Episode 267: My Kingdom for a VLAN | TechSNAP 267

FromTechSNAP

Start listening View podcast show

Episode 267: My Kingdom for a VLAN | TechSNAP 267

FromTechSNAP

ratings:

Length:

84 minutes

Released:

May 19, 2016

Format:

Podcast episode

Description

A typo stops a billion dollar bank hack, a vulnerability in 7zip that might surprise you & the best solutions for secure remote network access.

Your great questions, our answers, a packed round up & more!

Released:

May 19, 2016

Format:

Podcast episode

Titles in the series (100)

Systems, Network, and Administration Podcast. Every two weeks TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a portion of the show to answer audience questions, discuss best practices, and solving your problems.

Skip carousel

Episode 191: Celebrity Bugs | TechSNAP 191: 2014 has been the year of the celebrity bugs, we take a look at the new trend of giving security vulnerabilities names & logos & ask who it truly benefits. Plus practical way to protect yourself from ATM Skimmers, how they work & much more! by TechSNAP
114 min listen
Episode 193: Don’t Fire IT | TechSNAP 193: More and more data breaches are leading to blackmail but the stats don’t tell the whole story. We’ll explain. Plus the latest in the Sony hack, and the wider reaction. Plus a great batch of emails & much, much more! by TechSNAP
93 min listen
Episode 195: Cloudy With a Chance of SSL | TechSNAP 195: We go inside the epic takedown of SpamHaus, then we break down why CloudFlare’s Flexible SSL is the opposite of security. Followed by a great batch of questions, our answers & much much more! by TechSNAP
69 min listen
Episode 214: Venomous Floppy Legacy | TechSNAP 214: We explain the Venom vulnerability, what the impact is & the steps major providers are taking to protect themselves. Plus strategies to mitigate Cyber Intrusions, a truly genius spammer, great questions, a huge round up & more! by TechSNAP
110 min listen
Episode 224: Butterflies & Backronyms | TechSNAP 224: The Backronym vulnerability hits MySQL right in the SSL protection, we’ll share the details. The hacker Group that hit Apple & Microsoft intensifies their attacks, a survey shows many core Linux tools are at risk & much, much more! by TechSNAP
70 min listen
Episode 194: Best Of TechSNAP 2014 | TechSNAP 194: We look back at this year in TechSNAP. Allan shares his war stories, TrueCrypt shuts down, Heartbleed happens & more! by TechSNAP
101 min listen
Episode 192: Signed by Sony | TechSNAP 192: If we could rebuild the Internet from scratch, what would we change? It’s more than just a thought experiment. We’ll share the details about real world research being done today! Plus we dig through the Sony hack, answer a ton of great question & a rocki by TechSNAP
102 min listen
Episode 208: Any Cert Will Do | TechSNAP 208: Why boring technology might be the better choice, Google revokes & China chokes, why you want to create an account at irs.gov before crooks do it for you. Plus your great IT questions, a rocking round up & much, much more! by TechSNAP
83 min listen
Episode 198: Dude Where's My Card? | TechSNAP 198: Adobe has a bad week, with exploits in the wild & no patch. We’ll share the details. Had your credit card stolen? We’ll tell you how. Plus the harsh reality for IT departments, a great batch of questions, our answers & much much more! by TechSNAP
105 min listen
Episode 200: Your TechSNAP Story | TechSNAP 200: A new major security breach at a large health insurance firm could expose 10s of millions, a phone phishing scam anyone could fall for & we celebrate our 200th episode with your TechSNAP stories. Then its a storage spectacular Q&A & much, much more! by TechSNAP
99 min listen
Episode 203: TurboHax | TechSNAP 203: Lenovo & Google are victims of DNS hijacking, we’ll share the details, Everyone wants you to secure your data, just not from them & how Turbotax profits from Cyber tax fraud! Plus a great batch of your questions, a fantastic round up & much, much more! by TechSNAP
107 min listen
Episode 197: Patch and Notify | TechSNAP 197: Been putting off that patch? This week we’ll cover how an out of date Joomla install led to a massive breach, Microsoft and Google spar over patch disclosures, picking the right security question & more! by TechSNAP
121 min listen
Episode 223: A Bias to Insecurity | TechSNAP 223: The Hacking Team fallout continues with more zero day patches you need to install, a new attack against RC4 might finally kill it & how to save yourself from a DDoS attack. Plus a great batch of your questions, our answers & much, much more! by TechSNAP
82 min listen
Episode 209: Day-0 of an InfoSec Career | TechSNAP 209: Is it possible to make a truly private phone call anymore? The answer might surprise you. Cisco and Level 3 battle a huge SSH botnet & how to Build a successful Information Security career & much, much more! by TechSNAP
