gambling sites before major gambling events, attacks are also launched against individual users who do something to annoy "zombie fleet masters" while they are online. Some router and firewall vendors claim that their devices prevent DDoS attacks. Is that possible? What can be done to dodge the bullet of a DDoS attack launched against you while you're online?

S1 · E9 · 2005년 10월 13일

Rootkits 9화

This week we discuss "rootkit technology". We examine what rootkits are, why they have suddenly become a problem, and how that problem is rapidly growing in severity. We also discuss their detection and removal and point listeners to some very effective free rootkit detection solutions.

S1 · E10 · 2005년 10월 20일

Open Wireless Access Points 10화

Leo and I examine the security and privacy considerations of using non-encrypted (i.e. 'Open') wireless access points at home and in public locations. We discuss the various ways of protecting privacy when untrusted strangers can 'sniff' the data traffic flowing to and from your online PC.

S1 · E11 · 2005년 10월 27일

Bad WiFi Security (WEP and MAC address filtering) 11화

Leo and I answer some questions arising from last week's episode, then plow into a detailed discussion of the lack of security value of MAC address filtering, the futility of disabling SSID's for security, and the extremely poor security offered by the first-generation WEP encryption system.

S1 · E12 · 2005년 11월 3일

Sony's 12화

Leo and I discuss details and consequences of Sony Corporation's alarming "Rootkit" DRM (digital rights management) copy protection scheme. This poorly written software unnecessarily employs classic rootkit technology (see episode #9) to hide from its users after installation. It can not be uninstalled easily, it can be easily misused for malicious purposes, and it has been implicated in many repeated BSOD "blue screen of death" PC crashes.

S1 · E13 · 2005년 11월 10일

Unbreakable WiFi Security 13화

Leo and I follow-up on last week's discussion of the Sony Rootkit debacle with the distressing news of "phoning home" (spyware) behavior from the Sony DRM software, and the rootkit's exploitation by a new malicious backdoor Trojan. We then return to complete our discussion of WiFi security, demystifying the many confusing flavors of WPA encryption and presenting several critical MUST DO tips for WPA users.

S1 · E14 · 2005년 11월 17일

Virtual Private Networks (VPN): Theory 14화

Leo and I first follow-up on the past two episodes, discussing new developments in the continuing Sony Rootkit DRM drama, and clearing up some confusion over the crackability of WPA passphrases. Then, in this first of our two-part series on VPNs, we discuss the theory of VPN connections and tunnels, explaining how they work and why they represent such a terrific solution for anyone who needs security while they're away from home.

S1 · E15 · 2005년 11월 24일

VPN Secure Tunneling Solutions 15화

Leo and I discuss the use of SSL and SSH encrypted tunneling for providing privacy and security whenever an insecure local network is being used — such as at an open WiFi hotspot or when using a hotel's network. These solutions are not transparent and tend to be configuration intensive. They also require the use of a "server" of some sort at the user's home or office. This makes these approaches less suitable for casual users, but offers a solution for the more technically inclined road warriors.

S1 · E16 · 2005년 12월 1일

Listener feedback Q&A #1 16화

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world 'application notes' for any of the security technologies we have previously discussed.

S1 · E17 · 2005년 12월 8일

PPTP and IPSec VPN Technology 17화

In our continuing exploration of VPN technology for protecting network users on networks they don't control, Leo and I discuss the oldest "original" VPN protocols: Industry standard IPSec, and Microsoft's own PPTP and L2TP/IPSec. We examine and explain the trouble with interconnecting Windows machines to third-party VPN routers and examine the many reasons these older technologies are probably not optimal for on-the-go road warriors.

S1 · E18 · 2005년 12월 15일

Hamachi Rocks! 18화

This week Leo and I discuss and describe the brand new, ready to emerge from a its long development beta phase, ultra-secure, lightweight, high-performance, highly-polished, multi-platform, peer-to-peer and FREE! personal virtual private networking system known as "Hamachi". After two solid weeks of testing and intense dialog with Hamachi's lead developer and designer, I have fully vetted the system's security architecture and have it running on many of my systems. While I am travelling to Toronto this week, Hamachi is keeping my roaming laptop securely and directly connected to all of my machines back home. Don't miss this one!

S1 · E19 · 2005년 12월 22일

VPNs Three: Hamachi, iPig, and OpenVPN 19화

Leo and I wrap up our multi-week, in-depth coverage of PC VPN solutions by discussing some aftermath of the zero-configuration Hamachi system; introducing "iPig," a very appealing new zero-configuration VPN contender; and describing the many faces of OpenVPN, the "Swiss army knife" of VPN solutions.

S1 · E20 · 2005년 12월 29일

A SERIOUS new Windows vulnerability — and Listener Q&A 20화

On December 28th a serious new Windows vulnerability has appeared and been immediately exploited by a growing number of malicious web sites to install malware. Many worse viruses and worms are expected soon. We start off discussing this and our show notes provides a quick necesary workaround until Microsoft provides a patch. Then we spend the next 45 minutes answering and discussing interesting listener questions.

S1 · E21 · 2006년 1월 5일

The Windows MetaFile (WMF) Vulnerability 21화

Leo and I discuss everything known about the first serious Windows security exploits of the New Year, caused by the Windows MetaFile (WMF) vulnerability. In our show's first guest appearance, we are joined by Ilfak Guilfanov, the developer of the wildly popular -- and very necessary -- temporary patch that was used by millions of users to secure Windows systems while the world waited for Microsoft to respond.

S1 · E22 · 2006년 1월 12일

The Windows MetaFile Backdoor? 22화

Leo and I carefully examine the operation of the recently patched Windows MetaFile vulnerability. I describe exactly how it works in an effort to explain why it doesn't have the feeling of another Microsoft "coding error". It has the feeling of something that Microsoft deliberately designed into Windows. Given the nature of what it is, this would make it a remote code execution "backdoor". We will likely never know if this was the case, but the forensic evidence appears to be quite compelling.

S1 · E23 · 2006년 1월 19일

GRC's 23화

Leo and I "close the backdoor" on the controversial Windows WMF Metafile image code execution (MICE) vulnerability. We discuss everything that's known about it, separate the facts from the spin, explain exactly which Windows versions are vulnerable and why, and introduce a new piece of GRC freeware: MouseTrap which determines whether any Windows or Linux/WINE system has 'MICE'.

S1 · E24 · 2006년 1월 26일

Listener Feedback Q&A #3 24화

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world "application notes" for any of the security technologies we have previously discussed.

S1 · E25 · 2006년 2월 2일

How the Internet Works (1) 25화

Steve talks about the Kama Sutra virus, scheduled to strike tomorrow, and PC World's anti-virus roundup. Then we delve into How the Internet Works, part 1. We'll wrap things up next week.

S1 · E26 · 2006년 2월 9일

How the Internet Works (2) 26화

Part 2 of Steve's discussion of how the fundamental Internet technologies work. This and the previous episode will provide the foundation for our future podcasts on Internet security issues.

S1 · E27 · 2006년 2월 16일

How Local Area Networks Work, Part 1 27화

Steve continues to lay a foundation on understanding networking. This week, part one of how LANs work. We cover DHCP, Subnet Masks, Routers, and hubs. We'll conclude with part two on episode 29.

S1 · E28 · 2006년 2월 23일

Listener Feedback Q&A #4 28화

Steve answers your questions on this episide. With further clarification on VPN security, Hamachi, and the answer to the eternal question, which operating system is the most secure.

S1 · E29 · 2006년 3월 2일

Ethernet Insecurity 29화

In this week's marathon edition Steve tackles security issues inherent to Ethernet, including ARP spoofing.

S1 · E30 · 2006년 3월 10일

Cryptographic Issues 30화

This week Steve takes a look at how cryptography is used and the difficult issues strong crypto raises.

S1 · E31 · 2006년 3월 16일

Symmetric Stream Ciphers 31화

This week Steve continues his discussion of crypto with a look at secret decoder rings and one-time pads.

S1 · E32 · 2006년 3월 23일

Listener Feedback Q&A #5 32화

Episode 32 is our monthly question and answer session.

S1 · E33 · 2006년 3월 30일

Symmetric Block Ciphers 33화

Part three of Steve's overview of cryptography looks at symmetric block ciphers.

