Differences

This shows you the differences between two versions of the page.

--- security_now_2014 [2015/04/13 00:02] – briancarnell
+++ security_now_2014 [2015/04/13 00:19] (current) – briancarnell
@@ Line 69: / Line 69: @@
 [[Security Now Episode 470|Episode 470]] - Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 471|Episode 471]]
+[[Security Now Episode 471|Episode 471]] - This past Labor Day brought some high-profile security breaches (naked celebrity photos posted online) of still-unknown origin, and other interesting news. Once Leo and I get caught up with all of that craziness, we take a look at the (sad) state of eMail privacy and encryption. We examine the past and consider what the future might hold.
-[[Security Now Episode 472|Episode 472]]
+[[Security Now Episode 472|Episode 472]] - Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 473|Episode 473]]
+[[Security Now Episode 473|Episode 473]] - After we catch up with interesting security news of the past week, Leo and I examine Google's surprising, controversial, and unilateral decision to suddenly and significantly deprecate ALL web server certificates signed by SHA-1 that will be valid past 2016 - even though 92% of certificates (with lives of at least two years) signed in January 2014 were SHA-1.
-[[Security Now Episode 474|Episode 474]]
+[[Security Now Episode 474|Episode 474]] - Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 475|Episode 475]]
+[[Security Now Episode 475|Episode 475]] - After covering a very busy and interesting past week of security and privacy news, Father Robert and Steve explain, examine, and dig down deep into the many fascinating details of the worst-ever, two-decade old, latent and pervasive Internet bug known as “Shellshock.”
-[[Security Now Episode 476|Episode 476]]
+[[Security Now Episode 476|Episode 476]] - Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 477|Episode 477]]
+[[Security Now Episode 477|Episode 477]] - After catching up with another interesting week of security events, including the rumor of a pending SSLv3 flaw and a new Windows zero-day exploit, Steve and Leo examine the next evolution in online payment technology which replaces traditional credit card numbers with “Payment Tokens.”
-[[Security Now Episode 478|Episode 478]]
+[[Security Now Episode 478|Episode 478]] - After catching up with a few interesting events from the past week, Steve and Leo take a deep dive into the details of the Internet's latest “security catastrophe” which has been named “Poodle.” Steve first carefully explains the trouble, then debunks it completely, showing why the vulnerability should be fixed but will probably never be exploited.
-[[Security Now Episode 479|Episode 479]]
+[[Security Now Episode 479|Episode 479]] - After catching up with a few interesting events from the past week, Steve and Leo take a deep dive into the details of the Internet's latest “security catastrophe” which has been named “Poodle.” Steve first carefully explains the trouble, then debunks it completely, showing why the vulnerability should be fixed but will probably never be exploited.
-[[Security Now Episode 480|Episode 480]]
+[[Security Now Episode 480|Episode 480]] - Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 481|Episode 481]]
+[[Security Now Episode 481|Episode 481]] - Leo and I discuss the week's major security events, focusing on this month's crucially important Microsoft MEGA Patch Tuesday updates which, if exploited, will allow for wholesale remote client and server code execution and takeover. They then take a first pass look at the new “Certificate Transparency” standard and initiative being launched by Google and currently supported by DigiCert and others.
-[[Security Now Episode 482|Episode 482]]
+[[Security Now Episode 482|Episode 482]] - Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 483|Episode 483]]
+[[Security Now Episode 483|Episode 483]] - This week Leo and I cover two major stories: the discovery of a frighteningly capable and sophisticated espionage malware known as “Regin,” and deeper coverage of the forthcoming “Let's Encrypt” free and automated web server certificate issuing and management system. And, as always, we also cover a bunch of interesting smaller issues.
-[[Security Now Episode 484|Episode 484]]
+[[Security Now Episode 484|Episode 484]] - Mike and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 485|Episode 485]]
+[[Security Now Episode 485|Episode 485]] - Leo and I discuss the week's major security events, including the Turla advanced persistent threat for backdoor for Linux. We then look closely at the very expensive consequences of the lax security measures employed by Target - and their massive late 2013 point-of-sale terminal breach - and Sony's whole-corporation network internal data dump and disclosure.
-[[Security Now Episode 486|Episode 486]]
+[[Security Now Episode 486|Episode 486]] - Mike and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.
-[[Security Now Episode 487|Episode 487]]
+[[Security Now Episode 488|Episode 488]] - For our last show of 2014, we first catch up on two very busy holiday weeks of security craziness; then we step back to review the major events of this past very busy and security event-filled year.
-[[Security Now Episode 488|Episode 488]]