Episode 0x76 Ready for a surprise thing? Yup. We found spare time and did a thing. Here's the thing. You get to spend a whole lot of time listen to security old farts.   Upcoming this week...  Lots of News Breaches SCADA / Cyber, cyber... etc. finishing it off with DERPs/Mailbag (or Deep Dive) And there are weekly Briefs - no arguing or discussion allowed  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  News and Commentary   Rogers Outage - the CRTC letter and An analysis on the BGP route withdrawal Why Bug Bounty Programs are Failing CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks   Breaches    Yeah. You've been Shanghai'd - maybe?   SCADA / Cyber, cyber... etc    SCADA market to reach 13+ Billion in 4 years - will any of it be secure?  Uber won't get prosecuted for their 2016 breach, but...   DERP   Oldie but goodie - Elon's plane being tracked is a security issue... and  Drake tries to make it better and fails so miserably... derp.   Mailbag   You guys are not good at segways... or segues  https://www.merriam-webster.com/dictionary/segue   Briefly -- NO ARGUING OR DISCUSSION ALLOWED   Awesome Security (tools and stuff) Samsung has a thing that sounds like a backdoor but actually isn't As Microsoft blocks Office macros, hackers find new attack vectors   Closing Thoughts   Seacrest Says: Seacrest says see you at band camp    Creative Commons license: BY-NC-SA

Episode 0x76 Ready for a surprise thing? Yup. We found spare time and did a thing. Here's the thing. You get to spend a whole lot of time listen to security old farts. Upcoming this week... <ol> <li>Lots of News</li> <li>Breaches</li> <li>SCADA / Cyber, cyber... etc.</li> <li>finishing it off with DERPs/Mailbag (or Deep Dive)</li> <li>And there are weekly Briefs - no arguing or discussion allowed</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>News and Commentary</li> <li> <ol> <li><a href="https://crtc.gc.ca/public/otf/2022/c12_202203868/4215445.docx" rel="nofollow" target="_blank">Rogers Outage - the CRTC letter</a> and <a href="https://www.kentik.com/blog/a-deeper-dive-into-the-rogers-outage/" rel="nofollow" target="_blank">An analysis on the BGP route withdrawal</a></li> <li><a href="https://www.darkreading.com/black-hat/why-bug-bounty-programs-failing-everyone" rel="nofollow" target="_blank">Why Bug Bounty Programs are Failing</a></li> <li><a href="https://thehackernews.com/2022/07/cisa-warns-of-atlassian-confluence-hard.html" rel="nofollow" target="_blank">CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks</a></li> </ol> </li> <li>Breaches</li> <li> <ol> <li><a href="https://www.darkreading.com/cloud/questions-massive-shanghai-police-data-breach" rel="nofollow" target="_blank"> Yeah. You've been Shanghai'd - maybe?</a></li> </ol> </li> <li>SCADA / Cyber, cyber... etc</li> <li> <ol> <li><a href="https://www.globenewswire.com/en/news-release/2022/06/13/2461356/0/en/SCADA-Market-Projected-to-Reach-13-2-billion-by-2026.html" rel="nofollow" target="_blank"> SCADA market to reach 13+ Billion in 4 years - will any of it be secure?</a></li> <li><a href="https://www.justice.gov/usao-ndca/pr/uber-enters-non-prosecution-agreement" rel="nofollow" target="_blank"> Uber won't get prosecuted for their 2016 breach, but...</a></li> </ol> </li> <li>DERP</li> <li> <ol> <li><a href="https://www.teslarati.com/elon-musk-travel-plans-security-issue/" rel="nofollow" target="_blank">Oldie but goodie - Elon's plane being tracked is a security issue...</a> and <a href="https://www.thestar.com/news/gta/2022/07/29/drake-responds-to-criticism-over-his-private-jets-short-flights.html" rel="nofollow" target="_blank"> Drake tries to make it better and fails so miserably... derp.</a></li> </ol> </li> <li>Mailbag</li> <li> <ol> <li>You guys are not good at segways... or segues <a href="https://www.merriam-webster.com/dictionary/segue" rel="nofollow" target="_blank">https://www.merriam-webster.com/dictionary/segue</a></li> </ol> </li> <li>Briefly -- NO ARGUING OR DISCUSSION ALLOWED</li> <li> <ol> <li><a href="https://github.com/sbilly/awesome-security" rel="nofollow" target="_blank">Awesome Security (tools and stuff)</a></li> <li><a href="https://arstechnica.com/gadgets/2022/07/samsungs-repair-mode-lets-technicians-look-at-your-phone-not-your-data/" rel="nofollow" target="_blank">Samsung has a thing that sounds like a backdoor but actually isn't</a></li> <li><a href="https://www.bleepingcomputer.com/news/security/as-microsoft-blocks-office-macros-hackers-find-new-attack-vectors/" rel="nofollow" target="_blank">As Microsoft blocks Office macros, hackers find new attack vectors</a></li> </ol> </li> <li>Closing Thoughts</li> <li> <ol> <li>Seacrest Says: Seacrest says see you at band camp</li> </ol> </li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 76

