Ladies and gentlemen, we are over the 50 episodes mark!  If you've enjoyed the podcast, please go rate us in the iTunes store, or leave us a note here. Have you checked out past episodes?! There are some gems in there, I promise, and worth your time.

Topics Covered

• Charlie Miller and Chris Valasek demonstrated (and will disclose code to) the hack which allows complete (tethered) remote control of a modern vehicle. You need to watch this video, and if you develop code for transport vehicles and aren't thinking about securing your code - it's time to adjust course before you actually kill someone - http://www.forbes.com/sites/andygreenberg/2013/07/24/hackers-reveal-nasty-new-car-attacks-with-me-behind-the-wheel-video/ and this is how the UK 'muzzled' a researcher who did something similar - http://www.theregister.co.uk/2013/07/28/birmingham_uni_car_cracker_muzzled_by_lords/
• Apple demonstrates how not to do breach disclosure, while Ibrahim Balic demonstrates how to jump into the spotlight (and put foot in mouth before thinking) by disclosing, video-recording, and telling the world of his 'ethical test' of Apple's forums - http://www.news.com.au/technology/ibrahim-balic-breaks-silence-on-hacking-apple-developer-site/story-e6frfro0-1226684484916 and http://gigaom.com/2013/07/22/researcher-comes-forward-to-claim-responsibility-for-intrusion-on-apple-developer-site/
• After many years on the run Russian super-hackers involved in the biggest breach of all time are caught - because they broke the first few rules of hiding - http://www.reuters.com/article/2013/07/26/us-usa-hackers-creditcards-arrests-idUSBRE96P02Z20130726
• Exciting news for those of you who are sick of Android App Developers' over-reaching nature in the permissions arena, with the release of 4.3 there is a glimmer of hope in reigning in those games that for some unknown reason require access to your contacts and 'premium services' and such - http://www.androidpolice.com/2013/07/25/app-ops-android-4-3s-hidden-app-permission-manager-control-permissions-for-individual-apps/

Welcome down the rabbithole as we hit EPISODE 50! I'm thrilled that we've made it this far, and look forward to having you along for the ride into the future! At this point, I'd like to encourage you to listen to some of the fascinating guests we've had on this show, people I'm proud to have had a chat with, in the past archives... suggest guests, or just leave us a comment.

/Wh1t3Rabbit

In this episode...

• We try and discuss 'defense in depth' on the geopolitical scale
• @packetknife drops the truth about 'geopolitics experts' in InfoSec
• Ali explains navigating the undocumented security requirements in emerging markets
• We talk about whether all this stolen data from enterprise has actually made a difference
• Ali discusses the 'western sense of intellectual property' (eye-opening!)
• Deperimeterization - why #InfoSec must adapt this RIGHT NOW, but seems allergic to it
• Ali drops 'lawfare' on us - and why #InfoSec must know its options
• Wwe discuss why people 'generally just don't get it' when it comes to moving to triage over 'secure'
• Ali decides he wants to be Frank, or is that frank? :-)

Guest

• Ali-Reza Anghaie ( @PacketKnife ) - Ali is a resident expert (or as much as one can be) on geopolitics from his unique background, experience and perspective. He's a well-known figure in the community and has deep insight into the things that most of us read in the media, and pretend to understand. He's the perfect guest for Episode 50!

Topics Covered

• 9 Years After Shadowcrew, Feds Get Their Hands on Fugitive Cybercrook
• http://www.wired.com/threatlevel/2013/07/bulgarian-shadowcrew-arrest
• vBulletin Forums compromised (~15-~150k) to serve malware
• http://news.softpedia.com/news/Around-150-000-vBulletin-Forums-Compromised-Abused-to-Serve-Malware-366442.shtml
• America's EAS (Emergency Alert System) is open to compromise (still)
• http://www.wired.com/threatlevel/2013/07/eas-holes/
• Mobile malware up 614% y/y says Juniper, but mostly Android
• http://www.computerworld.com/s/article/9240772/Mobile_malware_mainly_aimed_at_Android_devices_jumps_614_in_a_year
• Blue Box Security finds "master key" issue with Android - but there's more to it
• http://www.zdnet.com/android-oems-slow-to-roll-out-bluebox-security-patch-7000018012/

In this episode...

• We get a little insight into the mind of Tomer, and how he thinks about security
• We get an insight into what HP Software IT Management is doing to ensure security in the products they release
• We discuss making security more than just a security line-item, and a business requirement
• There are many "uncomfortable pauses" :)
• We discuss Tomer's risk-focused approach to software quality
• We ask "Is HP drinking it's own champagne?"
• Tomer gives us his feeling on DevOps

Guest

• Tomer Gershoni - Tomer is the Information Security Officer responsible for product security for a select part of HP Software known as IT Management. Previous to that he was the CISO for HP Software-as-a-Service for over 3 years based out of Yehud, Israel. Tomer has over 10 years experience in Information Security and a background in software security. He is a very interesting individual, and his public profile can be found on LinkedIn here: http://il.linkedin.com/in/tomergershoni

*Apologies for this very important episode getting out a bit late ladies and gents, experienced a loss in the family so things were a little slow to re-start, we should be back on track for next week's episode.

Topics Covered

• Political hacktivism is making a big splash in international news - 
• http://www.ilovechile.cl/2013/06/17/chile-democratic-partys-official-site-hacked/87737
• http://www.kjrh.com/dpp/news/local_news/jenks/jenks-chamber-of-commerce-website-hacked-for-second-time-within-a-month
• http://www.publicnewshub.com/zimbabwean-hackers-hailed-for-attacking-ancs-website/
• http://www.bignewsnetwork.com/index.php/sid/215436810/scat/b8de8e630faf3631/ht/South-and-North-Korea-close-website-amid-hacking-alerts
• http://www.business-standard.com/article/pti-stories/syria-s-online-troops-wage-counter-revolutionary-cyber-war-113060900065_1.html
• http://www.ehackingnews.com/2013/06/turkish-ministry-of-interior-website.html
• Google Published their epic Transparency Report data
• http://krebsonsecurity.com/2013/06/web-badness-knows-no-bounds/
• http://www.google.com/transparencyreport/
• European Union issues new data breach laws for telecommunications industry
• http://www.infosecurity-magazine.com/view/33109/eu-announces-new-data-breach-rules-for-telecoms/
• Critical vulnerabilities found in CROWD single sign-on product
• http://www.computerworld.com/s/article/9240487/Critical_vulnerabilities_found_in_Atlassian_Crowd_enterprise_single_sign_on_tool
• Facebook offers (pays!) $20,000 flaw for brilliant business-logic bug
• http://www.eweek.com/security/facebook-patches-mobile-text-vulnerability-rewards-flaw-discoverer/
• Microsoft launchges a bug bounty program, for IE11 and more
• http://www.microsoft.com/security/msrc/report/bountyprograms.aspx#
• http://www.wired.com/threatlevel/2013/06/microsoft-bug-bounty-program/
• Opera code signing certificate stolen and used to sign malware
• http://www.eweek.com/security/opera-data-breach-exposes-legions-of-windows-users-to-malware-attack/