TechSNAPTechSNAPSeason 12011 · 127 episodesEpisodes1Dropbox FlawsGet the full details are two major issues with Dropbox, that are simply built into the core of the software/service.2The Cloud FailsReality rained on Amazon’s Cloud recently as aspects of their EC2 hosting service suffered major outages. We look at the many issues facing cloud computing. Plus we dig into the iPhone location tracking story, and brainstorm a few possible solutions to a potentially necessary evil.3PSN Breech DetailsWe cover the amazing details of the Playstation Network breech, we share some of the most interesting details in this episode.4A Simple Mistake5Allan Goes to WarWe’ll cover the dirty details of a Facebook flaw that exposes your private account info to snoops, look into the privacy issues around “Smart Meters” and discuss a few big tech rivals coming together to fight a bad law.6Backups & Server HardwareEvery six hours the NSA collects as much data that exists in the entire lib of congress and we have a few practical notes on how a system like that could even function. We follow up on Dropbox, and what looks like the FTC is getting involved with their recent snafus.7Let’s Go PhishingThere have been 10 separate attacks against Sony, the details are like nothing we’ve ever seen before.8Hijacking the NewsGoogle has confirmed that 100s of Gmail accounts were being snooped on, and the targets of this attack are not happy! The cookie catastrophe in the UK continues, we’ll share the brutal details! And Find out about the hack that leaked the truth about Tupac.9Bitcoin ExplainedWe’ll dig into bitcoin and explain what it is, and how it works. Is there a future for this Cryptocurrency? Plus Sony is in the news again, and its not good... And we talk about a new ruling on how far your bank has to go to protect you from cyber criminals.10Encryption Best PracticesWe follow up on last week’s bitcoin coverage with scandal that has a $500k price tag.11Perfect PasswordsWe’ve got the details of an FBI raid that knocked several popular sites off-line. The WordPress plugin repository was compromised, and backdoors were added to a few popular plugins, and we’ll share the details.12Leaky AuthenticationHow many times have your credentials been leaked online? Think your safe? Chris thought he was. In today’s episode he’ll find out how many times his information has been leaked online, and we tell you how you check for your self.13Cyber WarfareWe cover what critical targets hackers and foreign governments might target to wage Cyber Warfare. Plus what major attacks have already taken place.14Phreaking 3GWe’ll cover a story that really drives home how serious cell phone hijacking has gotten, and what new technology just made it a lot easier for the bad guys.15Classified Cloud16Battery MalwareAttackers take aim at Apple with an exploit that could brick your Macbook, or perhaps worse. Plus you need to patch against a 9 year old SSL flaw.17Google Server SecretsFind out what consumer storage device is shipping with an encryption backdoor, and we share details about Google’s super secret million servers strong infrastructure.18DEFCON Brings the Scary19Planning for FailuresThe RSA leak exposes the dirty under-belly of the commercial security industry, it’s a story that sounds like it’s straight out of Hollywood. Then – We’ve packed this episode full of Audience questions, and our answers. Find out how to plan for failure, start building a website.20Keeping it Up21Smarter Google DNSGoogle and openDNS join forces to improve the speed of your downloads, find out what they are doing and how it works! Plus gmail suffered another man in the middle attack, and Kernel.22Rooted TrustRemember the Man in the Middle attack on google from last week? Turns out it was far worse than though, we now have more details on the DigiNotar compromise, and a number of other important sites have had their DNS hijacked.23Ultimate Home RouterExploits are in the wild that can take down critical infrastructure equipment, and some highly trusted sites were attacked this week and used against their own visitors.24Ultimate RAIDWhen your data is important, understanding RAID can make the difference between a major loss, or saving the day.25Ultimate File Server26Ultimate BackupsWe’ll tell you about AT&T leaving Android open to a hack so easy, my two year old son could pull it off.27Pimp My Network28Ultimate ZFS OverviewBuckle up and prepare for the our Ultimate ZFS overview! Plus, the next generation of Stuxnet is in the wild, but this time is laying low, collecting data.29Skype Exposes PiratesResearches