S1 · E34 · 2006년 4월 6일

Public Key Cryptography 34화

This week Steve explains how public key cryptography works, and we welcome our new sponsor, Astaro! Thanks so much for the support guys.

S1 · E35 · 2006년 4월 13일

Cryptographic Hashes 35화

This week Steve talks about how cryptographic hashes work and are used to verify the integrity of files and email. We also talk about email signing and recommend the Gnu Privacy Guard.

S1 · E36 · 2006년 4월 20일

Listener Feedback Q&A #6 36화

As usual on every fourth episode, Steve answers listener questions.

S1 · E37 · 2006년 4월 27일

Crypto Series Wrap-up 37화

We wrap up our talk about cryptography with a discussion of prime number generation, key recovery, and digital certificates.

S1 · E38 · 2006년 5월 4일

Browser Security 38화

Why is Internet Explorer so insecure? What can you do to secure it? And why is it so hard to make a secure browser? Steve talks about security policy vs. browser flaws, how he uses IE safely, and why Java and Javascript are inherently more secure than ActiveScript and ActiveX.

S1 · E39 · 2006년 5월 11일

Buffer Overruns 39화

Buffer overflows... they're the most common kind of security flaw, but what are they and how do they happen? Finally, how can we protect ourselves from them? Steve explains all.

S1 · E40 · 2006년 5월 18일

Listener Feedback Q&A #7 40화

As he does every fourth episode, Steve answers your questions. But first, an update on some recent security news...

S1 · E41 · 2006년 5월 25일

TrueCrypt 41화

The ultimate encryption program, free, open source, strong, and flexible: Truecrypt.

S1 · E42 · 2006년 6월 1일

NAT Traversal 42화

Steve explains the clever technique that Skype and other programs use to end around NAT routers.

S1 · E43 · 2006년 6월 8일

Open Ports 43화

Ever wonder what a port is? Steve explains what they are and what terms like "stealth ports" and "port sniffing mean." Leo reads a little poetry.

S1 · E44 · 2006년 6월 15일

Listener Feedback Q&A #8 44화

On this episode, one dozen questons and answers

S1 · E45 · 2006년 6월 22일

The 'Hosts' File 45화

This week Steve explains the mysterious HOSTS file - part of Windows, OS X, Linux, and many other operating systems. He talks about how malicious programs may misuse it, and how you can use it to protect yourself.

S1 · E46 · 2006년 6월 29일

Router Logs 46화

This week Steve tells us what to do with the router logs. What a router can (and can't) tell you about your security situation?

S1 · E47 · 2006년 7월 6일

Internet Weaponry 47화

This week Steve tells us about distributed denial of service attacks and how hackers use IRC botnets to create them.

S1 · E48 · 2006년 7월 13일

Listener Feedback Q&A #9 48화

How big can a HOSTS file get? Does a firewall slow you down? A plan to fight phishers. All on this week's edition of Security Now! with Steve Gibson.

S1 · E49 · 2006년 7월 20일

The NETSTAT Command 49화

How can you tell what your computer is doing on the net? Netstat. This handy program comes with almost all operating systems. On Windows, click Start, then select Command Prompt from the Programs->Accessories menu. To run Netstat, type netstat at the command prompt. For more readable output type netstat -ab.

S1 · E50 · 2006년 7월 27일

Virtual Machine History & Technology 50화

Virtualization, its history and uses in security.

S1 · E51 · 2006년 8월 3일

Vista's Virgin Stack 51화

Will Windows Vista be secure? According to a new study from Symantec, the decision to re-write the networking stack from the ground up means it will be much less secure than XP.

S1 · E52 · 2006년 8월 10일

A Busy Week for Security Troubles 52화

Steve normally answers questions on shows divisible by four, but not this week. There's just too much security news including javascript exploits, Ebay gaming, and the sale of Hamachi.

S1 · E53 · 2006년 8월 17일

VMware 53화

More on Virtualization technology, with a special focus on VMWare's Virtual Appliances.

S1 · E54 · 2006년 8월 24일

Blue Pill 54화

The Blue Pill demonstrates a serious security concern with the Hypervisor mode in Windows Vista. Steve discusses the threat and arguments against it.

S1 · E55 · 2006년 8월 31일

Application Sandboxes 55화

Sandboxing your browser to keep your system secure.

S1 · E56 · 2006년 9월 7일

Listener Feedback Q&A #10 56화

Our regular session of questions and answers deals with Vista security, remote access, the HOSTS files, and Zone Alarm.

S1 · E57 · 2006년 9월 14일

Virtual PC versus VMware 57화

Steve wraps up his rundown of Virtualization programs with a look at Microsoft's free Virtual PC.

S1 · E58 · 2006년 9월 21일

Two New Critical Windows Problems 58화

Guest: Eric Sites, VP R&D Sunbelt Software Two serious Windows flaws have surfaced today. One, a zero-day exploit, makes it possible for any web site (or HTML email) to take over a Windows machine, even if it's been fully patched. The other is a file corruption error on Windows 2000 NTFS systems introduced by a Microsoft patch.

S1 · E59 · 2006년 9월 28일

Comparing 59화

We conclude our coverage of virtual machine software with a review of Parallels - the fastest of the VM programs.

S1 · E60 · 2006년 10월 5일

Listener Feedback Q&A #11 60화

S1 · E61 · 2006년 10월 12일

ISP Privacy and Security 61화

First a review of three more zero day exploits in Windows XP, then a look at what your ISP knows about you and how to protect your privacy.

S1 · E62 · 2006년 10월 19일

Internet Proxies 62화

How proxy servers work to both speed up access and protect users.

S1 · E63 · 2006년 10월 26일

MojoPac 63화

MojoPac software lets you put your entire Windows configuration on a thumbdrive or portable disk and take it with you anywhere. It works surprisingly well, but there are some caveats. Steve reviews.

S1 · E64 · 2006년 11월 2일

Listener Feedback Q&A #12 64화

S1 · E65 · 2006년 11월 9일

Why Is Security So Difficult? 65화

What makes it so hard to secure Windows? Steve says ultimate security is ultimately impossible.

S1 · E66 · 2006년 11월 16일

Windows Vista Security 66화

Why the 64-bit version of Windows is both more secure and less compatible. Steve explains why.

S1 · E67 · 2006년 11월 23일

Kernel Patch Protection 67화

Microsoft is touting PatchGuard, a new security feature in 64-bit versions of XP and Vista. Steve explains how easy it is to hack, and what it's really for if it's not for deterring hackers.

S1 · E68 · 2006년 11월 30일

Listener Feedback Q&A #13 68화

Our monthly question and answer session goes long - but there's lots of good information.

S1 · E69 · 2006년 12월 7일

The Social Implications of Internet Anonymity 69화

Is there such a thing as anonymity on the Internet? How important is it?

S1 · E70 · 2006년 12월 14일

Achieving Internet Anonymity 70화

Two interesting implementations of Internet anonymization: The Freenet Project for anonymously storing and transmitting files, and Tor, "the onion router" which can anonymize all your Internet accesses.

S1 · E71 · 2006년 12월 21일

SecurAble 71화

Steve's latest free security application is called Securable. It's not quite ready yet, but Steve gives us a preview in this episode.

S1 · E72 · 2006년 12월 28일

Listener Feedback Q&A #14 72화

Our monthly question and answer segment covers TOR details, overheating hard drives, and what happens to your data when you die...

S1 · E73 · 2007년 1월 4일

Digital Rights Management (DRM) 73화

Steve and Leo survey the history and evolution of media property rights and the technologies used to enforce them as they prepare for next week's show: a look at AACS, the most pervasive and invasive system for digital rights management ever created.

S1 · E74 · 2007년 1월 12일

Peter Gutmann on Vista DRM 74화

Steve and Leo interview Peter Gutmann about his paper A Cost Analysis of Windows Vista Content Protection.

S1 · E75 · 2007년 1월 12일

Vista DRM Wrap-Up & Announcing “SecurAble” 75화

We wrap up our discussion of the premium content protection features in Vista and announce Steve's newest free security utility: Securable.

S1 · E76 · 2007년 1월 25일

Listener Feedback Q&A #15 76화

Our monthly question and answer segment covers DEP on the Mac, HD-DVD decryption, and email privacy...

