Alle afleveringen
746 afleveringen, van nieuw naar oud
-
7MS #145: OFF-TOPIC - Sicario and The Walk
21 januari 2016 · 8 min
In today's off-topic episode I review two movies: Sicario and The Walk.
-
7MS #144: Shoulder-Surfing with Seasoned Pentesters
18 januari 2016 · 8 min
I recently had the opportunity to shoulder-surf with some seasoned Webapp pentesters, and wanted to share what I learned about their tools, techniques and methodologies.
-
7MS #143: Friday Infosec News and Links Roundup
15 januari 2016 · 8 min
Here are some of my fav' stories and links for this week! Lees meer
* Burn it all...The New Security Fundamentals **(Wednesday, January 20 @ 1 p.m. CST)**: a free Webinar on setting up the "*core technical things you need to do for your security program*." I've attended many Webinars from the BHIS group and they're always informative and humorous.
* Real World Web Penetration Testing **(Thursday, January 28 @ 1 p.m. CST)**: a $25 Webinar on going through "*a real world penetration test. We will explore the methodology and procedures Secure Ideas follows as we test web applications. The course will also walk through some tricks and tips on how to focus your testing on likely flaws*."
I have seen four of their recorded courses before and found them to be *absolutely* worth the money I spent, so I'm confident this upcoming session will be no exception.
* Fortinet SSH backdoor not much to say except if you use any of the affected products, update immediately as they contain an SSH backdoor:
* FortiOS v4.3.17 or any later version of FortiOS v4.3 (available as of July 9, 2014)
* FortiOS v5.0.8 or any later version of FortiOS v5.0 (available as of July 28, 2014)
* Any version of FortiOS v5.2 or v5.4
* Hacker sentenced to 334 years in prison for operating a phishing Web site similar to that of a legit banking Web site. Moral of the story? Don't do that.
* Don't use IE 8, 9 or 10 anymore! unless you like to live dangerously.
-
7MS #142: OFF-TOPIC - Media Servers and Making a Murderer
13 januari 2016 · 9 min
This off-topic episode covers: Lees meer
* Media servers - I'm a newb in this area and could use your help in setting up a config that actually works!
* Making a Murderer - this is a fantastic documentary on Netflix. Stop what you're doing (once you listen to this episode) and watch *immediately* please.
-
7MS #141: Happy (Belated) New Year!
11 januari 2016 · 8 min
Happy (belated) new year! This episode is more of a "What am I listening to, a PBS telethon?!" kind of thing, and I'm sorry for that. But I want to cover: Lees meer
* Scheduling changes for 2016 - we're gonna be 3 times a week!
* A new documentation project I'm working on called BPATTY (Brian's Pentesting and Technical Tips for You)
* A way you can support the podcast financially.
-
7MS #140: OFF-TOPIC - Video Games I'm Currently Playing
8 januari 2016 · 9 min
This episode talks about some cool video games I've been playing lately: Lees meer
* Metal Gear Solid Phantom Pain (Xbox 360)
* Rise of the Tomb Raider (Xbox 360)
* Luminocity (iPhone)
* Super Mario Maker (Wii U)
I recommend 'em all!
-
7MS #139: Securing Your Life - Part 2
8 januari 2016 · 8 min
Back in episode #93 I talked about securing your life - in other words, asking yourself "What would happen if I was dead right now? Do I have adequate insurance? Are my finances in order? How about estate planning?" Lees meer
This episode continues that train of thought, and I share some new changes I've made in my "life security" department.
-
7MS #138: OFF-TOPIC - The Hateful Eight
7 januari 2016 · 8 min
Looks like I'm one of the few people in the world who did NOT love this movie. I found it painful slow and claustrophobic. #diappointed.
-
7MS #137: OFFTOPIC-Welcome to Leith
6 januari 2016 · 9 min
This off-topic episode talks about one of the most gripping and disturbing documentaries I've ever seen. Welcome to Leith, in a nutshell, asks the question: What would you do if a white supremacist group moved in next door?
