Beers with Talos EP24: Reflections on DDoS and Bad Authentication Schemes



Beers with Talos (BWT) Podcast Episode 24 is now available.  Download this episode and subscribe to Beers with Talos:

If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast

EP24 Show Notes: 


Recorded 3/2/18 - Craig is out this week, but the rest of the crew goes through COINHORDER and Memcached, and takes a deeper look at authentication and passwords. We cover an overview of reflection attacks and how some password schemes that are meant to protect, actually cause harm. We also bid you farewell, since our next episode is supposed to be live after the crew hosts a meeting that stands a not-insignificant chance of getting us all fired. Wish us luck — and send us questions that Craig can pose to really important Cisco executives.

The Timeline:

The Roundtable

01:02 - Matt cites support for the technology non-grata list in federal proceedings
06:16 - Joel complains about the weather, discovers Sir Salter Scott
08:48 - Nigel’s Mighty Reds Spotlight segment

The Topics

10:30 - COINHORDER - Stealing bitcoin with AdWords trickery and bulletproof hosting
19:03 - Trustico - Little Bobby Tables lights up the Twitters
25:15 - Passwords, authentication, and other things everyone got wrong from the start
46:10 - Memcached - Reflection attacks from boxes that shouldn’t touch the internet. Stop it.
52:50 - Closing thoughts - shout out to some Julian guy, and why this is our last podcast

The Links:

Scotland snow plow tracker: http://www.bbc.com/news/uk-scotland-42703839
COINHORDER post: https://blog.talosintelligence.com/2018/02/coinhoarder.html
Trustico twitter flames: https://twitter.com/parityzero/status/968955719008509952
Memcached Talos post: http://blog.talosintelligence.com/2017/07/memcached-patch-failure.html
Memcached DDoS: https://thehackernews.com/2018/03/ddos-attack-memcached.html

==========

Featuring: Craig Williams (@Security_Craig), Joel Esler (@JoelEsler), Matt Olney (@kpyke) and Nigel Houghton (@EnglishLFC).
Hosted by Mitch Neff (@MitchNeff).

Find all episodes:
http://cs.co/talospodcast

Subscribe via iTunes (and leave a review!)
http://cs.co/talositunes

Check out the Talos Threat Research Blog:
http://cs.co/talosresearch

Subscribe to the Threat Source newsletter:
http://cs.co/talosupdate

Follow Talos on Twitter:
http://cs.co/talostwitter

Give us your feedback and suggestions for topics:
beerswithtalos@cisco.com
Share: Email, ReBlog, Twitter, Facebook, Pinterest, Google+
Newer Post: Newer Post
Older Post: Older Post
Date:
Edit this post

Discussion

Powered by Manual Template
Name

.NET 0-day 0day ACDSee Adobe advisory adwind AMP Android Antenna House antivirus apple APT arbitrary code execution Attribution Automation Bahamut BASS beers with talos bitcoin Bitvote Black Hat botnet Brazil BRKSEC-2010 CASC chrome cisco Cisco Live Cisco Security Clam AV ClamAV Cobalt group code injection command injection conferences Coverage cryptocurrency cryptomining CSV CTA CVE-2016-8610 CVE-2017-0199 cve-2017-11882 CVE-2017-5638 CVE-2018-3857 CVE-2018-3858 CVE-2018-3859 CVE-2018-3860 CVE-2018-3870 CVE-2018-3871 CVE-2018-8506 cybercrime dark cloud DDE Decryptor Def Con detection dispute DOC DoS Excel Exploit exploit kits RTF fast flux Flash formbook Foscam Foxit Fuzzing gandcrab google GoScanSSH gozi gplayed GravityRAT Group123 Hangul healthcare HWP Hyland IcedID ICS IDA Pro IMAP incident response India inesap infostealer intel iOS IoT iot malware iPhone IR isfb jRAT JScript kernel mode KevDroid Korea Linux macros MalDoc Malware Malware Analysis Malware Research MDM meltdown meraki Microsoft Microsoft Patch Tuesday Middle East miners mining mobile device management monero Moxa ms tuesday natus NavRAT new router malware NordVPN North Korea nvidia Office office router attack Olympic Destoryer Olympic Destroyer Olympics opsec password stealer patch tuesday PDF phishing PhotoLine PLC podcast pony Powershell privilege escalation ProntoVPN PTEX PubNub PubNubRAT py2exe Pyeongchang pyrebox python Qatar ransomware RAT remcos remote access tool remote code execution research research spotlight reven ReversingLabs Rocke Rockwell Automation ROKRAT rootkit rtf ruby ryptoShuffler samsam samsung Scriptlets security updates sennoma signatures SimpleDirect Media Layer smartthings Smoke Loader Snort Snort Rules Sony South Korea spam spectre spyeye stealer steam struts support Talos TALOS-2017-0507 talosintelligence.com telegrab telegram Tetrane Thanatos ThanatosDecryptor threat intelligence Threat Research Threat Research Summit Threat Round-up Threat Roundup ThreatGrid threats TIFF trickbot trojan TTRS Umbrella ursnif VBScript VMI vpn filter attack VPNFiler VPNFilter VPNFilter malware vuln dev vulndev vulnerabilities Vulnerability vulnerability analysis Vulnerability Report Vulnerability Research vulnerability spotlight vulnerabillity vulnerable routers Whitepaper Windows WindowsCodecs.dll wipers xamarin XSS
false
ltr
item
materialize material: Beers with Talos EP24: Reflections on DDoS and Bad Authentication Schemes
Beers with Talos EP24: Reflections on DDoS and Bad Authentication Schemes
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0m-pexbBbjNETotWOqg6RFUTtsOxJT4VQdPtZGm2a7DqkYxRBRFTIedLD3qqtBHKLwEjIdqg6ba-a3QdsOj1qzOLabEvNY5SS_i-8VCgVhyphenhyphen7CujYMnHfrjY2IFlmrw0f6O2bYQRunE54/s640/BWT_EP24_MattBubble.jpg
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0m-pexbBbjNETotWOqg6RFUTtsOxJT4VQdPtZGm2a7DqkYxRBRFTIedLD3qqtBHKLwEjIdqg6ba-a3QdsOj1qzOLabEvNY5SS_i-8VCgVhyphenhyphen7CujYMnHfrjY2IFlmrw0f6O2bYQRunE54/s72-c/BWT_EP24_MattBubble.jpg
materialize material
https://materialize-material.blogspot.com/2018/03/beers-with-talos-ep24-reflections-on.html
https://materialize-material.blogspot.com/
http://materialize-material.blogspot.com/
http://materialize-material.blogspot.com/2018/03/beers-with-talos-ep24-reflections-on.html
true
1816414542238562206
UTF-8
Not found any posts Not found any related posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU Tag ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Contents See also related Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS CONTENT IS PREMIUM Please share to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy