Security Now

S1 · E1 · 18 de ago de 2005

As the Worm Turns — the first Internet worms of 2005 Episódio 1

How a never-disclosed Windows vulnerability was quickly reverse-engineered from the patches to fix it and turned into more than 12 potent and damaging Internet worms in three days. What does this mean for the future of Internet security?

S1 · E2 · 25 de ago de 2005

HoneyMonkeys Episódio 2

How Microsoft's "HoneyMonkey" system works, how it finds malicious web sites before they find you, and what Microsoft is doing (and NOT doing) with this valuable security information it is now collecting.

S1 · E3 · 1 de set de 2005

NAT Routers as Firewalls Episódio 3

Most people don't think of common NAT routers as hardware firewalls, but ANY NAT router inherently provides terrific security and protection against incoming malicious traffic. Learn how and why this is, and which default settings MUST be changed to lock down the security of your NAT router.

S1 · E4 · 8 de set de 2005

Personal Password Policy (1) Episódio 4

Everyone who uses web-based services such as eBay, Amazon, and Yahoo, needs to authenticate their identity with passwords. Password quality is important since easily guessable passwords can be easily defeated. Leo and I recap a bit from last week's program, then discuss passwords. We suggest an approach that anyone can use to easily create unbreakable passwords.

S1 · E5 · 15 de set de 2005

Personal Password Policy (2) Episódio 5

Our previous episode (#4), which discussed personal password policies, generated so much great listener feedback, thoughts, ideas, and reminders about things we didn't mention, that we decided to wrap up this important topic with a final episode to share listeners' ideas and to clarify some things we left unsaid.

S1 · E6 · 22 de set de 2005

Mechanical & Electromagnetic Information Leakage Episódio 6

Triggered by a recent report of three UC Berkeley researchers recovering text typed at a keyboard (any keyboard) after simply listening to ten minutes of typing, Leo and I discuss the weird realm of "alternative information leakage" — from CRT glowing, to radio emissions, to LEDs lamps on the front of network equipment . . . to a microphone listening to anyone typing.

S1 · E7 · 29 de set de 2005

SPYaWAREness Episódio 7

Any contemporary discussion of threats to Internet security must discuss the history, current situation, and future of spyware. Leo and I spend a little more time than usual covering many aspects of this important topic. DON'T MISS the Episode Notes Page for this episode!

S1 · E8 · 6 de out de 2005

Denial of Service (DoS) Attacks Episódio 8

Distributed Denial of Service (DDoS) attacks are occurring with ever-greater frequency every day. Although these damaging attacks are often used to extort high-profile gaming and gambling sites before major gambling events, attacks are also launched against individual users who do something to annoy "zombie fleet masters" while they are online. Some router and firewall vendors claim that their devices prevent DDoS attacks. Is that possible? What can be done to dodge the bullet of a DDoS attack launched against you while you're online?

S1 · E9 · 13 de out de 2005

Rootkits Episódio 9

This week we discuss "rootkit technology". We examine what rootkits are, why they have suddenly become a problem, and how that problem is rapidly growing in severity. We also discuss their detection and removal and point listeners to some very effective free rootkit detection solutions.

S1 · E10 · 20 de out de 2005

Open Wireless Access Points Episódio 10

Leo and I examine the security and privacy considerations of using non-encrypted (i.e. 'Open') wireless access points at home and in public locations. We discuss the various ways of protecting privacy when untrusted strangers can 'sniff' the data traffic flowing to and from your online PC.

S1 · E11 · 27 de out de 2005

Bad WiFi Security (WEP and MAC address filtering) Episódio 11

Leo and I answer some questions arising from last week's episode, then plow into a detailed discussion of the lack of security value of MAC address filtering, the futility of disabling SSID's for security, and the extremely poor security offered by the first-generation WEP encryption system.

S1 · E12 · 3 de nov de 2005

Sony's Episódio 12

Leo and I discuss details and consequences of Sony Corporation's alarming "Rootkit" DRM (digital rights management) copy protection scheme. This poorly written software unnecessarily employs classic rootkit technology (see episode #9) to hide from its users after installation. It can not be uninstalled easily, it can be easily misused for malicious purposes, and it has been implicated in many repeated BSOD "blue screen of death" PC crashes.

S1 · E13 · 10 de nov de 2005

Unbreakable WiFi Security Episódio 13

Leo and I follow-up on last week's discussion of the Sony Rootkit debacle with the distressing news of "phoning home" (spyware) behavior from the Sony DRM software, and the rootkit's exploitation by a new malicious backdoor Trojan. We then return to complete our discussion of WiFi security, demystifying the many confusing flavors of WPA encryption and presenting several critical MUST DO tips for WPA users.

S1 · E14 · 17 de nov de 2005

Virtual Private Networks (VPN): Theory Episódio 14

Leo and I first follow-up on the past two episodes, discussing new developments in the continuing Sony Rootkit DRM drama, and clearing up some confusion over the crackability of WPA passphrases. Then, in this first of our two-part series on VPNs, we discuss the theory of VPN connections and tunnels, explaining how they work and why they represent such a terrific solution for anyone who needs security while they're away from home.

S1 · E15 · 24 de nov de 2005

VPN Secure Tunneling Solutions Episódio 15

Leo and I discuss the use of SSL and SSH encrypted tunneling for providing privacy and security whenever an insecure local network is being used — such as at an open WiFi hotspot or when using a hotel's network. These solutions are not transparent and tend to be configuration intensive. They also require the use of a "server" of some sort at the user's home or office. This makes these approaches less suitable for casual users, but offers a solution for the more technically inclined road warriors.

S1 · E16 · 1 de dez de 2005

Listener feedback Q&A #1 Episódio 16

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world 'application notes' for any of the security technologies we have previously discussed.

S1 · E17 · 8 de dez de 2005

PPTP and IPSec VPN Technology Episódio 17

In our continuing exploration of VPN technology for protecting network users on networks they don't control, Leo and I discuss the oldest "original" VPN protocols: Industry standard IPSec, and Microsoft's own PPTP and L2TP/IPSec. We examine and explain the trouble with interconnecting Windows machines to third-party VPN routers and examine the many reasons these older technologies are probably not optimal for on-the-go road warriors.

S1 · E18 · 15 de dez de 2005

Hamachi Rocks! Episódio 18

This week Leo and I discuss and describe the brand new, ready to emerge from a its long development beta phase, ultra-secure, lightweight, high-performance, highly-polished, multi-platform, peer-to-peer and FREE! personal virtual private networking system known as "Hamachi". After two solid weeks of testing and intense dialog with Hamachi's lead developer and designer, I have fully vetted the system's security architecture and have it running on many of my systems. While I am travelling to Toronto this week, Hamachi is keeping my roaming laptop securely and directly connected to all of my machines back home. Don't miss this one!

S1 · E19 · 22 de dez de 2005

VPNs Three: Hamachi, iPig, and OpenVPN Episódio 19

Leo and I wrap up our multi-week, in-depth coverage of PC VPN solutions by discussing some aftermath of the zero-configuration Hamachi system; introducing "iPig," a very appealing new zero-configuration VPN contender; and describing the many faces of OpenVPN, the "Swiss army knife" of VPN solutions.

S1 · E20 · 29 de dez de 2005

A SERIOUS new Windows vulnerability — and Listener Q&A Episódio 20

On December 28th a serious new Windows vulnerability has appeared and been immediately exploited by a growing number of malicious web sites to install malware. Many worse viruses and worms are expected soon. We start off discussing this and our show notes provides a quick necesary workaround until Microsoft provides a patch. Then we spend the next 45 minutes answering and discussing interesting listener questions.

S1 · E21 · 5 de jan de 2006

The Windows MetaFile (WMF) Vulnerability Episódio 21

Leo and I discuss everything known about the first serious Windows security exploits of the New Year, caused by the Windows MetaFile (WMF) vulnerability. In our show's first guest appearance, we are joined by Ilfak Guilfanov, the developer of the wildly popular -- and very necessary -- temporary patch that was used by millions of users to secure Windows systems while the world waited for Microsoft to respond.

S1 · E22 · 12 de jan de 2006

The Windows MetaFile Backdoor? Episódio 22

Leo and I carefully examine the operation of the recently patched Windows MetaFile vulnerability. I describe exactly how it works in an effort to explain why it doesn't have the feeling of another Microsoft "coding error". It has the feeling of something that Microsoft deliberately designed into Windows. Given the nature of what it is, this would make it a remote code execution "backdoor". We will likely never know if this was the case, but the forensic evidence appears to be quite compelling.

S1 · E23 · 19 de jan de 2006

GRC's Episódio 23

Leo and I "close the backdoor" on the controversial Windows WMF Metafile image code execution (MICE) vulnerability. We discuss everything that's known about it, separate the facts from the spin, explain exactly which Windows versions are vulnerable and why, and introduce a new piece of GRC freeware: MouseTrap which determines whether any Windows or Linux/WINE system has 'MICE'.