-
7MS #136: Python for Newbs
5 januari 2016 · 9 min
One skill that's been kind of a hinderance in my IT/security career is I have exactly zero experience in programming/coding. Zero. Zip. Nil. Nada. Nothing.. Lees meer
But I'm trying to remedy that in 2016 by learnin' me some Python, and I picked up a great book called Python Crash Course, which has been exactly what this newb needed.
At the time of publishing, you can get 30% off with the coupon code CRASHCOURSE!
-
7MS #135: I Got a New Job - Part 4
4 januari 2016 · 8 min
This is a four-part series about my transition to a new job! The topics are as follows: Lees meer
* Part 1: When it may be time to look for a new job (or not)
* Part 2: How to stand out during phone screenings and interviews
* Part 3: How to gracefully transition from old job to new job
* Part 4: Here's what I'm doing in my new gig!
-
7MS #134: I Got a New Job - Part 3
1 januari 2016 · 10 min
This is a four-part series about my transition to a new job! The topics are as follows: Lees meer
Part 1: When it may be time to look for a new job (or not)
Part 2: How to stand out during phone screenings and interviews
Part 3: How to gracefully transition from old job to new job
Part 4: Here's what I'm doing in my new gig!
-
7MS #133: I Got a New Job - Part 2
1 januari 2016 · 9 min
This is a four-part series about my transition to a new job! The topics are as follows: Lees meer
Part 1: When it may be time to look for a new job (or not)
Part 2: How to stand out during phone screenings and interviews
Part 3: How to gracefully transition from old job to new job
Part 4: Here's what I'm doing in my new gig!
-
7MS #132: I Got a New Job - Part 1
1 januari 2016 · 7 min
This is a four-part series about my transition to a new job! The topics are as follows: Lees meer
Part 1: When it may be time to look for a new job (or not)
Part 2: How to stand out during phone screenings and interviews
Part 3: How to gracefully transition from old job to new job
Part 4: Here's what I'm doing in my new gig!
-
7MS #131: How to Attempt a Two Week Pentest in Two Days
30 december 2015 · 9 min
The title says it all. I had two days to pentest a network that probably would've taken two or more people two weeks or more. I laughed. I cried. I had fun.
-
7MS #130: Sqlmap and Sqlninja FTW
29 december 2015 · 8 min
This episode talks about some fun I had using sqlmap, and how using it in conjunction with Sqlninja makes me happy to be alive.
-
7MS #129: Embarrassing Stories
27 december 2015 · 8 min
In this episode I talk about face-planting in my office at the first job I had out of college.
-
7MS #128: Transparency is King
27 december 2015 · 9 min
In this episode, I talk about a restaurant infosec assessment I did, and how the recommendations coming out of that assessment didn't fit the standard "mold." I also talk about how being transparent and helpful - and NOT billing clients for every tiny little thing - is king. Lees meer
-
7MS #127: Intro to HIPAA Assessments
27 december 2015 · 9 min
This episode covers a few HIPAA tidbits I picked up while preparing for - and executing - a HIPAA security assessment.
-
7MS #126: Get Your Name Out There
24 december 2015 · 8 min
This episode isn't about infosec exactly, but it talks about how using public resources like LinkedIn, Twitter and blogs to boost your "brand" (though I hate that word) and help you get more connected to the infosec community, job leads and more!
-
7MS #125: Securing Your Life-Part 2
23 december 2015 · 7 min
Way back in episode #93, I talked about things you can do to secure your life (mortgage review, adequate insurance, estate planning, investments, etc.). Lees meer
This episode continues that train of thought and covers: getting the right amount of life insurance, getting the right home/auto coverage, as well as estate planning.
-
7MS #124: Sprinkles
23 december 2015 · 8 min
This episode is 90% a rant about how annoying carry-on luggage and air travel can be, and a 10% sprinkling of security sauce mixed in. Hence: sprinkles.
