Naked Security

Listen to this "Black Hat Special" episode of the Chet Chat. Paul Ducklin puts Chester Wisniewski on the other side of the microphone to tell us about the *real* security lessons from Black Hat USA 2014...

Sophos expert Chester Wisniewski takes time out of the Nevada heat to delve into the latest security news with Paul Ducklin. (Chet's in fabulous Las Vegas this week, attending the B-Sides, Black Hat and DEFCON conferences.) There's something for everyone in this epsiode, including: spam, malware, hacking, encryption, backup and more.

Chester Wisniewski and Paul Ducklin of Sophos dissect the week's security news to see what we can learn from other people's mistakes. ("Those who cannot remember the past are condemned to repeat it," as George Santayana famously said.) And Chester has an invitation: "If you're going to be in Las Vegas for BlackHat 2014, be sure to drop by at the Sophos booth and say G'day!"

Sophos experts Chester Wisniewski and Paul Ducklin look for lessons in the latest computer security news. In this week's podcast: how to make SoHo routers more secure; how to decide if you can trust your browser; UK law enforcement takes aim at a banking botnet; and, boy-oh-boy, do we have a prize for you.

Join Sophos experts Paul Ducklin and Chester Wisniewski as they take a clear but entertaining trip through the components you'll find in a modern network firewall, helping you to understand the what, how and why of each part. Whether you're an IT professional responsible for implementing a network security policy, the CFO who has to pay for it, or just a concerned user keen to learn more about def...

Sophos experts Chester Wisniewski and Paul Ducklin are back with this week's Chet Chat security podcast, turning plain old news into advice you can use. In this episode: Warbiking in Manhattan; buffer overflow hubris for Google; why you don't/do/don't/do need anti-virus for Android; what we can do to stop botnets like Gameover recovering after takedowns; and how LibreSSL shows that less can be mor...

In this episode, Sophos experts John Shier and Paul Ducklin tackle the week's interesting security stories. John keeps Duck to 60 seconds (OK, 75") in a TL;DR version of Patch Tuesday, and then the pair get stuck into: the high-profile cybercrime arrest of a Russian MP's son; how mainstream brands inadvertently help phishers; and why macro malware is coming back from the brink of extinction.

Join Sophos experts Chester Wisniewski and Paul Ducklin for the latest episode of the weekly Chet Chat podcast. In this episode: Were does your country sit on the fraud list, and what can you do about it? Just how much can you trust SMSes on Android, even if they come from a friend? Is Apple serious enough about security on the iOS mobile platform? And will Google's End-To-End email encryption plu...

Chester Wisniewski and Paul Ducklin present Sophos's regular weekly security podcast, the "Chet Chat." This week the enthusiatic experts look at: yet more in the TrueCrypt saga; the Towelroot software for rooting locked-down Androids; the ongoing problem of ransomware even after the CryptoLocker takedown; and Canada's long, long, long-awaited anti-spam law.

Sophos security experts Chester Wisniewski and Paul Ducklin turn their attention on the week's security news. As usual, they extract plenty of useful lessons during their insightful dissection of the issues, including: PF Chang's data breach, which the company has as good as admitted but not yet tracked down; the ongoing saga of vanishing encryption software TrueCrypt; the ethics of creating compu...

Chester Wisniewski and Paul Ducklin dig into the latest security news for lessons we can all learn. In this episode of our weekly quarter-hour podcast: Patch Tuesday, and why simply counting vulnerabilities isn't a good measure of danger; file-encrypting ransomware comes to Android; Apple announces Wi-Fi MAC scrambling as a privacy measure; and mysterious iPhone-locking cybercrook "Oleg Pliss" has...

Chester Wisniewski and Paul Ducklin take on the latest security news with their usual mix of enthusiasm, expertise and entertainment. This week, they dig into the bafflement of the disappearing TrueCrypt encryption software: did it jump, or was it pushed? They also look at the takedown of the Gameover and CryptoLocker malware by law enforcement, and Chet sends Duck down memory lane to tell us what...

