Full Listing of Security Now! Episodes…..

Episode #114 | 18 Oct 2007 | 95 min.

Listener Feedback #26

Leo and I discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

46 MB
11 MB
4.1 KB
138 KB
83 KB
132 KB

Episode #113 | 11 Oct 2007 | 56 min.

Roaming Authentication

In this first of a two-part series, Leo and I discuss my recent design of a secure roaming authentication solution for GRC’s employees. I begin to describe the lightweight super-secure system I designed where even an attacker with “perfect knowledge” of an employee’s logon will be unable to gain access to protected resources.

27 MB
6.7 MB
2.1 KB
73 KB
42 KB
96 KB

Episode #112 | 04 Oct 2007 | 64 min.

Listener Feedback #25

Leo and I discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

31 MB
7.8 MB
2.1 KB
93 KB
55 KB
108 KB

Episode #111 | 27 Sept 2007 | 41 min.

OpenID Precautions

Having several times addressed the value and potential of the open source, open spec., and popular OpenID system, which is rapidly gaining traction as a convenient means for providing “single sign-on” identification on the Internet, this week Leo and I examine problems and concerns, both with OpenID and those inherent in any centralized identity management solution.

20 MB
5.0 MB
2.8 KB
51 KB
32 KB
86 KB

Episode #110 | 20 Sept 2007 | 95 min.

Listener Feedback #24

Leo and I discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

46 MB
11 MB
2.6 KB
161 KB
85 KB
138 KB

Episode #109 | 13 Sept 2007 | 95 min.

GRC’s eCommerce System

Leo and I delve into some of the non-obvious problems encountered during the creation of a robust and secure eCommerce system. I explain the hurdles I faced, the things that initially tripped me up, and the solutions I found when I was creating GRC’s custom eCommerce system.

46 MB
11.4 MB
2.6 KB
128 KB
77 KB
127 KB

Episode #108 | 06 Sept 2007 | 80 min.

Listener Feedback #23

Leo and I discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

39 MB
9.7 MB
2.1 KB
115 KB
66 KB
127 KB

Episode #107 | 30 Aug 2007 | 53 min.

PIP & Even More Perfect Passwords

Leo and I discuss two topics this week: The availability and operation of VeriSign Labs’ OpenID PIP (Personal Identity Provider) beta, offering many useful features for online identity authentication; and my recent redesign of the algorithms behind GRC’s popular Perfect Passwords page.

26 MB
6.4 MB
4.5 KB
69 KB
41 KB
101 KB

Episode #106 | 23 Aug 2007 | 64 min.

Listener Mailbag #2

Leo and I open the Security Now mailbag to share and discuss the thoughts, comments, and observations of other Security Now listeners.

31 MB
7.8 MB
2.1 KB
95 KB
60 KB
120 KB

Episode #105 | 16 Aug 2007 | 62 min.

Firewall LeakTesting

Leo and I discuss the history, purpose, and value of personal firewall leaktesting. We examine the myriad techniques clever developers have found for accessing the Internet and sending data out of PCs even when those PCs are being protected by outbound-blocking personal firewalls.

30 MB
7.6 MB
3.1 KB
74 KB
49 KB
100 KB

Episode #104 | 09 Aug 2007 | 70 min.

Listener Feedback Q&A #22

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

34 MB
8.5 MB
2.1 KB
114 KB
65 KB
126 KB

Episode #103 | 02 Aug 2007 | 51 min.

PayPal Security Key

Leo and I talk with Michael Vergara, PayPal’s Director of Account Protections, to learn everything they can about the PayPal security key effort and its probable future.

25 MB
6.3 MB
2.1 KB
85 KB
49 KB
113 KB

Episode #102 | 26 July 2007 | 78 min.

Listener Mailbag #1

Leo and I open the Security Now mailbag to share and discuss the thoughts, comments, and observations of other Security Now listeners.

38 MB
9.4 MB
3.2 KB
119 KB
68 KB
129 KB

Episode #101 | 19 July 2007 | 83 min.

Are You Human?

Leo and I explore the Internet’s rapidly growing need to automatically differentiate human from non-human automated clients. We discuss the advantages and limitations of many past and current approaches to this problem while paying close attention to the most commonly used visual ‘CAPTCHA’ solutions.

40 MB
10 MB
4.8 KB
112 KB
67 KB
127 KB

Episode #100 | 12 July 2007 | 60 min.

Listener Feedback Q&A #21

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

31 MB
7.8 MB
2.1 KB
92 KB
57 KB
118 KB

Episode #99 | 05 July 2007 | 53 min.

Trusted Platform Module (TPM)

Leo and I explain the virtues and misbegotten negative reputation of the entirely benign and extremely useful emergent crypto facility known as the “Trusted Platform Module.”

25 MB
6.4 MB
2.1 KB
74 KB
43 KB
104 KB

Episode #98 | 28 June 2007 | 49 min.

Internet Identity Metasystems

Leo and I discuss the user experience and operation of Microsoft’s “CardSpace” technology which hopes to completely change the way users identify themselves on the Internet by doing away with traditional usernames and passwords.

24 MB
6 MB
2.1 KB
65 KB
37 KB
97 KB

Episode #97 | 21 June 2007 | 46 min.

Operation: Bot Roast

Leo and I discuss the recent news of the FBI’s announced crackdown and pursuit of ‘bot-herders’ who individually control networks of remote control DoS and Spam zombies numbering in the many tens of thousands.

22 MB
5.7 MB
2.1 KB
53 KB
34 KB
92 KB

Episode #96 | 14 June 2007 | 75 min.

Listener Feedback Q&A #20

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

36 MB
9.3 MB
2.1 KB
116 KB
69 KB
131 KB

Episode #95 | 07 June 2007 | 52 min.