S1 · E77 · 2007년 1월 31일

Microsoft on Vista DRM 77화

Steve and Leo discuss Dave Marsh's response on behalf of Microsoft to Peter Gutmann's paper about Windows Vista Content Protection.

S1 · E78 · 2007년 2월 7일

DEP in Depth 78화

Hardware Data Execution Protection is one of the best ways to protect your PC from hackers. Steve discusses how it works, how to turn it on, and the possible pitfalls of using it.

S1 · E79 · 2007년 2월 15일

Backtracking Spoofed Spam eMail 79화

How do spambots work, why do spammers need them, and the best way to block them and prevent spam.

S1 · E80 · 2007년 2월 22일

Listener Feedback Q&A #16 80화

Our monthly question and answer segment covers spam spoofing, VPN mysteries, and online backup security...

S1 · E81 · 2007년 3월 1일

Hard Drive Unreliability 81화

Google's massive study of hard drive reliability yields some surprising results. Read more at http://www.grc.com/sn/notes-081.htm

S1 · E82 · 2007년 3월 8일

Cyber Warfare 82화

Steve comments on the Federal Computer Week article Cyber officials: Chinese hackers attack 'anything and everything'.

S1 · E83 · 2007년 3월 15일

UAC in Depth 83화

A closer look at Vista's User Access Control.

S1 · E84 · 2007년 3월 22일

Listener Feedback Q&A #17 84화

S1 · E85 · 2007년 3월 29일

Intro to Web Code Injection 85화

Jikto is a Javascript tool that can take over your computer and use it to find sites with vulnerabilities. We describe it and the cross-site scripting flaws it looks for.

S1 · E86 · 2007년 4월 5일

Cross-Site Scripting 86화

Updates on the Animated Cursor Vulnerability, a recommendation for security software from eEye, and how the Sony Reader works, plus an in depth discussion of scripting vulnerabilities.

S1 · E87 · 2007년 4월 12일

SQL Injection Exploits 87화

Another common attack vector in web software is the SQL injection. Steve explains what it is and how it happens.

S1 · E88 · 2007년 4월 19일

Listener Feedback Q&A #18 88화

S1 · E89 · 2007년 4월 26일

Even More Badly Broken WEP 89화

WEP gets even more insecure with a new cracking technique that's 1000 times faster.

S1 · E90 · 2007년 5월 3일

Multifactor Authentication 90화

Steve explains the theory and practice of multifactor authentication which uses combinations of "something you know," "something you have," and "something you are" to provide stronger remote authentication than traditional, unreliable single-factor username and password authentication.

S1 · E91 · 2007년 5월 10일

Marc Maiffret 91화

Guest: Marc Maiffret of eEye Digital Security Marc talks about Windows and Mac security, the coming threat from web applications, and eEye's free, all-in-one protection program, Blink Personal Edition.

S1 · E92 · 2007년 5월 17일

Listener Feedback Q&A #19 92화

S1 · E93 · 2007년 5월 24일

Microsoft Patent Wars 93화

Steve looks at software patents and the Microsoft challenge to open source software from the point of view of a developer, patent holder, and expert witness in patent cases.

S1 · E94 · 2007년 5월 31일

The Fourth Factor 94화

We've already talked about the three factors of authentication: something you know (e.g. a password), something you have (a passcard), and something you are (a fingerprint). Now Steve talks about the fourth factor of authentication: someone you know, or who knows you.

S1 · E95 · 2007년 6월 7일

OpenID 95화

Open ID, how it works and what it means to you (not having to remember so many passwords for starters).

S1 · E96 · 2007년 6월 15일

Listener Feedback Q&A #20 96화

Steve answers listener mail on subjects like authentication and more...

S1 · E97 · 2007년 6월 22일

Operation: Bot Roast 97화

The FBI says it has uncovered one million computers that are being used by hackers without their owners' knowledge. Today Steve talks about BotNets and the FBI's Operation Bot Roast.

S1 · E98 · 2007년 6월 28일

Internet Identity Metasystems 98화

Steve continues our discussion of authentication with a look at Internet identity metasystems.

S1 · E99 · 2007년 7월 5일

Trusted Platform Module (TPM) 99화

The Trusted Platform Module - a hardware solution to security now shipping on many computers.

S1 · E100 · 2007년 7월 12일

Listener Feedback Q&A #21 100화

Your questions, Steve's answers as we complete 100 consecutive weeks of shows!

S1 · E101 · 2007년 7월 19일

Are You Human? 101화

Steve looks at Captcha and Re-Captcha - the pros and cons of trying to distinguish humans from robots, with a side look at Alan Turing and Jeff Hawkins's On Intelligence.

S1 · E102 · 2007년 7월 26일

Listener Mailbag #1 102화

Our first mailbag episode with 20 questions and comments from our listeners.

S1 · E103 · 2007년 8월 2일

PayPal Security Key 103화

A closer look at the Paypal Security Key with Michael Vergara, Director of Account Protections at Paypal.

S1 · E104 · 2007년 8월 9일

Listener Feedback Q&A #22 104화

For 16Kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written - Spinrite 6.

S1 · E105 · 2007년 8월 16일

Firewall LeakTesting 105화

Steve, the creator of the original leak test program, talks about leak testing and how hackers work to get around them.

S1 · E106 · 2007년 8월 23일

Listener Mailbag #2 106화

Our second mailbag episode with a dozen questions and comments from our listeners.

S1 · E107 · 2007년 8월 30일

PIP & Even More Perfect Passwords 107화

Steve looks at Verisign's Personal Identity Provider, an OpenID service that works with the Paypal token, and talks about updates to his Perfect Password page.

S1 · E108 · 2007년 9월 6일

Listener Feedback #23 108화

S1 · E109 · 2007년 9월 13일

GRC's eCommerce System 109화

Steve talks about developing his in-house E-Commerce system, and how he solved some issues other e-commerce system handle poorly. We also talk about the pleasures of assembly language programming.

S1 · E110 · 2007년 9월 20일

Listener Feedback #24 110화

Our regular mailbag episode with a dozen questions and comments from our listeners, plus an extra one for fun.

S1 · E111 · 2007년 9월 27일

OpenID Precautions 111화

Steve responds to criticisms of the OpenID system and offers some issues to consider when you use it.

S1 · E112 · 2007년 10월 4일

Listener Feedback #25 112화

S1 · E113 · 2007년 10월 11일

Roaming Authentication 113화

How do you solve the problem of secure access to data on the road? Steve shows how he tackled roaming authentication at grc.com and proposes a general solution for everyone.

S1 · E114 · 2007년 10월 18일

Listener Feedback #26 114화

Our regular mailbag episode with a dozen questions and comments from our listeners including our Great Idea of the Week...

S1 · E115 · 2007년 10월 25일

Perfect Paper Passwords 115화

Following up on Episode 113, Roaming Authentication, Steve proposes a great way to strengthen remote access using Perfect Paper Passwords.

S1 · E116 · 2007년 11월 1일

Listener Feedback #27 116화

S1 · E117 · 2007년 11월 8일

Even More Perfect paper Passwords 117화

Perfect Paper Passwords version two!

S1 · E118 · 2007년 11월 15일

Listener Feedback #28 118화

S1 · E119 · 2007년 11월 22일

PayPal and DoubleClick 119화

Why does Paypal secretly send you through Doubleclick to get to some of its web pages? Steve explains how third-party cookies can violate your privacy and what to do about it.

S1 · E120 · 2007년 11월 29일

Listener Feedback #29 120화

S1 · E121 · 2007년 12월 6일

Is Privacy Dead? 121화

Is it possible to preserve your privacy in the digital age? It's certainly worth trying.

S1 · E122 · 2007년 12월 13일

Listener Feedback #30 122화

Our regular mailbag episode with a dozen questions and comments from our listeners...

S1 · E123 · 2007년 12월 20일

Jungle Disk 123화

Steve interviews Dave Wright of JungleDisk, a data storage optimization product for Amazon's S3...

S1 · E124 · 2007년 12월 27일

Listener Feedback #31 124화

S1 · E125 · 2008년 1월 3일

Symmetric Ciphers 125화

Steve further elaborates on symmetric ciphers, the workhorses of encryption.

