Open Source Security

Episode 249 - Door 24: Information wants to be free 24.12.2020 5:44 ↓

Josh and Kurt talk about the idea of information wanting to be free. It's Christmas, we should give it what it wants! Links Hacker Manifesto

Episode 248 - Door 23: How to report 1000 security flaws 23.12.2020 5:25 ↓

Josh and Kurt talk about how to file 1000 security flaws. One is easy, scale is hard.

Episode 247 - Door 22: How to report one security flaw 22.12.2020 5:14 ↓

Josh and Kurt talk about how to report one security flaw

Episode 246 - Door 21: Bug bounties 21.12.2020 5:00 ↓

Josh and Kurt talk about bug bounties

Episode 245 - Door 20: Is SMS 2FA better than no 2FA? 20.12.2020 5:08 ↓

Josh and Kurt talk about if SMS 2 factor auth is better than no 2FA Links Cyber deepfaked their host

Episode 244 - Door 19: TLS certificate trust 19.12.2020 5:23 ↓

Josh and Kurt talk about modern TLS certificate trust

Episode 243 - Door 18: Don't roll your own crypto or auth 18.12.2020 5:01 ↓

Josh and Kurt talk about why it's a horrible idea to roll your own crypto or auth

Episode 242 - Door 17: Vulnerability response 17.12.2020 5:00 ↓

Josh and Kurt talk about vulnerability response. What is it, what does it mean, how does it work

Episode 241 - Door 16: 16 bits of change 16.12.2020 5:04 ↓

Josh and Kurt talk about the switch from 16 to 32 to 64 bit and even the changes from Intel to ARM

Episode 240 - Door 15: Supplier compliance 15.12.2020 5:10 ↓

Josh and Kurt talk about supplier compliance Links Annex A.15.1 of ISO 27001:2013 Episode 162 – SBOM with Allan Friedman

Episode 239 - Door 14: Backdoors 14.12.2020 5:06 ↓

Josh and Kurt talk about backdoors in open source software

Episode 238 - Door 13: Unlucky or survivor bias? 13.12.2020 4:59 ↓

Josh and Kurt talk about the unluckiest man in the world and survivor bias Links Unluckiest man in the world

Episode 237 - Door 12: Video game hacking 12.12.2020 4:54 ↓

Josh and Kurt talk about video game hacking. The speedrunners are doing the best security research today Links Super Mario World RCE

Episode 236 - Door 11: Should you get on a 737? 11.12.2020 5:04 ↓

Josh and Kurt talk about the safety of a 737 Links FAA says 737 is safe

Episode 235 - Door 10: Deciding what information matters 10.12.2020 5:10 ↓

Josh and Kurt talk about Apple leaking internal IP addresses. Sometimes we create our own emergencies over things that don't matter. Links Apple's internal IP addresses

Episode 234 - Door 09: public key cryptography 09.12.2020 5:19 ↓

Josh and Kurt talk about public key cryptography

Episode 233 - Door 08: man 8 security 08.12.2020 5:26 ↓

Josh and Kurt talk about the OpenBSD security(8) man page and the importance of automating security Links OpenBSD security(8) page

Episode 232 - Door 07: 7 is the best prime, 2 is the dumbest 07.12.2020 5:20 ↓

Josh and Kurt talk about prime numbers

Episode 231 - Door 06: 6 wifi risks ... that don't actually matter 06.12.2020 5:09 ↓

Josh and Kurt talk about the non problems with public wifi we love to pretend matter Links The Half Dozen Risks of Using Dirty Public Wi-Fi Networks

Episode 230 - Door 05: 5 reasons you need 24/7 robot monitoring 05.12.2020 4:33 ↓

Josh and Kurt talk about why you need 24/7 monitoring of all the things Links Swiss air force office hours DC-10 cargo door

Episode 229 - Door 04: EFF's Cover Your Tracks 04.12.2020 5:03 ↓

Josh and Kurt talk about how the EFF is helping us prevent Internet tracking Links EFF Cover Your Tracks

Episode 228 - Door 03: Do all vulnerabilities matter equally? 03.12.2020 5:00 ↓

Josh and Kurt talk about how many security vulnerabilities matter enough to fix? Links A Third of Known Computer Security Flaws Have No Solution Episode 162 – SBOM with Allan Friedman

Episode 227 - Door 02: Marketing department or selection bias? 02.12.2020 4:26 ↓

Josh and Kurt talk about cybersecurity statistics and the value of the data we have. Links 24 Cybersecurity Statistics That Matter In 2020

Episode 226 - Door 01: Advent calendars 01.12.2020 4:58 ↓

Josh and Kurt talk about advent calendars. We are publishing 25 5 minute episodes in 25 days. Also portable X-ray machines.

Episode 225 - Who is responsible if IoT burns down your house? 23.11.2020 30:40 ↓

Josh and Kurt talk about the safety and liability of new devices. What happens when your doorbell can burn down your house? What if it's your fault the doorbell burned down your house? There isn't really any prior art for where our devices are taking us, who knows what the future will look like. Show Notes Ring Doorbell recall Ring incorrect screw diagram Punctured battery Episode 145 – What do se...