Meeting Notes - October 13th, 2016

• Use this Amazon Smile link to support OISF
  • This won't cost you anything or make your purchases more expensive, this takes money from Amazon and gives it to us.
• Yahoo installed NSA rootkit to scan customer emails for U.S. intelligence
  • "Due to a programming flaw, he told them hackers could have accessed the stored emails."
• Adblocking for Enterprises - Decent Security - @SwiftOnSecurity
  • Internet Explorer
  • Firefox
  • Chrome
• Open Whisper Systems subpoenad by FBI
  • Only able to give out timestamps for 'account creation' and 'last server contact time', no other information stored.
  • Open Whisper Systems Big Brother Blog (includes subpoena documents)
  • NY Times story
• Rapid7 Identifies Vulnerabilities in Insulin Pump
  • Reuters Story
  • Rapid7 Blog
• #400LbHacker T-Shirt on Sale
  • All profits go to Hak4Kids and the EFF
• Volatility used to grab LastPass credentials from memory
• Multiple Backdoors found in D-Link LTE Router
• LastPass informs users when a breach occurs
• All DerbyCon 6 Videos Posted
• Let's Encrypt Software Updates
  • Let's Encrypt gives out free and automated domain-validated SSL/TLS certificates. If you aren't using HTTPS on your sites yet, give Let's Encrypt a shot (this site uses it!)
  • Certbot Official Client updated to include nginx support
  • I personally use acmetool, fast, easy, free

OISF lives on your donations. Shake down your boss: Become a donor today. OISF is a 501c3 organization and donations are tax deductible. For more information, email info@ohioinfosec.org.