S1 · E126 · 2008년 1월 10일

Listener Feedback #32 126화

Steve discusses Treewalkdns.com, OpenDNS, Rijndael encryption Flash animation, Ironkey, and Opera mini security FAQ.

S1 · E127 · 2008년 1월 17일

Corporate Security 127화

Steve talks about the challenges of corporate IT security policy and enforcement and the inherent tension between IT security staff and employees.

S1 · E128 · 2008년 1월 24일

Listener Feedback #33 128화

Steve talks about the remote code execution exploit of the Microsoft Windows TCP/IP vulnerability and answers your questions.

S1 · E129 · 2008년 1월 31일

Windows SteadyState 129화

Steve discusses how network administrators can protect their systems using Windows SteadyState.

S1 · E130 · 2008년 2월 7일

Listener Feedback #34 130화

S1 · E131 · 2008년 2월 14일

FREE CompuSec 131화

Microsoft's Super Patch Tuesday, Macintosh updates, Adobe Acrobat exploit, Firefox patch, Vista SP-1, and more.

S1 · E132 · 2008년 2월 21일

Listener Feedback #35 132화

S1 · E133 · 2008년 2월 28일

TrueCrypt v5.0 133화

Steve explores whole-drive encryption and details the release of TrueCrypt 5.0.

S1 · E134 · 2008년 3월 6일

Listener Feedback #36 134화

S1 · E135 · 2008년 3월 13일

IronKey 135화

Guest: Dave Jevans, CEO of IronKey Steve interviews Dave Jevans of IronKey.

S1 · E136 · 2008년 3월 20일

Listener Feedback #37 136화

S1 · E137 · 2008년 3월 27일

RAM Hijacks 137화

Steve breaks down the concept of dynamic RAM hijacking raised by the recent Princeton study.

S1 · E138 · 2008년 4월 3일

Listener Feedback #38 138화

S1 · E139 · 2008년 4월 10일

Network Congestion 139화

The logistics of network congestion, network neutrality and prioritized packets.

S1 · E140 · 2008년 4월 17일

Listener Feedback #39 140화

S1 · E141 · 2008년 4월 24일

RSA Conference 2008 141화

ClamAV security flaw, ICQ vulnerability, Opera and more.

S1 · E142 · 2008년 5월 1일

Listener Feedback #40 142화

S1 · E143 · 2008년 5월 8일

YubiKey 143화

Leo and I delve into the detailed operation of the YubiKey, the coolest new secure authentication device I discovered at the recent RSA Security Conference. Our special guest during the episode is Stina Ehrensvrd, CEO and Founder of Yubico, who describes the history and genesis of the YubiKey, and Yubico's plans for this cool new technology.

S1 · E144 · 2008년 5월 15일

Listener Feedback #41 144화

S1 · E145 · 2008년 5월 22일

Secunia's PSI 145화

The free vulnerability scanner and update management tool Secunia PSI.

S1 · E146 · 2008년 5월 29일

Listener Feedback #42 146화

S1 · E147 · 2008년 6월 5일

Microsoft's Baseline Security Analyzer 147화

Two useful but lesser-known Microsoft security utilities.

S1 · E148 · 2008년 6월 12일

Listener Feedback #43 148화

S1 · E149 · 2008년 6월 19일

ISP Betrayal 149화

An overview of next-generation behavioral tracking and profiling systems.

S1 · E150 · 2008년 6월 26일

Listener Feedback #44 150화

S1 · E151 · 2008년 7월 3일

Phracking Phorm 151화

How third parties are gaining footholds in ISP facilities in order to access your data.

S1 · E152 · 2008년 7월 10일

Listener Feedback #45 152화

S1 · E153 · 2008년 7월 17일

DePhormed Politics 153화

More on the privacy threat from the Phorm system.

S1 · E154 · 2008년 7월 24일

Listener Feedback #46 154화

S1 · E155 · 2008년 7월 31일

Bailiwicked Domain Attack 155화

The nuts and bolts of DNS and the DNS cache poisoning attacks.

S1 · E156 · 2008년 8월 7일

Listener Feedback #47 156화

S1 · E157 · 2008년 8월 14일

DNS — After the Patch 157화

A follow-up on the serious, and somewhat still present, DNS protocol spoofability flaw.

S1 · E158 · 2008년 8월 21일

Listener Feedback #48 158화

S1 · E159 · 2008년 8월 28일

Vista Security Bypass 159화

Black Hat Conference revelations, where Vista's security improvements fall short, and more.

S1 · E160 · 2008년 9월 4일

Listener Feedback #49 160화

S1 · E161 · 2008년 9월 11일

Google's Chrome 161화

Steve drills down to determine the security levels offered by Google Chrome.

S1 · E162 · 2008년 9월 18일

Listener Feedback #50 162화

S1 · E163 · 2008년 9월 25일

GoogleUpdate & DNS Security 163화

The benefits, challenges, and nuances of secure DNS.

S1 · E164 · 2008년 10월 2일

SockStress 164화

Steve explains yet another security flaw in the TCP stack.

S1 · E165 · 2008년 10월 9일

Listener Feedback #51 165화

Airport security checks and balances, white knuckle Disney adventures, and the limits of spyware infestations?

S1 · E166 · 2008년 10월 16일

Cross-Site Request Forgery 166화

Steve tells you why you must always explicitly log out from banking and other important sites.

S1 · E167 · 2008년 10월 23일

Listener Feedback #52 167화

S1 · E168 · 2008년 10월 30일

ClickJacking 168화

Steve discusses clickjacking, aka UI redressing, which tricks users into unintended web-based actions.

S1 · E169 · 2008년 11월 6일

Listener Feedback #53 169화

S1 · E170 · 2008년 11월 13일

The TKIP Hack 170화

Why you shouldn't worry about the TKIP crack.

S1 · E171 · 2008년 11월 20일

Listener Feedback #54 171화

S1 · E172 · 2008년 11월 27일

Sandboxie 172화

Steve and Leo return to take a much closer look at "Sandboxie", an extremely useful, powerful, and highly recommended Windows security tool they first mentioned two years ago. This time, after interviewing Sandboxie's creator, Ronen Tzur, Steve explains why he is totally hooked and why Leo is wishing it was available for his Macs.

S1 · E173 · 2008년 12월 4일

Listener Feedback #55 173화

S1 · E174 · 2008년 12월 11일

Sandbox Limitations 174화

The limitations of sandboxing in preventing the negative impacts of malware.

S1 · E175 · 2008년 12월 18일

Listener Feedback #56 175화

S1 · E176 · 2008년 12월 25일

Drop My Rights 176화

How to use Microsoft's little-known DropMyRights utility for safer browsing.

S1 · E177 · 2009년 1월 1일

Breaking SSL, PDP-8's & UltraCapacitors 177화

Breaking SSL, PDP-8s, and Ultracapacitors. Full show notes are available at grc.com.

S1 · E178 · 2009년 1월 8일

Listener Feedback #57 178화

S1 · E179 · 2009년 1월 15일

Cracking Security Certificates 179화

How security certificates are created and signed, what they do for us, and the MD5 hash.

S1 · E180 · 2009년 1월 22일

Listener Feedback #58 180화

S1 · E181 · 2009년 1월 29일

Crypto Rehash 181화

Steve gives an overview of the major concepts and components of encryption.

S1 · E182 · 2009년 2월 5일

Listener Feedback #59 182화

S1 · E183 · 2009년 2월 12일

Modes of Encryption 183화

Windows Update, IE7 Problems, ActiveX and Windows 7 issues, SQL attacks, and more.

S1 · E184 · 2009년 2월 19일

Listener Feedback #60 184화

S1 · E185 · 2009년 2월 26일

Cryptographic HMACs 185화

MSFT Autorun updates, FreeBSD telnetd, IE7 critical exploit, Acrobat Reader, and more.

S1 · E186 · 2009년 3월 5일

Listener Feedback #61 186화

S1 · E187 · 2009년 3월 12일

Windows Autorun-around 187화

Past and recent problems with Windows Autorun.

S1 · E188 · 2009년 3월 19일

Listener Feedback #62 188화

S1 · E189 · 2009년 3월 26일

Internet Explorer 8 189화

Internet Explorer 8 speed benchmarks, cookies, Compatibly Mode, Smart Screen filter, DEP, and more.

