Show notes for January 4, 2009
 
Administrative
 
Ovie got a new editing setup for Christmas and his new years resolution is to stop posting substandard chopped up podcasts. :)

DoD Cybercrime Conference â January 26-30, 2009

Review of 2008 New Year predictions...?

Listener Email  

A federal agent sent us an email and a nice donation and said thank you both for the great podcast.  Drake wrote in to make a quick correction :)  Windows Steady State (previously branded as shared access) doesn't require a special partition or unpartitioned space, in fact I don't see that it makes any visible changes to the drive partition setup at all.

42 LLC developed some EnScripts that they are offering up to the community for open beta.  If you register an account on our forums you will be able to download the scripts and any updates we publish.
http://42llc.net

News  

If Santa left you a Samsung digital picture frame, you might want to check it for virus.  The gift giving culprits is the SPF-85H 8-Inch Digital Photo Frames w/1GB Internal Memory, designed to work with Windows-based PCs via a USB connector sold between October and December 2008 for about $150 through Amazon. 

Breathalizer for your PC?

New HP Windows Home Server to backup MAC OSX systems
December 29, 2008 Hewlett-Packard Co. is adapting its latest MediaSmart Windows home servers to back up customers' Mac computers using the OS X's Time Machine auto-backup feature.

Tech Topics  

VoomTech releases their Hard Copy 3.  Can output to 2 drives without slowing down.  The new SHA256 hashing offers greater strength then the MD5 hash.  At 7.5 GB per minute, HardCopy 3 is the hands-down fastest forensic hard drive duplicator anywhere!  And HardCopy 3 still costs less than our over-priced competitors ($1599)

Web Sites  of the Week

http://now.sprint.com/widget/
http://blip.fm
http://letmegooglethatforyou.com/

This is a reposting of the Dec 21, 2008 show to fix the audio levels. Many thanks to George Starcher!!! Ovie goofed up the levels.

"Dude, where's my Podcast?!"

Today Bret and Ovie talk to Matthew Shannon from F-Response!  We discuss a ruling on 4th Amendment Search with Hashsets. 

Harlan Carvey teaches Knitting.

Websites of the Week
Dots Gloves
Google Video
Opps I Am Late
Google Tenth Birthday

And don't forget to go to F-Response.com and take a look at the videos!!

This week Ovie and Bret talk about the SANS What Works in Forensics and Incident Response Summit.  We also cover memory imaging with MDD and Volatility.  Website of the week 123people.com. 

Take Care!

Today, Kevin Mandia is on the show talking about the State of the Incident Response, CyberSpeak Listeners get big discount to SANS Forensic Summit (CODE: Cyberspeak10), Ovie and Bret discuss listener email, PC Magazine's Cybercrime hall of fame hackers, Shawn Henry gets a promotion as the new FBI AD Cyber-Division and legalalities of boarder searches. Web site picks of the week are http://vajachoice.com/index1.html and http://privnote.com

This week, Bret and Ovie talk with Jesse Kornblum about...Fun tricks with computer memory.  In listener email we hear about a 2 year old April Fools joke that is still fooling people, we discuss how a Texas law requiring private investigator licenses could be putting geek squad and other innocent people in violation of the law.  Help is on the way as FBI opens a new RCFL in Houston.  In tech topics we discuss an information leakage paper on TrueCrypt.  Keep those emails coming at cyberspeak *at* gmail.com.

Today Ovie and Bret clean out the mail bag! We talk about free forensic tools, the stimulus check, Gadget Track, bypassing the BIOS, imaging RAM and www.getmooh.com.

Video instructing people to never talk to the Police is at http://video.google.com/videoplay?docid=-4097602514885833865

Give us your thoughts about the video....

CYBERSPEAK -at- GMAIL dot COM

Bret and Ovie are back! (Yeah, Bret and Ovie - Not Ovie and Bret) :) Today they talk about low cost forensic imaging, hacking the London Tube, American Boat Co v. Unknown Sunken Barget I & II, modify your Macbook Air DVD drive, the Eye-Fi card, Gadget Track, Tripit, and Glassdoor.

The forensic exam report we refer to is here: http://blogs.csoonline.com/files/Forensic%20Report.pdf

Ovie and I are back from travel and hope to have more new shows soon!!

OUR EMAIL ADDRESS IS CYBERSPEAK -at- GMAIL.COM

This week we discuss Brets new Kendle, Ovieâs new neat receipts and givce a secret to listen to podcasts twice as fast as before.   The episode focused on forensic news and legal decisions of interest, specifically a APC pirate being convicted, a study that reports 68 percent of all internet-based malware was now being hosted on legitimate sites, Bot-herder Greg King is found guilty on two counts for launching a DDOS against Castel Cops, and Perdue offering Mac Forensics training for 100 law enforcement.  In legal news, we discuss Reasonable expectation of privacy and an allegation a warrant did not have probable cause for a computer search. Web sites of the week included www.zinio.com and http://fedorahosted.org/liveusb-creator. 

Mac Forensic Training at Purdue university, Email Marcus for more info at rogersmk@purdue.edu. Study reports 68 percent of all internet-based malware was now being hosted on legitimate sites. http://news.zdnet.co.uk/security/0,1000000189,39429909,00.htm Barry Gitarts, 25, of Brooklyn, N.Y., was convicted today by a jury in the Eastern District of Virginia of conspiracy to commit criminal copyright infringement Fedora live cd creator https://fedorahosted.org/liveusb-creator

This is a repost to fix bad audio file.