Episode 0x75 10th Anniversary Special We should have something snappy here, but we're old and out of belt-onions Upcoming this week...  Lots of News Breaches SCADA / Cyber, cyber... etc. finishing it off with DERPs/Mailbag (or Deep Dive) And there are weekly Briefs - no arguing or discussion allowed  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  News and Commentary   Whats changed in infosec since we last talked? Coinbase highlighting the risk of centralizing a decentralized system Great podcast from Odd Lots - the ponzinomics of cryptocurrency New Vulnerability Database Catalogs Cloud Security Issues Data breach at US ambulance billing service Comstar exposed patients’ healthcare information   Breaches      In Canada... largest breach settlement   SCADA / Cyber, cyber... etc   Wired knows shit. Deep fake remote IT job applicants   DERP       Mailbag   It's been a rough couple of years. We missed a lot. Some friends departed. How are y'all handling things? ~a long time listener    Briefly -- NO ARGUING OR DISCUSSION ALLOWED   I'm hiring Me too Risk Disconnect in the Cloud Supply chain Levels for Software Artifacts https://jobs.cisco.com/We're hiring at Cisco   Closing Thoughts   Seacrest Says: Dave qualifies for senior AARPdiscounts now      Creative Commons license: BY-NC-SA

Episode 0x75 10th Anniversary Special We should have something snappy here, but we're old and out of belt-onions Upcoming this week... <ol> <li>Lots of News</li> <li>Breaches</li> <li>SCADA / Cyber, cyber... etc.</li> <li>finishing it off with DERPs/Mailbag (or Deep Dive)</li> <li>And there are weekly Briefs - no arguing or discussion allowed</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>News and Commentary</li> <li> <ol> <li><a href="https://mobile.twitter.com/mattjay/status/1519435142145748998" rel="nofollow" target="_blank">Whats changed in infosec since we last talked?</a></li> <li><a href="https://theintercept.com/2022/06/29/crypto-coinbase-tracer-ice/" rel="nofollow" target="_blank">Coinbase highlighting the risk of centralizing a decentralized system</a></li> <li><a href="https://podcasts.apple.com/ca/podcast/odd-lots/id1056200096?i=1000558582549" rel="nofollow" target="_blank">Great podcast from Odd Lots - the ponzinomics of cryptocurrency</a></li> <li><a href="https://www.darkreading.com/cloud/new-initiative-seeks-to-shed-light-on-cloud-vulnerabilities" rel="nofollow" target="_blank">New Vulnerability Database Catalogs Cloud Security Issues</a></li> <li><a href="https://portswigger.net/daily-swig/data-breach-at-us-ambulance-billing-service-comstar-exposed-patients-healthcare-information" rel="nofollow" target="_blank">Data breach at US ambulance billing service Comstar exposed patients’ healthcare information</a></li> </ol> </li> <li>Breaches</li> <li> <ol> <li> </li> <li><a href="https://www.cbc.ca/news/canada/montreal/quebec-court-settlement-desjardins-data-breach-1.6493397" rel="nofollow" target="_blank"> In Canada... largest breach settlement</a></li> </ol> </li> <li>SCADA / Cyber, cyber... etc</li> <li> <ol> <li><a href="https://www.wired.com/tag/cybersecurity/" rel="nofollow" target="_blank">Wired knows shit.</a></li> <li><a href="https://www.ic3.gov/Media/Y2022/PSA220628" rel="nofollow" target="_blank">Deep fake remote IT job applicants</a></li> </ol> </li> <li>DERP</li> <li> <ol> <li> </li> </ol> </li> <li>Mailbag</li> <li> <ol> <li>It's been a rough couple of years. We missed a lot. Some friends departed. How are y'all handling things? ~a long time listener </li> </ol> </li> <li>Briefly -- NO ARGUING OR DISCUSSION ALLOWED</li> <li> <ol> <li><a href="https://www.redditinc.com/careers" rel="nofollow" target="_blank">I'm hiring</a></li> <li><a href="https://aiven.io/careers" rel="nofollow" target="_blank">Me too</a></li> <li><a href="https://www.darkreading.com/cloud/risk-disconnect-in-the-cloud" rel="nofollow" target="_blank">Risk Disconnect in the Cloud</a></li> <li><a href="https://slsa.dev/spec/v0.1/requirements" rel="nofollow" target="_blank">Supply chain Levels for Software Artifacts</a></li> <li><a href="https://jobs.cisco.com/We're" rel="nofollow" target="_blank">https://jobs.cisco.com/We're</a> hiring at Cisco</li> </ol> </li> <li>Closing Thoughts</li> <li> <ol> <li>Seacrest Says: Dave qualifies for senior AARPdiscounts now</li> </ol> </li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 75

Episode 0x74 Quarantine 2020 Edition All the late shows are doing the "I phoned in from home" why shouldn't we? Upcoming this week...  Lots of News Breaches SCADA / Cyber, cyber... etc. finishing it off with DERPs/Mailbag (or Deep Dive) And there are weekly Briefs - no arguing or discussion allowed  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  News and Commentary   coronavirus insider trading fixing vulns at scale US authorities battle surge in coronavirus scams, from phishing to fake treatments Coronavirus Sets the Stage for Hacking Mayhem   Breaches    Princess Cruises Confirms Data Breach  Rogers had a woopsie   SCADA / Cyber, cyber... etc    Hackers Promise 'No More Healthcare Cyber Attacks' During COVID-19 Crisis   DERP   Stupid shit that vendors say due to Coronavirus (THIS)   Mailbag   So... what about actually doing this podcast a little more often? Signed: The Internet  What do you mean our RSS feed didn't update? What do you mean RSS is dead?   Briefly -- NO ARGUING OR DISCUSSION ALLOWED   cyentia 2020 information risk insights study On Making Work Less Remote: How the Heroku Team Works Together HBR has some thoughts on newly remote teams too automated reasoning about AWS security s3 thinger  https://twitter.com/JSTOR/status/1240306471168028674?s=20Get bent JSTOR   Closing Thoughts   Seacrest Says: There's finally a word for what we do... On-nomi    Creative Commons license: BY-NC-SA