OpenID

Leo and I examine the open, platform agnostic, license free, OpenID secure Internet identity authentication system which is rapidly gaining traction within the Internet community. It may well be the “single sign-on” solution that will simplify and secure our use of the world wide web.

25 MB
6.3 MB
3.4 KB
63 KB
41 KB
101 KB

Episode #94 | 31 May 2007 | 54 min.

The Fourth Factor

Having discussed the first three “factors” in multifactor authentication (something you know, something you have, something you are), Leo and I explore aspects of the power and problems with the fourth factor, “someone you know.”

26 MB
6.6 MB
2.5 KB
63 KB
37 KB
98 KB

Episode #93 | 24 May 2007 | 72 min.

Microsoft Patent Wars

Leo and I tackle the past, present and future of software patents. Our discussion of this non-security topic was triggered by Microsoft�s recent declaration that since free and open source software (FOSS) was infringing at least 235 of their software patents, someone ought to be paying them.

35 MB
8.9 MB
2.1 KB
94 KB
57 KB
117 KB

Episode #92 | 17 May 2007 | 61 min.

Listener Feedback Q&A #19

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

30 MB
7.5 MB
2.1 KB
94 KB
55 KB
116 KB

Episode #91 | 10 May 2007 | 81 min.

Marc Maiffret (pronounced “may-fray”)

Leo and I talk with Marc Maiffret, co-founder of eEye Digital Security of Aliso Viejo, California. eEye has perhaps done more forensic and vulnerability testing research to increase the remote security of Windows than any other group, including Microsoft. They continue to find and report an amazing number of Windows security vulnerabilities.

39 MB
9.9 MB
2.1 KB
105 KB
78 KB
134 KB

Episode #90 | 03 May 2007 | 61 min.

Multifactor Authentication

Leo and I discuss the theory and practice of multifactor authentication which uses combinations of “something you know,” “something you have,” and “something you are” to provide stronger remote authentication than traditional, unreliable single-factor username and password authentication.

30 MB
7.5 MB
2.1 KB
89 KB
51 KB
112 KB

Episode #89 | 26 Apr 2007 | 46 min.

Even More Badly Broken WEP

Leo and I review the operation of wireless network security and discuss in detail the operation of the latest attack on the increasingly insecure WEP encryption system. This new technique allows any WEP-protected WiFi network�s secret cryptographic key to be discovered in less than 60 seconds.

22 MB
5.6 MB
2.6 KB
62 KB
36 KB
97 KB

Episode #88 | 19 Apr 2007 | 57 min.

Listener Feedback Q&A #18

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

27 MB
6.8 MB
2.1 KB
77 KB
50 KB
110 KB

Episode #87 | 12 Apr 2007 | 45 min.

SQL Injection Exploits

Leo and I wrap up our three-part series on web-based code injection vulnerabilities and exploitation with a discussion web-based structured query language (SQL) database attacks. We explain why and how SQL injection vulnerabilities are creating an ongoing plague of vulnerabilities besetting modern ‘Web 2.0′ applications.

22 MB
5.6 MB
3.4 KB
58 KB
36 KB
96 KB

Episode #86 | 05 Apr 2007 | 61 min.

Cross-Site Scripting

In this second installment of our three-part coverage of web-based remote code injection, Leo and I discuss cross-site scripting vulnerabilities and exploits. I quickly read through the 28 vulnerabilities discovered in popular software just during the previous month and discusses the nature of the threat and challenge facing authors of modern ‘dynamic’ web sites and services.

30 MB
7.5 MB
3.1 KB
81 KB
55 KB
116 KB

Episode #85a | 02 Apr 2007 | 11 min.

Animated Cursor Exploit   (Special Edition)

This special edition of Security Now was published to describe a potent zero-day exploit and alert our listeners to a fix for this problem that would be made available by Microsoft on the following day (April 3rd, 2007) thanks to an emergency “out-of-cycle” Windows update patch.

5.4 MB
1.4 MB
2.2 KB
<< This special edition episode was not transcribed >>

Episode #85 | 29 Mar 2007 | 58 min.

Intro to Web Code Injection

Leo and I begin a three-episode series to discuss and examine web-based remote code injection exploits. Commonly known as ‘Cross-Site Scripting’ and ‘SQL Injection,’ these exploits are growing in popularity and strength as hackers discover increasingly clever ways to exploit subtle defects in next-generation web-based applications.

26 MB
6.6 MB
2.4 KB
73 KB
47 KB
108 KB

Episode #84 | 22 Mar 2007 | 62 min.

Listener Feedback Q&A #17

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

30 MB
7.6 MB
2.1 KB
107 KB
63 KB
126 KB

Episode #83 | 15 Mar 2007 | 50 min.

UAC in Depth

Leo and I wrap up our quest to get Windows Wi-Fi to ‘Maintain Full Radio Silence’ by adding one additional important tweak to Windows settings. Then we discuss the detailed security implications, now and in the future, of Vista�s new and powerful user account control (UAC) system.

24 MB
6.1 MB
3.4 KB
81 KB
43 KB
101 KB

Episode #82 | 08 Mar 2007 | 45 min.

Cyber Warfare

Leo and I discuss the interesting topic of state-sponsored Cyber Warfare. While born through the imagination of science fiction writers, the reality of international, inter-nation cyber combat is fiction no longer.

22 MB
5.5 MB
3.3 KB
61 KB
41 KB
101 KB

Episode #81 | 01 Mar 2007 | 55 min.

Hard Drive Unreliability

Leo and I discuss the distressing results and implications of two recent very large population studies (more than 100,000 drives each) of hard drive field failures. Google and Carnegie Mellon University (CMU) both conducted and submitted studies for the recent 5th USENIX conference on File and Storage Technologies.