S1 · E24 · 26 de jan de 2006

Listener Feedback Q&A #3 Episódio 24

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world "application notes" for any of the security technologies we have previously discussed.

S1 · E25 · 2 de fev de 2006

How the Internet Works (1) Episódio 25

Steve talks about the Kama Sutra virus, scheduled to strike tomorrow, and PC World's anti-virus roundup. Then we delve into How the Internet Works, part 1. We'll wrap things up next week.

S1 · E26 · 9 de fev de 2006

How the Internet Works (2) Episódio 26

Part 2 of Steve's discussion of how the fundamental Internet technologies work. This and the previous episode will provide the foundation for our future podcasts on Internet security issues.

S1 · E27 · 16 de fev de 2006

How Local Area Networks Work, Part 1 Episódio 27

Steve continues to lay a foundation on understanding networking. This week, part one of how LANs work. We cover DHCP, Subnet Masks, Routers, and hubs. We'll conclude with part two on episode 29.

S1 · E28 · 23 de fev de 2006

Listener Feedback Q&A #4 Episódio 28

Steve answers your questions on this episide. With further clarification on VPN security, Hamachi, and the answer to the eternal question, which operating system is the most secure.

S1 · E29 · 2 de mar de 2006

Ethernet Insecurity Episódio 29

In this week's marathon edition Steve tackles security issues inherent to Ethernet, including ARP spoofing.

S1 · E30 · 10 de mar de 2006

Cryptographic Issues Episódio 30

This week Steve takes a look at how cryptography is used and the difficult issues strong crypto raises.

S1 · E31 · 16 de mar de 2006

Symmetric Stream Ciphers Episódio 31

This week Steve continues his discussion of crypto with a look at secret decoder rings and one-time pads.

S1 · E32 · 23 de mar de 2006

Listener Feedback Q&A #5 Episódio 32

Episode 32 is our monthly question and answer session.

S1 · E33 · 30 de mar de 2006

Symmetric Block Ciphers Episódio 33

Part three of Steve's overview of cryptography looks at symmetric block ciphers.

S1 · E34 · 6 de abr de 2006

Public Key Cryptography Episódio 34

This week Steve explains how public key cryptography works, and we welcome our new sponsor, Astaro! Thanks so much for the support guys.

S1 · E35 · 13 de abr de 2006

Cryptographic Hashes Episódio 35

This week Steve talks about how cryptographic hashes work and are used to verify the integrity of files and email. We also talk about email signing and recommend the Gnu Privacy Guard.

S1 · E36 · 20 de abr de 2006

Listener Feedback Q&A #6 Episódio 36

As usual on every fourth episode, Steve answers listener questions.

S1 · E37 · 27 de abr de 2006

Crypto Series Wrap-up Episódio 37

We wrap up our talk about cryptography with a discussion of prime number generation, key recovery, and digital certificates.

S1 · E38 · 4 de mai de 2006

Browser Security Episódio 38

Why is Internet Explorer so insecure? What can you do to secure it? And why is it so hard to make a secure browser? Steve talks about security policy vs. browser flaws, how he uses IE safely, and why Java and Javascript are inherently more secure than ActiveScript and ActiveX.

S1 · E39 · 11 de mai de 2006

Buffer Overruns Episódio 39

Buffer overflows... they're the most common kind of security flaw, but what are they and how do they happen? Finally, how can we protect ourselves from them? Steve explains all.

S1 · E40 · 18 de mai de 2006

Listener Feedback Q&A #7 Episódio 40

As he does every fourth episode, Steve answers your questions. But first, an update on some recent security news...

S1 · E41 · 25 de mai de 2006

TrueCrypt Episódio 41

The ultimate encryption program, free, open source, strong, and flexible: Truecrypt.

S1 · E42 · 1 de jun de 2006

NAT Traversal Episódio 42

Steve explains the clever technique that Skype and other programs use to end around NAT routers.

S1 · E43 · 8 de jun de 2006

Open Ports Episódio 43

Ever wonder what a port is? Steve explains what they are and what terms like "stealth ports" and "port sniffing mean." Leo reads a little poetry.

S1 · E44 · 15 de jun de 2006

Listener Feedback Q&A #8 Episódio 44

On this episode, one dozen questons and answers

S1 · E45 · 22 de jun de 2006

The 'Hosts' File Episódio 45

This week Steve explains the mysterious HOSTS file - part of Windows, OS X, Linux, and many other operating systems. He talks about how malicious programs may misuse it, and how you can use it to protect yourself.

S1 · E46 · 29 de jun de 2006

Router Logs Episódio 46

This week Steve tells us what to do with the router logs. What a router can (and can't) tell you about your security situation?

S1 · E47 · 6 de jul de 2006

Internet Weaponry Episódio 47

This week Steve tells us about distributed denial of service attacks and how hackers use IRC botnets to create them.

S1 · E48 · 13 de jul de 2006

Listener Feedback Q&A #9 Episódio 48

How big can a HOSTS file get? Does a firewall slow you down? A plan to fight phishers. All on this week's edition of Security Now! with Steve Gibson.

S1 · E49 · 20 de jul de 2006

The NETSTAT Command Episódio 49

How can you tell what your computer is doing on the net? Netstat. This handy program comes with almost all operating systems. On Windows, click Start, then select Command Prompt from the Programs->Accessories menu. To run Netstat, type netstat at the command prompt. For more readable output type netstat -ab.

S1 · E50 · 27 de jul de 2006

Virtual Machine History & Technology Episódio 50

Virtualization, its history and uses in security.

S1 · E51 · 3 de ago de 2006

Vista's Virgin Stack Episódio 51

Will Windows Vista be secure? According to a new study from Symantec, the decision to re-write the networking stack from the ground up means it will be much less secure than XP.

S1 · E52 · 10 de ago de 2006

A Busy Week for Security Troubles Episódio 52

Steve normally answers questions on shows divisible by four, but not this week. There's just too much security news including javascript exploits, Ebay gaming, and the sale of Hamachi.

S1 · E53 · 17 de ago de 2006

VMware Episódio 53

More on Virtualization technology, with a special focus on VMWare's Virtual Appliances.

S1 · E54 · 24 de ago de 2006

Blue Pill Episódio 54

The Blue Pill demonstrates a serious security concern with the Hypervisor mode in Windows Vista. Steve discusses the threat and arguments against it.

S1 · E55 · 31 de ago de 2006

Application Sandboxes Episódio 55

Sandboxing your browser to keep your system secure.

S1 · E56 · 7 de set de 2006

Listener Feedback Q&A #10 Episódio 56

Our regular session of questions and answers deals with Vista security, remote access, the HOSTS files, and Zone Alarm.

S1 · E57 · 14 de set de 2006

Virtual PC versus VMware Episódio 57

Steve wraps up his rundown of Virtualization programs with a look at Microsoft's free Virtual PC.

S1 · E58 · 21 de set de 2006

Two New Critical Windows Problems Episódio 58

Guest: Eric Sites, VP R&D Sunbelt Software Two serious Windows flaws have surfaced today. One, a zero-day exploit, makes it possible for any web site (or HTML email) to take over a Windows machine, even if it's been fully patched. The other is a file corruption error on Windows 2000 NTFS systems introduced by a Microsoft patch.

S1 · E59 · 28 de set de 2006

Comparing Episódio 59

We conclude our coverage of virtual machine software with a review of Parallels - the fastest of the VM programs.

S1 · E60 · 5 de out de 2006

Listener Feedback Q&A #11 Episódio 60

S1 · E61 · 12 de out de 2006

ISP Privacy and Security Episódio 61

First a review of three more zero day exploits in Windows XP, then a look at what your ISP knows about you and how to protect your privacy.

S1 · E62 · 19 de out de 2006

Internet Proxies Episódio 62

How proxy servers work to both speed up access and protect users.

S1 · E63 · 26 de out de 2006

MojoPac Episódio 63

MojoPac software lets you put your entire Windows configuration on a thumbdrive or portable disk and take it with you anywhere. It works surprisingly well, but there are some caveats. Steve reviews.

S1 · E64 · 2 de nov de 2006

Listener Feedback Q&A #12 Episódio 64

S1 · E65 · 9 de nov de 2006

Why Is Security So Difficult? Episódio 65

What makes it so hard to secure Windows? Steve says ultimate security is ultimately impossible.

S1 · E66 · 16 de nov de 2006

Windows Vista Security Episódio 66

Why the 64-bit version of Windows is both more secure and less compatible. Steve explains why.

S1 · E67 · 23 de nov de 2006

Kernel Patch Protection Episódio 67

Microsoft is touting PatchGuard, a new security feature in 64-bit versions of XP and Vista. Steve explains how easy it is to hack, and what it's really for if it's not for deterring hackers.

S1 · E68 · 30 de nov de 2006

Listener Feedback Q&A #13 Episódio 68

Our monthly question and answer session goes long - but there's lots of good information.