Episode 0x74 Quarantine 2020 Edition All the late shows are doing the "I phoned in from home" why shouldn't we? Upcoming this week... <ol> <li>Lots of News</li> <li>Breaches</li> <li>SCADA / Cyber, cyber... etc.</li> <li>finishing it off with DERPs/Mailbag (or Deep Dive)</li> <li>And there are weekly Briefs - no arguing or discussion allowed</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>News and Commentary</li> <li> <ol> <li><a href="https://www.politico.com/news/2020/03/19/senate-intel-chair-warned-of-coronavirus-disruption-in-private-137407" rel="nofollow" target="_blank">coronavirus insider trading</a></li> <li><a href="https://securitylab.github.com/research/CERT-CVE-2020-8527-automated-remediation-scale" rel="nofollow" target="_blank">fixing vulns at scale</a></li> <li><a href="https://www.theguardian.com/world/2020/mar/19/coronavirus-scams-phishing-fake-treatments" rel="nofollow" target="_blank">US authorities battle surge in coronavirus scams, from phishing to fake treatments</a></li> <li><a href="https://www.wired.com/story/coronavirus-cyberattacks-ransomware-phishing/" rel="nofollow" target="_blank">Coronavirus Sets the Stage for Hacking Mayhem</a></li> </ol> </li> <li>Breaches</li> <li> <ol> <li><a href="https://www.darkreading.com/attacks-breaches/princess-cruises-confirms-data-breach/d/d-id/1337311" rel="nofollow" target="_blank"> Princess Cruises Confirms Data Breach</a></li> <li><a href="https://www.bleepingcomputer.com/news/security/rogers-data-breach-exposed-customer-info-in-unsecured-database/" rel="nofollow" target="_blank"> Rogers had a woopsie</a></li> </ol> </li> <li>SCADA / Cyber, cyber... etc</li> <li> <ol> <li><a href="https://www.forbes.com/sites/daveywinder/2020/03/19/coronavirus-pandemic-self-preservation-not-altruism-behind-no-more-healthcare-cyber-attacks-during-covid-19-crisis-promise/#2e296c4a252b" rel="nofollow" target="_blank"> Hackers Promise 'No More Healthcare Cyber Attacks' During COVID-19 Crisis</a></li> </ol> </li> <li>DERP</li> <li> <ol> <li><a href="#" rel="nofollow" target="_blank">Stupid shit that vendors say due to Coronavirus (THIS)</a></li> </ol> </li> <li>Mailbag</li> <li> <ol> <li>So... what about actually doing this podcast a little more often? Signed: The Internet What do you mean our RSS feed didn't update? What do you mean RSS is dead?</li> </ol> </li> <li>Briefly -- NO ARGUING OR DISCUSSION ALLOWED</li> <li> <ol> <li><a href="https://www.cyentia.com/2020-information-risk-insights-study/" rel="nofollow" target="_blank">cyentia 2020 information risk insights study</a></li> <li><a href="https://blog.heroku.com/on-making-work-less-remote" rel="nofollow" target="_blank">On Making Work Less Remote: How the Heroku Team Works Together</a></li> <li><a href="https://hbr.org/2020/03/a-guide-to-managing-your-newly-remote-workers" rel="nofollow" target="_blank">HBR has some thoughts on newly remote teams too</a></li> <li><a href="https://aws.amazon.com/blogs/security/protect-sensitive-data-in-the-cloud-with-automated-reasoning-zelkova/" rel="nofollow" target="_blank">automated reasoning about AWS security</a></li> <li><a href="https://blog.usejournal.com/finding-mcafee-a-case-study-on-geoprofiling-and-imagery-analysis-6f16bbd5c219" rel="nofollow" target="_blank">s3 thinger</a></li> <li> <a href="https://twitter.com/JSTOR/status/1240306471168028674?s=20Get" rel="nofollow" target="_blank">https://twitter.com/JSTOR/status/1240306471168028674?s=20Get</a> bent JSTOR</li> </ol> </li> <li>Closing Thoughts</li> <li> <ol> <li>Seacrest Says: There's finally a word for what we do... <a href="https://boingboing.net/2020/03/13/on-nomi.html" rel="nofollow" target="_blank">On-nomi</a></li> </ol> </li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 74

Episode 0x73 Surprise! Happy Holidays Are you having a happy holiday? Listen to us and you'll have a happy holiday. Upcoming this week...  Lots of News Breaches SCADA / Cyber, cyber... etc. finishing it off with DERPs/Mailbag (or Deep Dive) And there are weekly Briefs - no arguing or discussion allowed  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  News and Commentary   Comparison of DNS resolvers Stylish Norton Core Router Russian wessels messing with underwater internetsSubmarine Cable Map Keeper Security learns about The Striesand Effect Russian hackers targeted more than 200 journalists globally   Breaches    Internet Hijacking  Free Credit Monitoring from Nissan Finance Canada!   SCADA / Cyber, cyber... etc    VMWare has bugs. Who knew?   DERP   The person that thought we our recent fail panel was unprofessional Screenshot kernel patch   Mailbag   So... what about actually doing this podcast a little more often? Signed: The Internet   Briefly -- NO ARGUING OR DISCUSSION ALLOWED   Enpass Pineapple Fund Die Hard at the Theatre Magic Leap is real... ish Has no link.   Closing Thoughts   Seacrest Says: Where the fuck is Matt? Has anyone seen Matt?      Creative Commons license: BY-NC-SA

