Eurotrash Episode 49: Browser Hackers Handbook Section 1: Intro/Announcements 1) BruCON is coming up! 2) BSides Vienna CFP → http://bsidesvienna.at/cfp Section 2: Interview This time around we talk to Michele Orrù (a.k.a antisnatchor) about the Browser Hackers Handbook and BeEF http://antisnatchor.com/ http://eu.wiley.com/WileyCDA/WileyTitle/productCd-1118662091.html Section 3: News 1) Microsoft say give up on complex passwords.. ok, they not saying don’t use complex passwords but there are more things to worry about to secure the passwords. http://www.theregister.co.uk/2014/09/04/scared_of_password_brute_force_microsoft_says_just_give_up/ 2) Virgin did block swear words in their password list.. why should they block swear words.. does this mean they aren’t hashing them and they could offend sysadmin guys. http://www.theregister.co.uk/2014/09/01/virgin_blocks_wankers_from_passwords/ The words seem to be gone now.. but you can see them here: https://web.archive.org/web/20140812173352/https://my.virginmedia.com/assets/legacy/js/password_strength_plugin.min.js 3) UK police say they can’t cope with online fraud. http://www.thedrum.com/news/2014/09/02/police-admit-they-are-powerless-protect-people-online-fraud 4) Microsoft defies court order. Will not give emails to US Government http://m.windowsitpro.com/paul-thurrotts-wininfo/microsoft-defies-court-order-will-not-give-emails-us-government 5) Popping Shell on Oculus Developer Portal https://bitquark.co.uk/blog/2014/08/31/popping_a_shell_on_the_oculus_developer_portal 6) VirusTotal mess means YOU TOO can track Comment Crew! http://www.theregister.co.uk/2014/09/04/virustotal_blue_means_you_too_can_track_comment_crew/ Section 4: TOOL of the week 1) BeEF → I likes me some meat! 2) CNN expert reports 4chan as a person.. and recommends using complex password.. like pa$$word!! http://www.independent.co.uk/life-style/gadgets-and-tech/4chan-icloud-expert-from-cnn-thinks-4chan-is-a-person-and-paword-is-a-good-password-9707845.html Section 5: Feedback Please leave feedback and support the show… Ways to show support: Email us feedback/questions/deaththreats feedback@eurotrashsecurity.eu Leave comments on the Soundcloud page for this episode Rate us on iTunes (5 stars is appreciated, but 4.9 stars will do) Tweet us @eurotrashsecurity or hashtag #eurotrashsec If you have suggestions for future episodes/guests or have topics you want covered please email us else the feedback section of the show is gonna be really boring ;)