S1 · E69 · 7 de dez de 2006

The Social Implications of Internet Anonymity Episódio 69

Is there such a thing as anonymity on the Internet? How important is it?

S1 · E70 · 14 de dez de 2006

Achieving Internet Anonymity Episódio 70

Two interesting implementations of Internet anonymization: The Freenet Project for anonymously storing and transmitting files, and Tor, "the onion router" which can anonymize all your Internet accesses.

S1 · E71 · 21 de dez de 2006

SecurAble Episódio 71

Steve's latest free security application is called Securable. It's not quite ready yet, but Steve gives us a preview in this episode.

S1 · E72 · 28 de dez de 2006

Listener Feedback Q&A #14 Episódio 72

Our monthly question and answer segment covers TOR details, overheating hard drives, and what happens to your data when you die...

S1 · E73 · 4 de jan de 2007

Digital Rights Management (DRM) Episódio 73

Steve and Leo survey the history and evolution of media property rights and the technologies used to enforce them as they prepare for next week's show: a look at AACS, the most pervasive and invasive system for digital rights management ever created.

S1 · E74 · 12 de jan de 2007

Peter Gutmann on Vista DRM Episódio 74

Steve and Leo interview Peter Gutmann about his paper A Cost Analysis of Windows Vista Content Protection.

S1 · E75 · 12 de jan de 2007

Vista DRM Wrap-Up & Announcing “SecurAble” Episódio 75

We wrap up our discussion of the premium content protection features in Vista and announce Steve's newest free security utility: Securable.

S1 · E76 · 25 de jan de 2007

Listener Feedback Q&A #15 Episódio 76

Our monthly question and answer segment covers DEP on the Mac, HD-DVD decryption, and email privacy...

S1 · E77 · 31 de jan de 2007

Microsoft on Vista DRM Episódio 77

Steve and Leo discuss Dave Marsh's response on behalf of Microsoft to Peter Gutmann's paper about Windows Vista Content Protection.

S1 · E78 · 7 de fev de 2007

DEP in Depth Episódio 78

Hardware Data Execution Protection is one of the best ways to protect your PC from hackers. Steve discusses how it works, how to turn it on, and the possible pitfalls of using it.

S1 · E79 · 15 de fev de 2007

Backtracking Spoofed Spam eMail Episódio 79

How do spambots work, why do spammers need them, and the best way to block them and prevent spam.

S1 · E80 · 22 de fev de 2007

Listener Feedback Q&A #16 Episódio 80

Our monthly question and answer segment covers spam spoofing, VPN mysteries, and online backup security...

S1 · E81 · 1 de mar de 2007

Hard Drive Unreliability Episódio 81

Google's massive study of hard drive reliability yields some surprising results. Read more at http://www.grc.com/sn/notes-081.htm

S1 · E82 · 8 de mar de 2007

Cyber Warfare Episódio 82

Steve comments on the Federal Computer Week article Cyber officials: Chinese hackers attack 'anything and everything'.

S1 · E83 · 15 de mar de 2007

UAC in Depth Episódio 83

A closer look at Vista's User Access Control.

S1 · E84 · 22 de mar de 2007

Listener Feedback Q&A #17 Episódio 84

S1 · E85 · 29 de mar de 2007

Intro to Web Code Injection Episódio 85

Jikto is a Javascript tool that can take over your computer and use it to find sites with vulnerabilities. We describe it and the cross-site scripting flaws it looks for.

S1 · E86 · 5 de abr de 2007

Cross-Site Scripting Episódio 86

Updates on the Animated Cursor Vulnerability, a recommendation for security software from eEye, and how the Sony Reader works, plus an in depth discussion of scripting vulnerabilities.

S1 · E87 · 12 de abr de 2007

SQL Injection Exploits Episódio 87

Another common attack vector in web software is the SQL injection. Steve explains what it is and how it happens.

S1 · E88 · 19 de abr de 2007

Listener Feedback Q&A #18 Episódio 88

S1 · E89 · 26 de abr de 2007

Even More Badly Broken WEP Episódio 89

WEP gets even more insecure with a new cracking technique that's 1000 times faster.

S1 · E90 · 3 de mai de 2007

Multifactor Authentication Episódio 90

Steve explains the theory and practice of multifactor authentication which uses combinations of "something you know," "something you have," and "something you are" to provide stronger remote authentication than traditional, unreliable single-factor username and password authentication.

S1 · E91 · 10 de mai de 2007

Marc Maiffret Episódio 91

Guest: Marc Maiffret of eEye Digital Security Marc talks about Windows and Mac security, the coming threat from web applications, and eEye's free, all-in-one protection program, Blink Personal Edition.

S1 · E92 · 17 de mai de 2007

Listener Feedback Q&A #19 Episódio 92

S1 · E93 · 24 de mai de 2007

Microsoft Patent Wars Episódio 93

Steve looks at software patents and the Microsoft challenge to open source software from the point of view of a developer, patent holder, and expert witness in patent cases.

S1 · E94 · 31 de mai de 2007

The Fourth Factor Episódio 94

We've already talked about the three factors of authentication: something you know (e.g. a password), something you have (a passcard), and something you are (a fingerprint). Now Steve talks about the fourth factor of authentication: someone you know, or who knows you.

S1 · E95 · 7 de jun de 2007

OpenID Episódio 95

Open ID, how it works and what it means to you (not having to remember so many passwords for starters).

S1 · E96 · 15 de jun de 2007

Listener Feedback Q&A #20 Episódio 96

Steve answers listener mail on subjects like authentication and more...

S1 · E97 · 22 de jun de 2007

Operation: Bot Roast Episódio 97

The FBI says it has uncovered one million computers that are being used by hackers without their owners' knowledge. Today Steve talks about BotNets and the FBI's Operation Bot Roast.

S1 · E98 · 28 de jun de 2007

Internet Identity Metasystems Episódio 98

Steve continues our discussion of authentication with a look at Internet identity metasystems.

S1 · E99 · 5 de jul de 2007

Trusted Platform Module (TPM) Episódio 99

The Trusted Platform Module - a hardware solution to security now shipping on many computers.

S1 · E100 · 12 de jul de 2007

Listener Feedback Q&A #21 Episódio 100

Your questions, Steve's answers as we complete 100 consecutive weeks of shows!

S1 · E101 · 19 de jul de 2007

Are You Human? Episódio 101

Steve looks at Captcha and Re-Captcha - the pros and cons of trying to distinguish humans from robots, with a side look at Alan Turing and Jeff Hawkins's On Intelligence.

S1 · E102 · 26 de jul de 2007

Listener Mailbag #1 Episódio 102

Our first mailbag episode with 20 questions and comments from our listeners.

S1 · E103 · 2 de ago de 2007

PayPal Security Key Episódio 103

A closer look at the Paypal Security Key with Michael Vergara, Director of Account Protections at Paypal.

S1 · E104 · 9 de ago de 2007

Listener Feedback Q&A #22 Episódio 104

For 16Kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written - Spinrite 6.

S1 · E105 · 16 de ago de 2007

Firewall LeakTesting Episódio 105

Steve, the creator of the original leak test program, talks about leak testing and how hackers work to get around them.

S1 · E106 · 23 de ago de 2007

Listener Mailbag #2 Episódio 106

Our second mailbag episode with a dozen questions and comments from our listeners.

S1 · E107 · 30 de ago de 2007

PIP & Even More Perfect Passwords Episódio 107

Steve looks at Verisign's Personal Identity Provider, an OpenID service that works with the Paypal token, and talks about updates to his Perfect Password page.

S1 · E108 · 6 de set de 2007

Listener Feedback #23 Episódio 108

S1 · E109 · 13 de set de 2007

GRC's eCommerce System Episódio 109

Steve talks about developing his in-house E-Commerce system, and how he solved some issues other e-commerce system handle poorly. We also talk about the pleasures of assembly language programming.

S1 · E110 · 20 de set de 2007

Listener Feedback #24 Episódio 110

Our regular mailbag episode with a dozen questions and comments from our listeners, plus an extra one for fun.

S1 · E111 · 27 de set de 2007

OpenID Precautions Episódio 111

Steve responds to criticisms of the OpenID system and offers some issues to consider when you use it.

S1 · E112 · 4 de out de 2007

Listener Feedback #25 Episódio 112

S1 · E113 · 11 de out de 2007

Roaming Authentication Episódio 113

How do you solve the problem of secure access to data on the road? Steve shows how he tackled roaming authentication at grc.com and proposes a general solution for everyone.

S1 · E114 · 18 de out de 2007

Listener Feedback #26 Episódio 114

Our regular mailbag episode with a dozen questions and comments from our listeners including our Great Idea of the Week...

S1 · E115 · 25 de out de 2007

Perfect Paper Passwords Episódio 115

Following up on Episode 113, Roaming Authentication, Steve proposes a great way to strengthen remote access using Perfect Paper Passwords.