S1 · E190 · 2009년 4월 2일

Listener Feedback #63 190화

S1 · E191 · 2009년 4월 9일

GhostNet 191화

A look into GhostNet, the alleged Chinese cyber-spying network.

S1 · E192 · 2009년 4월 16일

Listener Feedback #64 192화

This mailbag episode discusses new Firefox plugins, Conficker, buffer overflow, and more.

S1 · E193 · 2009년 4월 23일

Conficker 193화

Steve analyzes Conficker, the sophisticated worm that has spread to more than 10 million PCs worldwide.

S1 · E194 · 2009년 4월 30일

Listener Feedback #65 194화

This mailbag episode covers Conficker, Windows process control, NeXT, Ironkey, and more.

S1 · E195 · 2009년 5월 7일

The SSL/TLS Protocol 195화

Steve describes the Internet's most-used security protocol, SSL, now evolved into TLS.

S1 · E196 · 2009년 5월 14일

Listener Feedback #66 196화

This mailbag episode includes SSL/TLS, worms-resistant NATs, PDF JavaScript, nuclear power stations running Windows, and more.

S1 · E197 · 2009년 5월 21일

Windows 7 Security 197화

Security changes, additions and enhancements to Microsoft Windows 7.

S1 · E198 · 2009년 5월 28일

Listener Feedback #67 198화

This mailbag episode includes FASM, scripts, sockets, SSL/TLS, HTTPS, Windows 7's XP mode, and more.

S1 · E199 · 2009년 6월 4일

The Geek Atlas, IPv6 & a non-VPN 199화

A good book, the IPv6 protocol, and Steve's secure TCP idea that doesn't use a VPN tunnel.

S1 · E200 · 2009년 6월 11일

Listener Feedback #68 200화

In this mailbag episode we discuss IPv6, Non-VPNs, Microsoft ClickOnce, expired SSL certificates, and more.

S1 · E201 · 2009년 6월 18일

SecureZIP 201화

The operation, features, and security of PKWARE?s free SecureZIP file archiving and encrypting utility.

S1 · E202 · 2009년 6월 25일

Listener Feedback #69 202화

In this mailbag episode we discuss SecureZip, WPA/WPA2, home-grown VPNs, foreign ATMs, and more.

S1 · E203 · 2009년 7월 2일

Boyer & Moore 203화

Steve tells of the Bob Boyer and J Strother Moore algorithm for finding a substring in a buffer.

S1 · E204 · 2009년 7월 9일

Listener Feedback #70 204화

S1 · E205 · 2009년 7월 16일

Lempel & Ziv 205화

An examination of Lempel-Ziv data compression, one of the most prevalent computer algorithms of all time.

S1 · E206 · 2009년 7월 23일

Mega Security News Update 206화

Security updates in Windows Office, IAS, Virtual PC, Virtual Server, msvid control, and more.

S1 · E207 · 2009년 7월 30일

Listener Feedback #71 207화

Steve answers questions on AES-256, iPhone security, TrueCrypt, Firefox privacy, and more.

S1 · E208 · 2009년 8월 6일

Listener Feedback #72 208화

Steve answers questions on SSL encryption, 3g security, Trojans, VPNs as infection vectors, and more.

S1 · E209 · 2009년 8월 13일

Vitamin D 209화

A rare off-topic discussion about Steve's research into vitamin D.

S1 · E210 · 2009년 8월 20일

Listener Feedback #73 210화

Security news and listeners' questions...

S1 · E211 · 2009년 8월 27일

Voting Machine Hacking 211화

Steve covers the security implications of electronic voting machines.

S1 · E212 · 2009년 9월 3일

Listener Feedback #74 212화

Steve answers questions on iPIG VPN, Flash cookies, firewalls, parents' passwords, and more.

S1 · E213 · 2009년 9월 10일

Cracking GSM Cellphones 213화

The inherent insecurities of GSM, the pseudo-random bitstream cipher protecting data on billions of phones.

S1 · E214 · 2009년 9월 17일

Listener Feedback #75 214화

Steve addresses feedback on GSM security, cookies, router admin passwords, proxy servers, and more.

S1 · E215 · 2009년 9월 24일

Security Maxims 215화

Steve and Leo talk about various security maxims, what they mean, why you should follow them, and more.

S1 · E216 · 2009년 10월 1일

Listener Feedback #76 216화

Leo and Steve talk about Microsoft Security Essentials, your questions, and more.

S1 · E217 · 2009년 10월 8일

The Fundamentally Broken Browser Model 217화

How SSLs can be spoofed in man-in-the-middle attacks.

S1 · E218 · 2009년 10월 15일

Listener Feedback #77 218화

S1 · E219 · 2009년 10월 22일

Badly Broken Browsing 219화

Why patches are impossible, the Total (In)security virus, and why writing software shouldn't be too easy.

S1 · E220 · 2009년 10월 29일

Listener Feedback #78 220화

S1 · E221 · 2009년 11월 5일

The Oxymoron of “JavaScript Security” 221화

The problem with Javascript and security. Guest John Graham-Cumming says it's the "elephant in your browser."

S1 · E222 · 2009년 11월 12일

Listener Feedback #79 222화

We've got the latest security news, including an SSL hack, plus eight great questions from you and Steve's answers...

S1 · E223 · 2009년 11월 19일

A security vulnerability in SSL 223화

Steve explains how a serious exploit in SSL works.

S1 · E224 · 2009년 11월 26일

Listener Feedback #80 224화

Security news, including the NSA's contributions to Windows 7, iPhone bot nets, plus Steve answers your questions.

S1 · E225 · 2009년 12월 3일

“Same Origin” Troubles 225화

Apple fixes security flaws, Ford SYNC SDK, black screen of death, same origin troubles, and more.

S1 · E226 · 2009년 12월 10일

Listener Feedback #130 226화

Digital voting goes open source, patch Tuesday news, and Steve answers your questions.

S1 · E227 · 2009년 12월 17일

Cyberwarfare 227화

Steve covers what may be the future of conflict, Cyberwarfare.

S1 · E228 · 2009년 12월 24일

Listener Feedback #82 228화

Steve responds to questions covering Skype spam, SSL cracking, unencrypted UAV video feeds, free SSL certificates, and more.

S1 · E229 · 2009년 12월 31일

The Rational Rejection of Security Advice 229화

A hard look at the costs and benefits of following all security advice.

S1 · E230 · 2010년 1월 7일

Listener Feedback #83 230화

This week's questions cover packet flow, hijacking DNS queries, router DNS, Patch Tuesday, and more.

S1 · E231 · 2010년 1월 14일

Mega Security Update & CES Observations 231화

Steve catches up with a mega security update, then gives us some of his favorite (wacky) products from CES.

S1 · E232 · 2010년 1월 21일

Listener Feedback #84 232화

Steve answers listener questions about live Linux CDs, TrueCrypt RAM encryption, resetting Thomson modem passwords, and more.

S1 · E233 · 2010년 1월 28일

Let's Design a Computer (part 1) 233화

Steve explains how computers work by designing one from first principles.

S1 · E234 · 2010년 2월 4일

Listener Feedback #85 234화

Internet Explorer as a file system, using Live CDs for security, and Steve takes on the iPad...

S1 · E235 · 2010년 2월 11일

Machine Language 235화

For 16kpbs versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

S1 · E236 · 2010년 2월 18일

Listener Feedback #86 236화

More flash vulnerabilities, security updates, fake security software, Steve answers your questions, and more.

S1 · E237 · 2010년 2월 25일

Indirection: The Power of Pointers 237화

An introduction to the use of "indirection" in computer science, security news, and more.

S1 · E238 · 2010년 3월 4일

Listener Feedback #87 238화

Steve answers your questions about webcam privacy, unencrypted data in ram, and more.

S1 · E239 · 2010년 3월 11일

Stacks, Registers & Recursion 239화

How stacks, registers and recursion are interrelated, the latest security news, and more.

S1 · E240 · 2010년 3월 18일

Listener Feedback #88 240화

Patch Tuesday, Opera vulnerabilities, the RSA conference, RealDVD, and more.