have developed a way to tie your file sharing to your Skype account.30Great Disk FamineAnonymous says it’s going after a Mexican Drug Cartel, we’ll share you the amazing details! Plus: Our tips for controlling remote downloads, and why all I’m going to want for Christmas is hard drives! All that and more, on this week’s TechSNAP! Thanks to: GoDaddy.31How Malware Makes MoneyThe FBI shuts down a cyber crime syndicate, and we’ll tell you just how much profit they were bring in.32STOP SOPAThe Internet is facing its greatest challenge yet, we explain why the fight against online piracy has taken a turn towards Internet censorship.33Stuffed War StoriesMicrosoft’s flawed code signing infrastructure puts your machine at risk, find out how.34Allan’s ZFS Server Build35Two Factor FailFind out how some simple Social Engineering skills can earn you $45k, a drug cartel’s private cell network.36Simulated Cyber WarFind out how the 2012 Olympics are preparing for cyper war, we’ll answer a great batch of questions.37Future SSLFind out what major infrastructure software uses the admin password of “100”, plus future improvements to SSL, how the CIA keeps their IT guys trustworthy, and… An epic tech war story!! All that and more, on this week’s TechSNAP.38Unsafe WifiA major implementation flaw in protected Wifi has been found, we’ll share the amazing details.39NGINX vs ApacheHow NGINX stacks up to Apache, and which server is right for the job! PLUS: The EFF has raised a red flag over the new version of AOL’s instant messenger we’ll share the details on how it’s logging your conversations, and pre-loading your links.40SQL InjectionsWe’ll explain how SQL Injections work, plus cover tools you can use to passively discover details about everyone connected to your network. And Adobe blames some researches for THEIR security mistakes, we’ll explain.41Cyber Bank HeistFind out how hackers robbed a bank for nearly $6 million dollars over the Internet, the Zappos security breach, the fall of the koobface botnet, and what happened to Megaupload. Plus we look back at the web’s SOPA protest this week, and see where things stand.42Answers for Everyone43DHCP AttacksFind out how a simple system update brought DreamHost down for nearly two days, and how the MS Updater Trojan works.44Server Room FireIt’s a worst case scenario, when a server room catches fire in this week’s war story! Plus: We’ll share a story that might make you re-think taking advantage of your hard drive warranty, the secrets to reliable SQL replication.45First Day FailA first day on tech job war story, that’s as rough as they get! Plus details on recent doubt researchers have cast around the fundamental security technology behind SSL.46Email ConstipationWe answer the question: What to do when your email server gets blocked, and why it keeps happening. PLUS: GSM phones are vulnerable to a simple tracking attack, all you need is some open source software and some spare hardware, we’ll share the details! And we introduce the TechSNAP “Hall of Shame”.47NASA Hacked 5,400 Times?48Federal Bureau of LulzWe cover the amazing story of how the FBI infiltrated and exposed LulzSec. And in a retro war story, Microsoft miss more than just a leap day and we answer some of your feedback questions.49Amazon’s SecretsMicrosoft has released an extremely critical patch, the race against hackers has begun. We’ll give you the details on this important update. Secrets about Amazon’s EC2 back-end have been revealed, and we’ll share them with you.50Exploits for SaleDoes your government use taxpayer money to buy exploits from the open market? We’ll share the details, malware is being spread via Skype, and we’ve got great news for VLC users! And why you might be logged in as Kenneth today All that and much more, on this week’s TechSNAP.51Global Blackout a HoaxMicrosoft leads raids on the Zeus botnet and seizes their servers, Duqu still evolving and new details have been revealed.52Extreme WiFi MakeoverFind out what happens when the Internet Engineering Task Force is faced with unreliable hotel WiFi And we’ve got the details on backdoor built into AT&T’s Microcell’s back door. Yep the back door, has a back door.53Geek’s Natural HabitatSoftware powering many of the devices we use has a critical flaw that can give an attacker root access, we’ll give you the details.54Exaggerated CybercrimeWe bust some Cybercrime propaganda, give you the scoop on a fresh openSSL vulnerability, and answer a common audience question.55Obscurity is not Security56Learning to HackIn Barnes and Noble attempt to censor a magazine article about