Episode 282: The Shadow Knows | TechSNAP 282

FromTechSNAP

Start listening View podcast show

Episode 282: The Shadow Knows | TechSNAP 282

FromTechSNAP

ratings:

Length:

94 minutes

Released:

Sep 1, 2016

Format:

Podcast episode

Description

The ShadowBrokers release a batch of the NSA’s tools & we dive in. A Google login issue allows for credential theft & researchers map the Netflix content delivery network!

Plus great feedback, follow up, a rockin' roundup & much, much more!

Released:

Sep 1, 2016

Format:

Podcast episode

Titles in the series (100)

Systems, Network, and Administration Podcast. Every two weeks TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a portion of the show to answer audience questions, discuss best practices, and solving your problems.

Skip carousel

Episode 198: Dude Where's My Card? | TechSNAP 198: Adobe has a bad week, with exploits in the wild & no patch. We’ll share the details. Had your credit card stolen? We’ll tell you how. Plus the harsh reality for IT departments, a great batch of questions, our answers & much much more! by TechSNAP
105 min listen
Episode 206: Two Factor Falsification | TechSNAP 206: Microsoft takes 4 years to fix a nasty bug, how to bypass 2 factor authentication in the popular ‘Authy’ app. Hijacking a domain with photoshop, hardware vs software RAID revisited, tons of great questions, our answers & much much more! by TechSNAP
100 min listen
Episode 199: Internet of Problems | TechSNAP 199: The internet of dangerous things is arriving but what about taking care of the devices we already have? Plus details on critical updates from Adobe, the surprising number of Gas Stations vulnerable to exploitation via the internet & much, much more! by TechSNAP
85 min listen
Episode 192: Signed by Sony | TechSNAP 192: If we could rebuild the Internet from scratch, what would we change? It’s more than just a thought experiment. We’ll share the details about real world research being done today! Plus we dig through the Sony hack, answer a ton of great question & a rocki by TechSNAP
102 min listen
Episode 191: Celebrity Bugs | TechSNAP 191: 2014 has been the year of the celebrity bugs, we take a look at the new trend of giving security vulnerabilities names & logos & ask who it truly benefits. Plus practical way to protect yourself from ATM Skimmers, how they work & much more! by TechSNAP
114 min listen
Episode 202: SuperFishy Mistake | TechSNAP 202: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections, we’ll break down how this is possible, the danger that still exists & more. Plus the story of a billion dollar cyber heist anyone could pull off, the Equation group & much more! by TechSNAP
72 min listen
Episode 200: Your TechSNAP Story | TechSNAP 200: A new major security breach at a large health insurance firm could expose 10s of millions, a phone phishing scam anyone could fall for & we celebrate our 200th episode with your TechSNAP stories. Then its a storage spectacular Q&A & much, much more! by TechSNAP
99 min listen
Episode 229: Extortion Startups | TechSNAP 229: The real fallout from the Ashley Madison hack gets personal. The Android StageFright patch that doesn’t cover all of the holes, and turning a KVM into a spying appliance. Plus a great batch of questions, our answers, a rocking round up & more! by TechSNAP
104 min listen
Episode 193: Don’t Fire IT | TechSNAP 193: More and more data breaches are leading to blackmail but the stats don’t tell the whole story. We’ll explain. Plus the latest in the Sony hack, and the wider reaction. Plus a great batch of emails & much, much more! by TechSNAP
93 min listen
Episode 194: Best Of TechSNAP 2014 | TechSNAP 194: We look back at this year in TechSNAP. Allan shares his war stories, TrueCrypt shuts down, Heartbleed happens & more! by TechSNAP
101 min listen
Episode 195: Cloudy With a Chance of SSL | TechSNAP 195: We go inside the epic takedown of SpamHaus, then we break down why CloudFlare’s Flexible SSL is the opposite of security. Followed by a great batch of questions, our answers & much much more! by TechSNAP
69 min listen
Episode 201: Group Problemcy | TechSNAP 201: A 20 year old design flaw in Windows has just been patched & it requires some major re-working of the software. Attackers compromise Forbes.com & why Facebook’s new ThreatExchange platform could be a great idea. by TechSNAP
94 min listen
Episode 197: Patch and Notify | TechSNAP 197: Been putting off that patch? This week we’ll cover how an out of date Joomla install led to a massive breach, Microsoft and Google spar over patch disclosures, picking the right security question & more! by TechSNAP
121 min listen
Episode 205: An Uber Mess | TechSNAP 205: Using encryption is a good thing, but its just the start, we’ll explain. Plus how one developer totally owned the Uber app. Then it’s a great batch of your questions & our answers! by TechSNAP
64 min listen