S1 · E241 · 2010년 3월 25일

Hardware Interrupts 241화

Steve continues his talk on the foundational technologies of computing. This week: how computers do more than one thing at a time using interrupts.

S1 · E242 · 2010년 4월 1일

Listener Feedback #89 242화

Critical updates from Microsoft and Apple, good news for Gmail security, and a warning for nudists...

S1 · E243 · 2010년 4월 8일

State Subversion of SSL 243화

Firefox updates, vulnerabilities in .PDFs, Steve's iPad review, SSL/TLS, and more.

S1 · E244 · 2010년 4월 15일

Listener Feedback #90 244화

Microsoft security updates, the FCC's jurisdiction on bandwidth shaping, Java flaws, iPhone OS security, the state of SSL security, and more.

S1 · E245 · 2010년 4월 22일

The Security of Open vs CLosed 245화

Steve and Leo seriously examine the proven comparative security of open versus closed source and development software, and open versus closed execution platforms.

S1 · E246 · 2010년 4월 29일

Listener Feedback #91 246화

Stolen Google source code, GSM hacked, photocopy machine hard drive security, your questions, and more.

S1 · E247 · 2010년 5월 6일

The “Multi”-verse 247화

Opera vulnerabilities, Adobe PDF insecurities, malware from the US Treasury, Steve joins Twitter, and more.

S1 · E248 · 2010년 5월 13일

The Portable Dog Killer 248화

Patch tuesday, laptop camera surveillance, Yahoo! messenger worm, and more.

S1 · E249 · 2010년 5월 20일

Listener Feedback #92 249화

Shockwave issues, Mozilla's plug-in check, weaponized email, hacking cars, your questions, and more.

S1 · E250 · 2010년 5월 27일

Operating Systems 250화

Manually updating IrfanView and Free Download Manager, Google wifi litigation, how operating systems work, and more.

S1 · E251 · 2010년 6월 3일

Listener Feedback #93 251화

Tabnabbing, Adobe security rumors, iPad data plan changes, your questions, and more.

S1 · E252 · 2010년 6월 10일

RISCy Business 252화

Adobe zero-day, overwrought iPad security news, the evolution of computing architectures, and more.

S1 · E253 · 2010년 6월 17일

Listener Feedback #94 253화

Mac update, AT&T hijinks, another zero-day vulnerability from Microsoft, Adobe delays pdf fix, your questions, and more.

S1 · E254 · 2010년 6월 24일

What We'll Do for Speed 254화

The 25 year legacy of unbelievably complex technologies used in microprocessors to maximize performance.

S1 · E255 · 2010년 7월 1일

Listener Feedback #95 255화

Out of cycle Acrobat and Reader updates, Firefox improvements, flawed SSL study, internet kill switch, your questions, and more.

S1 · E256 · 2010년 7월 8일

LastPass 256화

Steve thoroughly evaluates LastPass, explains why high-security passwords are necessary, and tells us how LastPass makes storing those passwords secure.

S1 · E257 · 2010년 7월 15일

Listener Feedback #96 257화

Chrome update, ClearCloud DNS, Microsoft and Russian camaraderie, LastPass, your questions, and more.

S1 · E258 · 2010년 7월 22일

Five Years of Vulnerabilities 258화

Windows shell worm in the wild, Security Essentials 2.0 beta, Secunia's 5-year analysis, and more.

S1 · E259 · 2010년 7월 29일

Listener Feedback #97 259화

Firefox mega security update, WPA2 broken?, .LNK viruses in the wild, infected Dell motherboards, your questions and more.

S1 · E260 · 2010년 8월 5일

DNS Rebinding 260화

Windows .LNK vulnerability fixed, Google's WiFi "overcollection" in the UK, news from Blackhat, DNS rebinding, and more.

S1 · E261 · 2010년 8월 12일

Listener Feedback #98 261화

PayPal discontinues their virtual credit card service, RIM placing servers in Saudi Arabia, Firefox v4 updates silently, your questions and more.

S1 · E262 · 2010년 8월 19일

Strict Transport Security 262화

Apple fixes the jailbreak hole, trojans on Android, Strict Transport Security (STS), and more.

S1 · E263 · 2010년 8월 26일

Listener Feedback #99 263화

Out-Of-Cycle update from Adobe, Apple security update, binary planting, Spanair 2008 crash, your questions, and more.

S1 · E264 · 2010년 9월 2일

Side-Channel Privacy Leakage 264화

Consequences of the web not being designed for privacy, including non-consensual user tracking.

S1 · E265 · 2010년 9월 9일

Listener Feedback #100 265화

Fix-It for .dll hijack, danger from applications changing the working directory, first successful 64-bit Windows root kit, your questions, and more.

S1 · E266 · 2010년 9월 16일

Inside OAuth 266화

Microsoft's 2nd Tuesday update, new 0-day vulnerabilities in Adobe, Firefox fixes, "Stuxnet" worm, delegated access through OAuth, and more.

S1 · E267 · 2010년 9월 23일

Listener Feedback #101 267화

Flash update, Microsoft ASP .NET problem, HDCP master key leak, Twitter "OnMouseover" XSS flaw, your questions, and more.

S1 · E268 · 2010년 9월 30일

CryptoSystem Backdoors 268화

New 0-day for Windows, HDCP decryption software, Stuxnet & Iran, COICA, cryptography systems and backdoors for law enforcement, and more.

S1 · E269 · 2010년 10월 7일

Listener Feedback #102 269화

Adobe Acrobat patched, RIM and India going 'round & 'round, Comcast VS. Bot, and more.

S1 · E270 · 2010년 10월 14일

The Evercookie 270화

Microsoft breaks Patch Tuesday update record, Facebook adds OTPs and remote signout, What is The Evercookie?, and more.

S1 · E271 · 2010년 10월 21일

Listener Feedback #103 271화

Microsoft reports on Java exploits, new Adobe Reader will sandbox, feedback from MSRT, your questions, and more.

S1 · E272 · 2010년 10월 28일

Firesheep 272화

Mozilla and Real Player updates, Firefox 0-day, Wall Street Journal tracking and privacy series, session hijacking for the rest of us, and more.

S1 · E273 · 2010년 11월 4일

Listener Feedback #104 & The FireStorm 273화

Firesheep firestorm, Flash 0-day exploit in the wild, another iPhone lock screen bypass, your questions, and more.

S1 · E274 · 2010년 11월 11일

Benchmarking DNS 274화

Second Tuesday updates, critical Outlook fix, Android risks, Google expands "bug bounty", GRC's DNS Benchmark, and more.

S1 · E275 · 2010년 11월 18일

Listener Feedback #105 275화

Big Apple update, IE6/7 0-day unpatched, infected Chinese cell phones, Stuxnet's probable target, your questions, and more.

S1 · E276 · 2010년 11월 25일

Testing DNS Spoofability 276화

Safari update, HTTPS Everywhere, FBI wants to wiretap the Internet, comprehensive DNS spoofability test, and more.

S1 · E277 · 2010년 12월 2일

Listener Feedback #106 277화

New WIndows kernel vulnerability, Wikileaks siprnet, Vitamin D findings, your questions, and more.

S1 · E278 · 2010년 12월 9일

Tag Me (with RFID) 278화

Windows 7 SP1 reaches RC level, Google Chrome v8.0 released, What is SHIELD?, How to keep track of people using RFID tags, and more.

S1 · E279 · 2010년 12월 16일

Listener Feedback #107 279화

Microsoft's December security updates, backdoor in BSD, WikiLeaks DDoS, your questions, and more.

S1 · E280 · 2010년 12월 23일

Bluetooth 280화

OpenBSD discredits backdoor, weak net neutrality, compromised site warnings from Google, Bluetooth in depth, and more.

S1 · E281 · 2010년 12월 30일

The Portable Dog Killer, Encore 281화

An encore presentation of an enlightening story from Steve's past.

S1 · E282 · 2011년 1월 6일

Listener Feedback #108 282화

Microsoft acknowledges IE problem, hacking GSM phones, Stuxnet update, your questions, and more.

S1 · E283 · 2011년 1월 13일

Bluetooth Hacking 283화

Cross Fuzz, warrantless cell phone searches, Obama's "Unified Internet Identity", flavors of bluetooth hacking, and more.

