January 20th, 2019 | 33 mins 21 secs
acme, acme v2, apache, automation, bgp, caddy, certbot, csr, devops, dns, domain verification, dovecot, dv, eff, encryption, ev, exim, extended verification, http, https, ietf, isrg, let’s encrypt, mail server, mozilla, networking, nginx, postfix, public key cryptography. x.509, security, ssl, ssl certificates, startssl, sysadmin podcast, techsnap, tls, tls certificates, tls-sni-01, traefik
We welcome Jim to the show, and he and Wes dive deep into all things Let’s Encrypt.
November 29th, 2018 | 21 mins 17 secs
allan jude, amazon, aws, bgp, devops, dive, docker, evilginx2, fargate, firecracker, kvm, lambda, lsi, mitm, networking, openbgpd, openbsd, proxy, qemu, raid, ripe, rpki, rust, security, sennheiser, serverless, ssl, sysadmin podcast, techsnap, tls, venom, virtual machines, virtualization
We break down Firecracker Amazon’s new open source kvm powered, virtual machine monitor, and explore what makes it different than the options on the market now.
November 15th, 2018 | 43 mins 46 secs
ars technica, bcmupnp_hunter, bgp, bgp hijack, bgp leak, bgp security, botnet, broadcom, china telecom, devops, encryption, format string vulnerability, google, homebrew router, http, http-over-quic, http/3, jim salter, mainone, networking, quic, router, router security, rpki, sanoid, security, spam, sysadmin, techsnap, tls, udp, upnp, wifi, wireguard
Wes is joined by special guest Jim Salter to discuss Google's recent BGP outage and the future of HTTP.
September 6th, 2018 | 44 mins 56 secs
500 mile email, android, attachments, bgp, china, cia, crypto, cryptography, cve, cvss, devops, diffy, election security, elections, email, espionage, firewall, google, isp, linux, manga, netflix, nsa, openssh, podcast, security, security keys, speck, ssh, tcp, tcp rst, usa, wireshark
We’re joined by a special guest to discuss the failures of campaign security, the disastrous consequences of a mismanaged firewall, and the suspicious case of Speck.
August 2nd, 2018 | 31 mins 56 secs
bgp, cisco, duo security, netspectre, nice, s3, sms, spectre, sysadmin podcast, techsnap, telegram, two-factor authentication, verizon leak
Reddit’s Two Factor procedures fail, while Google’s prevents years of attacks. We’ll look at the different approaches, and discuss the fundamental weakness of Reddit’s approach.