Josh and Kurt talk about the security of money. Not how to keep it secure, but the security issues around using cash, credit, and bitcoin. We also talk about Banksy’s clever method for proving something is original. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_144_The_security_of_money_which_one_is_best.mp3 Show Notes Banksy ten pound note Ethereum bad wallets Comment on Twitter with the #osspodcast hashtag
Josh and Kurt talk about the phone book (yeah, the big paper book people used to use). Kurt got one in the mail. While it’s certainly a relic from another time, there were security tips in it among other wild things. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_143_Security_lessons_from_the_phone_book.mp3 Show Notes Chad Loder’s Twitter Comment on Twitter with the #osspodcast hashtag
Josh and Kurt talk about what one could do if you find a USB drive. The context is based on the story where the Secret Service was rumored to have plugged a malicious USB drive into a computer. The purpose of discussion is to explore how to handle a situation like this in the real world. We end the episode with a fantastic comparison of swim safety and security. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_142_Hypothetical_security_what_if_you_find_a_USB_flash_drive.mp3 Show Notes Secret service flash drive story Syncstop Show Tags #ImpossibleSecurity Comment on Twitter with the #osspodcast hashtag ...
Josh and Kurt talk about the difficulty of security. We look at the difficulty of the EU not observing daylight savings time, which is probably magnitudes easier than getting security right. We also hit on a discussion on Reddit about U2F that shows the difficulty. Security today is too hard, even for the experts. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_141_Timezones_are_hard_security_is_harder.mp3 Show Notes Storing time in UTC is hard How strong are nails and screws? Reddit U2F comments Comment on Twitter with the #osspodcast hashtag ...
Josh and Kurt talk about identity. It’s a nice example we can generally understand in the context of how much security is enough security? When we deal with identity the idea of good enough is often acceptable for the vast majority of uses. Perfect identity tracking isn’t really a thing nor is it practical. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_140_Good_enough_security_is_a_pretty_high_bar.mp3 Show Notes Firefighters breaking through a door Fake engineer at the Berlin Airport Comment on Twitter with the #osspodcast hashtag ...
Josh and Kurt talk about Brexit, voting, Firefox send, and toxic comments. Is there anything we can do to slow the current trend of conversation on the Internet always seeming to spiral out of control? The answer is maybe with a lot of asterisks. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_139_secure_voting_firefox_send_and_toxic_comments_on_the_internet.mp3 Show Notes Swiss evoting Darpa $10 million secure voting Firefox Send Jigsaw and toxic comments Comment on Twitter with the #osspodcast hashtag
Josh and Kurt talk about a prank gone wrong, the reality of when your data ends up public. Once it’s public you can’t ever put it back. We also discuss Notepad++ no longer signing releases and what signing releases means for the world in general. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_138_Information_wants_to_be_free.mp3 Show Notes Japanese girl arrested Publish package to the npm registry University study on developers and passwords Kurt’s blockchain project - OpenCPEs Notepad++ stops signing releases What is a photocopier? TASBot Comment on Twitter with the #osspodcast hashtag ...
Josh and Kurt talk about Beto being in the Cult of the Dead Cow (cDc). This is a pretty big deal in a very good way. We hit on some history, why it’s a great thing, what we can probably expect from opponents. There’s even some advice at the end how we can all help. We need more politicians with backgrounds like this. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_137_5_Holy_cow_Beto_was_in_the_cDc_this_is_awesome.mp3 Show Notes Cult of the Dead Cow Phrack Beto in the cDc 2600 Off the Hook Stallman Hacker Song Comment on Twitter with the #osspodcast hashtag ...
Josh and Kurt talk about when devices attack! It’s not quite that exciting, but there have been a slew of news about physical devices causing problems for humans. We end on the note that we’re getting closer to a point when lawyers and regulators will start to pay attention. We’re not there yet, so we still have a horrible insecure future on the horizon. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_137_When_the_IoT_attacks.mp3 Show Notes Bricking a shoe Lime scooters throwing passengers off Malicious USB cables Comment on Twitter with the #osspodcast hashtag ...
Josh and Kurt talk about github blocking the Deepfakes repository. There’s a far bigger discussion about how people feel, and sometimes security fails to understand that making people feel happy or safer is more important than being right. https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_136_How_people_feel_is_more_important_than_being_right.mp3 Show Notes Github Deepfakes discussion Cloudflare’s SOCKMAP blog Comment on Twitter with the #osspodcast hashtag