S1 · E116 · 1 de nov de 2007

Listener Feedback #27 Episódio 116

S1 · E117 · 8 de nov de 2007

Even More Perfect paper Passwords Episódio 117

Perfect Paper Passwords version two!

S1 · E118 · 15 de nov de 2007

Listener Feedback #28 Episódio 118

S1 · E119 · 22 de nov de 2007

PayPal and DoubleClick Episódio 119

Why does Paypal secretly send you through Doubleclick to get to some of its web pages? Steve explains how third-party cookies can violate your privacy and what to do about it.

S1 · E120 · 29 de nov de 2007

Listener Feedback #29 Episódio 120

S1 · E121 · 6 de dez de 2007

Is Privacy Dead? Episódio 121

Is it possible to preserve your privacy in the digital age? It's certainly worth trying.

S1 · E122 · 13 de dez de 2007

Listener Feedback #30 Episódio 122

Our regular mailbag episode with a dozen questions and comments from our listeners...

S1 · E123 · 20 de dez de 2007

Jungle Disk Episódio 123

Steve interviews Dave Wright of JungleDisk, a data storage optimization product for Amazon's S3...

S1 · E124 · 27 de dez de 2007

Listener Feedback #31 Episódio 124

S1 · E125 · 3 de jan de 2008

Symmetric Ciphers Episódio 125

Steve further elaborates on symmetric ciphers, the workhorses of encryption.

S1 · E126 · 10 de jan de 2008

Listener Feedback #32 Episódio 126

Steve discusses Treewalkdns.com, OpenDNS, Rijndael encryption Flash animation, Ironkey, and Opera mini security FAQ.

S1 · E127 · 17 de jan de 2008

Corporate Security Episódio 127

Steve talks about the challenges of corporate IT security policy and enforcement and the inherent tension between IT security staff and employees.

S1 · E128 · 24 de jan de 2008

Listener Feedback #33 Episódio 128

Steve talks about the remote code execution exploit of the Microsoft Windows TCP/IP vulnerability and answers your questions.

S1 · E129 · 31 de jan de 2008

Windows SteadyState Episódio 129

Steve discusses how network administrators can protect their systems using Windows SteadyState.

S1 · E130 · 7 de fev de 2008

Listener Feedback #34 Episódio 130

S1 · E131 · 14 de fev de 2008

FREE CompuSec Episódio 131

Microsoft's Super Patch Tuesday, Macintosh updates, Adobe Acrobat exploit, Firefox patch, Vista SP-1, and more.

S1 · E132 · 21 de fev de 2008

Listener Feedback #35 Episódio 132

S1 · E133 · 28 de fev de 2008

TrueCrypt v5.0 Episódio 133

Steve explores whole-drive encryption and details the release of TrueCrypt 5.0.

S1 · E134 · 6 de mar de 2008

Listener Feedback #36 Episódio 134

S1 · E135 · 13 de mar de 2008

IronKey Episódio 135

Guest: Dave Jevans, CEO of IronKey Steve interviews Dave Jevans of IronKey.

S1 · E136 · 20 de mar de 2008

Listener Feedback #37 Episódio 136

S1 · E137 · 27 de mar de 2008

RAM Hijacks Episódio 137

Steve breaks down the concept of dynamic RAM hijacking raised by the recent Princeton study.

S1 · E138 · 3 de abr de 2008

Listener Feedback #38 Episódio 138

S1 · E139 · 10 de abr de 2008

Network Congestion Episódio 139

The logistics of network congestion, network neutrality and prioritized packets.

S1 · E140 · 17 de abr de 2008

Listener Feedback #39 Episódio 140

S1 · E141 · 24 de abr de 2008

RSA Conference 2008 Episódio 141

ClamAV security flaw, ICQ vulnerability, Opera and more.

S1 · E142 · 1 de mai de 2008

Listener Feedback #40 Episódio 142

S1 · E143 · 8 de mai de 2008

YubiKey Episódio 143

Leo and I delve into the detailed operation of the YubiKey, the coolest new secure authentication device I discovered at the recent RSA Security Conference. Our special guest during the episode is Stina Ehrensvrd, CEO and Founder of Yubico, who describes the history and genesis of the YubiKey, and Yubico's plans for this cool new technology.

S1 · E144 · 15 de mai de 2008

Listener Feedback #41 Episódio 144

S1 · E145 · 22 de mai de 2008

Secunia's PSI Episódio 145

The free vulnerability scanner and update management tool Secunia PSI.

S1 · E146 · 29 de mai de 2008

Listener Feedback #42 Episódio 146

S1 · E147 · 5 de jun de 2008

Microsoft's Baseline Security Analyzer Episódio 147

Two useful but lesser-known Microsoft security utilities.

S1 · E148 · 12 de jun de 2008

Listener Feedback #43 Episódio 148

S1 · E149 · 19 de jun de 2008

ISP Betrayal Episódio 149

An overview of next-generation behavioral tracking and profiling systems.

S1 · E150 · 26 de jun de 2008

Listener Feedback #44 Episódio 150

S1 · E151 · 3 de jul de 2008

Phracking Phorm Episódio 151

How third parties are gaining footholds in ISP facilities in order to access your data.

S1 · E152 · 10 de jul de 2008

Listener Feedback #45 Episódio 152

S1 · E153 · 17 de jul de 2008

DePhormed Politics Episódio 153

More on the privacy threat from the Phorm system.

S1 · E154 · 24 de jul de 2008

Listener Feedback #46 Episódio 154

S1 · E155 · 31 de jul de 2008

Bailiwicked Domain Attack Episódio 155

The nuts and bolts of DNS and the DNS cache poisoning attacks.

S1 · E156 · 7 de ago de 2008

Listener Feedback #47 Episódio 156

S1 · E157 · 14 de ago de 2008

DNS — After the Patch Episódio 157

A follow-up on the serious, and somewhat still present, DNS protocol spoofability flaw.

S1 · E158 · 21 de ago de 2008

Listener Feedback #48 Episódio 158

S1 · E159 · 28 de ago de 2008

Vista Security Bypass Episódio 159

Black Hat Conference revelations, where Vista's security improvements fall short, and more.

S1 · E160 · 4 de set de 2008

Listener Feedback #49 Episódio 160

S1 · E161 · 11 de set de 2008

Google's Chrome Episódio 161

Steve drills down to determine the security levels offered by Google Chrome.

S1 · E162 · 18 de set de 2008

Listener Feedback #50 Episódio 162

S1 · E163 · 25 de set de 2008

GoogleUpdate & DNS Security Episódio 163

The benefits, challenges, and nuances of secure DNS.

S1 · E164 · 2 de out de 2008

SockStress Episódio 164

Steve explains yet another security flaw in the TCP stack.

S1 · E165 · 9 de out de 2008

Listener Feedback #51 Episódio 165

Airport security checks and balances, white knuckle Disney adventures, and the limits of spyware infestations?

S1 · E166 · 16 de out de 2008

Cross-Site Request Forgery Episódio 166

Steve tells you why you must always explicitly log out from banking and other important sites.

S1 · E167 · 23 de out de 2008

Listener Feedback #52 Episódio 167

S1 · E168 · 30 de out de 2008

ClickJacking Episódio 168

Steve discusses clickjacking, aka UI redressing, which tricks users into unintended web-based actions.

S1 · E169 · 6 de nov de 2008

Listener Feedback #53 Episódio 169

S1 · E170 · 13 de nov de 2008

The TKIP Hack Episódio 170

Why you shouldn't worry about the TKIP crack.

S1 · E171 · 20 de nov de 2008

Listener Feedback #54 Episódio 171

S1 · E172 · 27 de nov de 2008

Sandboxie Episódio 172

Steve and Leo return to take a much closer look at "Sandboxie", an extremely useful, powerful, and highly recommended Windows security tool they first mentioned two years ago. This time, after interviewing Sandboxie's creator, Ronen Tzur, Steve explains why he is totally hooked and why Leo is wishing it was available for his Macs.

S1 · E173 · 4 de dez de 2008

Listener Feedback #55 Episódio 173

S1 · E174 · 11 de dez de 2008

Sandbox Limitations Episódio 174

The limitations of sandboxing in preventing the negative impacts of malware.

S1 · E175 · 18 de dez de 2008

Listener Feedback #56 Episódio 175

S1 · E176 · 25 de dez de 2008

Drop My Rights Episódio 176

How to use Microsoft's little-known DropMyRights utility for safer browsing.

S1 · E177 · 1 de jan de 2009

Breaking SSL, PDP-8's & UltraCapacitors Episódio 177

Breaking SSL, PDP-8s, and Ultracapacitors. Full show notes are available at grc.com.

S1 · E178 · 8 de jan de 2009

Listener Feedback #57 Episódio 178

S1 · E179 · 15 de jan de 2009

Cracking Security Certificates Episódio 179

How security certificates are created and signed, what they do for us, and the MD5 hash.