-
7MS #123: Doing a Redo Assessment
22 december 2015 · 9 min
This episode talks about my experience in doing a "redo" security assessment, during which I struggled with the following questions: what's the best way to efficiently correct the erroneous information and make the customer happy without asking ALL the original questions over again? Especially when I have little to no time to prepare for the "redo" interview? Lees meer
-
7MS #122: OFFTOPIC-An Apology to Elephants
20 december 2015 · 8 min
Preview76 wordsThis episode is about a documentary called An Apology to Elephants. It's all about the treatment (or mistreatment) of elephants, and the main message of the movie is, "Please don't go to the circus when it's in town, because you're supporting elephant abuse." Even if that message was a little heavy handed, I certainly will pass on tickets next time a circus act comes through town. Lees meer
You can subscribe to the 7 Minute Security podcast here.
-
7MS #121: Migrating from Tumblr to Ghost-Part 2
19 december 2015 · 8 min
Part 2 concludes my journey in moving 7ms.us from Tumblr to a Digital Ocean droplet running Ghost. Here are the key resources mentioned during the podcast: Lees meer
How to run multiple Ghost blogs on one DI VPS. The key takeaway here was that I had to upgrade to the $10 droplet (I did a "flexible" resize to add more proc/memory) and then the second instance of Ghost installed fine.
Turning on CloudFlare SSL was easy. I chose flexible SSL since I wasn't using a "real" cert. I also wrote a rule to force HTTPs for all connections. And, just for grins, I turned on DNSSEC. Because...why not? :-)
I picked a strong root password for my DI droplet, but I still don't like the idea of IPs banging on that connection all day and night. I followed this article on installing Fail2Ban to prevent my SSH login from being abused.
There are a few IPs that I want to perma-ban, so I'm going to look throughthis article and this one which looks a tad easier.
You can subscribe to the 7 Minute Security podcast here.
-
7MS #120: THE PURGE!
18 december 2015 · 2 min
Announcing the 7MS PURGE! I've got a back log of episodes banked and I want to get caught up for the new year. So I'm going to release one (or maybe more) episodes per day between now and 2016. Plus (spoiler alerts!) in 2016 we're moving to a Monday/Wednesday/Friday release schedule. Yep, 7MS three times a week - thanks for the idea, mom! Lees meer
Subscribe to 7MS on iTunes here.
-
7MS #119: Migrating from Tumblr to Ghost-Part 1
17 december 2015 · 8 min
In this episode I talk about my adventures in moving my brianjohnson.tv Tumblr content over to a Digital Ocean hosted droplet running Ghost. Lees meer
I think you'll want to check this episode out, because in part 2 I talk about the challenges I faced in hosting multiple Ghost instances on one DI droplet. I will also be talking about how to enable CloudFlare SSL (for free!) as well as enabling Fail2Ban to keep annoying people/IPs from brute forcing your SSH root account!
-
7MS #118: Should Phishing be Fair?
15 december 2015 · 7 min
This episode discusses an important and rhetorical (to me) infosec question: Should phishing campaigns be "fair?"
-
7MS #117: OFFTOPIC-Alive Inside
10 december 2015 · 8 min
Today I talk about one of the most moving films I've ever seen - a documentary called Alive Inside.
-
7MS #116: Tips for a Succesful Vulnerability Scan
8 december 2015 · 14 min
In this episode I complain about getting stuck in NY for two days, and also how to efficiently scan for vulnerabilities when your time is crunched.
-
7MS #115: OFFTOPIC-Love and Mercy
4 december 2015 · 8 min
We're going off-topic today and talking about the new(ish) movie about Brian Wilson's life called Love and Mercy.
-
7MS #114: PCI Pentesting 101-Part 3
2 december 2015 · 8 min
Part 3 on my series about PCI pentesting. Yeah. That.
-
7MS #113: Big Bag of Random Security Stuff
27 november 2015 · 10 min
Yep, this episode is EXACTLY what the title implies.
-
7MS #112: This is Sparta!
25 november 2015 · 8 min
This episode is about one of my favorite enumeration tools called Sparta - it's built right into Kali 2. And maybe it was in Kali 1 and I totally missed it. But whatevs. I'm happy to have found it now!
