Sat, 06 Jul 2019 02:57:16 +0100 Wed, 15 Apr 2020 11:11:55 +0100 https://twit.tv/shows/security-now en-US This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - http://creativecommons.org/licenses/by-nc-nd/4.0/ 14400 Technology Security http://twit.cachefly.net/coverart/sn/sn144audio.jpg https://twit.tv/shows/security-now 144 144 TWiT Steve Gibson discusses the hot topics in security today with Leo Laporte. Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte. Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC. Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte. Records live at https://twit.tv/live every Tuesday. TWiT, Technology, Steve Gibson, Leo Laporte, security, spyware, malware, hacking, cyber crime, encryption false no Leo Laporte distro@twit.tv Tue, 22 Dec 2015 18:00:00 -0800 http://media.grc.com/sn/sn-539-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-539-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 15 Dec 2015 18:00:00 -0800 http://media.grc.com/sn/sn-538-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-538-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 08 Dec 2015 18:00:00 -0800 http://media.grc.com/sn/sn-537-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-537-lq.mp3 This first week of December brought us the early Christmas present of an amazing amount of interesting and important news. This entire episode is chockful of reports and discussion of everything that has happened during the past busy week in security and privacy. Tue, 01 Dec 2015 18:00:00 -0800 http://media.grc.com/sn/sn-536-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-536-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 24 Nov 2015 18:00:00 -0800 http://media.grc.com/sn/sn-535-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-535-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 17 Nov 2015 18:00:00 -0800 http://media.grc.com/sn/sn-534-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-534-lq.mp3 Leo and I discuss a wide range of security news, Steve's feelings about the new iPad Pro, and lots of interesting bits of miscellany. We then revisit the newly controversial question of Internet encryption which has been raised with great emphasis after last week's terrorist attacks in Paris. Tue, 10 Nov 2015 18:00:00 -0800 http://media.grc.com/sn/sn-533-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-533-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 03 Nov 2015 18:00:00 -0800 http://media.grc.com/sn/sn-532-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-532-lq.mp3 Leo and I discuss a very busy week of interesting - and somewhat distressing - security and privacy news. Then we explore the fundamental problem with iOS application security enforcement which is going to take Apple some time to resolve. Tue, 27 Oct 2015 18:00:00 -0800 http://media.grc.com/sn/sn-531-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-531-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 20 Oct 2015 18:00:00 -0800 http://media.grc.com/sn/sn-530-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-530-lq.mp3 This week's podcast is titled "Doing It Wrong" because the week's news happened to include four unrelated examples of companies really getting security wrong. So Leo and I first catch up on the week's other news and miscellany. Then we take a look at four examples of security being done wrong. Tue, 13 Oct 2015 18:00:00 -0800 http://media.grc.com/sn/sn-529-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-529-lq.mp3 In the wake of the news that LogMeIn is acquiring LastPass, Joe Siegrist, founder and CEO of LastPass, joins us to talk about the acquisition and what he hopes it means for the future of our favorite password manager. We then catch up with the week's news, and share and discuss 10 questions and comments from our listeners. Tue, 06 Oct 2015 18:00:00 -0800 http://media.grc.com/sn/sn-528-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-528-lq.mp3 With many massive Internet data breaches, and a prolific vigilante worm loose on the Internet, Leo and I spend a fun- and fact-filled podcast covering the past week's multitude of news. Tue, 29 Sep 2015 18:00:00 -0800 http://media.grc.com/sn/sn-527-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-527-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 22 Sep 2015 18:00:00 -0800 http://media.grc.com/sn/sn-526-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-526-lq.mp3 Leo and I cover a busy past week of security news, then discuss the first week of iOS mobile web content filtering made possible by Wednesday's release of iOS v9. We take a close look at the initial set of content blocking apps available for iOS and Safari. Tue, 15 Sep 2015 18:00:00 -0800 http://media.grc.com/sn/sn-525-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-525-lq.mp3 Leo and I cover a relatively small bit of news of the week, including dispelling an unwarranted concern about LastPass being hacked. Then we converse with Patrick Jackson, co-founder and chief technology officer (CTO) of Disconnect, about his company's view of the web-tracking industry, its past and probable future. Tue, 08 Sep 2015 18:00:00 -0800 http://media.grc.com/sn/sn-524-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-524-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 01 Sep 2015 18:00:00 -0800 http://media.grc.com/sn/sn-523-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-523-lq.mp3 Leo and I catch up with the week's major security events. We then examine the ecosystem of web page advertising by comparing it to other "opportunistic advertising" such as that appearing on public transportation, highway billboards, broadcast television commercials and other public venues - which consumers have no obligation to consume. I eschew the implication that visitors to a web page have an obligation