S1 · E180 · 22 de jan de 2009

Listener Feedback #58 Episódio 180

S1 · E181 · 29 de jan de 2009

Crypto Rehash Episódio 181

Steve gives an overview of the major concepts and components of encryption.

S1 · E182 · 5 de fev de 2009

Listener Feedback #59 Episódio 182

S1 · E183 · 12 de fev de 2009

Modes of Encryption Episódio 183

Windows Update, IE7 Problems, ActiveX and Windows 7 issues, SQL attacks, and more.

S1 · E184 · 19 de fev de 2009

Listener Feedback #60 Episódio 184

S1 · E185 · 26 de fev de 2009

Cryptographic HMACs Episódio 185

MSFT Autorun updates, FreeBSD telnetd, IE7 critical exploit, Acrobat Reader, and more.

S1 · E186 · 5 de mar de 2009

Listener Feedback #61 Episódio 186

S1 · E187 · 12 de mar de 2009

Windows Autorun-around Episódio 187

Past and recent problems with Windows Autorun.

S1 · E188 · 19 de mar de 2009

Listener Feedback #62 Episódio 188

S1 · E189 · 26 de mar de 2009

Internet Explorer 8 Episódio 189

Internet Explorer 8 speed benchmarks, cookies, Compatibly Mode, Smart Screen filter, DEP, and more.

S1 · E190 · 2 de abr de 2009

Listener Feedback #63 Episódio 190

S1 · E191 · 9 de abr de 2009

GhostNet Episódio 191

A look into GhostNet, the alleged Chinese cyber-spying network.

S1 · E192 · 16 de abr de 2009

Listener Feedback #64 Episódio 192

This mailbag episode discusses new Firefox plugins, Conficker, buffer overflow, and more.

S1 · E193 · 23 de abr de 2009

Conficker Episódio 193

Steve analyzes Conficker, the sophisticated worm that has spread to more than 10 million PCs worldwide.

S1 · E194 · 30 de abr de 2009

Listener Feedback #65 Episódio 194

This mailbag episode covers Conficker, Windows process control, NeXT, Ironkey, and more.

S1 · E195 · 7 de mai de 2009

The SSL/TLS Protocol Episódio 195

Steve describes the Internet's most-used security protocol, SSL, now evolved into TLS.

S1 · E196 · 14 de mai de 2009

Listener Feedback #66 Episódio 196

This mailbag episode includes SSL/TLS, worms-resistant NATs, PDF JavaScript, nuclear power stations running Windows, and more.

S1 · E197 · 21 de mai de 2009

Windows 7 Security Episódio 197

Security changes, additions and enhancements to Microsoft Windows 7.

S1 · E198 · 28 de mai de 2009

Listener Feedback #67 Episódio 198

This mailbag episode includes FASM, scripts, sockets, SSL/TLS, HTTPS, Windows 7's XP mode, and more.

S1 · E199 · 4 de jun de 2009

The Geek Atlas, IPv6 & a non-VPN Episódio 199

A good book, the IPv6 protocol, and Steve's secure TCP idea that doesn't use a VPN tunnel.

S1 · E200 · 11 de jun de 2009

Listener Feedback #68 Episódio 200

In this mailbag episode we discuss IPv6, Non-VPNs, Microsoft ClickOnce, expired SSL certificates, and more.

S1 · E201 · 18 de jun de 2009

SecureZIP Episódio 201

The operation, features, and security of PKWARE?s free SecureZIP file archiving and encrypting utility.

S1 · E202 · 25 de jun de 2009

Listener Feedback #69 Episódio 202

In this mailbag episode we discuss SecureZip, WPA/WPA2, home-grown VPNs, foreign ATMs, and more.

S1 · E203 · 2 de jul de 2009

Boyer & Moore Episódio 203

Steve tells of the Bob Boyer and J Strother Moore algorithm for finding a substring in a buffer.

S1 · E204 · 9 de jul de 2009

Listener Feedback #70 Episódio 204

S1 · E205 · 16 de jul de 2009

Lempel & Ziv Episódio 205

An examination of Lempel-Ziv data compression, one of the most prevalent computer algorithms of all time.

S1 · E206 · 23 de jul de 2009

Mega Security News Update Episódio 206

Security updates in Windows Office, IAS, Virtual PC, Virtual Server, msvid control, and more.

S1 · E207 · 30 de jul de 2009

Listener Feedback #71 Episódio 207

Steve answers questions on AES-256, iPhone security, TrueCrypt, Firefox privacy, and more.

S1 · E208 · 6 de ago de 2009

Listener Feedback #72 Episódio 208

Steve answers questions on SSL encryption, 3g security, Trojans, VPNs as infection vectors, and more.

S1 · E209 · 13 de ago de 2009

Vitamin D Episódio 209

A rare off-topic discussion about Steve's research into vitamin D.

S1 · E210 · 20 de ago de 2009

Listener Feedback #73 Episódio 210

Security news and listeners' questions...

S1 · E211 · 27 de ago de 2009

Voting Machine Hacking Episódio 211

Steve covers the security implications of electronic voting machines.

S1 · E212 · 3 de set de 2009

Listener Feedback #74 Episódio 212

Steve answers questions on iPIG VPN, Flash cookies, firewalls, parents' passwords, and more.

S1 · E213 · 10 de set de 2009

Cracking GSM Cellphones Episódio 213

The inherent insecurities of GSM, the pseudo-random bitstream cipher protecting data on billions of phones.

S1 · E214 · 17 de set de 2009

Listener Feedback #75 Episódio 214

Steve addresses feedback on GSM security, cookies, router admin passwords, proxy servers, and more.

S1 · E215 · 24 de set de 2009

Security Maxims Episódio 215

Steve and Leo talk about various security maxims, what they mean, why you should follow them, and more.

S1 · E216 · 1 de out de 2009

Listener Feedback #76 Episódio 216

Leo and Steve talk about Microsoft Security Essentials, your questions, and more.

S1 · E217 · 8 de out de 2009

The Fundamentally Broken Browser Model Episódio 217

How SSLs can be spoofed in man-in-the-middle attacks.

S1 · E218 · 15 de out de 2009

Listener Feedback #77 Episódio 218

S1 · E219 · 22 de out de 2009

Badly Broken Browsing Episódio 219

Why patches are impossible, the Total (In)security virus, and why writing software shouldn't be too easy.

S1 · E220 · 29 de out de 2009

Listener Feedback #78 Episódio 220

S1 · E221 · 5 de nov de 2009

The Oxymoron of “JavaScript Security” Episódio 221

The problem with Javascript and security. Guest John Graham-Cumming says it's the "elephant in your browser."

S1 · E222 · 12 de nov de 2009

Listener Feedback #79 Episódio 222

We've got the latest security news, including an SSL hack, plus eight great questions from you and Steve's answers...

S1 · E223 · 19 de nov de 2009

A security vulnerability in SSL Episódio 223

Steve explains how a serious exploit in SSL works.

S1 · E224 · 26 de nov de 2009

Listener Feedback #80 Episódio 224

Security news, including the NSA's contributions to Windows 7, iPhone bot nets, plus Steve answers your questions.

S1 · E225 · 3 de dez de 2009

“Same Origin” Troubles Episódio 225

Apple fixes security flaws, Ford SYNC SDK, black screen of death, same origin troubles, and more.

S1 · E226 · 10 de dez de 2009

Listener Feedback #130 Episódio 226

Digital voting goes open source, patch Tuesday news, and Steve answers your questions.

S1 · E227 · 17 de dez de 2009

Cyberwarfare Episódio 227

Steve covers what may be the future of conflict, Cyberwarfare.

S1 · E228 · 24 de dez de 2009

Listener Feedback #82 Episódio 228

Steve responds to questions covering Skype spam, SSL cracking, unencrypted UAV video feeds, free SSL certificates, and more.

S1 · E229 · 31 de dez de 2009

The Rational Rejection of Security Advice Episódio 229

A hard look at the costs and benefits of following all security advice.

S1 · E230 · 7 de jan de 2010

Listener Feedback #83 Episódio 230

This week's questions cover packet flow, hijacking DNS queries, router DNS, Patch Tuesday, and more.

S1 · E231 · 14 de jan de 2010

Mega Security Update & CES Observations Episódio 231

Steve catches up with a mega security update, then gives us some of his favorite (wacky) products from CES.

S1 · E232 · 21 de jan de 2010

Listener Feedback #84 Episódio 232

Steve answers listener questions about live Linux CDs, TrueCrypt RAM encryption, resetting Thomson modem passwords, and more.

S1 · E233 · 28 de jan de 2010

Let's Design a Computer (part 1) Episódio 233

Steve explains how computers work by designing one from first principles.

S1 · E234 · 4 de fev de 2010

Listener Feedback #85 Episódio 234

Internet Explorer as a file system, using Live CDs for security, and Steve takes on the iPad...