-
7MS #111: Hacking WPA Enterprise-Part 2
20 november 2015 · 7 min
The thrilling (?) conclusion of my experience hacking WPA Enterprise.
-
7MS #110: Hacking WPA Enterprise-Part 1
18 november 2015 · 9 min
This episode is about my experience hacking WPA enterprise. Huge mega tiger uppercut thanks to this site for giving me the fixes I needed to get this working on Kali2! https://warroom.securestate.com/index.php/evil-twin-attack-using-hostapd-wpe/
-
7MS #109: OFFTOPIC-It Follows and Backcountry
13 november 2015 · 8 min
Movie reviews of It Follows and Backcountry.
-
7MS #108: I'm Going to PWAPT!-Part 2
11 november 2015 · 10 min
Here's part 2 (of probably several to come) about my experience with PWAPT (Practical Webapp Pentesting) training last week!
-
7MS #107: I'm Going to PWAPT!
3 november 2015 · 8 min
Hey I'm going to PWAPT this week (http://www.eventbrite.com/e/practical-web-application-penetration-testing-with-tim-tomes-lanmaster53-tickets-16718889649), so in this episode I talk about that...and how I'll probably be too info-overloaded to record anything on Thursday :-). Oh, and I had a fun Web app pentest this week that I wanted to share some fun bits on. Lees meer
-
7MS #106: A Day in the Life of an Information Security Analyst
30 oktober 2015 · 10 min
A listener wrote in asking some questions about "a day in the life of" a security analyst, so here's my best stab at it!
-
7MS #105: OFFTOPIC-Big Bag of Random Sauce
28 oktober 2015 · 9 min
Today's totally random episode covers: Lees meer
1. How bad does this podcast's logo suck?
2. Does this podcast need a theme song?
3. Some interesting training I'm taking next week.
4. The Walking Dead - who should die?
5. Metal Gear Solid and my personal godmode strategy.
-
7MS #104: LANTurtle First Impressions
22 oktober 2015 · 7 min
Hey I just got a LANTurtle and....these are my first impressions!
-
7MS #103: OFFTOPIC-I Was in a Movie Once
20 oktober 2015 · 7 min
This is an off-topic episode about the time I was in the holiday comedy super-smash laugh-fest, Jingle All the Way.
-
7MS #102: Recon-ng!
15 oktober 2015 · 9 min
I'm a big fan of Recon-ng and you should be too! Check it out - and learn more about Tim Tomes, its creator - at www.lanmaster53.com. And here's the video I mentioned in the podcast - my first look at Recon-ng in action: https://www.youtube.com/watch?v=vkmNTNl6urw Lees meer
-
7MS #101: OFFTOPIC-I Am Chris Farley
14 oktober 2015 · 8 min
The new(ish) Chris Farley documentary is fantastic - see it!
-
7MS #100: Assessment Curses Can Be Blessings
9 oktober 2015 · 8 min
Ever had an assessment that you thought would be the death of you? I had one recently, but after sticking it out, it turned out to be a blessing in disguise.
-
7MS #99: How to Deliver Bad News in a Good Way
2 oktober 2015 · 8 min
Today's episode gives you some tips on how to deliver bad news in an assessment in a positive way. I think that last sentence was a grammatical nightmare.
-
7MS #98: Intro to PCI Scoping
30 september 2015 · 8 min
So far I've focused on the technical aspects of PCI, but I'm trying to get familiar with the overall scoping questions that my tenacious QSA friends ask when they start a gap analysis. This episode shares some interesting tidbits I learned while doing some QSA "shadowing" on an assessment of a restaurant. Lees meer
-
7MS #97: OFFTOPIC-Limbo
25 september 2015 · 8 min
We're going off topic today and talking about video games! LIMBO for the Xbox!
-
7MS #96: How to Make Enemies During a Security Assessment
23 september 2015 · 10 min
Yep, we're talking about how to make ENEMIES during a security assessment today (and maybe turn them into friends).