Paul's Security Weekly - Episode 1

Paul's Security Weekly - Special Edition - Marty Roesch Interview

PaulotDotCom Security Weekly - Episode 2 - Nov 11, 2005

PaulotDotCom Security Weekly - Episode 3 - Nov 18, 2005

Paul's Security Weekly - Episode 4 - Nov 25, 2005

Paul's Security Weekly - Episode 5 - Dec 2, 2005

Paul's Security Weekly - Episode 6 - Dec 9, 2005

Paul's Security Weekly - Episode 7 - Dec 16, 2005

Paul's Security Weekly - Episode 8 - Dec 16, 2005

Paul's Security Weekly - WMF Summary - Jan 5, 2006

Paul's Security Weekly - Episode 9 - Jan 5, 2006

Paul's Security Weekly - Special Edition - Schmoocon Update - Jan 15 2006

Paul's Security Weekly - Episode 10 - Jan 13, 2006

Paul's Security Weekly - Special Edition - Richard Bejtlich Interview - Jan 19 2006

Paul's Security Weekly - Episode 11 - Jan 20, 2006

Paul's Security Weekly - Episode 12 - Jan 27, 2006

We didn't think that this episode would ever make it to post-preduction (two dropped Skype calls and the primary and secondary recording devices failed. Good thing we were recording video, which we had problems with too). I think this episode officially has been cursed by ninjas, so listen at your own risk!

• Here is a link to the audio stream from Larry's SANS What Works Webcast for Core Impact (Pimpin' All Over The World)
• Please leave us comments in iTunes via the iTunes Store!
• Create your own ISP? Send us what you think, what kind of servers, firewalls, routers wuld you use at your ISP?
• Using Cain & Abel for good instead of evil?
• Check out Irongeek's Web Site for printer hacking and other cool stuff
• Ancient Flaws leave OS X vulnerable?
• British Parliment attacked with WMF exploit
• RI.gov's web site got hacked and they stole credit card numbers
• And much more!

Paul's Security Weekly - Episode 13 - Feb 3, 2006

For the first time we will be releasing the audio and video versions of our show at the same time! Of course, we've still got some audio issues that need to be addressed, and hopefully we will have some better video content coming soon. Got some suggestions? Send us feedback!

• We recommend CME for referencing since every anti-virus uses something diff
• hack-a-day is cool, go check it out
• Shmoocon DVDs are available, get em' here
• Blackworm came and went
• Google giving into the government?
• WMF was sold for $4k
• Planting rootkits in BIOS, very cool/dangerous
• and more!

Full Show Notes here. .com

Paul's Security Weekly - Episode 14 - Feb 12, 2006

• RI.gov website hacking details (In Russian) - We won't say where we got this one (Well, unless it involves a car battery and probes, then we'll tell), but its pretty cool, even if you don't speak Russian.
• VPN 3000 Series DoS Saga Continues - So the latest version is 4.7.2D, does this fix the problem?
• Will Vista Offer Improved Security?] - I am very skeptical as to whether or not Vista will improve the security of the Windows desktop OS. With new features that include "easy real-time wireless collaboration and online file sharing" their just asking for trouble. So, while it may fix some problems, its going to open the doors to so many new flaws.
• Two more flaws found in windows - Return of WMF? Well , not exactly. And a bug found in Windows XP SP1.
• U.S. Prepares to hack the world - Okay, so maybe not the world, but a country anyway.
• And Much More!

Paul's Security Weekly - Special Edition - Mike Poor & Ed Skoudis Interview - Part I

We are very excited to present to our listeners an exclusive interview with Mike Poor & Ed Skoudis of Intelguardians and The SANS Institute. Larry, The Mason, and myself spoke with Mike and Ed about a wide range of information security topics. This is part I of a two part interview. In part I we discuss:

• First computers that Mike and Ed owned (NOT 0wn3d, see part II for that, kidding of course :)
• How Mike and Ed got their start in the information technology field
• They describe the primary courses they teach at SANS, GCIA and GCIH
• A really good description of SANS EDU
• Their experiences as incident handlers for The Internet Storm Center (ISC)
• Recent security incident trends, such as more hackers going to jail
• Botnet economics and strategies, plus ways to defend against the almighty botnet!
• Current malware trends and defense mechanisms, including Mike Poor's commentary on IDS and malware

Fr more information including all feed links and direct downloads go here.

Paul's Security Weekly - Episode 15 - Feb 17, 2006

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Interview of Mike Poor and Ed Skodis Part I has been posted
• Our Frapper Map service is available now, go to http://securityweekly.com and add yourself to the map!
• One of our listeners recommends "Damn Small Linux" for a USB Thumb drives can boot Linux.
• This Week's Show Links

For direct downloads and full show information go here.

