The last episode for 2016. Back on January 12, 2017!
November 24th, 2016 --
This is the last episode for the year -- the last episode of the 10th season! On this week's show Adam and I will discuss the week's news and then we're going to reflect on the major events in 2016; the stuff that stuck out for us. I don't think it'll come as a surprise that the cyber intrigue surrounding the 2016 US presidential election is what peaked our interest this year.
The 2016 season of Risky Business goes out on some potentially massive news...
November 24th, 2016 --
Links to everything discussed in episode 437 of the Risky Business security podcast!
Fitbit's security director, engineer join the show...
November 17th, 2016 --
On this week's show we're chatting with Fitbit security director Sasha Biskup and his colleague Marc Bown about how to build secure embedded devices from insecure components. During the development phase of some Fitbit products, the Fitbit security team has discovered some hideous vulnerabilities that could have compromised security downstream. They've been able to mitigate these issues, but they worry other embedded device manufacturers aren't even looking at the security implications of their suppliers' mistakes.
All the news that's fit to... email?
November 17th, 2016 --
Links to everything discussed in episode 436 of the Risky Business podcast.
What will a Trump presidency mean for teh cybarz?
November 10th, 2016 --
In this week's show we're going to have a chat with former NSA general counsel and cyberlaw podcast host Stewart A Baker. We'll get his thoughts on what a Trump presidency could mean when it comes to cyber security.
What a week, AMIRITE?!
November 10th, 2016 --
Links to everything discussed in episode 435 of the Risky Business information security podcast.
PLUS Special Guest Rob Graham on Trump's "covert email server"...
November 3rd, 2016 --
On this week's show we chat with Errata Security's Robert Graham about a ridiculous non-story that had readers in the USA convinced that Slate magazine had uncovered a covert communication channel between Donald Trump and a state-linked Russian bank. The basis of this jaw-dropping conclusion? Cherry-picked DNS query logs. We'll find out why that story was total, utter bullshit in this week's feature.
Bugs, busts and more...
November 3rd, 2016 --
Links to everything discussed in this week's episode of the Risky Business security podcast.
Long refresh cycles on IoT mean we have a real problem...
October 27th, 2016 --
On this week's show we're taking a look at the Great DDoSSening of 2016! Yep, we'll be having a look at the attacks against Dyn, but perhaps more importantly we'll be asking the question: With a zillion perma-owned things out there able to launch some pretty serious DDoS attacks: What now? IoT device security specialist Stephen Ridley will join us in this week's feature slot to discuss that. This week's sponsor interview is a cracker. We'll be chatting with Cyalnce chief research officer Jon Miller about how the hell you're supposed to benchmark AV these days. It's actually trickier than you'd think, for reasons we'll get into later. We also talk about managing false positives and hit on a few other topics in that one. Jon's ex ISS X-Force, he's been around the traps for a long time and really knows what he's talking about. That's a good interview... big thanks to Cylance for sponsoring this week's show.
A massive week of infosec news...
October 27th, 2016 --
Links to everything discussed in episode 433 of the Risky Business information security podcast.
MGT Capital to be delisted as McAfee denies fresh murder and rape allegations...
October 20th, 2016 --
On this week's show we're taking a look at the business dealings of John McAfee. Earlier today the NYSE announced the company that arranged to hire McAfee, MGT Capital, would be de-listed from the NYSE: MKT small cap exchange. This follows a class action investor lawsuit and the unearthing of a remuneration agreement between the company and McAfee that have lead some to suggest the whole company could be a pump and dump scam.
Send your used book donations to the Ecuadorian embassy, folks...
October 20th, 2016 --
Links to everything discussed in the news segment of episode 432 of the Risky Business podcast.
A pow-wow with policy expert Mara Tam...
October 13th, 2016 --
On this week's show we're taking a look at what the hell the USA should do in response to Russia's hacks against the DNC. A few days ago the Director of National Intelligence and DHS issued a joint statement that officially puts blame for the DNC hacks squarely on Russia. Since then the Internets have been in meltdown over what exactly should be done in response.
News! News and more news!
October 13th, 2016 --
Links to everything discussed in episode 431 of the Risky Business information security podcast.
Mustafa Al-Bassam joins Risky Business...
October 6th, 2016 --
On this week's show we're catching up with Mustafa Al-Bassam. He's a lovely young chap from England who was one upon a time one of the LulzSec crew. Like all the other guys in that crew he got busted, but he didn't spend any time in prison and these days he's doing really well. He's finished his undergrad, works with some blockchain technology and is about to start a PhD. He joins us this week to talk about his in depth analysis of the Shadowbrokers dump, as well as to reflect on his crimes. As you'll hear, he has some regrets.
Plenty going on this week...
October 6th, 2016 --
Links to everything discussed in episode 430 of the Risky Business information security podcast.
Paul Marsh, Space Rogue and Metlstorm join the show...
September 29th, 2016 --
This week we'll be having a chat to Paul Marsh about a recent report from UK think tank Chatham House that says there's a looming cyber security crisis about to wreak havoc on the satellite ecosystem. But as you'll hear, Paul thinks the concerns are somewhat overhyped.
Plenty of mayhem this week...
September 29th, 2016 --
Links to everything discussed in episode 429 of the Risky Business information security podcast.
Putting your life in TBB's hands is maybe not so wise...
September 22nd, 2016 --
On this week's show we'll be chatting with security researcher Ryan Duff about the rabbit hole that is the Tor Browser Bundle certificate pinning bug. The bug itself is interesting, but the questions it raises about how suitable Tor is for genuinely critical use are, you know, substantial. That's a really, really interesting chat with Ryan Duff, coming up after the news.
Not a crazy amount of news this week, but some cool stuff nonetheless...
September 22nd, 2016 --
Links to everything discussed in episode 428 of the Risky Business podcast.