Episode 0x73 Surprise! Happy Holidays Are you having a happy holiday? Listen to us and you'll have a happy holiday. Upcoming this week... <ol> <li>Lots of News</li> <li>Breaches</li> <li>SCADA / Cyber, cyber... etc.</li> <li>finishing it off with DERPs/Mailbag (or Deep Dive)</li> <li>And there are weekly Briefs - no arguing or discussion allowed</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>News and Commentary</li> <li> <ol> <li><a href="https://medium.com/@nykolas.z/dns-security-filters-compared-quad9-x-opendns-x-comodo-secure-x-norton-connectsafe-x-yandex-safe-a00ace3bf21f" rel="nofollow" target="_blank">Comparison of DNS resolvers</a><a href="https://www.pcmag.com/news/350707/stylish-norton-core-router-secures-your-network-iot-devices" rel="nofollow" target="_blank"> Stylish Norton Core Router</a></li> <li><a href="http://thehill.com/policy/defense/366290-russian-submarine-activity-increases-around-under-sea-internet-cables" rel="nofollow" target="_blank">Russian wessels messing with underwater internets</a><a href="https://www.submarinecablemap.com/" rel="nofollow" target="_blank">Submarine Cable Map</a></li> <li><a href="https://boingboing.net/2017/12/21/keeper-v-goodin-et-al.html" rel="nofollow" target="_blank">Keeper Security learns about The Striesand Effect</a></li> <li><a href="https://www.theglobeandmail.com/news/world/russian-hackers-targeted-more-than-200-journalists-globally/article37417509/" rel="nofollow" target="_blank">Russian hackers targeted more than 200 journalists globally</a></li> </ol> </li> <li>Breaches</li> <li> <ol> <li><a href="https://arstechnica.com/information-technology/2017/12/suspicious-event-routes-traffic-for-big-name-sites-through-russia/" rel="nofollow" target="_blank"> Internet Hijacking</a></li> <li><a href="https://threatpost.com/nissan-canada-finance-notifies-1-1-million-of-data-breach/129233/" rel="nofollow" target="_blank"> Free Credit Monitoring from Nissan Finance Canada!</a></li> </ol> </li> <li>SCADA / Cyber, cyber... etc</li> <li> <ol> <li><a href="https://www.zerodayinitiative.com/blog/2017/12/21/vmwares-launch-escape-system" rel="nofollow" target="_blank"> VMWare has bugs. Who knew?</a></li> </ol> </li> <li>DERP</li> <li> <ol> <li><a href="https://sector.ca/sessions/fail-panel-version-5-equifail/" rel="nofollow" target="_blank">The person that thought we our recent fail panel was unprofessional</a></li> <li><a>Screenshot kernel patch</a></li> </ol> </li> <li>Mailbag</li> <li> <ol> <li>So... what about actually doing this podcast a little more often? Signed: The Internet</li> </ol> </li> <li>Briefly -- NO ARGUING OR DISCUSSION ALLOWED</li> <li> <ol> <li><a href="https://www.enpass.io/" rel="nofollow" target="_blank">Enpass</a></li> <li><a href="https://pineapplefund.org/" rel="nofollow" target="_blank">Pineapple Fund</a></li> <li><a href="https://www.cineplex.com/Movie/die-hard" rel="nofollow" target="_blank">Die Hard at the Theatre</a></li> <li><a href="https://www.magicleap.com/" rel="nofollow" target="_blank">Magic Leap is real... ish</a></li> <li>Has no link.</li> </ol> </li> <li>Closing Thoughts</li> <li> <ol> <li>Seacrest Says: Where the fuck is Matt? Has anyone seen Matt?</li> </ol> </li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 73

Episode 0x72 SPECIAL ELECTION EDITION Vote Dave... please? Upcoming this week...  We yammer about stuff with no real direction or point.  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  SCADA / Cyber, cyber... etc    ETERNALBLUE was being used before wannacry   DERP    Hacking Mar-A-Largo... Kinda? Is this legal?   Briefly -- NO ARGUING OR DISCUSSION ALLOWED   https://securityheaders.io/ https://www.gofundme.com/crunch-medical-fund   Liquidmatrix Products and Services - We do some stuff. Seriously.   Advertising - pay the bills...   Thinking about SecTor this November? Be sure to use the code "liquidmatrix2017" and save 10% off the registration fee! Or if you've just got time to cruise the SecTor Expo Hall, the code "liquidmatrix2017expo" will get you in for $0   Seacrest Says: I can't even remember... something about Kelly.   Closing Thoughts      Creative Commons license: BY-NC-SA

Episode 0x72 SPECIAL ELECTION EDITION Vote Dave... please? Upcoming this week... <ol> <li>We yammer about stuff with no real direction or point.</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>SCADA / Cyber, cyber... etc</li> <li> <ol> <li><a href="https://www.grahamcluley.com/cryptocurrency-mining-malware-using-wannacrys-nsa-exploit-weeks/" rel="nofollow" target="_blank"> ETERNALBLUE was being used before wannacry</a></li> </ol> </li> <li>DERP</li> <li> <ol> <li><a href="http://gizmodo.com/any-half-decent-hacker-could-break-into-mar-a-lago-we-1795276155" rel="nofollow" target="_blank"> Hacking Mar-A-Largo... Kinda? Is this legal?</a></li> </ol> </li> <li>Briefly -- NO ARGUING OR DISCUSSION ALLOWED</li> <li> <ol> <li><a href="Scott%20Helms'%20Security%20Headers*" rel="nofollow" target="_blank">https://securityheaders.io/</a></li> <li><a href="Captain%20Crunch%20needs%20our%20help" rel="nofollow" target="_blank">https://www.gofundme.com/crunch-medical-fund</a></li> </ol> </li> <li>Liquidmatrix Products and Services - We do some stuff. Seriously.</li> <li> <ol> <li>Advertising - pay the bills...</li> <li> <ol> <li>Thinking about <a href="http://sector.ca" rel="nofollow" target="_blank">SecTor</a> this November? Be sure to use the code "liquidmatrix2017" and save 10% off the registration fee! Or if you've just got time to cruise the <a href="http://sector.ca" rel="nofollow" target="_blank">SecTor</a> Expo Hall, the code "liquidmatrix2017expo" will get you in for $0</li> </ol> <ol> <li>Seacrest Says: I can't even remember... something about Kelly.</li> </ol> </li> <li>Closing Thoughts</li> </ol> </li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 72