129 min listen
Episode 199: Internet of Problems | TechSNAP 199: The internet of dangerous things is arriving but what about taking care of the devices we already have? Plus details on critical updates from Adobe, the surprising number of Gas Stations vulnerable to exploitation via the internet & much, much more! by TechSNAP
85 min listen
Episode 243: SpyFi Barbie | TechSNAP 243: The US Government is offering free penetration tests, with a catch, we break down the VTech Breakin & the only sure way to protect your credit online. Plus great questions, a big round up with breaking news & much more! by TechSNAP
96 min listen
Episode 196: Sony’s Hard Lessons | TechSNAP 196: We reflect on the lessons learned from the Sony Hack & discuss some of the tools used to own their network. Plus a overview of what makes up a filesystem, a run down of the Bacula backup system & much more! by TechSNAP
106 min listen
Episode 205: An Uber Mess | TechSNAP 205: Using encryption is a good thing, but its just the start, we’ll explain. Plus how one developer totally owned the Uber app. Then it’s a great batch of your questions & our answers! by TechSNAP
64 min listen
Episode 231: Leaky RSA Keys | TechSNAP 231: Red Hat highlights how leaky many open source RSA implementations are, Netflix releases Sleepy Puppy & the Mac is definitely under attack. Plus some quick feedback, a rockin' roundup & much, much more! by TechSNAP
76 min listen
Episode 210: SMBTrapped in Microsoft | TechSNAP 210: Researches find an 18 year old bug in Windows thats rather nasty, we’ve got the details. A new perspective on the bug bounty arms race & the security impact of Wifi on a plane. Plus great feedback, a bursting round up & much much more! by TechSNAP
84 min listen
Episode 211: The French Disconnection | TechSNAP 211: What’s really the key to detecting a breach before its become much too late? We’ll share some key insights, plus a technical breakdown of China’s great cannon & the new New French Surveillance Law that should be a warning to us all & much, much more! by TechSNAP
107 min listen
Episode 201: Group Problemcy | TechSNAP 201: A 20 year old design flaw in Windows has just been patched & it requires some major re-working of the software. Attackers compromise Forbes.com & why Facebook’s new ThreatExchange platform could be a great idea. by TechSNAP
94 min listen
Episode 202: SuperFishy Mistake | TechSNAP 202: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections, we’ll break down how this is possible, the danger that still exists & more. Plus the story of a billion dollar cyber heist anyone could pull off, the Equation group & much more! by TechSNAP
72 min listen
Episode 220: Homeland Insecurity | TechSNAP 220: Google’s datacenter secrets are finally being revealed & we’ll share the best bits. Why The US Government is in no position to teach anyone about Cyber Security, how you can still get hacked offline, Great questions, a huge round up & much, much more! by TechSNAP
88 min listen
Episode 207: Lunch Lady Lockdown | TechSNAP 207: Reverse Engineering Incentives to Improve Security. New Jersey school district computers held for ransom & the flash bug that lives on from 2011 with a twist! Plus some great networking questions, drone powered Internet & more! by TechSNAP
87 min listen
Episode 225: SourceForge's Downfall | TechSNAP 225: SourceForge sees downtime, and we examine their infrastructure, a new pervasive hackgroup has been exposed and their track record is fascinating. Plus a Hacking Team Round up, a wide variety of audience questions, our answers & much, much more! by TechSNAP
65 min listen
Episode 206: Two Factor Falsification | TechSNAP 206: Microsoft takes 4 years to fix a nasty bug, how to bypass 2 factor authentication in the popular ‘Authy’ app. Hijacking a domain with photoshop, hardware vs software RAID revisited, tons of great questions, our answers & much much more! by TechSNAP
100 min listen
Episode 217: An Encryptioner's Conscience | TechSNAP 217: The sad state of SMTP encryption, a new huge round of flaws has been found in consumer routers & the reviews of Intel’s new Broadwell desktop processors are in! Plus some great questions, a huge round-up & much, much more! by TechSNAP
105 min listen
Episode 215: EXTenuating Circumstances | TechSNAP 215: Researches have uncovered a weakness in almost all Internet encryption. We’ll explain what LogJam is, how to protect yourself & what the cause is. Plus Linux gets bit by a filesystem corruption bug, passport id thieves, a great batch of questions & more! by TechSNAP
87 min listen
Episode 216: Spy vs MSpy | TechSNAP 216: Spyware creator mSpy hacked, find out why this breach is particularly egregious, what’s wrong with pcap & why RSA’s death has been greatly exaggerated. Plus a great batch of questions, a rocking round up & much, much more! by TechSNAP
85 min listen

