In this episode

• We discuss some of the new techniques auto insurance companies are using to custom-tailor rates to drivers
• Our guest discusses some of the capabilities of the widgets available
• Our guest discusses the 'call home' functions, and potential mis-use
• We use 'big data' seriously
• We talk about 'big data' and security - for real
• Our guest gives us a realistic view about the type of data that's out there about your driving, habits, and tracking

Guest

• Our guest is an industry insider, who for obvious reasons chose not to identify himself. We respect the guest's position, and kindly ask that our listeners do as well.

Hey listeners!

Thanks to everyone who's put us in their RSS feed and regularly grabs the latest content. I just ran a running average of the last 20 episodes, and as of right now we're averaging ~802 downloads/episode. That's awesome, and so much more than I ever thought this show would grow to! It's all thanks to you, for listening, spreading the word, and being fans.

As we near episode 100 I promise you an episode you'll want to listen to, and share with those you know. James and I are working hard to make it special, with a guest that's ... well ... you'll see.

Thanks for being a fan.

/Raf & James

Topics discussed

• The big story - "Heartbleed"
  • http://www.csoonline.com/article/2142626/security-leadership/how-you-need-to-respond-to-heartbleed-and-how-you-can-explain-it-to-others.html
  • http://www.csoonline.com/article/2146141/disaster-recovery/healthcare-gov-urges-password-resets-due-to-heartbleed.html
  • http://xkcd.com/1354/
  • http://rt.com/news/heartbleed-arrest-canada-security-016/
• The "hacker*" known as "Weev" is free ...on a technicality, and why this is bad, very very bad, for our industry
  • http://techcrunch.com/2014/04/11/weev-is-free/
• "Ramshackle Glam" - how one blogger had to go to extraordinary lengths to get her site back, and what you can learn from it
  • http://mashable.com/2014/04/02/ramshackle-glam-hacking/
• The FTP's lawsuit of Wyndham Hotels was allowed to proceed by a federal judge - and why this is a very dangerous precedent
  • http://www.fiercegovernmentit.com/story/ftc-lawsuit-over-hotel-chain-data-breach-can-proceed/2014-04-14
• Data breach roundup
  • Michaels [yes, again] - http://www.business-standard.com/article/news-ani/leading-us-art-store-admits-2-6-mln-credit-cards-at-risk-of-hacking-114041800569_1.html
  • South Carolina data breach is getting costly (for tax payers) - http://www.therepublic.com/view/story/396a4be862cd485e9248cab7879a3a71/SC--Hacked-Tax-Returns
  • Hard drive maker LaCie was a victim ...for over a year - http://www.techtimes.com/articles/5672/20140416/lacie-latest-victim-data-theft-ironies-hard-drive-manufacturer-hacked.htm
  • [UK] Cosmetic surgery group hacked, blackmail ensues (yikes!) - http://www.dailymail.co.uk/news/article-2604805/Cosmetic-surgeons-targeted-hackers-personal-details-500-000-people-enquiries-clinic-stolen.html
  • Pittsburgh's UPMC hacked, sees 788 fraudulent tax returns as a result - http://www.witf.org/news/2014/04/27k-upmc-worker-hit-by-data-breach-788-by-fraud.php

In this episode

• Advanced Threat Actors - more or less a threat right now than before? (how much is hype?)
• Advanced Persistent Threat - is it really THAT advanced? (a "what" or a "who"?)
• The distinction of what "APT" is ...and isn't
• Touching on Mandiant APT-1 ...hype from reality
• A quick discourse on corporate espionage!
• How we respond to APTs ... is this just really "incident response" for a boogeyman?
• The snake oil salesman behind "Automated APT defense"
• Threat Intelligence - necessary, but what's the proper use?
• Threat Intelligence requires collaboration, how do we do it?
• Is our security failing, or is our perception of what we want it to do wrong?
• Key take-aways for the enterprise professional

Guests

• Steve Santorelli ( @SteveSantorelli ) - Manager of outreach at Team Cymru
• John Pirc ( @jopirc ) - CTO of NSS Labs
• J. Oquendo ( @advancedthreat ) - veteran threat researcher
• Robin Jackson ( @rjacksix ) - veteran threat researcher, forensics expert at HP Enterprise Security Services

Topics covered

• WindowsXP is officially, for real, definitely end of life - http://windows.microsoft.com/en-us/windows/end-support-help
• Google Nest pushes update - examining the bigger picture - http://www.theregister.co.uk/2014/04/04/nest_waves_goodbye_to_alarm_switchoff_feature/
• South Carolina's agencies are still not any better after the massive breaches - http://www.wbtw.com/story/25149085/still-no-consistent-computer-security-plan-at-sc-agencies
• News flash - we trust the government and Internet companies less as a result of leaks - http://www.computerworld.com/s/article/9247441/Snowden_leaks_erode_trust_in_Internet_companies_government
• The two banks which filed suit against TrustWave & Target have dropped their effort...sanity apparently prevailed but there's a bigger issue here at stake - http://www.securityweek.com/banks-drop-suit-against-target-trustwave