Podcast Detail

#DNS Covert Channels; Ambient Light Sensors;

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://chrt.fm/track/2748D7/https://traffic.libsyn.com/securitypodcast/5468.mp3

SANS Daily Network Security Podcast (Stormcast) for Friday, April 21st 2017

00:00

My Next Class

Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Eastern	Jan 27th - Feb 1st 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Mar 3rd - Mar 8th 2025

… more classes

Interested in Internet Storm Center stickers? Check here if there are still some available for today.

Detecting Covert DNS Channels
https://isc.sans.edu/forums/diary/DNS+Query+Length+Because+Size+Does+Matter/22326/

Ambient Light Sensors May Become Accessible Via JavaScript
https://blog.lukaszolejnik.com/stealing-sensitive-browser-data-with-the-w3c-ambient-light-sensor-api/

BIND Name Server Update
https://kb.isc.org/article/AA-01491

Entropy As A Service
https://www.getnetrandom.com

Webcast: NoSQL Doesn't Make You NoVulnerable
https://www.sans.org/webcasts/nosql-doesnt-novulnerable-104897

iTunes

MP3 Download

RSS Feed

Google

Podbean

Amazon Echo

YouTube

Spreaker

Spotify

Discussion

Whitewood’s netRandom sounds interesting, but unfortunately it’s not something I can trust. Whitewood is a US company, has to obey US law and therefore has to buckle to the NSA. And at least since Dual_EC_DRBG we know that the NSA wants to mess with our randomness.

Posted by juser on Fri Apr 21 2017, 18:33

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form

Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Eastern	Jan 27th - Feb 1st 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Mar 3rd - Mar 8th 2025
Application Security: Securing Web Apps, APIs, and Microservices	Orlando	Apr 13th - Apr 18th 2025
Application Security: Securing Web Apps, APIs, and Microservices	San Diego	May 5th - May 10th 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Jun 2nd - Jun 7th 2025