More Episodes from TechSNAP

Skip carousel

430: All Good Things: It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS. by TechSNAP
52 min listen
429: Curious About Caddy: Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC. by TechSNAP
31 min listen
428: RAID Reality Check: We dive deep into the world of RAID, and discuss how to choose the right topology to optimize performance and resilience. by TechSNAP
36 min listen
427: Gigahertz Games: Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop. by TechSNAP
51 min listen
426: Storage Stories: We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording. by TechSNAP
31 min listen
425: Ryzen Gets Real: We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root. by TechSNAP
33 min listen
424: AMD Inside: Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won. by TechSNAP
28 min listen
423: Hopeful for HAMR: We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC. by TechSNAP
30 min listen
422: Multipath Musings: We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP. by TechSNAP
24 min listen
421: Firewall Fun: We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family. by TechSNAP
25 min listen
420: Choose Your Own Compiler: Compiling the Linux kernel with Clang has never been easier, so we explore this alternative compiler and what it brings to the ecosystem. by TechSNAP
24 min listen
419: Nebulous Networking: From classifying cats to colorizing old photos we share our top tips and tools for starting your machine learning journey. Plus, learn why Nebula is our favorite new VPN technology, and how it can help simplify and secure your network. by TechSNAP
34 min listen
418: 5G Fundamentals: As the rollout of 5G finally arrives, we take some time to explain the fundamentals of the next generation of wireless technology. by TechSNAP
34 min listen
417: Machine Learning Magic: We explore the rapid adoption of machine learning, its impact on computer architecture, and how to avoid AI snake oil. by TechSNAP
26 min listen
416: I.T. Phone Home: Ubiquiti's troublesome new telemetry, Jim's take on the modern Microsoft, and why Project Silica just might be the future of long term storage. by TechSNAP
28 min listen
415: It's All About IOPS: We share our simple approach to disk benchmarking and explain why you should always test your pain points. by TechSNAP
34 min listen
414: Rooting for ZFS: We dive into Ubuntu 19.10's experimental ZFS installer and share our tips for making the most of ZFS on root. by TechSNAP
42 min listen
413: The Coffee Shop Problem: We peer into the future with a quick look at quantum supremacy, debate the latest DNS over HTTPS drama, and jump through the hoops of HTTP/3. by TechSNAP
32 min listen
412: Too Good To Be True: It's TechSNAP story time as we head out into the field with Jim and put Sure-Fi technology to the test. by TechSNAP
35 min listen
411: Mobile Security Mistakes: We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets. by TechSNAP
30 min listen
410: Epyc Encryption: It's CPU release season and we get excited about AMD's new line of server chips. Plus our take on AMD's approach to memory encryption, and our struggle to make sense of Intel's Comet Lake line. by TechSNAP
50 min listen
409: Privacy Perspectives: We examine why it's so difficult to protect your privacy online and discuss browser fingerprinting, when to use a VPN, and the limits of private browsing. by TechSNAP
39 min listen
408: Apollo's ARC: We take a look at the amazing abilities of the Apollo Guidance Computer and Jim breaks down everything you need to know about the ZFS ARC. by TechSNAP
35 min listen
407: Old School Outages: Jim shares his Nagios tips and Wes chimes in with some modern monitoring tools as we chat monitoring in the wake of some high-profile outages. by TechSNAP
43 min listen
406: SACK Attack: A new vulnerability may be the next 'Ping of Death'; we explore the details of SACK Panic and break down what you need to know. by TechSNAP
44 min listen
405: Update Uncertainty: We explore the risky world of exposed RDP, from the brute force GoldBrute botnet to the dangerously worm-able BlueKeep vulnerability. by TechSNAP
31 min listen
404: Prefork Pitfalls: We turn our eye to web server best practices, from the basics of CDNs to the importance of choosing the right multi-processing module. by TechSNAP
34 min listen
403: Keeping Systems Simple: We’re back from LinuxFest Northwest with an update on all things WireGuard, some VLAN myth busting, and the trade-offs of highly available systems. by TechSNAP
47 min listen
402: Snapshot Sanity: We continue our take on ZFS as Jim and Wes dive in to snapshots, replication, and the magic on copy on write. by TechSNAP
32 min listen
401: Everyday ZFS: Jim and Wes sit down to bust some ZFS myths and share their tips and tricks for getting the most out of the ultimate filesystem. by TechSNAP
48 min listen

