inThirty

  We discuss a broad topic in internet tracking. If you want more, please join us in the WhatsApp group. Tweet us for details.

  Due to poor OPSEC another NSA contractor is in jail for leaking. How did we catch her: https://en.wikipedia.org/wiki/EURion_constellation Russian malware communicates by leaving comments in Britney Spears’s Instagram account 1/ About @theintercept story and role in blowing source: (a) it’s an important contribution to public understanding. https://t.co/WXNwEiEhSq — Barton Gellman (@bartongellman) June 6, 2017 … Continue reading "Security 151 – Printer Dots"

NIST – National Institute of Standards and Technology came out with new password guidelines Recap : http://www.csoonline.com/article/3195… Whitepaper: https://pages.nist.gov/800-63-3/sp800…

We explain what happened with this new ransomware bug that affected companies worldwide.

Our main topic is the Request For Comments on the FCC’s proposal to essentially gut Net Neutrality. We will explain what that means. We may touch on the the FBI, and different things, hopefully without getting political EFF’s FCC tool: https://dearfcc.org

  Topics include: Google phishing email| https://twitter.com/zeynep/status/859840026082988038 WhatsApp vs Signal on Lifehacker | https://lifehacker.com/secure-messaging-app-showdown-whatsapp-vs-signal-1794684943 and is ProtonMail secure.

  Just a roundup of the news: Brickerbot |  https://gizmodo.com/this-hacker-is-my-new-hero-1794630960 Punycode | https://thehackernews.com/2017/04/unicode-Punycode-phishing-attack.html Lastpass 2fa issue | https://blog.lastpass.com/2017/04/lastpass-2fa-bug-reported-resolved.html/

On this show we talk about what the rollback of the digital privacy regulation is, and what it isn’t. We also remind people that VPNs are not the end of all digital privacy. [editor’s note]: I had an issue mixing the audio. I pulled it from YouTube. Some Links: https://arstechnica.com/security/2016… https://www.troyhunt.com/the-importan… https://www.washingtonpost.com/news/t… https://arstechnica.com/tech-policy/2… https://thatoneprivacysite.net/ https://privacytools.io

  Honestly, I have no idea what we talked about. I know there was something about phishing. Congress just passed a bill that allows ISPs to steal and sell your data.

Password managers from last week | https://team-sik.org/trent_portfolio/… Verifone hacked | https://krebsonsecurity.com/2017/03/p… WikiLeaks and the CIA | https://wikileaks.org/ciav7p1/

On today’s show: Google Successfully demonstrates a SHA1 Collision https://security.googleblog.com/2017/… Cloudbleed: https://bugs.chromium.org/p/project-z… Password Manager vulnerabilities: https://team-sik.org/trent_portfolio/… IoT Teddy Bears: https://www.troyhunt.com/data-from-co…

  We talk about Keybase, and their massive update. We then talk about fake security apps, and what you should look for.

  Vizio is the latest TV manufacturer to be smacked for trying to track you. The list of recommended TVs is getting smaller and smaller. Keybase.io released their chat app, and we like it. Show Notes: https://www.ohioinfosec.org/2017/02/09/meeting-notes/

  We added a bitcoin link, in case you would like to donate: btc:1Mg4NYfdaRi38BookVJNqKrEkDRUnv6R78 A report has found that a lot of VPN services are very insecure. We talk about VPNs one more time, and what you can do.