27 MB
6.6 MB
4.3 KB
86 KB
51 KB
110 KB

Episode #80 | 22 Feb 2007 | 76 min.

Listener Feedback Q&A #16

Leo and I discuss questions asked by listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

36 MB
9.1 MB
2.7 KB
124 KB
75 KB
140 KB

Episode #79 | 15 Feb 2007 | 61 min.

Backtracking Spoofed Spam eMail

Leo’s ‘TWiT.tv’ and my ‘GRC.com’ domains are used by spambots which spoof their domains as the source of bogus eMail. This week they discuss the details of eMail “Received:” headers and explain how the examination of those headers can penetrate any spoofing to reveal the true originating IP of any spoofed spam eMail.

30 MB
7.5 MB
2.2 KB
87 KB
53 KB
113 KB

Episode #78 | 08 Feb 2007 | 40 min.

DEP in Depth

With our new SecurAble freeware now launched, Leo and I discuss the full impact and importance of hardware DEP technology. I explain why I believe that hardware DEP is the single most important Internet-related security technology developed so far.

20 MB
5.0 MB
2.1 KB
53 KB
35 KB
95 KB

Episode #77 | 01 Feb 2007 | 61 min.

Microsoft on Vista DRM

In episode #74 Peter Gutmann shared his concerns and fears about the system-wide consequences and impact of the digital rights management (DRM) Microsoft has built deeply into Vista. Microsoft�s Vista Team responded with a comprehensive Blog posting which Leo and I read and examine this week.

Here is the blog posting we used as our source:

Windows Vista Content Protection – Twenty Questions (and Answers)

30 MB
7.5 MB
2.2 KB
100 KB
59 KB
120 KB

Episode #76 | 25 Jan 2007 | 61 min.

Listener Feedback Q&A #15

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

30 MB
7.5 MB
2.1 KB
98 KB
59 KB
122 KB

Episode #75 | 18 Jan 2007 | 50 min.

Vista DRM Wrap-Up & Announcing “SecurAble”

Following last week’s guest appearance by Peter Gutmann, Leo and I wrap up the topic of Vista’s new, deep, and pervasive Digital Rights Management (DRM) system. I also announce the completion and availability of GRC’s latest freeware: “SecurAble.”

Click this link for Securable’s web page.

24 MB
6.1 MB
2.0 KB
81 KB
44 KB
106 KB

Episode #74 | 11 Jan 2007 | 50 min.

Peter Gutmann on Vista DRM

Peter Gutmann, the author of the highly controversial white paper detailing the significant cost of Windows Vista’s deeply-entrenched digital rights management (DRM) technology, joins Leo and me this week to discuss his paper and his findings.

24 MB
6.1 MB
2.3 KB
72 KB
50 KB
110 KB

Episode #73 | 04 Jan 2007 | 65 min.

Digital Rights Management (DRM)

In preparation for next week’s look at how and why Windows Vista has incorporated the most pervasive and invasive system for digital rights management ever created, AACS, Leo and I first take a step back to survey the history and evolution of media property rights and the technologies used to enforce them.

32 MB
8.0 MB
2.1 KB
79 KB
54 KB
113 KB

Episode #72 | 28 Dec 2006 | 61 min.

Listener Feedback Q&A #14

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

30 MB
7.5 MB
2.1 KB
92 KB
58 KB
118 KB

Episode #71 | 21 Dec 2006 | 58 min.

SecurAble

This week I take the wraps off our forthcoming security freeware utility: SecurAble. Although I’m still working to get it finished, tested, and ready for initial release, I describe what SecurAble will do and some of the unexpected hurdles I’ve encountered with the application and with details of Windows operation along the way.

28 MB
7.1 MB
2.1 KB
92 KB
54 KB
118 KB

Episode #70 | 14 Dec 2006 | 56 min.

Achieving Internet Anonymity

Last week Leo and I discussed the social implications and the social power of Internet Anonymity. This week we discuss the technology of Freenet and TOR (Onion Router) networks, and I describe the detailed technical operation of both systems.

27 MB
6.8 MB
2.3 KB
68 KB
46 KB
103 KB

Episode #69 | 07 Dec 2006 | 37 min.

The Social Implications of Internet Anonymity

To create some background for next week’s discussion about the significant technical challenges involved in creating true anonymity on the Internet, this week Leo and I discuss the consequences of the use and abuse of the extreme power afforded by many different forms of Internet anonymity, privacy, and freedom of speech.

18 MB
4.6 MB
2.1 KB
56 KB
33 KB
94 KB

Episode #68 | 30 Nov 2006 | 97 min.

Listener Feedback Q&A #13

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

47 MB
11.7 MB
2.1 KB
160 KB
89 KB
154 KB

Episode #67 | 23 Nov 2006 | 39 min.

Kernel Patch Protection

Leo and I first discuss errata from previous episodes, correcting, among other things, Steve’s first poor impression of Vista’s performance. Then we discuss the results of my in-depth research into the inner workings of Vista’s Kernel Patch Protection (aka PatchGuard) to uncover its limitations, benefits, and real purpose.

19 MB
4.9 MB
3.9 KB
72 KB
38 KB
99 KB

Episode #66 | 16 Nov 2006 | 43 min.

Windows Vista Security

Leo and I describe the new security features Microsoft has designed and built into their new version of Windows, Vista. We examine the impact of having such features built into the base product rather than offered by third parties as add-ons. And we carefully compare the security benefits of Vista on 64-bit versus 32-bit hardware platforms.

21 MB
5.3 MB
2.1 KB
79 KB
40 KB
104 KB

Episode #65 | 09 Nov 2006 | 42 min.

Why Is Security So Difficult?

Leo and I get a bit philosophical this week. We discuss the broad nature of Security — all security, not just computer security. We propose a new definition of ‘Security’ and flesh it out with examples to illustrate why security is so difficult, if not impossible.