Related podcast episodes

Skip carousel

If Capital One Listened to Our Podcast They Still Would Have Been Breached: All links and images for this episode can be found on CISO Series ( We guarantee listening to our show would have done absolutely nothing to prevent the Capital One breach. We've consulted our lawyers and we feel confident about making that... by CISO Series Podcast
32 min listen
Cybersecurity Questions Heard Around the Kitchen Table: All links and images for this episode can be found on . What do the people least in the know about cyber, want to know? What are they asking? Check out for the discussion that is the basis of our conversation on this week’s episode co-hosted by me,... by Defense in Depth
30 min listen
Isn't That Adorable? Our Little CISO Has An Opinion.: All links and images for this episode can be found on CISO Series () We're spoon-feeding "respect" to the CISO on this week's CISO/Security Vendor Relationship Podcast. This episode is hosted by me, (), producer of CISO Series and founder... by CISO Series Podcast
34 min listen
Let's Write Better Cybersecurity Job Descriptions: All links and images for this episode can be found on . What should a cyber job description require, and what shouldn't it? What's reasonable and not reasonable? Check out this for the discussion that is the basis of our conversation on this... by Defense in Depth
30 min listen
Say It Loud! I Didn't Read the Privacy Policy and I'm Proud!: All links and images for this episode can be found on CISO Series () If we don't understand the purpose of a privacy policy, why should we bother reading it? We're claiming the cyber ignorance defense on the latest episode of CISO/Security Vendor... by CISO Series Podcast
33 min listen
How to Prime Your Data Lake: All links and images for this episode can be found on . A security data lake, a data repository of everything you need to analyze and get analyzed sounds wonderful. But priming that lake, and stocking it with the data you want to get the insights you... by Defense in Depth
27 min listen
Giving Slack Slack Will Lead Your Teams to Discord: All links and images for this episode can be found on . Even before the pandemic, we've been increasingly living in online collaboration apps. So why are organizations still making basic security mistakes with them? Is this a case of shadow IT or do... by CISO Series Podcast
38 min listen
Security Made the Mess. They Should Clean It Up.: Security is suffering from a serious Rodney Dangerfield "I get no respect" problem. What has often been seen as the department of "no" is struggling under that brand image. That's probably because security is often seen as an inhibitor rather than an... by CISO Series Podcast
30 min listen
What Hackers Know About Your Software Supply Chain (That You Don’t) w/ Chainguard's Kim Lewandowski by Dev Interrupted
31 min listen
Password Rules Make Us Feel More Secure: All links and images for this episode can be found on . Troy Hunt's new site, demonstrates yet another slice of security theater. Rules designed to make the creator believe they're making the business more secure, but appear to do nothing more than... by CISO Series Podcast
38 min listen
Circuit Breakers: Is ERC-7265 the Solution dApps Were Waiting For? - Ep. 515: In 2022, crypto crime hit an all-time high. A staggering $3.8 billion in crypto was stolen, with DeFi protocols bearing the brunt of these thefts, accounting for 82% of the total losses. Amid this alarming scenario, has a beacon of hope emerged in ERC-7265? The proposal aims to create a 'circuit breaker' safety layer for DeFi contracts, potentially revolutionizing security measures in the crypto space. Could this be the key to bolstering security and paving the way for mass adoption of DeFi? Will it essentially centralize protocols? Tune in to find out. by Unchained
40 min listen
1939: Password Security and Authentication Tech by The Tech Talks Daily Podcast
35 min listen
Data Classification: All links and images for this episode can be found on CISO Series () The more data we horde, the less useful any of it becomes, and the more risk we carry. If we got rid of data, we could reduce risk. Check out for the basis for our conversation on... by Defense in Depth
25 min listen
MacVoices #23313: MacVoices Live! - A Plex Misstep, QR Code Cautions, and Concerns Over the 23andMe Hack: The MacVoices Live! panel of Chuck Joiner, Dave Ginsburg, Jim Rea, Eric Bolden, Jeff Gamet, Ben Roethig, Mark Fuccio, and Web Bixby highlights privacy concerns with Plex, QR codes, and the 23andMe hack. Plex's... by MacVoices