S1 · E235 · 11 de fev de 2010

Machine Language Episódio 235

For 16kpbs versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

S1 · E236 · 18 de fev de 2010

Listener Feedback #86 Episódio 236

More flash vulnerabilities, security updates, fake security software, Steve answers your questions, and more.

S1 · E237 · 25 de fev de 2010

Indirection: The Power of Pointers Episódio 237

An introduction to the use of "indirection" in computer science, security news, and more.

S1 · E238 · 4 de mar de 2010

Listener Feedback #87 Episódio 238

Steve answers your questions about webcam privacy, unencrypted data in ram, and more.

S1 · E239 · 11 de mar de 2010

Stacks, Registers & Recursion Episódio 239

How stacks, registers and recursion are interrelated, the latest security news, and more.

S1 · E240 · 18 de mar de 2010

Listener Feedback #88 Episódio 240

Patch Tuesday, Opera vulnerabilities, the RSA conference, RealDVD, and more.

S1 · E241 · 25 de mar de 2010

Hardware Interrupts Episódio 241

Steve continues his talk on the foundational technologies of computing. This week: how computers do more than one thing at a time using interrupts.

S1 · E242 · 1 de abr de 2010

Listener Feedback #89 Episódio 242

Critical updates from Microsoft and Apple, good news for Gmail security, and a warning for nudists...

S1 · E243 · 8 de abr de 2010

State Subversion of SSL Episódio 243

Firefox updates, vulnerabilities in .PDFs, Steve's iPad review, SSL/TLS, and more.

S1 · E244 · 15 de abr de 2010

Listener Feedback #90 Episódio 244

Microsoft security updates, the FCC's jurisdiction on bandwidth shaping, Java flaws, iPhone OS security, the state of SSL security, and more.

S1 · E245 · 22 de abr de 2010

The Security of Open vs CLosed Episódio 245

Steve and Leo seriously examine the proven comparative security of open versus closed source and development software, and open versus closed execution platforms.

S1 · E246 · 29 de abr de 2010

Listener Feedback #91 Episódio 246

Stolen Google source code, GSM hacked, photocopy machine hard drive security, your questions, and more.

S1 · E247 · 6 de mai de 2010

The “Multi”-verse Episódio 247

Opera vulnerabilities, Adobe PDF insecurities, malware from the US Treasury, Steve joins Twitter, and more.

S1 · E248 · 13 de mai de 2010

The Portable Dog Killer Episódio 248

Patch tuesday, laptop camera surveillance, Yahoo! messenger worm, and more.

S1 · E249 · 20 de mai de 2010

Listener Feedback #92 Episódio 249

Shockwave issues, Mozilla's plug-in check, weaponized email, hacking cars, your questions, and more.

S1 · E250 · 27 de mai de 2010

Operating Systems Episódio 250

Manually updating IrfanView and Free Download Manager, Google wifi litigation, how operating systems work, and more.

S1 · E251 · 3 de jun de 2010

Listener Feedback #93 Episódio 251

Tabnabbing, Adobe security rumors, iPad data plan changes, your questions, and more.

S1 · E252 · 10 de jun de 2010

RISCy Business Episódio 252

Adobe zero-day, overwrought iPad security news, the evolution of computing architectures, and more.

S1 · E253 · 17 de jun de 2010

Listener Feedback #94 Episódio 253

Mac update, AT&T hijinks, another zero-day vulnerability from Microsoft, Adobe delays pdf fix, your questions, and more.

S1 · E254 · 24 de jun de 2010

What We'll Do for Speed Episódio 254

The 25 year legacy of unbelievably complex technologies used in microprocessors to maximize performance.

S1 · E255 · 1 de jul de 2010

Listener Feedback #95 Episódio 255

Out of cycle Acrobat and Reader updates, Firefox improvements, flawed SSL study, internet kill switch, your questions, and more.

S1 · E256 · 8 de jul de 2010

LastPass Episódio 256

Steve thoroughly evaluates LastPass, explains why high-security passwords are necessary, and tells us how LastPass makes storing those passwords secure.

S1 · E257 · 15 de jul de 2010

Listener Feedback #96 Episódio 257

Chrome update, ClearCloud DNS, Microsoft and Russian camaraderie, LastPass, your questions, and more.

S1 · E258 · 22 de jul de 2010

Five Years of Vulnerabilities Episódio 258

Windows shell worm in the wild, Security Essentials 2.0 beta, Secunia's 5-year analysis, and more.

S1 · E259 · 29 de jul de 2010

Listener Feedback #97 Episódio 259

Firefox mega security update, WPA2 broken?, .LNK viruses in the wild, infected Dell motherboards, your questions and more.

S1 · E260 · 5 de ago de 2010

DNS Rebinding Episódio 260

Windows .LNK vulnerability fixed, Google's WiFi "overcollection" in the UK, news from Blackhat, DNS rebinding, and more.

S1 · E261 · 12 de ago de 2010

Listener Feedback #98 Episódio 261

PayPal discontinues their virtual credit card service, RIM placing servers in Saudi Arabia, Firefox v4 updates silently, your questions and more.

S1 · E262 · 19 de ago de 2010

Strict Transport Security Episódio 262

Apple fixes the jailbreak hole, trojans on Android, Strict Transport Security (STS), and more.

S1 · E263 · 26 de ago de 2010

Listener Feedback #99 Episódio 263

Out-Of-Cycle update from Adobe, Apple security update, binary planting, Spanair 2008 crash, your questions, and more.

S1 · E264 · 2 de set de 2010

Side-Channel Privacy Leakage Episódio 264

Consequences of the web not being designed for privacy, including non-consensual user tracking.

S1 · E265 · 9 de set de 2010

Listener Feedback #100 Episódio 265

Fix-It for .dll hijack, danger from applications changing the working directory, first successful 64-bit Windows root kit, your questions, and more.

S1 · E266 · 16 de set de 2010

Inside OAuth Episódio 266

Microsoft's 2nd Tuesday update, new 0-day vulnerabilities in Adobe, Firefox fixes, "Stuxnet" worm, delegated access through OAuth, and more.

S1 · E267 · 23 de set de 2010

Listener Feedback #101 Episódio 267

Flash update, Microsoft ASP .NET problem, HDCP master key leak, Twitter "OnMouseover" XSS flaw, your questions, and more.

S1 · E268 · 30 de set de 2010

CryptoSystem Backdoors Episódio 268

New 0-day for Windows, HDCP decryption software, Stuxnet & Iran, COICA, cryptography systems and backdoors for law enforcement, and more.

S1 · E269 · 7 de out de 2010

Listener Feedback #102 Episódio 269

Adobe Acrobat patched, RIM and India going 'round & 'round, Comcast VS. Bot, and more.

S1 · E270 · 14 de out de 2010

The Evercookie Episódio 270

Microsoft breaks Patch Tuesday update record, Facebook adds OTPs and remote signout, What is The Evercookie?, and more.

S1 · E271 · 21 de out de 2010

Listener Feedback #103 Episódio 271

Microsoft reports on Java exploits, new Adobe Reader will sandbox, feedback from MSRT, your questions, and more.

S1 · E272 · 28 de out de 2010

Firesheep Episódio 272

Mozilla and Real Player updates, Firefox 0-day, Wall Street Journal tracking and privacy series, session hijacking for the rest of us, and more.

S1 · E273 · 4 de nov de 2010

Listener Feedback #104 & The FireStorm Episódio 273

Firesheep firestorm, Flash 0-day exploit in the wild, another iPhone lock screen bypass, your questions, and more.

S1 · E274 · 11 de nov de 2010

Benchmarking DNS Episódio 274

Second Tuesday updates, critical Outlook fix, Android risks, Google expands "bug bounty", GRC's DNS Benchmark, and more.

S1 · E275 · 18 de nov de 2010

Listener Feedback #105 Episódio 275

Big Apple update, IE6/7 0-day unpatched, infected Chinese cell phones, Stuxnet's probable target, your questions, and more.

S1 · E276 · 25 de nov de 2010

Testing DNS Spoofability Episódio 276

Safari update, HTTPS Everywhere, FBI wants to wiretap the Internet, comprehensive DNS spoofability test, and more.

S1 · E277 · 2 de dez de 2010

Listener Feedback #106 Episódio 277

New WIndows kernel vulnerability, Wikileaks siprnet, Vitamin D findings, your questions, and more.

S1 · E278 · 9 de dez de 2010

Tag Me (with RFID) Episódio 278

Windows 7 SP1 reaches RC level, Google Chrome v8.0 released, What is SHIELD?, How to keep track of people using RFID tags, and more.

S1 · E279 · 16 de dez de 2010

Listener Feedback #107 Episódio 279

Microsoft's December security updates, backdoor in BSD, WikiLeaks DDoS, your questions, and more.

