In this episode

• Jeff explains the background of the relationship between the US government, ICANN and IANA
• What is the ITU and why is this $0 contract handoff to the ITU such a big deal?
• What impact did Edward Snowden's actions have on the issue?
• The potential issues with DNS, cross-border censorship and DNS
• The importance of Tor, Freenet and challenges of implementation
• Discussing the evolution of services like Tor through "nation-state firewalls"
• Changing the image of anonymous services
• Making Tor and similar services more user-friendly, and more prevalent

Guest:

• Jeff Moss ( @TheDarkTangent ) - Jeff, also known as The Dark Tangent, is an American hacker, computer security expert and internet security expert who founded the Black Hat and DEF CON computer Hacker conferences. His Wikipedia page can be found here.

Announcements:

• I want to thank Circle City Con as a sponsor for the show! I have one more ticket to give away ... so watch the #DtR hashtag on Twitter!
• Thanks to special guest Philip Beyer for sitting in James' seat this morning...

Topics discussed

• "US charges China with cyber-spying on American firms" (Hello, pot? this is the kettle...) - http://www.nbcnews.com/news/us-news/u-s-charges-china-cyber-spying-american-firms-n108706
• Should we be thinking about security beyond win/lose (aka "oh no, hackers are winning!") - http://www.csoonline.com/article/2156104/security-leadership/thinking-about-security-beyond-winning-and-losing.html
• Retail Industry Leaders Association (RILA) has launched their own ISAC-like entity called Retail Cyber Intelligence Sharing Center (R-CISC) - http://associationsnow.com/2014/05/retail-group-launches-sharing-tool-cyber-threats/
• A recent survey tells us that a whopping 43% of all identity theft in 2013 happened in healthcare ( W O W ) - http://www.studentdoctor.net/2014/04/the-rise-of-medical-identity-theft-in-healthcare/
• Self-driving cars, making life-and-death decisions (this should terrify you) - http://www.wired.com/2014/05/the-robot-car-of-tomorrow-might-just-be-programmed-to-hit-you/

In this episode

• Dan gives us the reality of living in what is commonly termed "the post-breach" world
• Dan and Robin talk through the explosion in the numbers of malware samples
• We discuss the different approaches to malware, crimeware, and the cross-over between them
• Dan explains what "rapid incident response" really means and why it's essential
• Dan and Robin give us some excellent examples of incident preparedness fundamentals
• Dan gives us a lesson on implementing 'powerful tools' (and forgetting about them)
• We talk through "who's doing it well?" (and we don't get a very hopeful answer)
• Is it time to learn from our own and others mistakes? (how?)

Guests:

• Robin Jackson ( @rjacksix ) - Robin is an incident response and digital forensics specialist for HP Enterprise Security Services.
• Dan Moore - Dan is an incident response and digital forensics specialist for HP Enterprise Security Services.

Topics dicussed

• Microsoft has issued a patch for the massive MS IE flaw - for WindowsXP! - http://arstechnica.com/security/2014/05/microsofts-decision-to-patch-windows-xp-is-a-mistake/
• Is Open Source Software more or less secure than closed-source? (in a post-Heartbleed era) - http://www.telegraph.co.uk/technology/internet-security/10769996/Heartbleed-the-beginning-of-the-end-for-open-source.html
• Target's CEO has stepped down, but what's the real reason and is there now opportunity for change? - http://www.usatoday.com/story/money/business/2014/05/05/target-ceo-steps-down/8713847/ and http://www.latimes.com/business/money/la-fi-mo-target-ceo-resigns-20140505,0,4479532.story
• Biometrics (specifically fingerprints) aren't as secure or unique as we'd like them to be, so ... paswords? - http://www.telegraph.co.uk/science/science-news/10775477/Why-your-fingerprints-may-not-be-unique.html