hacking, that have propelled it into the spotlight. We’ve got the details on this great write up! PLUS: Moving big files around the world, faster torrents, and Microsoft’s hotmail flaw.57Sage IT WisdomApple’s latest version of OS X has a major bug that can store your passwords in clear text, an 8 year old vulnerability has been found in PHP, and why the DHS is hoping for attacks on Gas pipelines. Plus – We’ve got some sage advice for Adam, who’s just taken on the role of the company Sysadmin, and we share some of the essential lessons we’ve learned over the years.58No Pay? No Patch!Adobe tells customers to upgrade to get the latest security fixes, Kickstarter has an embarrassing security lapse. PLUS: Self-destructing SSDs, and Mirroring vs a CDN, what’s the difference and when are they used.59Man In the Browser AttackYahoo has made a mistake so big, you have to hear it to believe it. A common feature in firewalls could actually make you more susceptible attack, Blizzard huge security blunder. PLUS: Separating traffic out between your network cards, and so much more on this week’s TechSNAP.60Feedback Blowout #1Software that’s supposed to get you around censorship, could be logging your activities online, plus we’ve got a classic Social Engineering story for you. And then we clear the decks and answer a ton of your questions, in our feedback blowout! All that and so much more, in this week’s episode of, TechSNAP.61I Know Your PasswordIt’s a simple thing but everyone keeps messing it up, bad password storage practices many popular sites had their password databases leaked online this week, we’ve got the details! Plus how the Flame malware impersonated Windows Update, and another batch of audience questions! All that and more, on this week’s TechSNAP. All that and so much more, in this week’s episode of, TechSNAP.62Bypassing AuthenticationA MySQL flaw so awful, I simply had to laugh. And how a simple SSH config mistake, lead to a really bad day. Plus we answer some great audience questions, all that and much more on this week’s TechSNAP.63Peek Inside64Token SecurityHow attackers can defeat an RSA token in as little as 15 minutes, FBI has taken down an online fraud ring, we’ve got the details. And a botched software update that shutdown a bank for days. Plus some great audience questions and our answers.65Faster GPU CrackingEveryone’s beloved password cracker has had a major update, and you won’t believe what it can do now! The Aerospace industry has a new Advanced Persistent Threat, and a major Microsoft XML flaw already being exploited. Plus we share some infrastructure wisdom in today’s feedback segment.66Network BenchmarkingOur tools to benchmark and monitor your network.67Single Point of FailureFind out how an entire cities infrastructure depended on a single building, and what happened when it exploded. Plus the technical details on Android’s security upgrade, the Apple Appstore payment bypass, and some great audience questions.68Failure CascadeThe failure of Google Talk takes down several other Google services including GMail and then as a result even Twitter, we got the details. Plus how to determine if your WordPress site has been hacked, and some dangerous new Mac malware. And a batch of audience questions, and our answers. All that and more in this week’s episode of TechSNAP.69Most VPNs InsecureWe’ll cover how the most common type of VPN has been cracked wide open. Plus what to look for when renting a server, and what’s involved in managing a dedicated box.70Not So Secret AnswersA Gawker Reporter’s entire online presence is hacked, and all his devices wiped. We’ll walk you through the details of this attack, and why it suggests we might be facing some fundamental challenges. Plus: Your questions, our answers, and so much more.71Server PuppeteeringRumor has it the playstation network has been hacked again, but we’ve got the real story. Blizzard suffered a nasty database breach, and it might be much worse then they are letting on.72Not so Private KeysHow a Man in the Browser attack could expose an airport VPN, RuggedCom’s messed up the very fundamentals again, and the big update from Adobe. Plus – Running Linux in a FreeBSD Jail, virtual networking basics, and a great batch of your questions.73Double 0-JavaThis week we’ll tell you the story about Agent Double 0-Java, the exploit with a license to kill. Plus Google’s creative solution to securing user content. Then it’s a big batch of your questions, and our answers. All that and much more, in this week’s TechSNAP.74Donated Privacy75The Human FactorIt was a tough week for the