Sophos Security

This week's Chet Chat has Duck and Chet discuss the DOD BYOD policy, malware posing as multi-function printers, WordPress adopting 2FA and two new browser rendering engines competing on both performance and security.

Chet and Duck discuss debuggy HP printer firmware, ad-supported phone apps, scans of the whole internet, Apple introducing 2 step authentication, link morphing and Internet Explorer 11.

Chet inteviews the writer and director of hacker film "Code 2600" and Austin BSides organizers/consultants Michael Gough and Ian Robertson. We also introduce the new kickstarter "Hackers in Uganda".

Guest Paul Ducklin and host Chester Wisniewski talk about RSA Conference 2013, CanSecWest 2013, Vancouver's first Security BSides, PWN2OWN, the cPanel break-in and cloud security.

This week Chet and Duck discuss Mandiant's APT1 report, the alleged watering hole attack against iOS developers and Twitter hacks.

Chet and Duck tackle the weeks news including UPnP, the Balmital botnet take down, Flash patches for Windows and OS X and the Lucky Thirteen SSL/TLS weakness.

This podcast outlines what to expect if you attend one of our Anatomy of an Attack seminars. Chester Wisniewski and John Shier explain the content presented and what attendees should expect to take away.

Chester talks to Paul Ducklin about HP Printers on the open internet, Java, precision versus accuracy and PWN2OWN and Pwnium 3 contests.

In this 100th episode of the Chet Chat, Duck and Chester discuss the bizarre story of John McAfee, OS X malware, Switzerland losing intelligence data, NASA laptops and Romanian carders.

Michael Argast rejoined Chet this Halloween to catch up on the week's news including new DMCA exceptions, Hurricane Sandy scams, Yahoo! ignoring do not track, Barnes and Noble credit cards skimming and Facebook's donation to spam research.

This week Paul Ducklin is in the guest seat as he and Chester discuss Patch Tuesday, weak RSA certificates, losing $250,000 worth of bitcoins, Do Not Track, Blackhole exploit kit and the Nitol botnet takedown.

Peter Szabo from SophosLabs joins Chet to chat about 4 more talks from this year's Black Hat and DEF CON conferences. Topics include MSCHAPv2, Frack, smart meters and hacking public transit.

Java brings with it some significant risks, yet for many people, it's "just there on my computer." In this episode, Duck and Chet tell you All about Java, and help you to make an informed decision in balancing its risks and rewards at work and at home.

Peter Szabo, a senior threat researcher with SophosLabs, joins Chet this week to to share what they learned at this year's Black Hat and DEF CON conferences. They discuss NFC, a file disinfection framework, steganography and the dangers of IPv6 and DNSSEC.

To many of us, SSL isn't much more than "the padlock in the browser." But how does it work? Who verifies SSL certificates? How do we know we can trust them? What happens if we realize we can't? Duck and Chet discuss all this, and more, in this episode of the Techknow podcast.