2012-03-22 China steals secrets/iPhone unlocation/Gmail and Spam/Audacity 2/Free Photoshop CS6/

Posted by & filed under .

Podcast: Play in new window | Download (Duration: 5:35 — 6.8MB) | Embed

2012-02-29 IPv6, New to RSA? / IPv6 from unknown to stellar support

Posted by & filed under .

Podcast: Play in new window | Download (Duration: 3:55 — 1.6MB) | Embed

2012-02-28 Google and SSL checking / Don’t Pen Test without Permission

Posted by & filed under .

Podcast: Play in new window | Download (Duration: 5:35 — 2.2MB) | Embed

  • Google removes CRL and OCSP checking from Chrome (there are still alternatives that make this work – listen to this compute cycle!)
  • BSides attendee sneaks into RSA – I’m not going to link to this story, as this is stupid, and I hope this story fizzles away.

2012-02-27 Recycled cloud IP attack / Investigate suspicious URLS / Security mistakes of others

Posted by & filed under .

Podcast: Play in new window | Download (Duration: 3:17 — 1.4MB) | Embed

2012-02-14 Chrome SSL certificate checking / Man in the browser / Reaver Pro WPS cracking / HTML5 Security

Posted by & filed under .

Podcast: Play in new window | Download (Duration: 8:36 — 10.7MB) | Embed

2012-02-05 Sat phone encryption cracked / Anonymous listens in / GPG not always encrypted / DNS Trojan Aftermath / Verisign Hacked / Vermont State Police

Posted by & filed under .

Podcast: Play in new window | Download (Duration: 6:09 — 5.6MB) | Embed

So I’ve got a cold, and I’m trying out some different equipment.  We should sound better soon!

2012-01-24 Deep Dive – IPv6 Tunnels for Multiple Networks

Posted by & filed under , .

PlayPlay

Podcast: Play in new window | Download (170.7MB) | Embed

We are still getting the bugs worked out with regard to videos & this podcast, so if all else fails, here is the same video on YouTube. (Sending feedback if something is broken would REALLY be appreciated.  Thanks! –Brett)

In this deep dive, we do some advanced IPv6 hacking with the gogoc client.  The gogoc IPv6 tunnel broker isn’t setup to handle subnetting and multiple interfaces.  In this ComputeCycle.com deep dive, we install gogoc, get an IPv6 tunnel, and then customize the internal gogoc scripts to handle our multiple interfaces with separate IPv6 subnets.

To sign up for your own IPv6 tunnel, head over to freenet6.

If all you want to do is run IPv6 on your home network, you can ignore changing the host type, the prefix length, and all of the modifications to linux.sh

2012-01-21 WDATM Follow Up – Upgrading Dell BIOS from a Live USB OS

Posted by & filed under , .

I’m happy to report that all the servers for Shmoocon have had their BIOS updated using the procedures documented in our previous post.  A couple of extra notes to post about this procedure.  When you are booting up the OMSA live disk with CentOS on it, it is best to choose the boot option “Boot (No Dell Services)”.  But before you hit enter, press tab to edit the command line.

Right after the word liveimg, put in the number 3.  So it looks like this:

..... liveimg 3 noomsa .....

This will prevent the system from booting into the graphical mode (thus using more memory) and the “No Dell Services” will prevent it from downloading extra packages to run the OMSA utilities, which you don’t need for a BIOS upgrade.