This podcast is brought to you by the Greater Lafayette Security Professionals (GLSP) group, SecurePurdue, and the Center for Education and Research in Information Assurance and Security (CERIAS) at Purdue University.

Show Notes

Hosts

• Preston Wiley, CISSP, CCNA
• Mike Hill, CISSP
• Keith Watson, CISSP-ISSAP, CISA

Announcements

• October is the National Cyber Security Awareness Month. Here at Purdue we will hold a university-wide event on October 5th. This event will include a keynote address by the Executive Director of CERIAS, Dr. Spafford, followed by a presentation by Purdue’s new Chief Information Security Officer, David Shaw. We also have panel discussion on the Promise and Peril of Social Networking that will include the Dr. Spafford, David Shaw, Purdue’s CIO Gerry McCartney, and Professor Lorraine Kisselburgh. After lunch there are two tracks, one on security awareness and the other on technical issues. Mike Hill, Preston Wiley, and Keith Watson (podcast hosts) and many other Greater Lafayette Security Professionals are making most of the presentations. (Program)
• The Greater Lafayette Security Professionals group held the September meeting on the 13th and conducted a workshop using Metasploit. There was an excellent turnout with 15 people in attendance.  The next meeting is scheduled for October 11th.
• The Fall CERIAS Security Seminars continue:
  • September 19, Jason Haas, Sandia National Laboratories
  • September 26, Marc Brooks, MITRE

  The seminars begin at 4:30pm in Stewart G52 and will also be shown on the Purdue channel. These seminars are recorded and made available as podcasts through iTunes and on YouTube.

Security Updates

• Mozilla Firefox 15.0.1 released correcting a Private Browsing mode bug where browsing was no longer private, September 6.
• Microsoft released NO critical security updates in September. There were two released for server products that were considered Important.

Articles

• Tracking Down the UDID Breach Source by David Schuetz (Intrepidus Group), The real source of Apple device IDs leaked by Anonymous last week by Kerry Sanders and Bob Sullivan (NBC News), Anonymous didn’t steal from the FBI after all - new conspiracy theories needed! by Paul Ducklin (nakedsecurity blog), Puzzle Solver Uncovers Apple UDID Breach Source by Michael Mimoso (threatpost)
• Microsoft Warns Of Looming Digital Certificate Deadline by Mathew J. Schwartz (Information Week), Update For Minimum Certificate Key Length (Microsoft Security TechCenter), Microsoft Security Advisory: Update for minimum certificate key length (Microsoft Support)
• The Password Fallacy: Why Our Security System Is Broken, and How to Fix It by Rachel Swaby (The Atlantic), Why passwords have never been weaker—and crackers have never been stronger by Dan Goodin (Ars Technica)