Episode 0x71 Um... We're back? I think it's called falling off the wagon. We did that. We should get back on the wagon. Why is it always a wagon? Upcoming this week...  /dev/random  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  We totally forgot show-notes    Creative Commons license: BY-NC-SA

Episode 0x71 Um... We're back? I think it's called falling off the wagon. We did that. We should get back on the wagon. Why is it always a wagon? Upcoming this week... <ol> <li>/dev/random</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>We totally forgot show-notes</li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 71

Samy Kamkar - PoisonTap - https://samy.pl/poisontap/ RCMP want an iphone unlocker - http://www.cbc.ca/news/investigates/police-power-privacy-encryption-1.3856375 Discussion paper - https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/ntnl-scrt-grn-ppr-2016-bckgrndr/index-en.aspx

Samy Kamkar - PoisonTap - <a href="https://samy.pl/poisontap/" rel="nofollow" target="_blank">https://samy.pl/poisontap/</a> RCMP want an iphone unlocker - <a href="http://www.cbc.ca/news/investigates/police-power-privacy-encryption-1.3856375" rel="nofollow" target="_blank">http://www.cbc.ca/news/investigates/police-power-privacy-encryption-1.3856375</a> Discussion paper - <a href="https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/ntnl-scrt-grn-ppr-2016-bckgrndr/index-en.aspx" rel="nofollow" target="_blank">https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/ntnl-scrt-grn-ppr-2016-bckgrndr/index-en.aspx</a>

Liquidmatrix Security Digest TV - mini0x1E

Liquidmatrix Security Digest TV - mini0x1D

Reporting on the infosec implications of Walt Disney World... https://disneyworld.disney.go.com/ https://www.wired.com/2015/03/disney-magicband/  http://www.nytimes.com/1998/08/20/technology/roller-coasters-take-a-ride-from-wild-to-wired.html http://www.rockwellautomation.com/global/industries/entertainment/overview.page http://dsicontrols.com/amusement.html

Reporting on the infosec implications of Walt Disney World... <a href="https://disneyworld.disney.go.com/" rel="nofollow" target="_blank">https://disneyworld.disney.go.com/</a> <a href="https://www.wired.com/2015/03/disney-magicband/" rel="nofollow" target="_blank">https://www.wired.com/2015/03/disney-magicband/</a> <a href="http://www.nytimes.com/1998/08/20/technology/roller-coasters-take-a-ride-from-wild-to-wired.html" rel="nofollow" target="_blank">http://www.nytimes.com/1998/08/20/technology/roller-coasters-take-a-ride-from-wild-to-wired.html</a> <a href="http://www.rockwellautomation.com/global/industries/entertainment/overview.page" rel="nofollow" target="_blank">http://www.rockwellautomation.com/global/industries/entertainment/overview.page</a> <a href="http://dsicontrols.com/amusement.html" rel="nofollow" target="_blank">http://dsicontrols.com/amusement.html</a>

Liquidmatrix Security Digest TV - mini0x1C

Dave is actually alive. We have video proof.

Dave is actually alive. We have video proof.

Liquidmatrix Security Digest TV - mini0x1B

The Liquidmatrix Security Digest Podcast - Information Security News and Commentary from Professionals.

very entertaining and some good discussions

very good

Brilliant analysis with no bull or advertising for their employers.

Great no-nonsense advice and news

Liquidmatrix Security Digest Podcast

I need a new computer. Or maybe I just want one.  Owen Williams writes on Medium  Apple just told the world it has no idea who the mac is for and I'm not entirely sure I disagree. Rui Carmo

I need a new computer. Or maybe I just want one. <ol> <li>Owen Williams writes on Medium <a href="https://medium.com/charged-tech/apple-just-told-the-world-it-has-no-idea-who-the-mac-is-for-722a2438389b#.9k27jkl6o" rel="nofollow" target="_blank"> Apple just told the world it has no idea who the mac is for</a> and I'm not entirely sure I disagree.</li> <li>Rui Carmo</li></ol>

Liquidmatrix Security Digest TV - mini0x0D

Machine Learning Appsec testing - http://www.slideshare.net/babaroa/code-blue-2016-method-of-detecting-vulnerability-in-web-apps Mozilla doesn't trust Ernst &amp; Young audits of CAs - https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/

Machine Learning Appsec testing - <a href="http://www.slideshare.net/babaroa/code-blue-2016-method-of-detecting-vulnerability-in-web-apps" rel="nofollow" target="_blank">http://www.slideshare.net/babaroa/code-blue-2016-method-of-detecting-vulnerability-in-web-apps</a> Mozilla doesn't trust Ernst &amp; Young audits of CAs - <a href="https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/" rel="nofollow" target="_blank">https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/</a>