20 MB
5.2 MB
3.3 KB
72 KB
39 KB
101 KB

Episode #64 | 02 Nov 2006 | 61 min.

Listener Feedback Q&A #12

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

29 MB
7.3 MB
2.1 KB
101 KB
58 KB
121 KB

Episode #63 | 26 Oct 2006 | 66 min.

MojoPac

Leo and I get deeply into the new MojoPac product from RingCube Technologies. After spending several days plumbing the depths of this intriguing new idea for installing secure and private Windows program and file installations onto transportable USB devices, I tell all about what I found and what I believe it means now and in the future.

32 MB
8.1 MB
1.8 KB
100 KB
60 KB
120 KB

Episode #62 | 19 Oct 2006 | 60 min.

Internet Proxies

Leo and I discuss the entire range of applications for Internet Proxies and Proxy Servers. We describe the many different uses for proxies while discussing both the benefits and the potential security and privacy liabilities created by filtering and caching web and other Internet content.

29 MB
7.3 MB
1.8 KB
113 KB
57 KB
123 KB

Episode #61 | 12 Oct 2006 | 35 min.

ISP Privacy and Security

Leo and I discuss two new 0-day Internet Explorer vulnerabilities (both now being exploited on the Internet); then we explore the commonly expressed privacy and security concerns presented by the need to trust Internet Service Providers (ISP).

17 MB
4.2 MB
4.2 KB
65 KB
33 KB
97 KB

Episode #60 | 05 Oct 2006 | 53 min.

Listener Feedback Q&A #11

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

26 MB
6.4 MB
1.8 KB
103 KB
56 KB
142 KB

Episode #59 | 28 Sep 2006 | 69 min.

Comparing “Parallels” VMs

Completing the topic of current virtual machine technology and products, Steve and Leo closely examine the commercial multiplatform virtual machine offerings from “Parallels,” comparing them to VMware and Virtual PC. Steve also corrects an important incorrect statement he made the previous week about features missing from VMware�s free Server VM solution.

33 MB
8.3 MB
2.1 KB
148 KB
68 KB
137 KB

Episode #58 | 21 Sep 2006 | 34 min.

Two New Critical Windows Problems

Leo and I discuss the breaking news of two new critical Windows problems: A new vulnerability that is being actively exploited on the web to install malware into innocent users’ machines — and a work-around that all Windows users can employ to protect themselves. And a serious file-corruption bug Microsoft introduced into last month’s security update that affects all Windows 2000 users.

16 MB
4.1 MB
5.4 KB
58 KB
34 KB
95 KB

Episode #57 | 14 Sep 2006 | 42 min.

Virtual PC versus VMware

Leo and I wrap up our multi-week series about virtual machines and virtual machine technology by closely analyzing the differences and similarities between the free and commercial VM products offered by Microsoft and VMware.

21 MB
5.2 MB
2.1 KB
72 KB
39 KB
100 KB

Episode #56 | 07 Sep 2006 | 59 min.

Listener Feedback Q&A #10

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

28 MB
7.1 MB
1.8 KB
120 KB
60 KB
126 KB

Episode #55 | 31 Aug 2006 | 48 min.

Application Sandboxes

Having discussed “heavy weight” virtualization technology in recent weeks, this week Leo and I examine “lighter weight” application sandboxing technology and the software solutions currently available to perform this form of application “wrapping.” We discuss the inherent limitations of sandbox security and explain how valuable sandboxes can be for privacy enforcement.

23 MB
5.8 MB
1.8 KB
79 KB
43 KB
106 KB

Episode #54 | 24 Aug 2006 | 52 min.

Blue Pill

Leo and I continue our ongoing discussion of the security implications and applications of virtualization and virtual machines. This week we examine the “Blue Pill” OS subversion technology made possible by AMD�s next generation virtualization hardware support. We debunk the hype surrounding this interesting and worrisome capability, placing it into a larger security and virtualization context.

25 MB
6.3 MB
1.7 KB
85 KB
47 KB
109 KB

Episode #53 | 17 Aug 2006 | 40 min.

VMware

Leo and I briefly recap the concepts and technology of Virtual Machine (VM) technology, then thoroughly explore the free and commercial offerings of the earliest company to pioneer Intel-based high-performance virtual machines, VMware. We focus upon the free VMware Player which allows Virtual Machine ‘Appliances’ to be ‘played’ on any supported platform. They examine the value of these VMware solutions for creating highly secure ‘sandbox’ containment environments as well as for cover-your-tracks privacy.

19 MB
4.8 MB
2.8 KB
81 KB
38 KB
102 KB

Episode #52 | 10 Aug 2006 | 49 min.

A Busy Week for Security Troubles

Leo and I discuss the week’s security woes, covering D-Link and Centrino wireless buffer overflows which allow remote wireless compromise of user’s networks and machines. We explore the recent revelation that JavaScript can be used to scan an unwitting user’s internal network to take over their equipment. We talk about the purchase of Hamachi by LogMeIn and how Botnets are being used to create fraudulent eBay users with perfect “feedback” in order to defraud even careful eBay users. And more!

23.6 MB
5.9 MB
4.6 KB
112 KB
51 KB
117 KB

Episode #51 | 03 Aug 2006 | 45 min.

Vista’s Virgin Stack

Leo and I discuss the revelation, courtesy of a Symantec study and report, that Microsoft’s forthcoming Vista operating system has a brand new, written from scratch, networking stack supporting old and new network protocols. They consider the sobering security consequences of Microsoft’s decision to scrap Window’s old but battled-hardened network stack in favor of one that’s new and unproven.

21.8 MB
5.5 MB
2.9 KB
101 KB
45 KB
110 KB

Episode #50 | 27 Jul 2006 | 52 min.

