TechSNAP

406: SACK Attack

June 23rd, 2019  |  43 mins 33 secs

backdoor, crypto, cryptocurrency, device removal, devops, dram, ecc, encryption, firefox, freebsd, linux, memory, mozilla, mss, networking, openzfs, ping of death, ram, rambleed, raw send, rowhammer, sack panic, sandbox, sandbox escape, security, ssd, targeted attack, tcp, techsnap, trim, zero day, zfs

A new vulnerability may be the next 'Ping of Death'; we explore the details of SACK Panic and break down what you need to know.

400: Supply Chain Attacks

March 28th, 2019  |  32 mins 33 secs

asus, asus live update firmware, asus malware, backdoor, badusb, bios, c runtime, cccleaner, command and control server, compiler, devops, fwupd, gigabyte, hardware manufacturers, intel management engine, ken thompson, linux, linux vendor firmware service, mac address, machine learning, malware, microcontroller, node, npm, package managers, pypi, python, reflections on trusting trust, shadowhammer, shadowpad, ssd firmware, supply chain, supply chain attacks, sysadmin podcast, techsnap, uefi, unsupervised learning, windows

We break down the ASUS Live Update backdoor and explore why these kinds of supply chain attacks are on the rise.

Episode 351: Performance Meltdown

January 11th, 2018  |  41 mins 43 secs

backdoor, coordinated disclosure, freebsd, kaiser, kpti, macos high sierra, meltdown, pcid, perfmon, performance, pti, side-channel attack, spectre, speculative execution, sysadmin podcast, sysinternals, techsnap, ubuntu, wd my cloud

The types of workloads that will see the largest performance impacts from Meltdown, tools to test yourself, and the outlook for 2018.

Plus a concise breakdown of Meltdown, Spectre, and side-channel attacks like only TechSNAP can.