From EuroTrashSecurity

Contents 1 Episode 20 1.1 Our Guest 1.2 News Stories 1.3 ANNOUNCEMENTS 1.4 FIRST 2011 Ticket Competition

Episode 20

listen now

This month we're joined by Marisa Fagan from the Infosec Mentors program to discuss what's been going on with them in the last 12 months and what the future holds for Infosec Mentors. The InfoSec Mentors project was inspired by Stacy Thayer and her continued emphasis on mentoring programs during SOURCE Boston. The project was founded by Marisa Fagan, and she continues to direct the operations of ISMP. In November 2010, Wim Remes joined the team as the director of the EU/Non-US mentorships.

Our Guest

Marisa Fagan is the founder of Infosec Mentors and continues to direct operations, as well as being the "match maker" for mentors and mentees around the world.

http://www.twitter.com/dewzi http://www.twitter.com/infosecmentors http://www.infosecmentors.com

News Stories

Net giants challenge French data law

• http://www.bbc.co.uk/news/technology-12983734

Google and Facebook are among a group of net heavyweights taking the French government to court this week.

The legal challenge has been brought by The French Association of Internet Community Services (ASIC) and relates to government plans to keep web users' personal data for a year.

Russian pres fumes at mystery DDoS hack

• http://www.theregister.co.uk/2011/04/08/russian_ddos_assaults/

Russian president Dmitry Medvedev has denounced online vandals who launched an attack against the site that hosts his blog.

dhclient does not strip or escape shell meta-characters

• https://www.isc.org/software/dhcp/advisories/cve-2011-0997

dhclient doesn't strip or escape certain shell meta-characters in dhcpd responses, allowing a rogue server or party with with escalated privileges on the server to cause remote code execution on the client.

APT APT APT APT APT....

• http://blogs.rsa.com/rivner/anatomy-of-an-attack/

Fired Employee Indicted For Hacking Gucci Network

• http://www.informationweek.com/news/security/NAC/showArticle.jhtml?articleID=229400909

Lawsuit: Fired data center worker wiped out TV show

• http://www.itworld.com/security/142270/lawsuit-fired-data-center-worker-wiped-out-tv-show

Weaknesses in SSL certification exposed by Comodo security breach

• http://www.infoworld.com/t/authentication/weaknesses-in-ssl-certification-exposed-comodo-security-breach-593

ANNOUNCEMENTS

BSides London is next week... drop by to see Wicked Clown and Chris John Riley do there thing! Funny enough, both will be dressed as gay bikers. One willingly, the other out of habit ;)

BSides Vienna has been announced. Junne 18th in Vienna, Austria.... Tickets are available through http://www.bsidesvienna.com and the CFP is OPEN (http://cfp.bsidesvienna.com)

FIRST 2011 Ticket Competition

We announce the FIRST 2011 Ticket challenge.... FIRST2011Challenge