Virtual Machine History & Technology

Leo and I discuss the historical beginnings of Virtual Machine technology, from the 40-year-old IBM VM/360 operating system through virtual machine language emulators and today’s VMware and Virtual PC solutions. This kicks off a multi-episode discussion of the tremendous security benefits and practical uses of modern day Virtual Machine technology.

24.8 MB
6.2 MB
2.2 KB
88 KB
47 KB
109 KB

Episode #49 | 20 Jul 2006 | 58 min.

The NETSTAT Command

Leo and I describe the operation and use of the universally available “Netstat” command — available in every desktop operating system from Unix and Linux through Windows and Macs. “Netstat” allows anyone to instantly see what current Internet connections and listening ports any system has open and operating. Mastering the power of this little-known command will greatly empower any security-conscious computer user.

28 MB
7.0 MB
2.2 KB
104 KB
55 KB
120 KB

Episode #48 | 13 Jul 2006 | 66 min.

Listener Feedback Q&A #9

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

32 MB
8.1 MB
2.2 KB
111 KB
65 KB
126 KB

Episode #47 | 06 Jul 2006 | 62 min.

Internet Weaponry

Leo and I trace the history and rapid growth of Internet Denial of Service (DoS) attack techniques, tools, and motivations over the past eight years. We discuss many different types of attacks while focusing upon the distributed bandwidth flooding attacks that are the most destructive and difficult to block.

30 MB
7.6 MB
2.2 KB
100 KB
54 KB
116 KB

Episode #46 | 29 Jun 2006 | 36 min.

Router Logs

Leo and I clarify the confusion surrounding consumer NAT router logging. We explain why routers tend to overreact to Internet ‘noise’ by ‘crying wolf’ too often, why the logs produced by consumer routers are unfortunately not very useful, and when paying attention to logs does and does not make sense.

17 MB
4.4 MB
2.2 KB
60 KB
33 KB
94 KB

Episode #45 | 22 Jun 2006 | 26 min.

The ‘Hosts’ File

Leo and I reveal and describe the ‘HOSTS’ file, which is hidden away within every Internet-capable machine. We explain how, because it is always the first place a machine looks for the IP address associated with any other machine name, it can be used to easily and conveniently intercept your computer’s silent communication with any questionable web sites you�d rather have it not talking to.

13 MB
3.1 MB
2.2 KB
44 KB
24 KB
85 KB

Episode #44 | 15 Jun 2006 | 63 min.

Listener Feedback Q&A #8

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.

31 MB
7.7 MB
2.2 KB
109 KB
59 KB
123 KB

Episode #43 | 08 Jun 2006 | 58 min.

Open Ports

This week Leo and I cover the broad subject of ‘open ports’ on Internet-connected machines. We define ‘ports’, and what it means for them to be open, closed, and stealth. We discuss what opens them, what it means to have ports ‘open’ from both a functional and security standpoint, how open ports can be detected, whether stealth ports are really more secure than closed ports, and differences between TCP and UDP port detection.

28 MB
7.0 MB
2.2 KB
89 KB
52 KB
113 KB

Episode #42 | 01 Jun 2006 | 35 min.

NAT Traversal

Leo and I delve into the inner workings of NAT routers. We examine the trouble NAT routers present to peer-to-peer networks where users are behind NAT routers that block incoming connections, and we explain how a third-party server can be briefly used to help each router get its packets through to the other, thus allowing them to directly connect.

17 MB
4.2 MB
2.2 KB
64 KB
31 KB
92 KB

Episode #41 | 25 May 2006 | 40 min.

TrueCrypt

This week Leo and I explain why we love “TrueCrypt”, a fabulous, free, open source, on-the-fly storage encryption tool that is fast, flexible, super-well-engineered, feature packed, and able to provide advanced state of the art encryption services for many applications.

20 MB
4.9 MB
2.2 KB
65 KB
36 KB
97 KB

Episode #40 | 18 May 2006 | 71 min.

Listener Feedback Q&A #7

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world “application notes” for any of the security technologies and issues we have previously discussed.

34 MB
8.5 MB
2.2 KB
140 KB
71 KB
135 KB

Episode #39 | 11 May 2006 | 50 min.

Buffer Overruns

In one of our more “aggressively technical” episodes, Leo and I discuss the pernicious nature of software security bugs from the programmer’s perspective. We explain how “the system stack” functions, then provide a detailed look at exactly how a small programming mistake can allow executable code to be remotely injected into a computer system despite the best intentions of security-conscious programmers.

24 MB
6 MB
2.2 KB
59 KB
40 KB
98 KB

Episode #38 | 04 May 2006 | 37 min.

Browser Security

Leo and I discuss the broad topic of web browser security. We examine the implications of running “client-side” code in the form of interpreted scripting languages such as Java, JavaScript, and VBScript, and also the native object code contained within browser “plug-ins” including Microsoft�s ActiveX. I outline the “zone-based” security model used by IE and explain how I surf with high security under IE, only “lowering my shields” to a website after I’ve had the chance to look around and decide that the site looks trustworthy.

18 MB
4.5 MB
2.2 KB
59 KB
33 KB
93 KB

Episode #37 | 27 Apr 2006 | 36 min.

Crypto Series Wrap-up

Leo and I conclude our multi-week coverage of the fundamental technologies underlying modern cryptographic systems. We discuss the number of 512-bit primes (two of which are used to form 1024-bit public keys) and the relative difficulty of performing prime factorizations at various bit lengths. We discuss the importance of, and solutions to, private key recovery using varying numbers of trustees. And conclude by explaining the need for, and the operation of, security certificates.

17 MB
4.4 MB
2.2 KB
110 KB
39 KB
105 KB

Episode #36 | 20 Apr 2006 | 56 min.