S1 · E280 · 23 de dez de 2010

Bluetooth Episódio 280

OpenBSD discredits backdoor, weak net neutrality, compromised site warnings from Google, Bluetooth in depth, and more.

S1 · E281 · 30 de dez de 2010

The Portable Dog Killer, Encore Episódio 281

An encore presentation of an enlightening story from Steve's past.

S1 · E282 · 6 de jan de 2011

Listener Feedback #108 Episódio 282

Microsoft acknowledges IE problem, hacking GSM phones, Stuxnet update, your questions, and more.

S1 · E283 · 13 de jan de 2011

Bluetooth Hacking Episódio 283

Cross Fuzz, warrantless cell phone searches, Obama's "Unified Internet Identity", flavors of bluetooth hacking, and more.

S1 · E284 · 20 de jan de 2011

Listener Feedback #109 Episódio 284

Israel and US teamed up on Stuxnet, global IPv6 test coming, your questions, and more.

S1 · E285 · 27 de jan de 2011

Fuzzy Browsers Episódio 285

Google awards first "Elite" security award, Facebook SSL and HTTPS, unprivileged work e-mail, stress testing browsers, and more.

S1 · E286 · 3 de fev de 2011

Listener Feedback #110 Episódio 286

Gingerbread data disclosure vulnerability, SourceForge hack, IPv4 depletion, zero-day attacks no more, your questions, and more.

S1 · E287 · 9 de fev de 2011

BitCoin CryptoCurrency Episódio 287

Firefox adds "Do Not Track", Verizon alters web content, McAfee on Mobile Malware, BitCoin, and more.

S1 · E288 · 17 de fev de 2011

Listener Feedback #111 Episódio 288

A critical Microsoft vulnerability, The differences between open and closed source software, A number of questions around BitCoin, and more.

S1 · E289 · 17 de mar de 2011

Proxied Surfing Episódio 289

After catching up with the week's security updates and other security-related news, Steve and Leo discuss the many modes of operation of "Proxied Web Surfing" which are used to bypass firewalls and Internet filters, aid free speech, and alter the contents of web pages retrieved from the Internet.

S1 · E290 · 3 de mar de 2011

Listener Feedback #112 Episódio 290

Windows 7 service pack 1 is out, Apple's Thunderbolt security, Facebook's HTTPS security turns itself off, and more.

S1 · E291 · 10 de mar de 2011

Stuxnet Episódio 291

The anatomy of Stuxnet, plus Pwn2Own is underway meaning updates from Apple, Google, Microsoft, and more.

S1 · E292 · 17 de mar de 2011

Listener Feedback #113 Episódio 292

The consequences of Pwn2Own, Issues around the Japanese earthquake, reverse DNS, and more.

S1 · E293 · 24 de mar de 2011

IE9 Episódio 293

Internet Explorer 9, RSA Security comprimised, India versus Blackberry, and more.

S1 · E294 · 31 de mar de 2011

Listener Feedback #114 Episódio 294

Fraudulent SSL certificates, RSA SecurID breach update, Real Player vulnerability, your questions, and more.

S1 · E295 · 7 de abr de 2011

The Comodo SSL Breach Episódio 295

RSA SecurID Break-in, YubiHSM, Epsilon security breach, DNT gets traction, and more.

S1 · E296 · 14 de abr de 2011

Listener Feedback #115 Episódio 296

64 fixes from Microsoft, Another Flash exploit, Wordpress hacked, your questions, and more.

S1 · E297 · 21 de abr de 2011

Pass-Sentences?? Episódio 297

iOS location tracking, Pass phrase security, Dropbox authentication, and more.

S1 · E298 · 28 de abr de 2011

Listener Feedback #116 Episódio 298

Sony Playstation Network breach, Mobile tracking, Disc Drive steganography, your emails, and more.

S1 · E299 · 5 de mai de 2011

Going Random (1) Episódio 299

Firefox and Chrome updates, Apple tracks differently, Bin Laden's security, relying on randomness, and more.

S1 · E300 · 12 de mai de 2011

Listener Feedback #117 Episódio 300

Reasons you should change your Facebook password right now, Zero Day, a new Do Not Track bill, and more.

S1 · E301 · 19 de mai de 2011

Going Random (2) Episódio 301

DIY Malware kite for Mac, Protect IP act, Achieving true randomness, and more.

S1 · E302 · 26 de mai de 2011

Listener Feedback #118 Episódio 302

Mac Defender malware, Sony's continuing security woes, Android vulnerability patched by Google, your questions, and more.

S1 · E303 · 2 de jun de 2011

Password Haystacks Episódio 303

Making passwords memorable AND uncrackable, More on Mac Defender, Lockheed Martin breach, and more.

S1 · E304 · 9 de jun de 2011

Listener Feedback #119 Episódio 304

RSA SecurID token replacement, Sony breaches continue, your questions, and more.

S1 · E305 · 16 de jun de 2011

Ghostery Episódio 305

Website surveillance monitoring and blocking, IMF breach, commercial bank fraud liability, and more.

S1 · E306 · 23 de jun de 2011

Listener Feedback #120 Episódio 306

Malware stealing Bitcoins, Dropbox security, WordPress hacked, your questions, and more.

S1 · E307 · 30 de jun de 2011

The Future of Identity Episódio 307

LulzSec says farewell, cost of Citigroup attack, National Institute of Standards and Technology, and more.

S1 · E308 · 7 de jul de 2011

Listener Feedback #121 Episódio 308

Dropbox TOS update, Microsoft's Skype intercept patent, evaluating LulzSec, your questions, and more.

S1 · E309 · 14 de jul de 2011

How the Internet Works, Part 1 Episódio 309

Steve explains how the internet works with three basic principles, plus security updates, security news, and more.

S1 · E310 · 21 de jul de 2011

Listener Feedback #122 Episódio 310

iOS updates, careers in computer security, randomness in cryptography, your questions, and more.

S1 · E311 · 28 de jul de 2011

Anatomy of a Security Mistake Episódio 311

Apple iOS Certificate, Passware, dissecting the crypt_blowfish bug, and more.

S1 · E312 · 4 de ago de 2011

Listener Feedback #123 Episódio 312

We find a way to keep Tor from being censored, KISSmetrics's sneaky cookie and your questions answered by Steve.

S1 · E313 · 11 de ago de 2011

How The Internet Works: ICMP & UDP Episódio 313

Adobe patches galore, a deep look at ICMP and UDP, and more.

S1 · E314 · 18 de ago de 2011

Listener Feedback #124 Episódio 314

Tons of Firefox news, Gizmodo off the hook, lot's of questions, and more.

S1 · E315 · 25 de ago de 2011

Off The Grid Episódio 315

Caesar Cipher, Playfair Cipher, going off the grid and more.

S1 · E316 · 1 de set de 2011

Listener Feedback #125 Episódio 316

Google's fraudulent SSL Certificate, Pakistan bans encryption software, your questions, and more.

S1 · E317 · 8 de set de 2011

TCP Part 1 – Getting Connected Episódio 317

DigiNotar mega-update, DNS hack of NetNames, TCP demystified, and more.

S1 · E318 · 15 de set de 2011

Listener Feedback #126 Episódio 318

More on DigiNotar, GlobalSign security breach, your questions, and more.

S1 · E319 · 22 de set de 2011

Certificate Authority (CA) Trust - Time to Change it? Episódio 319

DigiNotar bankruptcy, SSL weakness discovered, alternatives to the CA Hierarchy Model, and more.

S1 · E320 · 29 de set de 2011

Listener Feedback #127 Episódio 320

Kindle Fire and the Silk browser, MySQL breach, your questions, and more.

S1 · E321 · 5 de out de 2011

The Beauty of B.E.A.S.T. Episódio 321

HTC not sandboxing Android data, phishing on the rise, Browser Exploit Against SSL/TLS, and more.

S1 · E322 · 12 de out de 2011

Listener Feedback #128 Episódio 322

Fighter drone's malware infection, Germany deliberately installing malware on traveller's computers, your questions and Steve's answers.

S1 · E323 · 19 de out de 2011

TCP Pt.2 - Attacking TCP Episódio 323

Details on the Silk browser, Google encrypted search, TCP attacks, and more.

S1 · E324 · 26 de out de 2011

Listener Feedback #129 Episódio 324

Two Internets, Stuxnet variant "DuQu", Spanning Tree Protocol, your questions, and more.

S1 · E325 · 2 de nov de 2011

TCP Pt.3 - Necessary Refinements Episódio 325

Certificate authorities compromised, BT to block Newzbin, Mac OSX Bitcoin mining malware, "Bytes in Flight", and more.

S1 · E326 · 9 de nov de 2011

Listener Feedback #81 Episódio 326

DuQu worm, remote code execution kernel vulnerability, Adobe abandons Flash for mobile, your questions, and more.

S1 · E327 · 16 de nov de 2011

Internet Privacy Update Episódio 327

Firefox 8, SOPA, Kindle Fire first look, and more.

