Weekly Wrap 112: Security, hacks, unexpected encounters

I was in Sydney for most of my week Monday 23 to Sunday 29 July 2012, and despite some minor annoyances I’m reasonably pleased with the results.

I also started a new gig on a SEKRIT project. It looks like it’ll be quite fun, but I won’t be able to tell you about it for ages.

Podcasts

  • Patch Monday episode 147, “Mid-2012 malware: new flavours, same ice cream”. Has 2012 turned out to be “the year of cyberwar” accompanied by an explosion of Android malware? Hear from Alex Kirk, senior research analyst with the Sourcefire Vulnerability Research Team (VRT); David Hall, Symantec’s consumer spokesperson for Asia Pacific; and Bob Hansmann, senior product marketing manager at Websense.

Articles

If ever there was a week that illustrated my transition to grumpy-old-man writing, this is it.

Media Appearances

Corporate Largesse

None.

The Week Ahead

It looks like it’ll be a relatively easy week, but with most of it spent at Wentworth Falls — both because that’s the schedule and because it’s that end-of-the-month week where I really don’t have any money left.

[Photo: Diary of the Lost Crane being the view from level 12 of the Metro Sydney Central Hotel on a foggy Wednesday morning.]

Talking DNSChanger on ABC Local Radio

I was surprised at all the media attention given to the DNSChanger thing last week. I even did a radio spot about it — even though the DNS turnoff affected just 0.015% of computers on the internet.

Just in case you missed it, read the Wikipedia article and Paul Vixie’s first-hand account of swapping in the good DNS servers to replace the criminals’.

The radio spot was last Monday night on ABC Local Radio across NSW with host Dom Knight.

Here’s almost all of the audio recording. There’s an annoying gap around 50 seconds in, and what’s missing is my explanation of the internet’s domain name system (DNS). So if you don’t know what that is, read this first.

The audio is of course ©2012 Australian Broadcasting Corporation, archived here because it isn’t being archived anywhere else.

Flame gets me talking cyberwar worms on The Project

The Flame worm seems to have captured the imagination of the mainstream media this week — to the point where I ended up talking about it on the Channel TEN program The Project on Tuesday night.

If you’re not up to speed yet, try my day one piece for Crikey then my day two piece for CSO Online — the latter having been written after we’d all calmed down a bit.

As you can see, I’ve uploaded the relevant video clip to YouTube because I can’t seem to get the official embed code from The Project’s website to work properly. If that YouTube embed isn’t working either, you can view the segment on YouTube. Or watch the entire program segment on The Project’s website.

Yes, The Project team really did manage to turn a discussion of cyberwar into a joke about masturbating to internet pornography. It’s a talent.

Continue reading “Flame gets me talking cyberwar worms on The Project”

Talking Stuxnet and Flame worms on ABC Local Radio

The Stuxnet worm that attacked Iran’s uranium enrichment program was indeed launched by the US, according to a major investigative report published by the New York Times shortly before I was due to appear on ABC Local Radio this evening.

So guess what we talked about.

Yes, the Stuxnet worm, as well as the newly-discovered Flame worm that’s been in the news this week — including my Day 1 piece for Crikey and Day 2 for CSO Online.

The host was Dom Knight, and here’s a recording of the whole conversation.

The audio is of course ©2012 Australian Broadcasting Corporation. As usual, I post the material I’m involved with here as an archive and reference.

Weekly Wrap 103: Cold, cockatoos and codeine

My week from Monday 21 to Sunday 27 May 2012 saw me return to my usual writing levels — despite continuing pain from my shoulder and a lingering cold which, as I write this, threatens to turn into bronchitis. It’s been rather cold and windy here at Wentworth Falls.

Sadly that meant I didn’t make it to the planned paintball session with Eugene Kaspersky on Wednesday night. It seems that I’m fated not to spend any quality time with Mr K on this Australian trip. I daresay I’ll catch up with him another time. Is that a hint? Der. Of course.

Podcasts

  • Patch Monday episode 139, “War talk dominates AusCERT 2012”, the first of two episodes based on material recorded at the information security conference. The overall theme is that infosec is becoming militarised. We no longer talk about “information assurance” but “defensive cyber operations”. Click through for the full list of speakers.

Articles

There’s one more long story emerging from ideas presented at AusCERT 2012 that was filed late Friday. It will appear tomorrow morning at ZDNet Australia.

Media Appearances

None. Which makes up for last week’s heavy media load.

Corporate Largesse

  • On Thursday I went to a media briefing by Optus Business at Australian Technology Park. They provided lunch, and afterwards a couple of coffees. They also gave me an autographed copy of Peter Hinssen’s book The New Normal: Explore the limits of the digital world. No, me neither.

The Week Ahead

It looks like the coming week will be significantly less intense for me, with a more gentle workload and, with luck, better health.

The only fixed-schedule items will take place during an overnight trip to Sydney on Wednesday. That evening there’s a Sydney Talks seminar entitled It Won’t Happen to Me: Cybercrime Myths and Concepts at the University of New South Wales. (Does anyone want to join me?) Then on Thursday morning Samsung is launching… well, they won’t tell me what, but I suspect it’s their new Samsung Galaxy S III smartphone.

I may well be in Sydney on the weekend too, because Bunjaree Cottages is full up both for that weekend and the following Queen’s Birthday long weekend. Stand by.

Elsewhere

Most of my day-to-day observations are on my high-volume Twitter stream, and random photos and other observations turn up on my Posterous stream (or they used to before my phone camera got a bit too scratched up) and via Instagram. The photos also appear on Flickr, where I eventually add geolocation data and tags. Yes, I should probably update this stock paragraph to match the current reality.

[Photo: A young Yellow-tailed Black Cockatoo (Calyptorhynchus funereus) swoops low overhead at Bunjaree Cottages near Wentworth Falls.]

Transcript: Hacking and irrational actors in Redfern

Back in February I spoke at the “Freedom of Information? panel held in Redfern by Recordkeeping Roundtable. I’ve previously posted the audio of my contribution. Here’s a transcript.

Recordkeeping Roundtable’s website has the raw transcript as supplied, but I’ve decided to edit it up a little to make it more readable. Enjoy.

Continue reading “Transcript: Hacking and irrational actors in Redfern”