Paul's Security Weekly - Special Edition - Mike Poor & Ed Skoudis Interview - Part II

In part II of our interview we discuss:

• Brazilian hacker groups
• The physical manifestation of the NOP Sled
• OS Security/Insecurity, Shmoocon OS X Hack, OS X predictions
• Apple's move to Intel and its impact on security
• Bastille for Mac OS X
• Why not to hack your attacker
• And more!

For direct downloads and all feed links go here.

Paul's Security Weekly - Episode 16 - Feb 24, 2006

Live from Paul's Dojo....

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Last weeks winner was Steve Murawski, who is now a proud 0wner of "Penetration Testing Open Source Toolkit"
• Plesae go update our frapper map!
• Paul talks about 2 Security incidents, Dos from Japan, Smurfs
• Larry did no work this week
• Nick has interns
• and more!
Full show notes, feeds, and direct downloads are here.

Paul's Security Weekly - Episode 17 - March 3, 2006

Live from the Paul's Security Weekly Studio....

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Last weeks winner was William Day, congrats!
• Please go update our frapper map!
• Using Cain & Abel properly
• mwcollectd, nepetheses, and differences between "Security Ninja" and "Ninja Fan"
• Larry give us the update from SANS Orlando 2006
• and more!

Full show notes, direct downloads, and feed links can be found here. .com

Paul's Security Weekly - Episode 18 - March 9, 2006

Live from the Paul's Security Weekly Studio....

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Please go update our frapper map!
• Its not Twitchy's birthday this week
• Smurf attacks are not so sweet
• Our first audio comment!
• Here are some good Bluetooth Links, Thanks Christian!
• Hacking into voice mail, using good voice mail passwords
• Please leave us feedback in the iTunes Store!
• Detecting botnets from Sana Security, anyone using this product?
• And More!

For direct downloads, full show notes, and feed links go here. .com

Paul's Security Weekly - Episode 19 - March 16, 2006

Live from the Paul's Security Weekly Studio....

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Please go update our frapper map!
• Please leave us feedback in the iTunes Store!
• Full Show Notes, Direct Downloads, and all feeds.

Paul's Security Weekly - Episode 20 - March 23, 2006

Live from the Paul's Security Weekly Studio....

• Come join our very first "open show" on March 30, 2006 5:30PM EST you can Skype into our show and partiticapte on our show! The first topic will be "Piggybacking Wireless Networks: Is it legal? Moral? Ethical? Cool? Not Cool?". Come join us and let us know what you think!
• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Please go update our frapper map!
• If you are in the Providence, RI area the week of April 1st you can come to ACUTA to hear Twitchy and I give presentations (separate ones)
• Please leave us feedback in the iTunes Store!
• Full Show Notes, Direct Downloads, and Feed Links

Paul's Security Weekly - SE - Interview with Josh Wright - Part I

We are excited to bring you this exclusive interview with Joshua Wright of Aruba Networks. Josh is a good friend of ours and sits live in the Paul's Security Weekly studio to discuss everything from wireless security to fingerprinting microwaves. In part I we discuss:

• How Josh got an "A" on an assignment in College and landed his first IT security job
• His interested in wireless network security, or lack thereof, and the "hacking opportunities" they present
• The story behind the weaknesses in LEAP and how the Asleap tool came to be
• And More! Go here for full show notes, direct downloads, and feed links

.com

Paul's Security Weekly - SE - Interview with Josh Wright - Part II

Part II of our exclusive interview with Joshua Wright of Aruba Networks. In part II we discuss:

• The current state of wireless intrusion detection
• Josh talks about wireless client insecurities, such as flaws in wireless drivers
• WifiPedia - a free source of WLAN-related information initially brought to you by the Secure Programming Group at University of Oulu.
• LORCON - Loss Of Radio Connectivity - A wireless driver abstraction layer
• Hottspot insecurity, and dangers of Karma, hotspotter, Airpwn, and Raw Glue AP
• And More! Go here for full show notes, direct downloads, and feed links

.com

Paul's Security Weekly - Episode 21 - March 30, 2006

Live from the Paul's Security Weekly Studio....

• Come join our very first "open show" on March 30, 2006 5:30PM EST you can Skype into our show and participate on our show! The first topic will be "Piggybacking Wireless Networks: Is it legal? Moral? Ethical? Cool? Not Cool?". Come join us and let us know what you think!
• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Please go update our frapper map!
• If you are in the Providence, RI area the week of April 1st you can come to ACUTA to hear Twitchy and I give presentations (separate ones)
• Please leave us feedback in the iTunes Store!
• Full Show Notes, Direct Downloads, and Feed Links

Paul's Security Weekly - Open Show - Wifi Piggybacking - Part I

Live from the Paul's Security Weekly Studio.... This was a very fun experiment that was a resounding success. I would like to extend a personal thanks to everyone who participated. We had some awesome commentary, and some fantastic guests that called into the show:

• Chuck Tomasi from chuckchat.com
• Jay Beale, from Intelguardians and Bastille Linux
• Ovie and Bret from Cyberspeak
• Martin Mckeay from the Network Security Podcast
• My future brother-in-law and good friend Jon
• Matt DeMatteo from the University Of Rhode Island Digital Forensics Center
• And to all of our listeners who called into the show! Thanks so much for participating!