Episode 196: Sony’s Hard Lessons | TechSNAP 196: We reflect on the lessons learned from the Sony Hack & discuss some of the tools used to own their network. Plus a overview of what makes up a filesystem, a run down of the Bacula backup system & much more! by TechSNAP
106 min listen
Episode 209: Day-0 of an InfoSec Career | TechSNAP 209: Is it possible to make a truly private phone call anymore? The answer might surprise you. Cisco and Level 3 battle a huge SSH botnet & how to Build a successful Information Security career & much, much more! by TechSNAP
129 min listen
Episode 204: Ghost of Crypto Past | TechSNAP 204: We’ll break down the technical baggage that led to the new FREAK SSL flaw & the security ramifications of top executives using personal email accounts… Plus why just need to stop hiding file extensions. Plus some great feedback & much, much more! by TechSNAP
98 min listen
Episode 211: The French Disconnection | TechSNAP 211: What’s really the key to detecting a breach before its become much too late? We’ll share some key insights, plus a technical breakdown of China’s great cannon & the new New French Surveillance Law that should be a warning to us all & much, much more! by TechSNAP
107 min listen
Episode 221: Ripping me a new Protocol | TechSNAP 221: Amazon has a new TLS implementation & the details look great, we’ll share them with you. The technology that powers the NSA’s XKEYSCORE you could have deployed yourself. Some fantastic questions, a big round up & much, much more! by TechSNAP
108 min listen
Episode 207: Lunch Lady Lockdown | TechSNAP 207: Reverse Engineering Incentives to Improve Security. New Jersey school district computers held for ransom & the flash bug that lives on from 2011 with a twist! Plus some great networking questions, drone powered Internet & more! by TechSNAP
87 min listen
Episode 230: Trojan Family Ties | TechSNAP 230: Rooting your Android device might be more dangerous than you realize, why the insurance industry will take over InfoSec & the NSA prepares for Quantum encryption. Plus some great questions, a fantastic roundup & more! by TechSNAP
70 min listen
Episode 244: Finding Nakamoto | TechSNAP 244: Bitcoin’s creator has been found again, we’ll cover what the media thinks they’ve figured out & what we really know. Then, 'In Patches We Trust: Why Security Updates have to get better', a great batch of questions, a huge round up & much more! by TechSNAP
116 min listen
Episode 219: OPM Data too Valuable to Sell | TechSNAP 219: Kaspersky labs has been hacked, we’ll tell you why it looks like a nation state was the attacker, why OPM data is too valuable sell & the real situation with LastPass. Plus some great questions, our answers & a rocking round up. by TechSNAP
104 min listen
Episode 203: TurboHax | TechSNAP 203: Lenovo & Google are victims of DNS hijacking, we’ll share the details, Everyone wants you to secure your data, just not from them & how Turbotax profits from Cyber tax fraud! Plus a great batch of your questions, a fantastic round up & much, much more! by TechSNAP
107 min listen
Episode 212: Dormant Docker Disasters | TechSNAP 212: The man who broke the music business, the major downsides to the container culture & yes, they really are trying to sell you Security Snake Oil. Plus your great questions, our answers & much, much more! by TechSNAP
94 min listen
Episode 228: Export Grade Vulnerabilities | TechSNAP 228: Lenovo & HP are caught injecting malware even after you format the drive, Ubiquiti Networks is socially engineered out of 46 million & are we entering the era of Security Research Prohibition? We debate. Plus your questions, the roundup & much, much more! by TechSNAP
72 min listen
Episode 227: Oracle's EULAgy #oraclefanfic | TechSNAP 227: Oracle really doesn’t want you to reverse engineer their products but they may have just released the Kraken, we’ll explain. A massive drop of 35 fixes in one day, great feedback and follow up, a rockin roundup & much, much more! by TechSNAP
74 min listen
Episode 234: Key Flaw With GPL | TechSNAP 234: D-Link publishes its private code signing keys, exploiting Windows Symbolic Links & why encryption is not sufficient protection. Plus some great questions, our answers, a rockin roundup & much, much more! by TechSNAP
67 min listen
Episode 223: A Bias to Insecurity | TechSNAP 223: The Hacking Team fallout continues with more zero day patches you need to install, a new attack against RC4 might finally kill it & how to save yourself from a DDoS attack. Plus a great batch of your questions, our answers & much, much more! by TechSNAP
82 min listen
Episode 225: SourceForge's Downfall | TechSNAP 225: SourceForge sees downtime, and we examine their infrastructure, a new pervasive hackgroup has been exposed and their track record is fascinating. Plus a Hacking Team Round up, a wide variety of audience questions, our answers & much, much more! by TechSNAP
65 min listen