Liquidmatrix Security Digest TV - mini0x09

Hangzhou Xiongmai recalls IoT devices - http://www.reuters.com/article/us-cyber-attacks-manufacturers-idUSKCN12O0MS Comodo CA relies on broken OCR and issues certs incorrectly - https://bugzilla.mozilla.org/show_bug.cgi?id=1311713 Using Rowhammer on Android - http://arstechnica.com/security/2016/10/using-rowhammer-bitflips-to-root-android-phones-is-now-a-thing/

Hangzhou Xiongmai recalls IoT devices - <a href="http://www.reuters.com/article/us-cyber-attacks-manufacturers-idUSKCN12O0MS" rel="nofollow" target="_blank">http://www.reuters.com/article/us-cyber-attacks-manufacturers-idUSKCN12O0MS</a> Comodo CA relies on broken OCR and issues certs incorrectly - <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1311713" rel="nofollow" target="_blank">https://bugzilla.mozilla.org/show_bug.cgi?id=1311713</a> Using Rowhammer on Android - <a href="http://arstechnica.com/security/2016/10/using-rowhammer-bitflips-to-root-android-phones-is-now-a-thing/" rel="nofollow" target="_blank">http://arstechnica.com/security/2016/10/using-rowhammer-bitflips-to-root-android-phones-is-now-a-thing/</a>

Liquidmatrix Security Digest TV - mini0x06

UNENCRYPTED SCADA PAGERS!!! http://arstechnica.com/security/2016/10/nuclear-plants-leak-critical-alerts-in-unencrypted-pager-messages/ (watch Jamie and Dave's head explode when they read that) MS threat modelling tool - https://www.microsoft.com/en-us/download/details.aspx?id=49168

UNENCRYPTED SCADA PAGERS!!! <a href="http://arstechnica.com/security/2016/10/nuclear-plants-leak-critical-alerts-in-unencrypted-pager-messages/" rel="nofollow" target="_blank">http://arstechnica.com/security/2016/10/nuclear-plants-leak-critical-alerts-in-unencrypted-pager-messages/</a> (watch Jamie and Dave's head explode when they read that) MS threat modelling tool - <a href="https://www.microsoft.com/en-us/download/details.aspx?id=49168" rel="nofollow" target="_blank">https://www.microsoft.com/en-us/download/details.aspx?id=49168</a>

Liquidmatrix Security Digest TV - mini0x08

Australia's Blood Service's exposed lots of personal data - https://www.troyhunt.com/the-red-cross-blood-service-australias-largest-ever-leak-of-personal-data/

Australia's Blood Service's exposed lots of personal data - <a href="https://www.troyhunt.com/the-red-cross-blood-service-australias-largest-ever-leak-of-personal-data/" rel="nofollow" target="_blank">https://www.troyhunt.com/the-red-cross-blood-service-australias-largest-ever-leak-of-personal-data/</a>

Liquidmatrix Security Digest TV - mini0x0A

Yet another - this is LSD TV mini0x07. Talking about the Defense again. Oh, and Ben's got a link for you - http://mooc.fi/courses/2016/cybersecurity/

Yet another - this is LSD TV mini0x07. Talking about the Defense again. Oh, and Ben's got a link for you - <a href="http://mooc.fi/courses/2016/cybersecurity/" rel="nofollow" target="_blank">http://mooc.fi/courses/2016/cybersecurity/</a>

Liquidmatrix Security Digest TV - mini0x07

Good morning! Coming to you live from O'Reilly Security in NYC. Well, the breakfast buffet anyways.  Great 101 article from Ars Technica  How security flaws work: SQL Injection The always eloquent friend of the show / my friend Violet Blue cuts to the bone with the awesome phrase "Infosec smarty-pantses" in her article on  That Time Your Smart Toaster Broke The Internet Note that @gattaca's toaster doesn't obey him either Twitter does dumb shit again and pisses off long term users  Hiding Usernames In @Replys DMCA exemption list finally updated and has a great list covered exemptions from  The Register  Tune in tomorrow for a SPOOOKY story from me still in NYC.

Good morning! Coming to you live from O'Reilly Security in NYC. Well, the breakfast buffet anyways. <ol> <li>Great 101 article from Ars Technica <a href="http://arstechnica.com/information-technology/2016/10/how-security-flaws-work-sql-injection/" rel="nofollow" target="_blank"> How security flaws work: SQL Injection</a></li> <li>The always eloquent friend of the show / my friend Violet Blue cuts to the bone with the awesome phrase "Infosec smarty-pantses" in her article on <a href="https://www.engadget.com/2016/10/28/that-time-your-smart-toaster-broke-the-internet/" rel="nofollow" target="_blank"> That Time Your Smart Toaster Broke The Internet</a> Note that @gattaca's toaster doesn't obey him either</li> <li>Twitter does dumb shit again and pisses off long term users <a href="https://www.engadget.com/2016/10/28/hey-twitter-hiding-usernames-won-t-help-you/" rel="nofollow" target="_blank"> Hiding Usernames In @Replys</a></li> <li>DMCA exemption list finally updated and has a great list covered exemptions from <a href="http://www.theregister.co.uk/2016/10/28/toaster_penetration_testing_green_lighted/" rel="nofollow" target="_blank"> The Register</a></li> </ol> Tune in tomorrow for a SPOOOKY story from me still in NYC.