John Shier interviews security expert Chester Wisniewski about the sudden demise of the freeware TrueCrypt project. They discuss what happened and what users should consider when moving on to greener pastures.

Chester Wisnieski and Paul Ducklin dig into the important security stories of the past week, and pull out some lessons we can all learn. Take an entertaining and informative journey through the case of Apple iDevices held to ransom in Australia; the calamity of eBay's super-sized data breach; a carefully-coordinated cybercrime bust in Bulgaria; and Sourceforge's "in a good cause" password reset.

The Chet Chat comes to you this week from Hanoi, Vietnam with special guest Sean Richmond from Sophos Australia. Chet and Sean continue the tradition of working through the details to paint you a clearer picture. This week they tackle the FBI's crackdown on the Blackshades malware, new research showing more flaws in Chip & PIN technology, the latest Apple updates and an analysis of the EFF's "Who...

Road trips again prove no barrier to the Chet Chat, with Chester Wisniewski calling home to the studio from the exotic wilderness of the Air Canada lounge at Toronto Airport. As usual, Chester and Paul Ducklin turn their insightful and entertaining gaze on the security lessons we can learn from the past few days. There's the difference between "Important" and "Critical" on Patch Tuesday; Apple's p...

Sophos security experts Chester Wisniewski and Paul Ducklin look at what we can learn from the week's security news. Target, Dropbox, Microsoft, the mysterious Webdriver Torso and Sophos Naked Security itself feature in this episode of our weekly podcast.

A zero-day in IE to contend with, followed by a zero-day in Flash; two approaches to fixing OpenSSL after the Heartbleed bug; how to get a free pass to the Infosec Europe 2014 event in London; and why security happens by design and not by accident! Chet and Duck turn their attention on the lessons we can learn from the latest security news.

Computer security experts Chester Wisnieski and Paul Ducklin of Sophos turn their attention on the week's news. Mixing wit, insight and advice, the duo look at: the risk from iOS malware, the state of play in fingerprint security, whether to trust mobile apps, why it's a bad idea to hack the taxman, and what to do if Brian Krebs calls to warn you've been pwned.

From the latest Heartbleed revelations to various successes by law enforcement, Sophos experts Chester Wisniewski and Paul Ducklin take you through the big computer security stories of the week. Be entertained as you learn from the news, all in our regular quarter-hour podcast format.

Sophos experts Chester Wisniewski and Paul Ducklin help you to understand - and explain what you can do about - the big ticket security news items of the past week. The epic "Heartbleed" bug in OpenSSL, the last patches ever for XP and Office 2003, and Apple's attitude to updates and support all come under the microscope.

Chet and Duck get together once again to look at the week's news with their usual blend of humor, insight and informed intensity. There's Adobe's password breach revisited (in poetic form, no less), why there are 42 days left in Windows XP, how Snapchat dissed the US legislature, and what World Backup Day really ought to mean to you...

On 01 April 2014, we decided not to do an April Fool's but to have some April Fun instead! So we turned three recent computer security stories into poems. OK, rhyming verse. Doggerel, in fact. Here, then, with apologies to Mr Robert William Service, are the stories of Mt Gox, Snapchat and the End of XP, as you've never heard them before.

How bad is the latest Microsoft Word 0-day? Does OS X really need patching less often than Windows? What does Gmail's move to HTTPS-only really mean? And if WhatsApp has privacy coded into its DNA, is it coded into its app, too? Chet and Duck add their opinion and advice to the good and the bad in the past weeks' news.

Is a browser less secure if more people like to hack it? Is it OK to ignore alerts simply because you get too many? Do you back yourself to spot every single phish? And just how smart is the Google Play Store? Chester and Duck dissect these issues in their entertaining and informative style in this week's Sophos Security Chet Chat podcast...