More Episodes from TechSNAP

Skip carousel

430: All Good Things: It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS. by TechSNAP
52 min listen
429: Curious About Caddy: Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC. by TechSNAP
31 min listen
428: RAID Reality Check: We dive deep into the world of RAID, and discuss how to choose the right topology to optimize performance and resilience. by TechSNAP
36 min listen
427: Gigahertz Games: Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop. by TechSNAP
51 min listen
426: Storage Stories: We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording. by TechSNAP
31 min listen
425: Ryzen Gets Real: We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root. by TechSNAP
33 min listen
424: AMD Inside: Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won. by TechSNAP
28 min listen
423: Hopeful for HAMR: We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC. by TechSNAP
30 min listen
422: Multipath Musings: We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP. by TechSNAP
24 min listen
421: Firewall Fun: We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family. by TechSNAP
25 min listen
420: Choose Your Own Compiler: Compiling the Linux kernel with Clang has never been easier, so we explore this alternative compiler and what it brings to the ecosystem. by TechSNAP
24 min listen
419: Nebulous Networking: From classifying cats to colorizing old photos we share our top tips and tools for starting your machine learning journey. Plus, learn why Nebula is our favorite new VPN technology, and how it can help simplify and secure your network. by TechSNAP
34 min listen
418: 5G Fundamentals: As the rollout of 5G finally arrives, we take some time to explain the fundamentals of the next generation of wireless technology. by TechSNAP
34 min listen
417: Machine Learning Magic: We explore the rapid adoption of machine learning, its impact on computer architecture, and how to avoid AI snake oil. by TechSNAP
26 min listen
416: I.T. Phone Home: Ubiquiti's troublesome new telemetry, Jim's take on the modern Microsoft, and why Project Silica just might be the future of long term storage. by TechSNAP
28 min listen
415: It's All About IOPS: We share our simple approach to disk benchmarking and explain why you should always test your pain points. by TechSNAP
34 min listen
414: Rooting for ZFS: We dive into Ubuntu 19.10's experimental ZFS installer and share our tips for making the most of ZFS on root. by TechSNAP
42 min listen
413: The Coffee Shop Problem: We peer into the future with a quick look at quantum supremacy, debate the latest DNS over HTTPS drama, and jump through the hoops of HTTP/3. by TechSNAP
32 min listen
412: Too Good To Be True: It's TechSNAP story time as we head out into the field with Jim and put Sure-Fi technology to the test. by TechSNAP
35 min listen
411: Mobile Security Mistakes: We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets. by TechSNAP
30 min listen
410: Epyc Encryption: It's CPU release season and we get excited about AMD's new line of server chips. Plus our take on AMD's approach to memory encryption, and our struggle to make sense of Intel's Comet Lake line. by TechSNAP
50 min listen
409: Privacy Perspectives: We examine why it's so difficult to protect your privacy online and discuss browser fingerprinting, when to use a VPN, and the limits of private browsing. by TechSNAP
39 min listen
408: Apollo's ARC: We take a look at the amazing abilities of the Apollo Guidance Computer and Jim breaks down everything you need to know about the ZFS ARC. by TechSNAP
35 min listen
407: Old School Outages: Jim shares his Nagios tips and Wes chimes in with some modern monitoring tools as we chat monitoring in the wake of some high-profile outages. by TechSNAP
43 min listen
406: SACK Attack: A new vulnerability may be the next 'Ping of Death'; we explore the details of SACK Panic and break down what you need to know. by TechSNAP
44 min listen
405: Update Uncertainty: We explore the risky world of exposed RDP, from the brute force GoldBrute botnet to the dangerously worm-able BlueKeep vulnerability. by TechSNAP
31 min listen
404: Prefork Pitfalls: We turn our eye to web server best practices, from the basics of CDNs to the importance of choosing the right multi-processing module. by TechSNAP
34 min listen
403: Keeping Systems Simple: We’re back from LinuxFest Northwest with an update on all things WireGuard, some VLAN myth busting, and the trade-offs of highly available systems. by TechSNAP
47 min listen
402: Snapshot Sanity: We continue our take on ZFS as Jim and Wes dive in to snapshots, replication, and the magic on copy on write. by TechSNAP
32 min listen
401: Everyday ZFS: Jim and Wes sit down to bust some ZFS myths and share their tips and tricks for getting the most out of the ultimate filesystem. by TechSNAP
48 min listen