S1 · E284 · 2011년 1월 20일

Listener Feedback #109 284화

Israel and US teamed up on Stuxnet, global IPv6 test coming, your questions, and more.

S1 · E285 · 2011년 1월 27일

Fuzzy Browsers 285화

Google awards first "Elite" security award, Facebook SSL and HTTPS, unprivileged work e-mail, stress testing browsers, and more.

S1 · E286 · 2011년 2월 3일

Listener Feedback #110 286화

Gingerbread data disclosure vulnerability, SourceForge hack, IPv4 depletion, zero-day attacks no more, your questions, and more.

S1 · E287 · 2011년 2월 9일

BitCoin CryptoCurrency 287화

Firefox adds "Do Not Track", Verizon alters web content, McAfee on Mobile Malware, BitCoin, and more.

S1 · E288 · 2011년 2월 17일

Listener Feedback #111 288화

A critical Microsoft vulnerability, The differences between open and closed source software, A number of questions around BitCoin, and more.

S1 · E289 · 2011년 3월 17일

Proxied Surfing 289화

After catching up with the week's security updates and other security-related news, Steve and Leo discuss the many modes of operation of "Proxied Web Surfing" which are used to bypass firewalls and Internet filters, aid free speech, and alter the contents of web pages retrieved from the Internet.

S1 · E290 · 2011년 3월 3일

Listener Feedback #112 290화

Windows 7 service pack 1 is out, Apple's Thunderbolt security, Facebook's HTTPS security turns itself off, and more.

S1 · E291 · 2011년 3월 10일

Stuxnet 291화

The anatomy of Stuxnet, plus Pwn2Own is underway meaning updates from Apple, Google, Microsoft, and more.

S1 · E292 · 2011년 3월 17일

Listener Feedback #113 292화

The consequences of Pwn2Own, Issues around the Japanese earthquake, reverse DNS, and more.

S1 · E293 · 2011년 3월 24일

IE9 293화

Internet Explorer 9, RSA Security comprimised, India versus Blackberry, and more.

S1 · E294 · 2011년 3월 31일

Listener Feedback #114 294화

Fraudulent SSL certificates, RSA SecurID breach update, Real Player vulnerability, your questions, and more.

S1 · E295 · 2011년 4월 7일

The Comodo SSL Breach 295화

RSA SecurID Break-in, YubiHSM, Epsilon security breach, DNT gets traction, and more.

S1 · E296 · 2011년 4월 14일

Listener Feedback #115 296화

64 fixes from Microsoft, Another Flash exploit, Wordpress hacked, your questions, and more.

S1 · E297 · 2011년 4월 21일

Pass-Sentences?? 297화

iOS location tracking, Pass phrase security, Dropbox authentication, and more.

S1 · E298 · 2011년 4월 28일

Listener Feedback #116 298화

Sony Playstation Network breach, Mobile tracking, Disc Drive steganography, your emails, and more.

S1 · E299 · 2011년 5월 5일

Going Random (1) 299화

Firefox and Chrome updates, Apple tracks differently, Bin Laden's security, relying on randomness, and more.

S1 · E300 · 2011년 5월 12일

Listener Feedback #117 300화

Reasons you should change your Facebook password right now, Zero Day, a new Do Not Track bill, and more.

S1 · E301 · 2011년 5월 19일

Going Random (2) 301화

DIY Malware kite for Mac, Protect IP act, Achieving true randomness, and more.

S1 · E302 · 2011년 5월 26일

Listener Feedback #118 302화

Mac Defender malware, Sony's continuing security woes, Android vulnerability patched by Google, your questions, and more.

S1 · E303 · 2011년 6월 2일

Password Haystacks 303화

Making passwords memorable AND uncrackable, More on Mac Defender, Lockheed Martin breach, and more.

S1 · E304 · 2011년 6월 9일

Listener Feedback #119 304화

RSA SecurID token replacement, Sony breaches continue, your questions, and more.

S1 · E305 · 2011년 6월 16일

Ghostery 305화

Website surveillance monitoring and blocking, IMF breach, commercial bank fraud liability, and more.

S1 · E306 · 2011년 6월 23일

Listener Feedback #120 306화

Malware stealing Bitcoins, Dropbox security, WordPress hacked, your questions, and more.

S1 · E307 · 2011년 6월 30일

The Future of Identity 307화

LulzSec says farewell, cost of Citigroup attack, National Institute of Standards and Technology, and more.

S1 · E308 · 2011년 7월 7일

Listener Feedback #121 308화

Dropbox TOS update, Microsoft's Skype intercept patent, evaluating LulzSec, your questions, and more.

S1 · E309 · 2011년 7월 14일

How the Internet Works, Part 1 309화

Steve explains how the internet works with three basic principles, plus security updates, security news, and more.

S1 · E310 · 2011년 7월 21일

Listener Feedback #122 310화

iOS updates, careers in computer security, randomness in cryptography, your questions, and more.

S1 · E311 · 2011년 7월 28일

Anatomy of a Security Mistake 311화

Apple iOS Certificate, Passware, dissecting the crypt_blowfish bug, and more.

S1 · E312 · 2011년 8월 4일

Listener Feedback #123 312화

We find a way to keep Tor from being censored, KISSmetrics's sneaky cookie and your questions answered by Steve.

S1 · E313 · 2011년 8월 11일

How The Internet Works: ICMP & UDP 313화

Adobe patches galore, a deep look at ICMP and UDP, and more.

S1 · E314 · 2011년 8월 18일

Listener Feedback #124 314화

Tons of Firefox news, Gizmodo off the hook, lot's of questions, and more.

S1 · E315 · 2011년 8월 25일

Off The Grid 315화

Caesar Cipher, Playfair Cipher, going off the grid and more.

S1 · E316 · 2011년 9월 1일

Listener Feedback #125 316화

Google's fraudulent SSL Certificate, Pakistan bans encryption software, your questions, and more.

S1 · E317 · 2011년 9월 8일

TCP Part 1 – Getting Connected 317화

DigiNotar mega-update, DNS hack of NetNames, TCP demystified, and more.

S1 · E318 · 2011년 9월 15일

Listener Feedback #126 318화

More on DigiNotar, GlobalSign security breach, your questions, and more.

S1 · E319 · 2011년 9월 22일

Certificate Authority (CA) Trust - Time to Change it? 319화

DigiNotar bankruptcy, SSL weakness discovered, alternatives to the CA Hierarchy Model, and more.

S1 · E320 · 2011년 9월 29일

Listener Feedback #127 320화

Kindle Fire and the Silk browser, MySQL breach, your questions, and more.

S1 · E321 · 2011년 10월 5일

The Beauty of B.E.A.S.T. 321화

HTC not sandboxing Android data, phishing on the rise, Browser Exploit Against SSL/TLS, and more.

S1 · E322 · 2011년 10월 12일

Listener Feedback #128 322화

Fighter drone's malware infection, Germany deliberately installing malware on traveller's computers, your questions and Steve's answers.

S1 · E323 · 2011년 10월 19일

TCP Pt.2 - Attacking TCP 323화

Details on the Silk browser, Google encrypted search, TCP attacks, and more.

S1 · E324 · 2011년 10월 26일

Listener Feedback #129 324화

Two Internets, Stuxnet variant "DuQu", Spanning Tree Protocol, your questions, and more.

S1 · E325 · 2011년 11월 2일

TCP Pt.3 - Necessary Refinements 325화

Certificate authorities compromised, BT to block Newzbin, Mac OSX Bitcoin mining malware, "Bytes in Flight", and more.

S1 · E326 · 2011년 11월 9일

Listener Feedback #81 326화

DuQu worm, remote code execution kernel vulnerability, Adobe abandons Flash for mobile, your questions, and more.

S1 · E327 · 2011년 11월 16일

Internet Privacy Update 327화

Firefox 8, SOPA, Kindle Fire first look, and more.

S1 · E328 · 2011년 11월 23일

Listener Feedback #131 328화

SOPA, SCADA hacked, Kindle Fire extended review, your questions, and more.

S1 · E329 · 2011년 11월 30일

Browser ID 329화

Comparing Mozilla's BrowserID to other security technologies, Android malware, Malvertising, and more.