Listener Feedback Q&A #6

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world “application notes” for any of the security technologies we have previously discussed.

27 MB
6.7 MB
2.2 KB
113 KB
56 KB
86 KB

Episode #35 | 13 Apr 2006 | 34 min.

Cryptographic Hashes

Having covered stream and block symmetric ciphers and asymmetric ciphers, this week Leo and I describe and discuss “cryptographic hashes”, the final component to comprise a complete fundamental cryptographic function suite. We discuss the roles of, and attacks against, many common and familiar cryptographic hashes including MD5 and SHA1.

16 MB
4.1 MB
2.2 KB
55 KB
30 KB
56 KB

Episode #34 | 06 Apr 2006 | 37 min.

Public Key Cryptography

Having discussed symmetric (private) key ciphers during the last two weeks, this week Leo and I examine asymmetric key cryptography, commonly known as “Public Key Cryptography”. We begin by examining the first public key cryptosystem, known as the Diffie-Hellman Key Exchange, invented in 1976. Then we describe the operation of general purpose public key cryptosystems such as the one invented by RSA.

18 MB
4.5 MB
2.2 KB
63 KB
34 KB
52 KB

Episode #33 | 30 Mar 2006 | 43 min.

Symmetric Block Ciphers

Leo and I answer last week’s Puzzler/BrainTeaser which explored the idea of using two private one-time pad “keys,” like two padlocks, to securely convey a message between two parties, neither of whom would have the other’s key. Then we continue our ongoing tour of fundamental crypto technology by describing the operation of Symmetric Block Ciphers.

21 MB
5.2 MB
2.2 KB
64 KB
38 KB
58 KB

Episode #32 | 23 Mar 2006 | 55 min.

Listener Feedback Q&A #5

Leo and I briefly review last week’s topic of symmetric stream ciphers, then we pose the first Security Now! Puzzler/BrainTeaser which proposes a secure means for sending encrypted messages where neither party knows the other’s key. The Puzzler/BrainTeaser will be answered and resolved at the start of next week’s episode. Then, as always in our Q&A episodes, we answer questions and discuss issues raised by listeners.

26 MB
6.6 MB
2.2 KB
105 KB
53 KB
75 KB

Episode #31 | 16 Mar 2006 | 53 min.

Symmetric Stream Ciphers

Leo and I continue our multi-episode tour of cryptographic technology. This week we analyze the cryptographic operation of secret decoder rings which we use to develop a solid foundation of cryptographic terminology. We then examine the first of two forms of symmetric, private key cryptography known as symmetric stream ciphers. Two weeks from now, after next week’s Q&A episode, we’ll discuss the operation of symmetric block ciphers.

25 MB
6.4 MB
2.2 KB
83 KB
46 KB
66 KB

Episode #30 | 09 Mar 2006 | 30 min.

Cryptographic Issues

Leo and I open our multi-week discussion of the operation and technology of cryptography. This first week we start by examining the social consequences and ethical implications of common citizens being empowered with freely available cryptographic technology that no force on Earth — no government agency, no corporation, no private individual — can crack within their lifetimes.

14 MB
3.6 MB
2.2 KB
50 KB
28 KB
49 KB

Episode #29 | 02 Mar 2006 | 52 min.

Ethernet Insecurity

Leo and I discuss the design, operation, and complete lack of security of Ethernet — the LAN technology that virtually all of the world uses. We explain how this lack of security enables a wide range of serious attacks to be perpetrated by any other machine sharing the same Ethernet — such as in a wireless hotspot, within a corporate network, or even in a wired hotel where the entire hotel is one big exploitable Ethernet LAN. GRC’s ARP Cache Poisoning page contains a detailed explanation of these problems with diagrams and links to readily available Ethernet ARP exploitation malware.

ARP Cache Poisoning: http://www.grc.com/nat/arp.htm

25 MB
6.3 MB
24 KB
79 KB
45 KB
61 KB

Episode #28 | 23 Feb 2006 | 40 min.

Listener Feedback Q&A #4

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world “application notes” for any of the security technologies we have previously discussed.

19 MB
4.8 MB
2.2 KB
95 KB
43 KB
63 KB

Episode #27 | 16 Feb 2006 | 37 min.

How Local Area Networks Work, Part 1

Having covered the operation of the Internet’s WAN (Wide Area Network) technology in the past two weeks, this week Leo and I turn to discussing the way Local Area Networks (LANs) operate and how they interface with the Internet WAN. We address the configuration of subnet masks, default gateways, and DHCP to explain how packets are routed among machines and gateways within a LAN.

18 MB
4.5 MB
2.2 KB
65 KB
35 KB
54 KB

Episode #26 | 09 Feb 2006 | 38 min.

How the Internet Works, Part 2

During this 38-minute, part 2 episode of “How the Internet Works,” Leo and I briefly review last week’s discussion of the ICMP protocol, then discuss the operational details of the Internet’s two main data-carrying protocols: UDP and TCP.

18 MB
4.6 MB
2.2 KB
58 KB
33 KB
51 KB

Episode #25 | 02 Feb 2006 | 49 min.

How the Internet Works, Part 1

During this 49-minute episode, Leo and I briefly discuss the ‘Kama Sutra’ virus that will become destructive on February 3rd. We briefly discuss PC World Magazine’s recent evaluation and ranking of ten top anti-malware systems. And we begin our long-planned ‘fundamental technology’ series with a two-part close look at the history and detailed operation of the global Internet.

24 MB
5.9 MB
5.6 KB
70 KB
43 KB
59 KB

Episode #24 | 26 Jan 2006 | 40 min.

Listener Feedback Q&A #3

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world “application notes” for any of the security technologies we have previously discussed.