Related podcast episodes

Skip carousel

Episode 319: When IT Security Cries | TechSNAP 319: The WannaCry Worm has brought the world to tears. We've got the latest details, conspiracy theories, fallout & some tissues. Plus a keylogger that may be hiding in your audio driver, some great hardware recommendations from the audience & so much more! by TechSNAP
80 min listen
Zooko Wilcox-O'Hearn: Zcash – An Open Financial System with Privacy: For Zooko Wilcox-O’Hearn, part of the cypherpunk movement since the early 1990s, the vision of a decentralized financial system that has both openness and privacy has existed since long before Bitcoin. After many failed attempts, Bitcoin proved that that vision could be achievable. But Bitcoin also failed to deliver on the privacy features as blockchain analysis allows tracing movements and deanonymizing many users. Zooko joined us to discuss his project Zcash, a fully anonymous cryptocurrency that is scheduled to launch in July. Through Zcash’s use of ground-breaking Zero Knowledge Proofs (or zkSNARKs) the blockchain will leak no information about sender, recipients nor amounts. It was a fascinating discussion of the most anticipated launch of a cryptocurrency since Ethereum. by Epicenter - Learn about Crypto, Blockchain, Ethereum, Bitcoin and Distributed Technologies
66 min listen
The Cloudcast #199 - Docker Security: Aaron and Brian talk to Diogo Monica and Nathan McCauley (@diogomonica and @nathanmccauley; Security Leads @Docker) about their security background at Square, Docker Notary, how security is evolving around containers, Docker best practices and tools, a... by The Cloudcast
17 min listen
SLP241 Bunnie - Precursor: Open Source Hardware Development Platform (Feat. Nicolas Dorier as guest host) by Stephan Livera Podcast
62 min listen
Ross Meets Kenny Biddle: Road House Rules Edition: Ross meets up with Chief Investigator Kenny Biddle to talk ghost hunting equipment, photographic manipulation, psychic “detectives”, and spooky uses for an Xbox Kinect. Plus! Hear all about a recent paranormal challenge of a cloud buster in Las Vegas. by Oh No, Ross and Carrie
100 min listen
Security Developer Experience and Security: Last week in security news: ESPN does a ransomware purge, who’re you gonna call for to eliminate dangling elastic ip takeovers, 2021 AWS security services that professionals should review, and more! by AWS Morning Brief
5 min listen
Special: Coordinated Release of Detection Rules for CobaltStike Abuse: Guest: , Security Engineer @ Google Cloud Topics: Could you tell us a bit about your background and how you ended up here at Google? Also, tell us about your team here? We're very excited about the release of the CobaltStrike rules. Could you share... by Cloud Security Podcast by Google
21 min listen
Buckeye’s use of Equation group tools pre Shadow Brokers leak, IoT security, and targeted ransomware by Symantec Cyber Security Brief Podcast
20 min listen
Blockchain of Things, Inc. – Beyond Cryptocurrency: Join us as Andre DeCastro, CEO & Co-Found of Blockchain of Things, Inc. gives listeners an insider’s scoop about using blockchain beyond cryptocurrency and how to apply technologies to the IIoT.… by Finding Genius Podcast
27 min listen
A Quiet But Bad Week by AWS Morning Brief
2 min listen
Review Crew: Here, There, Every Freaking Where: Five segments, Nine Reviews. by The No Proscenium Podcast
78 min listen
Turn That JIT Off! - PSW #706: This week, we kick off the show with an interview featuring Joe Gray, Senior OSINT Specialist at Qomplx, where we talk OSINT & Social Engineering ! Next up, we welcome Kyle Avery, a Penetration Tester for Black Hills Information Security, to delve... by Security Weekly Podcast Network (Audio)
209 min listen
A Brief History of the Open Source AI Hacker - with Ben Firshman of Replicate by Latent Space: The AI Engineer Podcast — Practitioners talking LLMs, CodeGen, Agents, Multimodality, AI UX, GPU Infra and all things Software 3.0
70 min listen
Episode 087 - Architecting the Big Dev Theory Show with Du'An Lightfoot and Stuart Clark: Join your dynamic duo, Brooke and Dave, as they s… by AWS Developers Podcast
38 min listen
Hacking AWS in Good Faith with Nick Frichette: Nick Frichette is a penetration tester and team lead at State Farm insurance, where he’s worked for more than five years. He’s also the maintainer of hackingthe.cloud. He holds security and solutions architect AWS certifications, and in his spare time, he by Screaming in the Cloud
36 min listen
Software Supply Chain Security, with Priya Wadhwa: The idea of software supply chain security rocketed into the public consciousness in the last year, with the news that US government agencies had been breached. Priya Wadhwa is a software engineer at Google working on open source security, including projects to secure and verify container deployments. She outlines what is being done to make sure this doesn't happen to you. by Kubernetes Podcast from Google