S1 · E328 · 23 de nov de 2011

Listener Feedback #131 Episódio 328

SOPA, SCADA hacked, Kindle Fire extended review, your questions, and more.

S1 · E329 · 30 de nov de 2011

Browser ID Episódio 329

Comparing Mozilla's BrowserID to other security technologies, Android malware, Malvertising, and more.

S1 · E330 · 7 de dez de 2011

Listener Feedback #132 Episódio 330

DNSCrypt Beta for Mac, Zeus banking trojan, Carrier IQ, your questions, and more.

S1 · E331 · 14 de dez de 2011

Mega Security News Update Episódio 331

Microsoft, Adobe, and Carrier IQ security news, and more.

S1 · E332 · 21 de dez de 2011

Listener Feedback #133 Episódio 332

Background updates of IE, more on Carrier IQ, your questions, and more.

S1 · E333 · 28 de dez de 2011

Science Fiction Holiday Special Episódio 333

Firefox 9, SOPA, Sci-Fi movie and book recommendations, and more.

S1 · E334 · 4 de jan de 2012

Listener Feedback #134 Episódio 334

Microsoft's Out-Of-Cycle patch, FISA constitutionality, your questions, and more.

S1 · E335 · 9 de jan de 2012

Wi-Fi Protected (In)Security Episódio 335

Simple Secure Wifi isn't very secure, password recovering charger, WPA cracker, and more.

S1 · E336 · 18 de jan de 2012

Listener Feedback #135 Episódio 336

Zappos customer data breach, Slow Motion DDoS, your questions, and more.

S1 · E337 · 25 de jan de 2012

WPS: A Troubled Protocol Episódio 337

Forcing laptop decryption, GPS tracking now requires a warrant, DNS poisoning, and more.

S1 · E338 · 1 de fev de 2012

Listener Feedback #136 Episódio 338

Google's privacy policy changes, Region's lost 401k data, pcAnywhere source stolen years ago, your questions, and more.

S1 · E339 · 8 de fev de 2012

“ScriptNo” for Chrome Episódio 339

NSTIC update, webcam nightmare, a NoScript-like extension for Chrome, and more.

S1 · E340 · 15 de fev de 2012

Listener Feedback #137 Episódio 340

SSL's public key encryption, pcAnywhere, Google Wallet, your questions, and more.

S1 · E341 · 22 de fev de 2012

Can “Anonymous” Take Down the Internet? Episódio 341

The iOS cookie incident, whether Anonymous might take down the Internet, and more.

S1 · E342 · 29 de fev de 2012

Listener Feedback #138 Episódio 342

HTML video copy protection, protection against forced decryption, Yubico "Nano", your questions, and more.

S1 · E343 · 6 de mar de 2012

HTTP & SPDY Episódio 343

LulzSec leader betrays Anonymous , how a site can know your social networks, comparing HTTP to SPDY, and more.

S1 · E344 · 14 de mar de 2012

Listener Feedback #139 Episódio 344

6th annual Pwn2Own, Microsoft's noisy 2nd Tuesday, Wikipedia transfer from GoDaddy complete, your questions, and more.

S1 · E345 · 21 de mar de 2012

Buffer Bloat Episódio 345

Buffer Bloat on the internet, NSA Super-Super Computer Center, Apache Server Status information leakage, and more.

S1 · E346 · 28 de mar de 2012

Listener Feedback #140 Episódio 346

Ten great answers and questions, buffer bloat, security news, and more.

S1 · E347 · 4 de abr de 2012

iOS Password Mis-Managers Episódio 347

Global Payments card processor breach, Apple holds security key for iCloud, iPhone passcode exploit, and more.

S1 · E348 · 11 de abr de 2012

Listener Feedback #141 Episódio 348

Flashback infects 670,000 Macs, safety of Safari password storage, Windows Defender Offline, your questions, and more.

S1 · E349 · 19 de abr de 2012

Cloud Solutions Episódio 349

Steve gathers up all the cloud storage solutions and gives us his review.

S1 · E350 · 25 de abr de 2012

Twitter Feedback Q&A #142 / Cloud Security Episódio 350

During this special Q&A episode, Iyaz and I host an entirely Twitter-driven Q&A episode, caused by the flurry of interest created by last week's focus upon Cloud Storage Solutions. After catching up with the week's security-related events, we zip through 21 tweets, then focus upon and examine the security architecture of one controversial and popular cloud storage provider: Backblaze.

S1 · E351 · 2 de mai de 2012

Three Hybrid Cloud Solutions Episódio 351

After catching up with the week's news and Twitter feedback, Leo and I closely examine three remote cloud storage solutions whose Crypto was done COMPLETELY right, Offering full TNO (Trust No One) security. And one of them makes me (Steve) wish I were a Mac user!

S1 · E352 · 9 de mai de 2012

Listener Feedback #143 Episódio 352

S1 · E353 · 16 de mai de 2012

DMARC - eMail Security Episódio 353

After catching up with the week's news, Steve and Leo look at the state of the slow but sure and steady progress being made to tighten up the Internet's eMail security. Since spoofing and phishing continue to be huge problems, these problems continue to command the attention of the Internet's largest commerce, financial, and social networking domains. The good news is: There's good reason for hope!!

S1 · E354 · 23 de mai de 2012

Listener Feedback #144 Episódio 354

S1 · E355 · 30 de mai de 2012

Poking Holes in TCP Episódio 355

Steve and Leo tackle two new and interesting threats to Internet security. First, the newly discovered “Flame” / “Flamer” / “Skywiper” malware dwarfs Stuxnet and Duqu in capability and complexity. Then they examine the work of two University of Michigan researchers who have detailed a collection of new ways to attack the TCP protocol. They inject malicious content into innocent web pages and add malicious links to online chats.

S1 · E356 · 6 de jun de 2012

Listener Feedback #145 Episódio 356

S1 · E357 · 13 de jun de 2012

Flame On! Episódio 357

This week, after catching up with a large amount of the week’s news, Leo and I carefully examine two major new discoveries about the Windows Flame worm.

S1 · E358 · 20 de jun de 2012

Listener Feedback #146 Episódio 358

S1 · E359 · 27 de jun de 2012

Coddling Our Buffers Episódio 359

After catching up with a few items of security and privacy news, Leo and I return to the Internet's "Buffer Bloat" problem to share the new solution “CoDel” (pronounced “coddle”) that has been developed by several of the Internet's original and leading technologists and designers.

S1 · E360 · 11 de jul de 2012

Listener Feedback #147 Episódio 360

S1 · E361 · 18 de jul de 2012

Paul Vixie & DNS Changer Episódio 361

After catching up with the week's security news, Leo and I take a close look at the recent “DNS Changer” malware, the FBI's role in the “takedown” of the malicious servers, and the expert technical assistance provided by Paul Vixie, one of the pioneers and principal developers of the Internet's Domain Name System (DNS).

S1 · E362 · 25 de jul de 2012

Listener Feedback #148 Episódio 362

S1 · E363 · 1 de ago de 2012

Ali Baba's Cave Episódio 363

After catching up with an eventful week of security news, Leo and I explore a variant of the story of “Ali Baba's Cave” as a means for clearly explaining the operation and requirements of cryptographic Zero-Knowledge Interactive Proofs.

S1 · E364 · 8 de ago de 2012

Mat Honan's Very Bad Weekend Episódio 364

After catching up with an eventful week of security news, Leo and I describe and explore the details of the “epic hack” that recently befell well-known technology writer Mat Honan.

S1 · E365 · 15 de ago de 2012

Listener Feedback #149 Episódio 365

S1 · E366 · 22 de ago de 2012

Password Cracking Update: The Death of “Clever” Episódio 366

After catching up with a collection of miscellaneous and interesting security-related news, Leo and I take a close look at the long-term consequences of the many massive password leakages which have occurred. The upshot? Hackers are getting MUCH better at cracking passwords, and “clever” techniques can no longer be regarded as safe.

S1 · E367 · 29 de ago de 2012

What a Busy Week! Episódio 367

We have so much security news and information to cover this week that we didn’t have time to take questions from our listeners. What we have, instead, is a LOT of interesting news about the new Java vulnerabilities, new TNO cloud storage solutions, and lots more.

S1 · E368 · 5 de set de 2012

Listener Feedback #150 Episódio 368

S1 · E369 · 11 de set de 2012

Internet Identity Update Episódio 369

After catching up with an eventful week of security news, Leo and I step back for an overview and discussion of the slowly evolving state of the art in Internet Identity Authentication.

S1 · E370 · 19 de set de 2012

Mark Russinovich & Other News Episódio 370

We begin the week with a visit with our distinguished guest, Mark Russinovich, late of Sysinternals and now with Microsoft. Mark joins us to chat about the release of his second security thriller, “Trojan Horse,” and to share some of his view of the security world.

S1 · E371 · 26 de set de 2012

Listener Feedback #151 Episódio 371