Paul's Security Weekly - Open Show - Wifi Piggybacking - Part II

Live from the Paul's Security Weekly Studio.... This was a very fun experiment that was a resounding success. I would like to extend a personal thanks to everyone who participated. We had some awesome commentary, and some fantastic guests that called into the show:

• Chuck Tomasi from chuckchat.com
• Jay Beale, from Intelguardians and Bastille Linux
• Ovie and Bret from Cyberspeak
• Martin Mckeay from the Network Security Podcast
• My future brother-in-law and good friend Jon
• Matt DeMatteo from the University Of Rhode Island Digital Forensics Center
• And to all of our listeners who called into the show! Thanks so much for participating!

Paul's Security Weekly - Episode 22 - April 6, 2006

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Please leave us feedback in the iTunes Store!
• Full Show Notes

Paul's Security Weekly - SE - Interview with Johnny Long

We are very proud to bring you the exclusive interview with Johnny Long. I would like everyone to go out and buy two copies of his Google hacking book from Johnny's web site because 100% of the proceed go to charity, and everyone should have a copy for work and a copy for home :) Here are the links to purchase:

Purchase the book here - All proceeds benefit the Compassion International Children's Fund.

NOTE: There was some lag on this call, we're sorry, hoping to upgrading bandwith or replace Skype with something better.

• How Johnny set a new world record for employment (well sorta)
• The history of "Google Hacking"
• How johnny.ihackstuff.com came to be the wonderful Google hacking source
• Johnny discuss an assortment of Google hacking tools, such as BiDiHBLAH, bile, Wikto, and AdvancedDork
• Hear the "behind the scenes" of Johnny's "Hacking Hollywood" presentation he gave at Schmoocon
• Johnny discusses some of his other books, including "OS X for the Hackers Heart" and the Stealing the Network Series
• Ethics, religion, and being yourself
• Good advice for life, Kung Fu, and being a penetration tester

Paul's Security Weekly - Episode 23 - April 13, 2006

Live from the Paul's Security Weekly Studio....

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Please leave us feedback in the iTunes Store!
• Full Show Notes

Paul's Security Weekly - Episode 24 - April 20, 2006

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Help us get a cool logo and slogan! Go to our contest page and read all about how you can win free Snort gear and a one-year subscription to VRT rules. Sponsored by Sourcefire
• Full Show Notes

Paul's Security Weekly - Episode 25 - April 27, 2006

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Help us get a cool logo and slogan! Go to our contest page and read all about how you can win free Snort gear and a one-year subscription to VRT rules. Sponsored by Sourcefire
• Full Show Notes

Paul's Security Weekly - Episode 26 - May 4, 2006

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Help us get a cool logo and slogan! Go to our contest page and read all about how you can win free Snort gear and a one-year subscription to VRT rules. Sponsored by Sourcefire
• Full Show Notes

Paul's Security Weekly - Episode 27 - May 11, 2006

Live from the Paul's Security Weekly Studio....

We had two special guests on the show, Kevin Amorin from Harvard and co-deveoper of Packet Fence, and Martin Mckeay of the Network Security Podcast.

This episode was also broadcast over SkypeCast, so look for us each week when we record. It will also be announced in our IRC chatroom #Security Weekly on Freenode (irc.freenode.net).

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Help us get a cool logo and slogan! Go to our contest page and read all about how you can win free Snort gear and a one-year subscription to VRT rules. Sponsored by Sourcefire
• Full Show Notes

Paul's Security Weekly - Episode 28 - May 18, 2006

Live from the Paul's Security Weekly Studio.... This episode was also broadcast over SkypeCast, so look for us each week when we record. It will also be announced in our IRC chatroom #Security Weekly on Freenode (irc.freenode.net).

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Help us get a cool logo and slogan! Go to our contest page and read all about how you can win free Snort gear and a one-year subscription to VRT rules. Sponsored by Sourcefire
• Full Show Notes

Paul's Security Weekly - Episode 29 - May 26, 2006

Live from the Paul's Security Weekly Studio.... This episode was also broadcast over SkypeCast, so look for us each week when we record. It will also be announced in our IRC chatroom #Security Weekly on Freenode (irc.freenode.net).

• Sponsored by Core Security, listen for the discount code at the end of the show
• Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
• Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
• Please go update our frapper map!
• Full Show Notes