to retrieve third-party content, over which the website has little or no control, which consumes bandwidth, reduces online privacy, hinders performance, and potentially exposes visitors to malicious exploitation. And I believe this remains true even when a visitor's retrieval of such despicable third-party content would generate much-needed revenue for the visited site. Finally, I review the many operational features of uBlock Origin, my chosen HTML firewall, which effectively returns control to web users. Tue, 25 Aug 2015 18:00:00 -0800 http://media.grc.com/sn/sn-522-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-522-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 18 Aug 2015 18:00:00 -0800 http://media.grc.com/sn/sn-521-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-521-lq.mp3 Leo and I catch up on another in a series of very busy weeks of security news. Then we discuss several recently written commentaries about the distressing state of online web advertising. Tue, 11 Aug 2015 18:00:00 -0800 http://media.grc.com/sn/sn-520-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-520-lq.mp3 Leo and I catch up on a busy week of security news, and then we follow my ongoing search for a low-hassle solution for safely browsing the danger-filled World Wide Web. Tue, 04 Aug 2015 18:00:00 -0800 http://media.grc.com/sn/sn-519-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-519-lq.mp3 While Leo and I await the revelations from the ongoing annual Black Hat and DefCon conferences, the fallout from which we will doubtless be dissecting during upcoming weeks, we keep current with other security news and events. We then examine the change of philosophy embodied by Microsoft's Windows 10 and its many controversial spying "features." Tue, 28 Jul 2015 18:00:00 -0800 http://media.grc.com/sn/sn-518-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-518-lq.mp3 August's annual DefCon and Black Hat conferences never fail to surprise, worry, and entertain. This year is no different. Though still two weeks off, reports of interesting security troubles are beginning to surface. This week Leo and I examine the week's news and take a close look at a topic the Internet press got completely wrong: HORNET, a new design for an Internet Anonymity network. Tue, 21 Jul 2015 18:00:00 -0800 http://media.grc.com/sn/sn-517-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-517-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 14 Jul 2015 18:00:00 -0800 http://media.grc.com/sn/sn-516-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-516-lq.mp3 Security and privacy-related news keeps coming! So this week Father Robert and I will cover the past week's many interesting events. Then we revisit the much evolved and nearly finalized SQRL protocol to see how it has grown and matured during the 92 weeks since I first disclosed its concept during Podcast 424 with Tom. Tue, 07 Jul 2015 18:00:00 -0800 http://media.grc.com/sn/sn-515-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-515-lq.mp3 So much happened in the security and privacy worlds this past week that it will be everything Father Robert and I can do just to cover and discuss it all during a single podcast. So this is one of our pure news coverage and catch-up episodes. I'm sure it's going to be a blast! Tue, 30 Jun 2015 18:00:00 -0800 http://media.grc.com/sn/sn-514-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-514-lq.mp3 After catching up with a lot of interesting security news, Father Robert and I take a look at recent research into improving the privacy delivered to users of the Tor network. Our conclusions are somewhat distressing. Tue, 23 Jun 2015 18:00:00 -0800 http://media.grc.com/sn/sn-513-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-513-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 16 Jun 2015 18:00:00 -0800 http://media.grc.com/sn/sn-512-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-512-lq.mp3 Leo and I discuss the week's most interesting recent security events and a bit of miscellany. Then we examine the revelations about the current state of Internet user tracking arising from Mozilla's Firefox tracking protection instrumentation. Tue, 09 Jun 2015 18:00:00 -0800 http://media.grc.com/sn/sn-511-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-511-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 02 Jun 2015 18:00:00 -0800 http://media.grc.com/sn/sn-510-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-510-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 26 May 2015 18:00:00 -0800 http://media.grc.com/sn/sn-509-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-509-lq.mp3 After covering the week's most significant security news, Leo and I closely examine the week's most significant news, a major new vulnerability in the Internet's TLS protocol known as "Logjam." Tue, 19 May 2015 18:00:00 -0800 http://media.grc.com/sn/sn-508-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-508-lq.mp3 After catching up with a busy week of security news, Leo and I take a close look at the surprisingly weak and insecure technology used for today's modern automotive keyless entry and engine start systems. We show how easily it may be bypassed... perhaps for as little as $17 on eBay. Tue, 12 May 2015 18:00:00 -0800 http://media.grc.com/sn/sn-507-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-507-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 05 May 2015 18:00:00 -0800 http://media.grc.com/sn/sn-506-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-506-lq.mp3 Leo and I catch up with the past week's most interesting security events and cover some miscellaneous tidbits. We then examine the carefully written testimony of two leading computer scientists who argue against the feasibility of incorporating encryption backdoors into commercial mobile and