Happy Fathers Day!  This week we discuss Brets new Kendle, Ovieâs new neat receipts and givce a secret to listen to podcasts twice as fast as before.   The episode focused on forensic news and legal decisions of interest, specifically a APC pirate being convicted, a study that reports 68 percent of all internet-based malware was now being hosted on legitimate sites, Bot-herder Greg King is found guilty on two counts for launching a DDOS against Castel Cops, and Perdue offering Mac Forensics training for 100 law enforcement.  In legal news, we discuss Reasonable expectation of privacy and an allegation a warrant did not have probable cause for a computer search. Web sites of the week included www.zinio.com and http://fedorahosted.org/liveusb-creator.  

Memorial Day Posdcast and interview tih Mark McKinnon from Red Wolf Computer Forensics about his CSC Parser.  It can be downloaded from here http://redwolfcomputerforensics.com/downloads/CSC_Parser.zip . Also check out his blog at http://cfed-ttf.blogspot.com

This week, Bret and Ovie interview Al Lewis from Subrosasoft http://www.macforensicslab.com about the Mac Lockpick. We discuss the new Mac lockpick that can be preconfigured to collect volatile data on Windows, Mac and Linux System. This is the first cross platform utility we have seen. Web sites of the week include www.flyclear.com - use refer a friend code: DSCAM1127098
and Ovie gets an extra month free. Oh, and I forgot Bret's web site but will find it and get it posted soon....I am sure it was a MAC website.

This week, Ovie's back from SANS, Bret's on his way back to Kuwait. This week Ovie and Bret answer some great listener email.  Imaging an Apple XRaid, Google getting into the game of image recognition to help identify people exploiting children, Andrew sent in a website with a great collection of file signatures, and Web Sites of the week are Netflix Thief Caught in the Act and http://www.southparkstudios.com/ and Windows Live Mesh

  

Bret and Ovie discuss Didier's email and the possibility of web browser prefetching links in an FBI sting operation. Michael helps clarify the OLD phpBB vulnerability, the UK's founding forensic father escapes a jail sentence for fraud and Kerry sent in a list of hundreds of forensic PDF files and makes sure we knew about Quickview Plus (we also suggest Thumbs plus for reviewing large number of graphics). Symantec Corporation released their comprehensive security report on the malware industry and Microsoft turns out to be the Best at patching vulnerabilities the quickest. The full report is available here.  Bret and Ovie discuss Skype and the technical data points of interest when conducting forensics.  Web sites of the week include Teleflip and Twitter as we are now trying to tweetâ.erâtwitter.  Follow Bret and Ovie.

Bret and Ovie discuss a listeners question about a sting operation to lure people wanting to look at child porn to click on a fake web link and get busted for âattempted possession of child pornâ?. What do you think? Fair or Unfair? We think it is NOT entrapment but could be too close to the line. Itâs Miller Time after hacking an Apple in 2 minutes and Vista proves more secure than apple in CanSecWest. The government can now wiretap for a week before submitting a request to wiretap suspected terrorist. The King of Spam gets 26 years in jail. A new vulnerability affecting PHPbb sites, 30 months in prison for spoofing telephone numbers and placing phony emergency calls to manipulate police SWAT teams, Websites of the week include Stuff White People Like, and A special tech tip - append â&fmt=6â? (NO QUOTES) to the URL of your You Tube Video for better resolution.

Bret and Ovie discuss a listeners question about a sting operation to lure people wanting to look at child porn to click on a fake web link and get busted for âattempted possession of child pornâ?. What do you think? Fair or Unfair? We think it is NOT entrapment but could be too close to the line. Itâs Miller Time after hacking an Apple in 2 minutes and Vista proves more secure than apple in CanSecWest. The government can now wiretap for a week before submitting a request to wiretap suspected terrorist. The King of Spam gets 26 years in jail. A new vulnerability affecting PHPbb sites, 30 months in prison for spoofing telephone numbers and placing phony emergency calls to manipulate police SWAT teams, Websites of the week include Stuff White People Like, and A special tech tip - append â&fmt=6â? (NO QUOTES) to the URL of your You Tube Video for better resolution.

This week Ovie talks about Samaritans Feet in South East DC, calendar syncing problems, Plaxo suggested by two listeners. A programming mistake leads to a G-Archiver reveationâand 1700 other peopleâs passwords. Ovie and Bret discuss WiebeTechâs fantastic new forensic combo dock. Web site of the week is Programmers Notepad

Today Bret and Ovie talk with Dr. Simson Garfinkel about the Advanced Forensic Format (AFF). We also cover listener feedback and a Judge raps forensic expert for delaying child-porn cases. LINKS: www.afflib.org www.alberteinstein.info/ google.com/calendar We apologize for some of the audio quality during the interview with Dr. Garfinkel. Thanks again for listening!!! Spread the word!

Show notes soon

This week on Cyberspeak, Ovieâs Invisible Shield came in for his blackberry and he loves it. We discuss US v Boucher and the Fifth Amendment protection not to be compelled to disclose passwords. For some great reading on the issue, check out Susan Brennerâs blog post. Department of Defense considers cutting off all non-official Internet access.   We discuss whole disk encryption and new advertised features in True Crypt V5.  We discuss Nuix, a new forensic utility with special application for analysis of emails.  Do you encrypt you forensic images before transport?  Ovieâs Web site pick of the week is http://www.bureauofcommunication.com/compose/apology and Bretâs is Hackers Diet.

Happy New Year...Today Bret and Ovie talk about 2008 Predictions.  We also talk about Bret breaking his IPhone, Black Hat DC, Mac World 2008, security vulnerabilities in the new Boeing 787, Bill Gates retirement video, www.cybercrime.gov, very quick way to wipe a hard drive with badblocks, private investigator story in the news again, search of computer in tax fraud investigation was ruled valid, Alienware 30 inch curved monitor, and Ovie saves the world with invisibleshield.