S1E3: "Fuzzy-Wuzzy Was a Bugbear (Was He?)"

Posted
Comments 0

Navigation
Previous EpisodeNext Episode
Log
Recorded (UTC) Aired (UTC) Editor
2016-03-17 02:26:50 2016-03-28 04:14:43 aaron k.
Verification
Format SHA256 GPG Audio File
MP3 4c60282ca1c128126dbf77930b3e488a2cbce9de4afabddea507b5978409e94d click click
OGG 81e6c31f01f062bc67ceae0f8470c06d4c9277c1c676dd0386a74eb9cdefef3f click click

Windows auto-updating, fuzzing, git (yes, again), and more of the ongoing Apple vs. FBI case. We also talk about BYOD (Bring Your Own Devices).

News

Starts at 00m32s.

Notes

Starts at 1m30s.

I was drinking a PBR (yes, I know. Again.), Paden was drinking Buckeye Vodka, and Jthan was drinking Upslope Pale Ale.

  • I’m pretty sure the “free upgrade” to Windows 10 was a precursor to the nigh-forced upgrade.
    • We touch upon some reasons why this is actually a bad idea, despite our hard-on for keeping software updated.
    • Mac OS X does this but on a policy level. This is an example of the packaging changes I talk about.
  • Fuzzing is fun! (8m40s)
    • There are a lot of fuzzers out there. AFL is a nice one. Keyfuzz is a keyboard driver fuzzer! Wfuzz is a fuzzer for websites. ZZUF is a generic input fuzzer for applications, etc. There are a lot of fuzzers out there. For testing netkit, though, I’d definitely start with the BlackHat preso on it.
    • Of course, just doing a netcat somebox.with.telnet.open 23 < /dev/urandom is always fun- see how long it takes before the thing crashes (or the target severs the connection)!
    • The beginner’s guide to fuzzing is here.
  • Git is awesome (15m00s)
  • The FBI vs. Apple case is still a big deal. (20m48s)
    • This is what happens when enforcement agencies want protection circumvented for them.
    • It’s not legal to force Apple to write a backdoor.
  • “Bring Your Own Devices” can be an issue (29m15s)

Errata

  • I state that Tunnelblick is the “best” OpenVPN option for Mac OS X, but my boss (which I just found out listens to the show, apparently) mentioned Viscosity. It’s a bit prettier and easier to use, and was definitely worth a mention. I had totally forgotten about it! Unlike Tunnelblick, however, it’s not free/libre (9USD). They also, apparently, have a Windows port (which Tunnelblick does not- and the OpenVPN-provided GUI for Windows is atrocious). Another alternative is Shimo.

Music

Music Credits
Track Title Artist Link Copyright/License
Intro The Curtain Rises Kevin MacLeod click CC-BY 3.0
Outro Allada Kevin MacLeod click CC-BY 3.0
(All music is royalty-free, properly licensed for use, used under fair use, or public domain.)

Author
Categories Season One

Comments

There are currently no comments on this article.

Comment...

Enter your comment below. Fields marked * are required. You must preview your comment before submitting it.