S1 · E330 · 2011년 12월 7일

Listener Feedback #132 330화

DNSCrypt Beta for Mac, Zeus banking trojan, Carrier IQ, your questions, and more.

S1 · E331 · 2011년 12월 14일

Mega Security News Update 331화

Microsoft, Adobe, and Carrier IQ security news, and more.

S1 · E332 · 2011년 12월 21일

Listener Feedback #133 332화

Background updates of IE, more on Carrier IQ, your questions, and more.

S1 · E333 · 2011년 12월 28일

Science Fiction Holiday Special 333화

Firefox 9, SOPA, Sci-Fi movie and book recommendations, and more.

S1 · E334 · 2012년 1월 4일

Listener Feedback #134 334화

Microsoft's Out-Of-Cycle patch, FISA constitutionality, your questions, and more.

S1 · E335 · 2012년 1월 9일

Wi-Fi Protected (In)Security 335화

Simple Secure Wifi isn't very secure, password recovering charger, WPA cracker, and more.

S1 · E336 · 2012년 1월 18일

Listener Feedback #135 336화

Zappos customer data breach, Slow Motion DDoS, your questions, and more.

S1 · E337 · 2012년 1월 25일

WPS: A Troubled Protocol 337화

Forcing laptop decryption, GPS tracking now requires a warrant, DNS poisoning, and more.

S1 · E338 · 2012년 2월 1일

Listener Feedback #136 338화

Google's privacy policy changes, Region's lost 401k data, pcAnywhere source stolen years ago, your questions, and more.

S1 · E339 · 2012년 2월 8일

“ScriptNo” for Chrome 339화

NSTIC update, webcam nightmare, a NoScript-like extension for Chrome, and more.

S1 · E340 · 2012년 2월 15일

Listener Feedback #137 340화

SSL's public key encryption, pcAnywhere, Google Wallet, your questions, and more.

S1 · E341 · 2012년 2월 22일

Can “Anonymous” Take Down the Internet? 341화

The iOS cookie incident, whether Anonymous might take down the Internet, and more.

S1 · E342 · 2012년 2월 29일

Listener Feedback #138 342화

HTML video copy protection, protection against forced decryption, Yubico "Nano", your questions, and more.

S1 · E343 · 2012년 3월 6일

HTTP & SPDY 343화

LulzSec leader betrays Anonymous , how a site can know your social networks, comparing HTTP to SPDY, and more.

S1 · E344 · 2012년 3월 14일

Listener Feedback #139 344화

6th annual Pwn2Own, Microsoft's noisy 2nd Tuesday, Wikipedia transfer from GoDaddy complete, your questions, and more.

S1 · E345 · 2012년 3월 21일

Buffer Bloat 345화

Buffer Bloat on the internet, NSA Super-Super Computer Center, Apache Server Status information leakage, and more.

S1 · E346 · 2012년 3월 28일

Listener Feedback #140 346화

Ten great answers and questions, buffer bloat, security news, and more.

S1 · E347 · 2012년 4월 4일

iOS Password Mis-Managers 347화

Global Payments card processor breach, Apple holds security key for iCloud, iPhone passcode exploit, and more.

S1 · E348 · 2012년 4월 11일

Listener Feedback #141 348화

Flashback infects 670,000 Macs, safety of Safari password storage, Windows Defender Offline, your questions, and more.

S1 · E349 · 2012년 4월 19일

Cloud Solutions 349화

Steve gathers up all the cloud storage solutions and gives us his review.

S1 · E350 · 2012년 4월 25일

Twitter Feedback Q&A #142 / Cloud Security 350화

During this special Q&A episode, Iyaz and I host an entirely Twitter-driven Q&A episode, caused by the flurry of interest created by last week's focus upon Cloud Storage Solutions. After catching up with the week's security-related events, we zip through 21 tweets, then focus upon and examine the security architecture of one controversial and popular cloud storage provider: Backblaze.

S1 · E351 · 2012년 5월 2일

Three Hybrid Cloud Solutions 351화

After catching up with the week's news and Twitter feedback, Leo and I closely examine three remote cloud storage solutions whose Crypto was done COMPLETELY right, Offering full TNO (Trust No One) security. And one of them makes me (Steve) wish I were a Mac user!

S1 · E352 · 2012년 5월 9일

Listener Feedback #143 352화

S1 · E353 · 2012년 5월 16일

DMARC - eMail Security 353화

After catching up with the week's news, Steve and Leo look at the state of the slow but sure and steady progress being made to tighten up the Internet's eMail security. Since spoofing and phishing continue to be huge problems, these problems continue to command the attention of the Internet's largest commerce, financial, and social networking domains. The good news is: There's good reason for hope!!

S1 · E354 · 2012년 5월 23일

Listener Feedback #144 354화

S1 · E355 · 2012년 5월 30일

Poking Holes in TCP 355화

Steve and Leo tackle two new and interesting threats to Internet security. First, the newly discovered “Flame” / “Flamer” / “Skywiper” malware dwarfs Stuxnet and Duqu in capability and complexity. Then they examine the work of two University of Michigan researchers who have detailed a collection of new ways to attack the TCP protocol. They inject malicious content into innocent web pages and add malicious links to online chats.

S1 · E356 · 2012년 6월 6일

Listener Feedback #145 356화

S1 · E357 · 2012년 6월 13일

Flame On! 357화

This week, after catching up with a large amount of the week’s news, Leo and I carefully examine two major new discoveries about the Windows Flame worm.

S1 · E358 · 2012년 6월 20일

Listener Feedback #146 358화

S1 · E359 · 2012년 6월 27일

Coddling Our Buffers 359화

After catching up with a few items of security and privacy news, Leo and I return to the Internet's "Buffer Bloat" problem to share the new solution “CoDel” (pronounced “coddle”) that has been developed by several of the Internet's original and leading technologists and designers.

S1 · E360 · 2012년 7월 11일

Listener Feedback #147 360화

S1 · E361 · 2012년 7월 18일

Paul Vixie & DNS Changer 361화

After catching up with the week's security news, Leo and I take a close look at the recent “DNS Changer” malware, the FBI's role in the “takedown” of the malicious servers, and the expert technical assistance provided by Paul Vixie, one of the pioneers and principal developers of the Internet's Domain Name System (DNS).

S1 · E362 · 2012년 7월 25일

Listener Feedback #148 362화

S1 · E363 · 2012년 8월 1일

Ali Baba's Cave 363화

After catching up with an eventful week of security news, Leo and I explore a variant of the story of “Ali Baba's Cave” as a means for clearly explaining the operation and requirements of cryptographic Zero-Knowledge Interactive Proofs.

S1 · E364 · 2012년 8월 8일

Mat Honan's Very Bad Weekend 364화

After catching up with an eventful week of security news, Leo and I describe and explore the details of the “epic hack” that recently befell well-known technology writer Mat Honan.

S1 · E365 · 2012년 8월 15일

Listener Feedback #149 365화

S1 · E366 · 2012년 8월 22일

Password Cracking Update: The Death of “Clever” 366화

After catching up with a collection of miscellaneous and interesting security-related news, Leo and I take a close look at the long-term consequences of the many massive password leakages which have occurred. The upshot? Hackers are getting MUCH better at cracking passwords, and “clever” techniques can no longer be regarded as safe.

S1 · E367 · 2012년 8월 29일

What a Busy Week! 367화

We have so much security news and information to cover this week that we didn’t have time to take questions from our listeners. What we have, instead, is a LOT of interesting news about the new Java vulnerabilities, new TNO cloud storage solutions, and lots more.

S1 · E368 · 2012년 9월 5일

Listener Feedback #150 368화

S1 · E369 · 2012년 9월 11일

Internet Identity Update 369화

After catching up with an eventful week of security news, Leo and I step back for an overview and discussion of the slowly evolving state of the art in Internet Identity Authentication.

S1 · E370 · 2012년 9월 19일

Mark Russinovich & Other News 370화

We begin the week with a visit with our distinguished guest, Mark Russinovich, late of Sysinternals and now with Microsoft. Mark joins us to chat about the release of his second security thriller, “Trojan Horse,” and to share some of his view of the security world.

S1 · E371 · 2012년 9월 26일

Listener Feedback #151 371화