<commit_before>---
layout: post
date: 2015-03-15
title: Episode 02 - Email Server Administrators Gone Wild
duration: "29:49"
length: 28749503
category: episodes
link: http://soundsecurity.braxtonehle.com/audio/sound-security-e002.mp3
---

# Discussed Articles
1. [<NAME> Used Personal Email Account at State Dept., Possibly Breaking Rules](http://www.nytimes.com/2015/03/03/us/politics/hillary-clintons-use-of-private-email-at-state-department-raises-flags.html). Keypoints:
 * [<NAME> defends use of private e-mail](http://www.usatoday.com/story/news/politics/elections/2015/03/10/hillary-clinton-emails-state-department/24668715/)
 * [Preventing this in Exchange and Office 365](http://blogs.technet.com/b/lystavlen/archive/2012/04/10/how-to-prevent-internal-users-from-autoforwaring-mails-to-external-recipients.aspx)
2. [FREAK SSL Downgrade Attack](http://blog.cryptographyengineering.com/2015/03/attack-of-week-freak-or-factoring-nsa.html)

3. [HBO NOW did not properly setup DNSSEC](http://www.internetsociety.org/deploy360/blog/2015/03/hbo-now-dnssec-misconfiguration-makes-site-unavailable-from-comcast-networks-fixed-now/)

4. Breach of the Week, [Google WHOIS Disclosure](http://blogs.cisco.com/security/talos/whoisdisclosure)
 * [Finger protocol](https://en.wikipedia.org/wiki/Finger_protocol) of yesteryear

Temporary homepage: http://soundsecurity.braxtonehle.com/<commit_msg>Update formatting on episode 2 show notes<commit_after>---
layout: post
date: 2015-03-15
title: Episode 02 - Email Server Administrators Gone Wild
duration: "29:49"
length: 28749503
category: episodes
link: http://soundsecurity.braxtonehle.com/audio/sound-security-e002.mp3
---

# Discussed Articles
1. <NAME> Used Personal Email Account at State Dept - http://www.nytimes.com/2015/03/03/us/politics/hillary-clintons-use-of-private-email-at-state-department-raises-flags.html
* <NAME> defends use of private e-mail - http://www.usatoday.com/story/news/politics/elections/2015/03/10/hillary-clinton-emails-state-department/24668715/
* Preventing this in Exchange and Office 365 - http://blogs.technet.com/b/lystavlen/archive/2012/04/10/how-to-prevent-internal-users-from-autoforwaring-mails-to-external-recipients.aspx
2. FREAK SSL Downgrade Attack - http://blog.cryptographyengineering.com/2015/03/attack-of-week-freak-or-factoring-nsa.html
3. HBO NOW did not properly setup DNSSEC - http://www.internetsociety.org/deploy360/blog/2015/03/hbo-now-dnssec-misconfiguration-makes-site-unavailable-from-comcast-networks-fixed-now/
* Arguments Against DNSSEC - http://sockpuppet.org/blog/2015/01/15/against-dnssec/
4. Breach of the Week: Google WHOIS Disclosure - http://blogs.cisco.com/security/talos/whoisdisclosure
* Finger protocol - https://en.wikipedia.org/wiki/Finger_protocol of yesteryear

Temporary homepage: http://soundsecurity.braxtonehle.com/
{'fraction_non_alphanumeric': 0.13737231419513912, 'fraction_numerical': 0.059528002817893624, 'mean_word_length': 4.795918367346939, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 7, 'https://': 2, 'lorem ipsum': 0, 'www.': 6, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5395397', 'n_tokens_mistral': 1124, 'n_tokens_neox': 963, 'n_words': 166}