36 min listen
Time to Give LastPass the Heave: This week in security: remember floppy disks? Apparently they can still be a security risk, LastPass might have a breach on their hands, SEGA Europe has a rough go, and more! by AWS Morning Brief
5 min listen
Dask + Data Science Careers with Jacqueline Nolis - #480: Today we’re joined by Jacqueline Nolis, Head of Data Science at Saturn Cloud, and co-host of the . You might remember Jacqueline from our panel, where she shared her experience trying to navigate the suddenly hectic data science job market.... by The TWIML AI Podcast (formerly This Week in Machine Learning & Artificial Intelligence)
35 min listen
The Gruntled Developer: This week in security: more S3 Bucket Negligence Awards, a disgrungtled developer laids down some curruption, some AWS backup security practices, and more! by AWS Morning Brief
6 min listen
Greg Slepak: The Turtle Crawl Towards Internet Decentralization: Amidst all the discussion of alternative uses of blockchains, it is often forgotten that the very first fork of Bitcoin, Namecoin, pursued a daring vision for a decentralized, censorship-resistant internet. Greg Slepak, co-founder of the okTurtles Foundation joined us for an interesting discussion of DNS, Namecoin and how blockchains can be used to decentralize the internet. by Epicenter - Learn about Crypto, Blockchain, Ethereum, Bitcoin and Distributed Technologies
61 min listen
The Cloudcast #201 - DockerCon - Secure Hybrid Cloud OS with Apcera: Aaron and Brian talk to Josh Ellithorpe (<a href="http://twitter.com/zquestz">@zquestz)</a>, Software Architect for Apcera's Hybrid Cloud Operating System and what it was like to blaze a trail prior to Docker and we dig deep into security and granulari... by The Cloudcast
26 min listen
Post-Quantum Cryptography with Nick Sullivan and Adam Langley: Adam Langley and Nick Sullivan help us understand post-quantum cryptography and what security research looks like for quantum computing. by Google Cloud Platform Podcast
42 min listen
Dominic Tarr: Secure Scuttlebutt – The “Localized” but Distributed Social Network: We’re joined by Dominic Tarr, a sailor, and the Founder of Secure Scuttlebutt. This curiously named project has a fascinating approach to creating a truly distributed social network. by Epicenter - Learn about Crypto, Blockchain, Ethereum, Bitcoin and Distributed Technologies
72 min listen
Cloud Abuse with Swati Kulshreshth and Emeka Okonkwo: Swati Kulshreshth and Emeka Okonkwo join us today to give us an overview of what the Google Cloud Abuse team, how it can impact you, and in what ways it protects everyone: including you! by Google Cloud Platform Podcast
32 min listen
258: XZ Backdoor Attack, Linux Mint 22, Fedora Switch to KDE?, Flathub Unverified & more Linux news: This week’s news is exciting with cool new stuff and pretty bonkers because we narrowly avoided a security nightmare! A backdoor was discovered hidden in a common Linux utility, and it could have infected millions of devices. by This Week in Linux
34 min listen
259: Ubuntu 24.04 Beta, Gentoo becomes SPI-ware, Solution to NVidia & Wayland & more Linux news: This week’s news is exciting with cool new stuff and pretty bonkers because we narrowly avoided a security nightmare! A backdoor was discovered hidden in a common Linux utility, and it could have infected millions of devices. by This Week in Linux
24 min listen
De-Google-ing your website analytics: with Marko Saric & Uku Täht by The Changelog: Software Development, Open Source
90 min listen
Episode 474 - Robots vs. Stairs: HomeTech 474: Robots vs. Stairs by HomeTech.fm
20 min listen
Vulns & Secure Design, MiraclePtr Success, Abandoned Projects & Maven, Old "AI Chip" - ASW #271: Vulns in Jenkins code and Cisco devices that make us think about secure designs, MiraclePtr pulls off a relatively quick miracle, code lasts while domains expire, an "Artificial Intelligence chip" from the 90s, and more! Show Notes: by Security Weekly Podcast Network (Video)
41 min listen
#290 Web3 with Laura Kalbag: Web3 is a term that’s getting a lot of attention, along with associated concepts such as blockchain, crypto, NFTs. There are a lot of concepts and phrases to understand, some of them quite technical, before we can get to the question of what benefits t... by UX Podcast
48 min listen

Discover this podcast and so much more

Episode 282: The Shadow Knows | TechSNAP 282

Episode 282: The Shadow Knows | TechSNAP 282

Description

Titles in the series (100)

More Episodes from TechSNAP

Related podcast episodes