30 min listen
Failure Is The Likely Option: All links and images for this episode can be found on . When cybersecurity needs to cut budget, first move is to look where you have redundancy. That way you're not actually reducing the security effort. But after that, the CFO needs to know what are... by CISO Series Podcast
46 min listen
No. 393 - Hacker Week, Deleting Google Info, And Creating High-Entropy Content by Unsupervised Learning
31 min listen
The Inside Line on Information Protection: Bringing Your DLP Program into the 21st Century by Protecting People
38 min listen
Our Latest Product Release Includes Shiny New Security Vulnerabilities: We have an exciting announcement. Our latest version of the podcast is packed with new features and they're riddled with security holes. We know you wanted the features. The security vulnerabilities are just a bonus. On this episode of the... by CISO Series Podcast
32 min listen
OK, I Get It. You’re All Special Snowflakes.: All links and images for this episode can be found on CISO Series This department manager thinks their data is the most important. But then this department manager thinks their data is the most important. Can there really be so many crown jewels in... by CISO Series Podcast
39 min listen
SBOM and Software Supply Chain by The Cloudcast
29 min listen
Please Accept This Not-a-Bribe Gift as an Act of Desperation: All links and images for this episode can be found on CISO Series Offering me a gift for a meeting was definitely not Plan A. Or was this a situation that you ran out of creative ideas and it's actually more cost efficient to buy your way into... by CISO Series Podcast
36 min listen
PSW #775 - Ask Our PSW Hosts Anything!: Tune in to ask our PSW hosts anything you want to know! Join the live discussion in our Discord server to ask a question. Visit securityweekly.com/discord for an invite! Larry Pesce, Jeff Man, Tyler Robinson, and more will be answering your... by Security Weekly Podcast Network (Audio)
180 min listen
RBS 070: 10 Ways to Protect Your Financial Accounts Online by The Rob Berger Show
15 min listen
A CEO’s Guide To Ignoring Your Security Program (LIVE in Santa Monica): All links and images for this episode can be found on . Usually the buck stops with the CEO. But for a CISO, what do you do when a CEO wants to exempt themselves from your security program? Whether it's granting privileged network access or just... by CISO Series Podcast
44 min listen
COINDESK EXPLAINS: Sim Card Hacks by CoinDesk Podcast Network
6 min listen
ReliaQuest, Mimecast Delisted, 57th Unicorn, Expired Certs, & CyberSec Skill Crisis - ESW #276: Finally, in the Enterprise Security News, Funding is back, in preparation for RSA! Devo raises $100M and becomes our 56th unicorn, JupiterOne raises $70M and becomes our 57th unicorn! Open source projects get some security funding, 10 more funding... by Security Weekly Podcast Network (Video)
64 min listen
ReliaQuest, Mimecast Delisted, 57th Unicorn, Expired Certs, & CyberSec Skill Crisis - ESW #276: Finally, in the Enterprise Security News, Funding is back, in preparation for RSA! Devo raises $100M and becomes our 56th unicorn, JupiterOne raises $70M and becomes our 57th unicorn! Open source projects get some security funding, 10 more funding... by Enterprise Security Weekly (Video)
64 min listen
My Backup Plan Is Hoping My Cloud Provider Has a Backup Plan: All links and images for this episode can be found on CISO Series I think maybe I should check to see if we paid for cloud backup protection. Or maybe, we're doing it. Who knows? This episode is hosted by me, (), producer of CISO Series, and .... by CISO Series Podcast
38 min listen
Passwords So Good You Can't Help But Reuse Them: All links and images for this episode can be found on CISO Series () We've just fallen in love with our passwords we just want to use them again and again and again. Unfortunately, some companies more interested in security aren't letting us do that.... by CISO Series Podcast
37 min listen
Is Shift Left Working?: All links and images for this episode can be found on Developers and security professionals have been heavily sold on the concept of "shift left" or deal with security issues early in development rather bolting it on at the end. It all made logical... by Defense in Depth
33 min listen

Discover this podcast and so much more

Episode 267: My Kingdom for a VLAN | TechSNAP 267

Episode 267: My Kingdom for a VLAN | TechSNAP 267

Description

Titles in the series (100)

More Episodes from TechSNAP

Related podcast episodes