Collaborate Disseminate
This week Jonathan Bennett and and Simon Phipps chat with Gary Williams about OggCamp! It’s the Free Software and Free culture unconference happening soon in Manchester! What exactly is an …read more Continue reading FLOSS Weekly Episode 803: Unconferencing with OggCamp
It looks like there’s finally hope for sane password policies. The US National Institue of Standards and Technology, NIST, has released a draft of SP 800-63-4, the Digital Identity Guideline. …read more Continue reading This Week in Security: Password Sanity, Tank Hacking, And The Mystery 9.9
This week Jonathan Bennett and and Randal Schwartz chat with Michael and Benedikt about Emba, the embedded firmware analyzer that finds CVEs and includes the kitchen sink! It does virtualization, …read more Continue reading FLOSS Weekly Episode 802: Emba – Layers Upon Layers of Bash
Open Source has sort of eaten everything in software these days. And that includes malware, apparently, with open source Command and Control (C2) frameworks like Sliver and Havoc gaining traction. …read more Continue reading This Week in Security: Open Source C2, Raptor Trains, and End to End Encryption
This week Jonathan Bennett and Jeff Massie chat with Max Rydahl Andersen about JBang, the cross-platform tool to run Java as a system scripting language. That’s a bit harder than …read more Continue reading FLOSS Weekly Episode 801: JBang — Not Your Parents Java Anymore
It’s time to talk about Microsoft’s patch Tuesday, and the odd vulnerability rollback that happened. CVE-2024-43491 has caught some attention, as it’s a 9.8 on the CVSS scale, is under …read more Continue reading This Week in Security: Malicious Rollback, WHOIS, and More
This week Jonathan Bennett and Aaron Newcomb chat with Andreas Kling about Ladybird, the new browser in development from the ground up. It was started as part of SerenityOS, and …read more Continue reading FLOSS Weekly Episode 800: Champagning the Ladybird Browser
[Thomas Roche] of NinjaLab is out with EUCLEAK, (pdf) a physical attack against Infineon security microcontrollers, and the security tokens that contain them. The name is a portmanteau of Euclidean …read more Continue reading This Week in Security: EUCLEAK, Revival Hijack, and More
This week Jonathan Bennett chats with Lori Lorusso and Steve Hoffman, the Head of Community and SVP of engineering at Percona, the open source database experts. https://www.percona.com/ Did you know …read more Continue reading FLOSS Weekly Episode 799: Still Open Source at Percona
We finally have some answers about the Windows IPv6 vulnerability — and a Proof of Concept! The patch was a single change in the Windows TCP/IP driver’s Ipv6pProcessOptions(), now calling …read more Continue reading This Week in Security: The Rest of the IPv6 Story, CVE Hunting, and Hacking the TSA