Josh and Kurt talk about the security of automation as well as automating security. The only way automation will really work long term is full automation. Humans can't be trusted enough to rely on them to do things right.
May 20, 2018•33 min•Ep. 97
Josh and Kurt talk about backdoors in code and products that have been put there on purpose. We talk about unlocking phones. Encryption backdoors with a focus on why they won't work.
May 11, 2018•33 min•Ep. 96
Josh and Kurt talk about Twitter doing the right thing when they logged a lot of passwords and the npm malicious getcookies package and how backdoors work in code.
May 07, 2018•30 min•Ep. 95
Josh and Kurt talk about the Amazon Route 53 incident and what it really means for the modern infrastructure. Complaining nobody is using DNSSEC or securing BGP aren't the right conversations to be having. Reality must be considered in any honest conversation about these topics.
Apr 30, 2018•28 min•Ep. 94
Josh and Kurt talk about security flaws in beep and patch. How on earth were there security flaws in beep and patch?
Apr 15, 2018•36 min•Ep. 93
Josh and Kurt talk to Rami Saas, the CEO of WhiteSource about 3rd party open source security as well as open source licensing.
Apr 15, 2018•34 min•Ep. 92
Josh and Kurt talk to a 7 year old about security. We cover Minecraft security, passwords, hacking, and many many other nuggets of wisdom.
Apr 08, 2018•19 min•Ep. 91
Josh and Kurt talk about all the current misinformation, how humans react to it, and what it means for security.
Apr 02, 2018•36 min•Ep. 90
Josh and Kurt talk about the recent AMD flaws and the events surrounding the disclosure.
Mar 25, 2018•34 min•Ep. 89
Josh and Kurt talk about container security with IBM's Chris Rosen.
Mar 18, 2018•33 min•Ep. 88
Josh and Kurt talk about Let's Encrypt with co-founder Josh Aas. We discuss the past, present, and future of the project.
Mar 11, 2018•39 min•Ep. 87
Josh and Kurt talk about the Trustico certificate incident and Let's Encrypt.
Mar 03, 2018•34 min•Ep. 86
Josh and Kurt talk about the npm 5.7.0 debacle.
Feb 23, 2018•32 min•Ep. 85
Josh and Kurt talk about the new password data dump from Have I been pwned?
Feb 23, 2018•32 min•Ep. 84
Josh and Kurt talk about the XKCD CVE comic and a flight simulator stealing credentials.
Feb 21, 2018•31 min•Ep. 83
Josh and Kurt talk about problems of textbook RSA implementations, the upcoming TLS changes in TLS, and the insecurity of http in Chrome.
Feb 13, 2018•30 min•Ep. 82
Josh and Kurt talk about AutoSploit, bug bounties and fixing flaws, market forces in security, future expectations, and how humans perceive threats.
Feb 07, 2018•32 min•Ep. 81
Josh and Kurt talk about GPS metadata giving away military bases and GPS jamming as part of testing.
Jan 31, 2018•34 min•Ep. 80
Josh and Kurt talk about Skyfall, fake reports, risk, logging, and how a civilized society functions.
Jan 24, 2018•56 min•Ep. 79
Josh and Kurt talk about the accidental missile warning in Hawaii. We also discuss general preparedness and risk.
Jan 16, 2018•53 min•Ep. 78
Josh and Kurt talk about the recent npm happenings. What it means for the supply chain, and we end with some thoughts on how maybe none of this matters.
Jan 10, 2018•1 hr•Ep. 77
Josh and Kurt talk about the aftermath of Meltdown. The details of the flaw are probably less interesting than what happens now.
Jan 07, 2018•51 min•Ep. 76
Josh and Kurt talk about the Security Planner website. It's pretty good all things considered.
Dec 19, 2017•1 hr 3 min•Ep. 75
Josh and Kurt talk about facial recognition, physical security, banking, and Amazon Alexa.
Dec 13, 2017•43 min•Ep. 74
Josh and Kurt talk about basic security metrics and security from Santa. Is Santa GDPR compliant?
Dec 06, 2017•1 hr 1 min•Ep. 73
Josh and Kurt talk about Bitcoin, blockchain, and other cryptocurrencies.
Nov 28, 2017•53 min•Ep. 72
Josh and Kurt talk about GitHub's security scanner and Linus' security email. We clarify the esoteric difference between security bugs and non security bugs.
Nov 21, 2017•47 min•Ep. 71
Josh and Kurt talk about Intel ME, Equifax salary history, and IoT.
Nov 14, 2017•49 min•Ep. 70
Josh and Kurt talk about Amazon Key and actionable advice.
Nov 07, 2017•47 min•Ep. 69
Josh and Kurt talk about Facebook listening to your microphone, Google Chrome certificate pinning, CAs, 152 ways to stay safe, and Kubernetes.
Nov 01, 2017•52 min•Ep. 68