Liquidmatrix Security Digest TV - mini0x0C

Hyper scale defenses (https://youtu.be/90kxsEOSZQ8), scaring the Russians (http://www.cbc.ca/beta/news/technolog...) and rigged elections in the Philippines (http://thestandard.com.ph/mobile/arti...) -- turns out its very old news which popped up in my news feed and I can't read dates

Hyper scale defenses (<a href="https://youtu.be/90kxsEOSZQ8" rel="nofollow" target="_blank">https://youtu.be/90kxsEOSZQ8</a>), scaring the Russians (<a href="http://www.cbc.ca/beta/news/technolog" rel="nofollow" target="_blank">http://www.cbc.ca/beta/news/technolog</a>...) and rigged elections in the Philippines (<a href="http://thestandard.com.ph/mobile/arti" rel="nofollow" target="_blank">http://thestandard.com.ph/mobile/arti</a>...) -- turns out its very old news which popped up in my news feed and I can't read dates

Liquidmatrix Security Digest TV - mini0x05

Liquidmatrix Security Digest TV - mini0x0B

Friday's episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks Yahoo! and Boards of Directors and Linux privilege escalation and Wikileaks and HE JUST KEEPS TALKING. 

Friday's episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks Yahoo! and Boards of Directors and Linux privilege escalation and Wikileaks and HE JUST KEEPS TALKING.

Liquidmatrix Security Digest TV - mini0x03

The SECOND episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks data exfiltration.

The SECOND episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro talks data exfiltration.

Liquidmatrix Security Digest TV - mini0x02

In this first episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro walks you through SecTor 2016.

In this first episode of the new Liquidmatrix Security Digest TV minis, Ben Sapiro walks you through SecTor 2016.

Liquidmatrix Security Digest TV - mini0x01

Episode 0x6F THE CENTENNIAL! We are happy to announce that we've got a full show... with only two hosts. But hey - it's number 100(decimal) Upcoming this week...  Lots of News Breaches SCADA / Cyber, cyber... etc. finishing it off with DERPs/Mailbag (or Deep Dive) And there are weekly Briefs - no arguing or discussion allowed  And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode:  News and Commentary   Apple Introduces What It Calls an Easier to Use Portable Music Player MEDSEC gets independent confirmation of their findings... St Jude is still suing New ISO Standard Is an Anti-Bribery Game-Changer   Breaches    Vera Bradley POS Breach   SCADA / Cyber, cyber... etc    Modbus eavesdropper from B+B SmartWorx  Senators get involved in IoT Dan Kaminsky on DNS and rate limiting   DERP   HAMAS complains about video cameras  California DMV thinks "INFOS3C" is a dirty word  Apple Doxes Self -- MBP w/TouchID   Mailbag   TALK ABOUT BSIDESTO AND SECTOR   Briefly -- NO ARGUING OR DISCUSSION ALLOWED   Liquidmatrix TV learn stuff for free from experts   Liquidmatrix Products and Services - We do some stuff. Seriously.   LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)   Upcoming Appearances:  -- more gratuitous self-promotion   Dave: - Claims to have 5 more conferences this year. Wife still doesn't expect him home for dinner anytime soon James: - O'Reilly Security NYC and then WDW! Ben: - work Matt: - Unknown. Hiding behind his beard. Wil: - Unknown. Check CBC Calgary Other LSD Writers: - There are others?   Advertising - pay the bills...   Thinking about SecTor this November 2017?Check back with us for codes.   Closing Thoughts   Terry Bradshaw Says: 100 (decimal) BABY WOOO!!! 100      Creative Commons license: BY-NC-SA