cloud, we’ll run down the list and summarize what happened to the services we all depend on so much! Plus a big batch of your questions, our answers, and a rocking round-up! All that and a lot more, on this week’s TechSNAP.76Self Healing InternetThe story about an antivirus that detects itself, IE’s awful zero day exploits, and the Internets amazing ability to route around problems.77Password SecuritIEEEA big password leak from a major industry player, mobile security takes a big hit, we cover a couple of the major vulnerabilities affecting our favorite gadgets, and more Java troubles. Plus moving from Apache to Nginx, and a big batch of your questions.78Wire-SharkWe’ve got the details on a critical flaw in the chip and pin credit card system. The future of secure hashing, doing proper backups with rsync, and how squirrels and sharks take down the Internet. Plus a big batch of your questions, and our answers.79Don’t Copy That FloppyHow a Russian Spy ring used floppies to pass sensitive information, how Backblaze made it through the great hard drive shortage, and why the US congress is saying no to Chinese Telco manufactures. Plus a big batch of your questions, and our answers.80Best Tool for the Job81Breaking DKMHow an aviation blogger unlocked the secrets of the TSA’s barcode, if you’re a Barnes and Noble shopper we’ve got a story you need to hear, and a serious bug in the Linux Kernel. Plus a batch of your questions, and our answers. All that and so much more, in this week’s TechSNAP.82/var/water/logged83Security by the HornsHow a hardware failure in Indonesia took Google down in California, stealing Crypto keys from virtual machines, and the trouble with Sophos. And an inside look at how Netflix crams so much storage into a teclo near you.84Patch Your PasswordAllan will build the case for abandoning the password, the Skype flaw that will shock you, And we discuss picking the right server OS, when to RAID or not to RAID, and a BIG batch of your questions, and our answers.85Tales from the BCryptHow Allan saved PayPal from an embarrassing leak and a bunch of cash, details on the FreeBSD project’s compromise, and the latest advances in password hashing.86Cat Got Your RouterThe amazing Internet speed record set by researches recently, the backdoor built into Samsung’s networked printers, and a clever attack against home routers.87MySQL or Yours?MySQL had a bad week, we’ll run down the list of the recently disclosed vulnerabilities, the SSH server that allows an attacker full root access, and a GPU password cracking monster.882-Factor TrojanA trojan that targets your PC and phone to drain your bank account, a powerful 0day exploit against your SmartTV, and a new approach to GPS spoofing. Plus we answer batch of your questions, and so much more.89WordPress LAN Recon90SSH FUD BustingWe bust the FUD around the media’s overreaction to SSH Key mismanagement, plus the details on millions of WordPress databases exposed by a popular plugin.91Saving Private ExploitInternet Explorer, Ruby on Rails, and the Windows Nvidia drivers all have new exploits. We’ll tell you the good, the bad, and the ugly. Plus picking the right VPS, a big batch of your questions, and Allan’s videos from EuroBSD Con.92Hiding in the SilenceA zero day vulnerability takes down some major wikis, how Polish researchers hide secret messages in Skype’s silence.93Red October Hunts YouIf you thought Stuxnet was a big deal, wait till you meet Red October. The incredible story of some of the most sophisticated malware yet surfaces, and we’ve got the details.94Barricade Your BarracudaIf you have a Barracuda device, it’s time to put it behind a real firewall. We’ll blow your minds with the horrible state of security on many popular Barracuda products.95Universal Exploit n’ PlayIt’s way past time to turn off Universal Plug and Play, we’ll give you the details on the exploit that only requires a single network packet.96Snakes in a BankUsing phone tones and a little Python to get access to someone’s bank account, and Oracle steps up with an early patch for Java but it doesn’t fix everything. Then we answer a big batch of your questions, and much more on this week’s TechSNAP.97Battle of the BotsA researcher stumbles into the middle of a botnet war, and documents what he finds. Plus a Facebook mistake took down countless sites around the web.98Attacking the DevsFacebook and Apple are compromised by the same Java exploit, and the details are quite interesting, Punkbuster service goes offline, taking down online game servers for 100s of users. And a thorough look at report claiming