39 MB
5.0 MB
26 KB
113 KB
45 KB
67 KB

Episode #23 | 19 Jan 2006 | 29 min.

GRC’s “MouseTrap”

Leo and I “close the backdoor” on the controversial Windows WMF Metafile image code execution (MICE) vulnerability. We discuss everything that’s known about it, separate the facts from the spin, explain exactly which Windows versions are vulnerable and why, and introduce a new piece of GRC freeware: MouseTrap which determines whether any Windows or Linux/WINE system has ‘MICE’.

Download “MouseTrap” – our free MICE tester (29 kb)

14 MB
3.5 MB
26 KB
53 KB
29 KB
49 KB

Episode #22 | 12 Jan 2006 | 39 min.

The Windows MetaFile Backdoor?

Leo and I carefully examine the operation of the recently patched Windows MetaFile vulnerability. I describe exactly how it works in an effort to explain why it doesn’t have the feeling of another Microsoft “coding error”. It has the feeling of something that Microsoft deliberately designed into Windows. Given the nature of what it is, this would make it a remote code execution “backdoor”. We will likely never know if this was the case, but the forensic evidence appears to be quite compelling.

Download “MouseTrap” – our free MICE tester (29 kb)

19 MB
4.8 MB
4.1 KB
63 KB
37 KB
54 KB

Episode #21 | 05 Jan 2006 | 27 min.

The Windows MetaFile (WMF) Vulnerability

Leo and I discuss everything known about the first serious Windows security exploits of the New Year, caused by the Windows MetaFile (WMF) vulnerability. In our show’s first guest appearance, we are joined by Ilfak Guilfanov, the developer of the wildly popular — and very necessary — temporary patch that was used by millions of users to secure Windows systems while the world waited for Microsoft to respond.

13 MB
3.3 MB
5.8 KB
61 KB
28 KB
50 KB

Episode #20 | 29 Dec 2005 | 54 min.

A SERIOUS new Windows vulnerability — and Listener Q&A

On December 28th a serious new Windows vulnerability has appeared and been immediately exploited by a growing number of malicious web sites to install malware. Many worse viruses and worms are expected soon. We start off discussing this and our show notes provides a quick necesary workaround until Microsoft provides a patch. Then we spend the next 45 minutes answering and discussing interesting listener questions.

26 MB
6.5 MB
10 KB
104 KB
52 KB
70 KB

Episode #19 | 22 Dec 2005 | 53 min.

VPNs Three: Hamachi, iPig, and OpenVPN

Leo and I wrap up our multi-week, in-depth coverage of PC VPN solutions by discussing some aftermath of the zero-configuration Hamachi system; introducing “iPig,” a very appealing new zero-configuration VPN contender; and describing the many faces of OpenVPN, the “Swiss army knife” of VPN solutions.

25 MB
6.4 MB
2.4 KB
96 KB
50 KB
68 KB

Episode #18 | 15 Dec 2005 | 33 min.

“Hamachi” Rocks!

This week Leo and I discuss and describe the brand new, ready to emerge from a its long development beta phase, ultra-secure, lightweight, high-performance, highly-polished, multi-platform, peer-to-peer and FREE! personal virtual private networking system known as “Hamachi“. After two solid weeks of testing and intense dialog with Hamachi’s lead developer and designer, I have fully vetted the system’s security architecture and have it running on many of my systems. While I am travelling to Toronto this week, Hamachi is keeping my roaming laptop securely and directly connected to all of my machines back home. Don’t miss this one!

16 MB
4.1 MB
2.4 KB
81 KB
36 KB
58 KB

Episode #17 | 08 Dec 2005 | 33 min.

PPTP and IPSec VPN Technology

In our continuing exploration of VPN technology for protecting network users on networks they don’t control, Leo and I discuss the oldest “original” VPN protocols: Industry standard IPSec, and Microsoft’s own PPTP and L2TP/IPSec. We examine and explain the trouble with interconnecting Windows machines to third-party VPN routers and examine the many reasons these older technologies are probably not optimal for on-the-go road warriors.

16 MB
4.0 MB
7.7 KB
61 KB
31 KB
51 KB

Episode #16 | 01 Dec 2005 | 42 min.

Listener feedback Q&A #1

Leo and I discuss questions asked by listeners of our previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies we have previously discussed.

20 MB
5.1 MB
2.3 KB
100 KB
43 KB
65 KB

Episode #15 | 24 Nov 2005 | 43 min.

VPN Secure Tunneling Solutions

Leo and I discuss the use of SSL and SSH encrypted tunneling for providing privacy and security whenever an insecure local network is being used — such as at an open WiFi hotspot or when using a hotel’s network. These solutions are not transparent and tend to be configuration intensive. They also require the use of a “server” of some sort at the user’s home or office. This makes these approaches less suitable for casual users, but offers a solution for the more technically inclined road warriors.

21 MB
5 MB
5.6 KB
85 KB
40 KB
60 KB

Episode #14 | 17 Nov 2005 | 27 min.

Virtual Private Networks (VPN): Theory

Leo and I first follow-up on the past two episodes, discussing new developments in the continuing Sony Rootkit DRM drama, and clearing up some confusion over the crackability of WPA passphrases. Then, in this first of our two-part series on VPNs, we discuss the theory of VPN connections and tunnels, explaining how they work and why they represent such a terrific solution for anyone who needs security while they’re away from home.

13 MB
3.2 MB
2.3 KB
74 KB
29 KB
52 KB

Episode #13 | 10 Nov 2005 | 35 min.

Unbreakable WiFi Security

Leo and I follow-up on last week’s discussion of the Sony Rootkit debacle with the distressing news of “phoning home” (spyware) behavior from the Sony DRM software, and the rootkit’s exploitation by a new malicious backdoor Trojan. We then return to complete our discussion of WiFi security, demystifying the many confusing flavors of WPA encryption and presenting several critical MUST DO tips for WPA users.