Episode 0x6F THE CENTENNIAL! We are happy to announce that we've got a full show... with only two hosts. But hey - it's number 100(decimal) Upcoming this week... <ol> <li>Lots of News</li> <li>Breaches</li> <li>SCADA / Cyber, cyber... etc.</li> <li>finishing it off with DERPs/Mailbag (or Deep Dive)</li> <li>And there are weekly Briefs - no arguing or discussion allowed</li> </ol> And if you've got commentary, please sent it to mailbag@liquidmatrix.org for us to check out. DISCLAIMER: It's not that explicit, but you may want to use headphones if you're at work. ADDITIONAL DISCLAIMER: In case it is unclear, this is the story of 5 opinionated infosec pros who have sufficient opinions of their own they don't need to speak for anyone except themselves. Ok? Good. In this episode: <ul> <li>News and Commentary</li> <li> <ol> <li><a href="http://www.nytimes.com/2001/10/24/business/technology-apple-introduces-what-it-calls-an-easier-to-use-portable-music-player.html" rel="nofollow" target="_blank">Apple Introduces What It Calls an Easier to Use Portable Music Player</a></li> <li><a href="http://medsec.com/entries/stj-lawsuit-response.html" rel="nofollow" target="_blank">MEDSEC gets independent confirmation of their findings... St Jude is still suing</a></li> <li><a href="http://ww2.cfo.com/risk-management/2016/10/new-iso-standard-anti-bribery-game-changer/" rel="nofollow" target="_blank">New ISO Standard Is an Anti-Bribery Game-Changer</a></li> </ol> </li> <li>Breaches</li> <li> <ol> <li><a href="https://www.tripwire.com/state-of-security/latest-security-news/pos-malware-infection-responsible-for-data-breach-at-vera-bradley/" rel="nofollow" target="_blank"> Vera Bradley POS Breach</a></li> </ol> </li> <li>SCADA / Cyber, cyber... etc</li> <li> <ol> <li><a href="http://embedded-computing.com/news/modbus-eavesdropper-from-bb-smartworx-enables-real-time-scada-protocol-translation-for-industrial-iot-networks/" rel="nofollow" target="_blank"> Modbus eavesdropper from B+B SmartWorx</a></li> <li><a href="https://krebsonsecurity.com/2016/10/senator-prods-federal-agencies-on-iot-mess/" rel="nofollow" target="_blank"> Senators get involved in IoT</a></li> <li><a href="https://dankaminsky.com/2008/08/09/on-the-flip-side/" rel="nofollow" target="_blank">Dan Kaminsky on DNS and rate limiting</a></li> </ol> </li> <li>DERP</li> <li> <ol> <li><a href="http://www.israelnationalnews.com/News/News.aspx/219259" rel="nofollow" target="_blank">HAMAS complains about video cameras</a></li> <li><a href="http://boingboing.net/2016/10/17/california-dmv-thinks-infos3.html" rel="nofollow" target="_blank"> California DMV thinks "INFOS3C" is a dirty word</a></li> <li><a href="https://9to5mac.com/2016/10/25/macos-touch-id-macbook-pro-unlocking/" rel="nofollow" target="_blank"> Apple Doxes Self -- MBP w/TouchID</a></li> </ol> </li> <li>Mailbag</li> <li> <ol> <li>TALK ABOUT BSIDESTO AND SECTOR</li> </ol> </li> <li>Briefly -- NO ARGUING OR DISCUSSION ALLOWED</li> <li> <ol> <li><a href="https://www.youtube.com/channel/UCFfZEfQF0T4O_6t6YoHGW4w" rel="nofollow" target="_blank">Liquidmatrix TV</a></li> <li><a href="http://mooc.fi/courses/2016/cybersecurity/" rel="nofollow" target="_blank">learn stuff for free from experts</a></li> </ol> </li> <li>Liquidmatrix Products and Services - We do some stuff. Seriously.</li> <li> <ol> <li><a href="http://lsdp-rawfeed.tumblr.com/" rel="nofollow" target="_blank">LSDP-Rawfeed - where LSDP stories get posted (except Matt... and Dave... and Ben... and Wil)</a></li> </ol> </li> <li>Upcoming Appearances:  -- more gratuitous self-promotion</li> <li> <ol> <li>Dave: - Claims to have 5 more conferences this year. Wife still doesn't expect him home for dinner anytime soon</li> <li>James: - O'Reilly Security NYC and then WDW!</li> <li>Ben: - work</li> <li>Matt: - Unknown. Hiding behind his beard.</li> <li>Wil: - Unknown. Check CBC Calgary</li> <li>Other LSD Writers: - There are others?</li> </ol> </li> <li>Advertising - pay the bills...</li> <li> <ol> <li>Thinking about <a href="http://sector.ca" rel="nofollow" target="_blank">SecTor</a> this November 2017?Check back with us for codes.</li> </ol> </li> <li>Closing Thoughts</li> <li> <ol> <li>Terry Bradshaw Says: 100 (decimal) BABY WOOO!!! 100</li> </ol> </li> </ul> Creative Commons license: BY-NC-SA

Liquidmatrix Security Digest Podcast - Episode 6F

Mini episode #4: crazy TLDs and DDoS on Dyn. https://twitter.com/kpyke/status/789156391726387200 https://www.dynstatus.com/incidents/5r9mppc1kb77 https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/amp/ https://youtu.be/90kxsEOSZQ8

Mini episode #4: crazy TLDs and DDoS on Dyn. <a href="https://twitter.com/kpyke/status/789156391726387200" rel="nofollow" target="_blank">https://twitter.com/kpyke/status/789156391726387200</a> <a href="https://www.dynstatus.com/incidents/5r9mppc1kb77" rel="nofollow" target="_blank">https://www.dynstatus.com/incidents/5r9mppc1kb77</a> <a href="https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/amp/" rel="nofollow" target="_blank">https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/amp/</a> <a href="https://youtu.be/90kxsEOSZQ8" rel="nofollow" target="_blank">https://youtu.be/90kxsEOSZQ8</a>

Liquidmatrix Security Digest TV - mini0x04

Liquidmatrix Security Digest TV - mini0x1A

<a href="https://2016.pycon.ca/en/" rel="nofollow" target="_blank">https://2016.pycon.ca/en/</a>

Liquidmatrix Security Digest TV - mini0x19

Russian Hacker group responsible for DNC Hack is at it again - https://krebsonsecurity.com/2016/11/russian-dukes-of-hackers-pounce-on-trump-win/ Russian banks getting hit back by DDoS Attack - https://themoscowtimes.com/news/ddos-attack-hits-russian-banks-56077

Russian Hacker group responsible for DNC Hack is at it again - <a href="https://krebsonsecurity.com/2016/11/russian-dukes-of-hackers-pounce-on-trump-win/" rel="nofollow" target="_blank">https://krebsonsecurity.com/2016/11/russian-dukes-of-hackers-pounce-on-trump-win/</a> Russian banks getting hit back by DDoS Attack - <a href="https://themoscowtimes.com/news/ddos-attack-hits-russian-banks-56077" rel="nofollow" target="_blank">https://themoscowtimes.com/news/ddos-attack-hits-russian-banks-56077</a>

Liquidmatrix Security Digest TV - mini0x18

The best podcast episodes of the most interesting stories and things. From skyping someone while they're in space, to tracking down and meeting a telephone scammer in person, to the story of a Galapagos. These episodes will keep you and all your friends entertained and captivated for hours. Learn something new in every episode! Add episodes you're interested into your queue below!

Best Episodes: Interesting Stories & Things

The best podcast episodes on parenting. Interviewing experts and talking through common issues surrounding parenting. This topic is filled with important lessons and insights for anyone listening. Add episodes you're interested into your queue below!