the Chinese military is responsible for hundreds of system compromises.99How I Met Your SSHcPanel’s helpdesk was recently compromised, exposing root credentials for many of their customers, plus the troubles at Zendesk that caused quite a headache for twitter and other popular sites. And we debate if we’re living in a post-cryptography world, plus a big batch of your questions, and much more on, on this week’s TechSNAP.100100% UptimeWe’ve warned against it for nearly 100 episodes, this week we’ll share the fallout from NBC.com getting hacked, Bit9’s whitelist technology is use against them and their customers. Plus the bad news for Java users, a batch of your questions, and some big surprises.101GIF me rootWe’ll explain the MiniDuke malware and the extremely clever way to slipped it’s way into victims systems. Researchers discovered a way to bypass google two-factor authentication, we’ll explain the details, and we look back at 25 years of software vulnerabilities.102Packets Over 90,000A CloudFlare outage takes down three quarter of a million sites, we’ll tell you what went wrong. Some old school malware gets the job done, Allan’s cool toys from Japan, a big batch of your questions our answers, and much more on this week’s TechSNAP.103Time to Git ZFSIs your bucket exposed to the public? A security researcher has recently discovered many S3 buckets are publicly available, we’ll share the details.104Amplifying the HypeIt’s been called the largest DDoS attack in history, we’ll bust past the hype and explain how a DNS Reflection attack works.105FTP Treasure TroveA treasure trove of data was found on an open FTP site, leaving AMI BIOS users open to attack. Plus a look at PunkSPIDER, a batch of your questions, and so much more! On this week’s of TechSNAP.106Evil DNS is Evil13 of the most popular home routes are wide open to attack, is your’s one of them? Tune in to find out.107Dedupe Gone WrongOracle patches 128 vulnerabilities, you won’t believe how many of them are critical. Plus how twitter can solve their hacking problem, ZFS questions galore, and much much more! On this week’s TechSNAP.108Intelligent Malware109Packet Tells A Lot110Jails vs VMsA security breach become a lesson for us all. We’ll make some lemonade from a bad situation, and arm you with what you need to protect your self. Plus Demonoid users get phished, a batch of your questions, and much much more. On this week’s TechSNAP.111BSDCan 2013 RecapResearchers find exploits for popular game engines, putting both clients and servers at risk, we’ll share the details.112Making the Onion CryIn an ironic twist of fate, the Onion suffers an embarrassing compromising, that appears to match a new pattern of attack. We’ve got the details.113Phishin’ Hole114Preparing for Orwell’s InternetWe’ve got a bunch of options to protect your privacy online, things to consider before you self host. Plus: With a little planning ahead, you can protect yourself from compelled disclosure, we’ll share the details.115What’s in Your Cache116HP’s BackdoorOpera’s code signing certificate gets compromised, resulting in malware getting push out via their automatic update system. Plus the backdoor that ships in some high-end HP products, your questions, and much much more.117Who Watches the MonitorsExtending your office LAN for remote office workers, monitoring the monitoring service, and Zynga’s embarrassing Apache error.118Phish and ChipsWe’ll cover Dropbox’s two-factor authentication flaw, how “Team Telecom” forced fibre providers to enable surveillance, the FBI’s warning about phishing attacks.119Exploit BrokersThe business of selling 0day exploits is booming, we’ll explain how this shady market works, and how a couple guys turned a Verizon Network Extender into a spy listening post.120Ethically Hacked121Grand Theft BGPA BGP hack reroutes the traffic of banks, Amazon and many others. We’ll explain how this can happen, and why we don’t see it more often.122Cost of Encryption123Encryption Prediction124Little Fish Big Breach125Security by MediocrityDNS Hijacking takes down the New York Times, Twitter, and more. We’ll explain what happened. Plus researchers bypass Dropbox’s authentication, a big batch of your questions our answers, and much much more! On this week’s TechSNAP.126Random Access FiresRAM Prices are getting hot, we’ll tell you why. Plus the router flaw you need to know about, a pfSense disaster, your questions our answers, and much much more.127NSA SSLeazeA mobile provider is hacked, customer records are breached, and the authorities suspect it was an inside job, we’ll share the details.