17 MB
4.2 MB
3.2 KB
70 KB
32 KB
54 KB

Episode #12 | 03 Nov 2005 | 24 min.

Sony’s “Rootkit Technology” DRM (copy protection gone bad)

Leo and I discuss details and consequences of Sony Corporation’s alarming “Rootkit” DRM (digital rights management) copy protection scheme. This poorly written software unnecessarily employs classic rootkit technology (see episode #9) to hide from its users after installation. It can not be uninstalled easily, it can be easily misused for malicious purposes, and it has been implicated in many repeated BSOD “blue screen of death” PC crashes.

12 MB
2.9 MB
8.2 KB
46 KB
23 KB
45 KB

Episode #11 | 27 Oct 2005 | 38 min.

Bad WiFi Security (WEP and MAC address filtering)

Leo and I answer some questions arising from last week’s episode, then plow into a detailed discussion of the lack of security value of MAC address filtering, the futility of disabling SSID’s for security, and the extremely poor security offered by the first-generation WEP encryption system.

18 MB
4.6 MB
2.3 KB
70 KB
34 KB
54 KB

Episode #10 | 20 Oct 2005 | 28 min.

Open Wireless Access Points

Leo and I examine the security and privacy considerations of using non-encrypted (i.e. ‘Open’) wireless access points at home and in public locations. We discuss the various ways of protecting privacy when untrusted strangers can ‘sniff’ the data traffic flowing to and from your online PC.

14 MB
3.4 MB
3.2 KB
51 KB
28 KB
47 KB

Episode #9 | 13 Oct 2005 | 32 min.

Rootkits

This week we discuss “rootkit technology”. We examine what rootkits are, why they have suddenly become a problem, and how that problem is rapidly growing in severity. We also discuss their detection and removal and point listeners to some very effective free rootkit detection solutions.

16 MB
3.9 MB
5.2 KB
70 KB
33 KB
53 KB

Episode #8 | 06 Oct 2005 | 24 min.

Denial of Service (DoS) Attacks

Distributed Denial of Service (DDoS) attacks are occurring with ever-greater frequency every day. Although these damaging attacks are often used to extort high-profile gaming and gambling sites before major gambling events, attacks are also launched against individual users who do something to annoy “zombie fleet masters” while they are online. Some router and firewall vendors claim that their devices prevent DDoS attacks. Is that possible? What can be done to dodge the bullet of a DDoS attack launched against you while you’re online?

12 MB
2.8 MB
2.6 KB
46 KB
23 KB
44 KB

Episode #7 | 29 Sep 2005 | 36 min.

SPYaWAREness

Any contemporary discussion of threats to Internet security must discuss the history, current situation, and future of spyware. Leo and I spend a little more time than usual covering many aspects of this important topic. DON’T MISS the Episode Notes Page for this episode!

17 MB
4.4 MB
17 KB
61 KB
34 KB
52 KB

Episode #6 | 22 Sep 2005 | 18 min.

Mechanical & Electromagnetic Information Leakage

Triggered by a recent report of three UC Berkeley researchers recovering text typed at a keyboard (any keyboard) after simply listening to ten minutes of typing, Leo and I discuss the weird realm of “alternative information leakage” — from CRT glowing, to radio emissions, to LEDs lamps on the front of network equipment . . . to a microphone listening to anyone typing.

8.7 MB
2.2 MB
8.0 KB
36 KB
18 KB
40 KB

Episode #5 | 15 Sep 2005 | 20 min.

Personal Password Policy — Part 2

Our previous episode (#4), which discussed personal password policies, generated so much great listener feedback, thoughts, ideas, and reminders about things we didn’t mention, that we decided to wrap up this important topic with a final episode to share listeners’ ideas and to clarify some things we left unsaid.

9.5 MB  
2.4 MB  
7.9 KB
34 KB
21 KB  
41 KB

Episode #4 | 08 Sep 2005 | 24 min.

Personal Password Policy

Everyone who uses web-based services such as eBay, Amazon, and Yahoo, needs to authenticate their identity with passwords. Password quality is important since easily guessable passwords can be easily defeated. Leo and I recap a bit from last week’s program, then discuss passwords. We suggest an approach that anyone can use to easily create unbreakable passwords.

12 MB  
2.9 MB  
7.4 KB
52 KB
25 KB  
46 KB

Episode #3 | 01 Sep 2005 | 25 min.

NAT Routers as Firewalls

Most people don’t think of common NAT routers as hardware firewalls, but ANY NAT router inherently provides terrific security and protection against incoming malicious traffic. Learn how and why this is, and which default settings MUST be changed to lock down the security of your NAT router.

12 MB  
3.1 MB  
7.4 KB
51 KB
26 KB  
47 KB

Episode #2 | 25 Aug 2005 | 25 min.

” HoneyMonkeys “

How Microsoft’s “HoneyMonkey” system works, how it finds malicious web sites before they find you, and what Microsoft is doing (and NOT doing) with this valuable security information it is now collecting.

12 MB  
3.0 MB  
2.4 KB
69 KB
26 KB  
49 KB

Episode #1 | 19 Aug 2005 | 18 min.

As the Worm Turns — the first Internet worms of 2005

How a never-disclosed Windows vulnerability was quickly reverse-engineered from the patches to fix it and turned into more than 12 potent and damaging Internet worms in three days. What does this mean for the future of Internet security?

8.7 MB  
2.2 MB  
7.4 KB
40 KB
18 KB  
41 KB

SPECIAL THANKS TO STEVE – GRC and LEO for all the hard work on all the episodes posted here. Hopefully this will bring them even more listeners.

Podcast: Play in new window | Download

Filed Under: Internet Security & Tech • Security Now!