other device technologies. Tue, 28 Apr 2015 18:00:00 -0800 http://media.grc.com/sn/sn-505-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-505-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 21 Apr 2015 18:00:00 -0800 http://media.grc.com/sn/sn-504-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-504-lq.mp3 Leo and I catch up with the most interesting and significant security and privacy news of the week. Then we take a close look at what's known of the mechanisms China has developed - both filtering and offensive weaponry - to provide for their censorship needs and to potentially attack external Internet targets. Tue, 14 Apr 2015 18:00:00 -0800 http://media.grc.com/sn/sn-503-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-503-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 07 Apr 2015 18:00:00 -0800 http://media.grc.com/sn/sn-502-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-502-lq.mp3 Leo and I catch up on a busy and interesting week of security events. Then we take a close look at the results of the just-completed second phase of the TrueCrypt audit, which focused upon the implementation of TrueCrypt's security and privacy guarantees. Tue, 31 Mar 2015 18:00:00 -0800 http://media.grc.com/sn/sn-501-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-501-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 24 Mar 2015 18:00:00 -0800 http://media.grc.com/sn/sn-500-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-500-lq.mp3 Leo and I discuss the recent Pwn2Own hacking competition. We examine another serious breach of the Internet's certificate trust system and marvel at a very clever hack to crack the iPhone four-digit PIN lock. Then we take a close look at the evolution of booting from BIOS to UEFI and how Microsoft has leveraged this into their "Windows Secure Boot" system. We also examine what it might mean for the future of non-Windows operating systems. Tue, 17 Mar 2015 18:00:00 -0800 http://media.grc.com/sn/sn-499-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-499-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 10 Mar 2015 18:00:00 -0800 http://media.grc.com/sn/sn-498-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-498-lq.mp3 Leo and I catch up with several VERY interesting security events and stories of the week. Then we take a deep dive into two of the week's big security stories: FREAK and RowHammer. Tue, 03 Mar 2015 18:00:00 -0800 http://media.grc.com/sn/sn-497-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-497-lq.mp3 Leo and I discuss the week's tamer-than-usual news; then we host a terrific interview of the team (recently featured on Sunday's "60 Minutes") who have been working with DARPA to address the challenge of hardening high-tech networked vehicles - autos and UAVs - against malicious hacking attacks. Tue, 24 Feb 2015 18:00:00 -0800 http://media.grc.com/sn/sn-496-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-496-lq.mp3 Leo and I discuss the week's major security events, including the revelation of the Lenovo Crapware and the joint GCHQ/NSA Gemalto attack which rendered cellular phones insecure. Then we discuss questions and comments from listeners of previous episodes to tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world application notes for any of the security technologies and issues we have previously discussed. Tue, 17 Feb 2015 18:00:00 -0800 http://media.grc.com/sn/sn-495-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-495-lq.mp3 Leo and I catch up with several VERY interesting security events and stories of the week. Then we take a close look and a deep dive into the operation of the industry's first change in the official HTTP protocol in 15 years - the finalization and emergence of the HTTP/2 IETF specification which significantly streamlines web browser and web server interaction. Tue, 10 Feb 2015 18:00:00 -0800 http://media.grc.com/sn/sn-494-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-494-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed. Tue, 03 Feb 2015 18:00:00 -0800 http://media.grc.com/sn/sn-493-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-493-lq.mp3 After catching up with a few important security events of the week, Leo and I revisit and dissect the anonymity promises of TOR in light of scores of academic papers which have questioned its anonymity guarantees. Tue, 27 Jan 2015 18:00:00 -0800 http://media.grc.com/sn/sn-492-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-492-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed. Tue, 20 Jan 2015 18:00:00 -0800 http://media.grc.com/sn/sn-491-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-491-lq.mp3 Following this slow week of security news, Leo and I first discuss the news surrounding how and why the U.S. was so sure that North Korea was behind the attack on Sony. Then we examine the cryptographic consequences of the British and U.S. governments' recent pronouncements that terrorist communications should not be allowed to remain secret. Tue, 13 Jan 2015 18:00:00 -0800 http://media.grc.com/sn/sn-490-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-490-lq.mp3 Leo and I first discuss a surprisingly busy week of security news; then, we take a careful walk through the history (it's not what you may think) and the detailed operation of "The Enigma Machine" which Germany used to encrypt their sensitive radio traffic during the Second World War. Tue, 06 Jan 2015 18:00:00 -0800 http://media.grc.com/sn/sn-489-lq.mp3 TWiT Technology Security false http://media.grc.com/sn/sn-489-lq.mp3 Leo and I discuss the week's major security events and discuss questions and comments from listeners of previous episodes. We tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world ‘application notes’ for any of the security technologies and issues we have previously discussed.